ASIS SPC.1-2009 - Organizational Resilience Standard 4.2: 4.2 Top management defines, documents and resources an OR management policy

Top management must set, record and fund an OR management policy committing the organization to safeguard its people, the environment and its physical assets, to foresee and get ready for adverse events, and to keep the business and its operations running.

Maintained by Gerard BlokdykControl text last updated 21 May 2026

Other controls in 4.1 and 4.2: General requirements and OR management policy – ASIS SPC.1-2009 - Organizational Resilience Standard

4.1 4.1 An OR management system established, documented, implemented, maintained and continually improved
4.1.1 4.1.1 A documented scope with boundaries, requirements, critical objectives, risk scenarios and a Statement of Applicability
4.2.1 4.2.1 A policy statement meeting fifteen conditions, from life safety first to annual signed review
4.2.2 4.2.2 Management commitment shown through policy, objectives, roles, an accountable appointee, communication, resources, risk criteria, audits and reviews

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All ASIS SPC.1-2009 - Organizational Resilience Standard controls