Top management sets, applies and maintains an environmental policy which, within the defined scope of the system: suits the organization's purpose and context, taking account of the nature and scale of what it does and supplies, and the environmental impacts involved; gives a basis for setting environmental objectives; commits the organization to protecting the environment, covering pollution prevention and any further commitments that fit its context (for example using resources sustainably, mitigating and adapting to climate change, and protecting ecosystems and biodiversity); commits the organization to meeting its compliance obligations; and commits it to continually improving the system so environmental performance gets better. The policy is kept as documented information, communicated internally and kept available to interested parties.
This control maps to 10 controls across 10 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 10 it maps to, and the evidence behind each claim, over MCP and REST.