5.2 Policy

Section 5.2 defines the organisation's risk management policy, outlining its purpose, scope and commitment to embed risk management in all activities. It requires senior leadership to approve the policy, allocate resources and communicate expectations to stakeholders.