5.2 Policy

Entry 5.2 requires the organization to create a documented IT service management policy that reflects its strategic objectives, outlines the scope of the service management system, and defines responsibilities. The policy must be communicated to all relevant stakeholders and reviewed periodically to ensure it remains appropriate and effective.