5.2 Policy

ISO 22301:2019 clause 5.2 requires top management to define and document a Business Continuity Management System policy that reflects the organization's strategic direction, commitment to resilience and compliance obligations. The policy must establish overall objectives, assign responsibilities and be communicated to relevant stakeholders to guide the implementation and continual improvement of the BCMS.