5.2 Policy

The entry defines the Business Continuity Management System policy, specifying that top management must establish, document, and maintain a formal policy that states the organization's commitment, scope, objectives and alignment with its context and strategic direction, and that the policy is communicated, reviewed and updated as part of continual improvement.