ANSI/ASIS SPC.2-2014 provides guidance for planning, managing, and conducting audits of risk- and resilience-based management systems. This PDF standard covers audit principles, audit program management, individual audit activities, auditor competence, data collection, sampling methods, audit trails, and risk management related to the audit process.
It is a practical reference for security professionals, auditors, risk managers, business continuity specialists, emergency management teams, compliance personnel, and organizations developing or evaluating management system audit programs.
Application Scope: Use for internal or external audits involving security, crisis, continuity, resilience, emergency management, and other risk-based management systems.
