ANSI/ASIS SPC.4-2012 is an American National Standard from ASIS International that provides guidance for using a maturity model to implement the ANSI/ASIS SPC.1-2009 organizational resilience standard in phases. The document describes six maturity phases, from pre-awareness through holistic management, to help organizations evaluate current resilience capabilities, establish goals, benchmark progress, and support continual improvement.
This 44-page PDF is intended for security, risk, resilience, continuity, compliance, and management system professionals who need structured criteria for planning, implementing, monitoring, reviewing, and improving an Organizational Resilience Management System. It addresses management system concepts such as risk management, policy and objectives, operational controls, incident prevention and response, monitoring and measurement, compliance evaluation, exercises and testing, corrective action, records control, and internal audits.
Application Scope: Applicable to private, public, not-for-profit, and voluntary organizations of varying size, scope, and complexity that are implementing or improving organizational resilience management using a phased maturity model aligned with ANSI/ASIS SPC.1-2009.
