Skip to main content
Image coming soon

ASIS SPC.1-2009 Organizational Resilience Evidence & Implementation Kit

$249.00
Adding to cart… The item has been added
ASIS SPC.1-2009 · Organizational Resilience · Evidence & Implementation Kit
Stand up an organizational resilience management system, without building the PDCA program from scratch.
Every ASIS SPC.1 clause, from resilience policy and all-hazards risk assessment through prevention, response, continuity and management review, handed to you as an adopt-ready control with the evidence an assessor examines.
A working management system in a weekend, not a quarter.

Here is the honest situation. SPC.1 is the American National Standard for organizational resilience, a Plan-Do-Check-Act management system that unifies security, preparedness and business continuity under one program. It is the discipline behind ISO 22301 and ISO 28000. The clauses are clear once you know the tree: policy, all-hazards risk and impact analysis, operational control, incident prevention and response, continuity and recovery, audit and management review. Turning that structure into a documented, evidenced program is months of work, and the auditable evidence is where most programs are thin.

This Kit removes that build. It is every SPC.1 clause written as an adopt-ready control you personalize in a weekend, with the evidence an assessor examines.

What you get, the moment you buy

37
Clauses as adopt-ready controls. Every SPC.1 clause, from policy and risk assessment through prevention, response, continuity, audit and management review, written so you personalize and operate it, preserving the PDCA arc.
37
Evidence-they-examine checklists. For each clause, exactly what an assessor examines, plus the finding they most often raise, so you close it before certification.
1
Resilience Control Matrix, pre-built. Every clause in a working spreadsheet, ready to record status and evidence location across the management system.
1
Gap & Readiness Assessment. Score each clause and the workbook returns your readiness as a single percentage, and exactly what to fix next.

Grounded in ASIS SPC.1-2009, the organizational resilience management system standard, with the all-hazards risk assessment and the prevention-preparedness-response clause called out. Editable Word and Excel files.

One program for security, preparedness and continuity
SPC.1 folds physical security, emergency preparedness and business continuity into a single management system. This Kit builds that unified program, so you stop running three disconnected efforts and evidence one resilient organization.

What one control looks like

This is the organizational resilience policy statement, where the whole management system anchors. All 37 are built to this depth.

SPC-2 Organizational resilience policy statement POLICY
Operate this control

[Organization] shall establish, document, and approve at the highest management level an organizational resilience policy that is appropriate to the nature and scale of its risks, commits to prevention, preparedness, mitigation, response, continuity, and recovery, commits to satisfying applicable legal and other requirements, and provides the framework for setting and reviewing resilience objectives and targets.

Practitioner note.

Keep the policy concise and public facing enough that employees and interested parties can readily understand the commitments.

Evidence an assessor examines
  • Signed organizational resilience policy statement
  • Record of top management approval with date and version
  • Communication log showing policy distribution to staff and contractors
  • Policy review schedule confirming periodic reassessment
Common finding they raise: A generic safety or IT statement is treated as the resilience policy, so it never explicitly commits leadership to continuity and recovery outcomes.

Why this is not another template pack

  • The evidence is the point. A management system you cannot evidence fails the audit. This tells you exactly what an assessor examines and the finding they raise, for every clause.
  • All-hazards, like the standard. Risk assessment and impact analysis cover the full threat, vulnerability and criticality picture, not one hazard, exactly as SPC.1 intends.
  • Built on a mapped compliance corpus, not one person's opinion, from a graph of thousands of controls across standards.
  • It compounds. SPC.1 is the discipline behind ISO 22301 continuity and ISO 28000 supply-chain security, so this work feeds those certifications directly.

Who buys this

Organizations building a resilience, security or continuity management system, the resilience and business continuity managers who own it, and consultants standing up an SPC.1 or ISO 22301 program. Whether it is a first system or a maturity uplift, you save months and walk in with the policy, risk work and evidence ready.

By the end of the weekend you will have
✓  An adopt-ready control for all 37 clauses
✓  A completed resilience control matrix
✓  The evidence an assessor examines
✓  Your all-hazards risk assessment anchored
✓  A readiness percentage and a fix list
✓  The common findings closed before audit

Common questions

Is it really editable? Yes. Word and Excel files you own and adapt. No portal, no subscription.

How does it relate to ISO 22301? SPC.1 is the organizational resilience discipline behind ISO 22301 and ISO 28000. The controls and evidence carry across, so this sets you up for either.

Is it a management system standard? Yes, a Plan-Do-Check-Act system. The Kit preserves that arc, from policy through management review and continual improvement.

Does it cover business continuity? Yes. Continuity and recovery sit inside the preparedness, response and continuity clause group, alongside prevention and mutual aid.

What if it is not for me? A 30-day money-back guarantee.

Do not build a resilience program from a blank page.
Every SPC.1 clause is fast to adopt with the Kit. It is instant, and it is guaranteed.
Add it to your cart and stand up your resilience system this weekend.

Instant digital download · 30-day money-back guarantee · The Art of Service Pty Ltd, GPO Box 2673, Brisbane QLD 4001 · support@theartofservice.com

!