How many controls does ASIS SPC.1-2009 have?

ASIS SPC.1-2009 contains 22 controls organized across 6 domains.

Where does ASIS SPC.1-2009 apply?

ASIS SPC.1-2009 is applicable in United States (ASIS/ANSI). Organizations operating in or serving customers in this jurisdiction should evaluate its requirements.

What frameworks does ASIS SPC.1-2009 map to?

ASIS SPC.1-2009 has control-to-control mappings with 533 other compliance frameworks in our database. Use our compliance platform to explore these mappings interactively.

How do I get started with ASIS SPC.1-2009 compliance?

Start by understanding the framework's key controls and domains. Our compliance platform provides AI-powered gap analysis and mapping tools to help you assess your current posture and build a remediation plan.

ASIS SPC.1-2009 — Organizational Resilience Standard

ASIS SPC.1-2009 (Organizational Resilience: Security, Preparedness, and Continuity Management Systems — Requirements with Guidance for Use) is an American National Standard that establishes requirements for a management system to enhance organizational resilience. Published by ASIS International, it integrates security management, emergency management, and business continuity into a unified resilience management system.

Domains

Management Review

Checking and Corrective Action

Incident Prevention, Preparedness, and Response

Implementation and Operation

Policy and Planning

Frequently Asked Questions

Map ASIS SPC.1-2009 — Organizational Resilience Standard to any other framework

Use our AI-powered compliance platform to find control overlaps, gaps, and build remediation plans in seconds.

Try Free on Compliance Platform