Establish and maintain an organizational policy for planning and performing the process.
The purpose of this generic practice is to define the organizational expectations for the process and make these expectations visible to those in the organization who are affected. In general, senior management is responsible for
establishing and communicating guiding principles, direction, and expectations for the organization.
Not all direction from senior management will bear the label “policy.” The existence of appropriate organizational direction is the expectation of this generic practice, regardless of what it is called or how it is
imparted.