1 · Purpose
This policy establishes the requirements for environmental sustainability within the CAO-900 Sustainability. It gives effect, in a single harmonised instrument, to the control objectives upon which recognised standards converge for this area.
2 · Scope
This policy applies to all information, systems, services, personnel and third parties within the scope of the management system.
3 · Policy statements
3.x · CAO-930 Policy Controls
The organisation shall establish, implement and maintain a coherent and effective approach to environmental sustainability, giving effect to the organisational control objectives set out below.
3.1 · CAO-931 Climate Change
The organisation shall establish, implement and maintain effective Climate Change, giving effect to the organisational controls set out below.
3.1.x · CAO-931 Organisational Controls
Essential taster — a preview of the Professional depth for this high-density control area.
3.2 · CAO-932 Pollution
The organisation shall establish, implement and maintain effective Pollution, giving effect to the organisational controls set out below.
3.2.x · CAO-932 Organisational Controls
3.3 · CAO-933 Water and Marine Resources
The organisation shall establish, implement and maintain effective Water and Marine Resources, giving effect to the organisational controls set out below.
3.3.x · CAO-933 Organisational Controls
3.4 · CAO-934 Biodiversity and Ecosystems
The organisation shall establish, implement and maintain effective Biodiversity and Ecosystems, giving effect to the organisational controls set out below.
3.4.x · CAO-934 Organisational Controls
3.5 · CAO-935 Resource Use and Circular Economy
The organisation shall establish, implement and maintain effective Resource Use and Circular Economy, giving effect to the organisational controls set out below.
3.5.x · CAO-935 Organisational Controls
Essential taster — a preview of the Professional depth for this high-density control area.
4 · Roles & responsibilities
- Governing body — approves this policy and oversees its effectiveness.
- Executive management — allocates resources and assigns control ownership.
- Control owners — implement, operate and evidence the controls in their area.
- All personnel & third parties — comply with this policy within their role.
5 · Compliance, monitoring & review
Compliance with this policy is mandatory. This policy is reviewed at least annually, or upon significant change to the threat, regulatory or technological environment. Exceptions require documented risk acceptance by the accountable owner.