The Policy document includes: n	 the general requirements n the policy statement n planning for risk assessment and control n implementation and operation n checking, reporting and corrective action n management review.