An effective BC policy is a high-level statement of intent and direction, formally expressed and endorsed by top management. Its effectiveness depends on visible leadership commitment—because leadership is responsible for ensuring the policy aligns with the organization’s strategic direction, is communicated, resourced, and kept under review for suitability. In BCI guidance, establishing the business continuity policy specifically requires top management action, support, and commitment, with governance to maintain and improve the policy over time.

Option A best reflects this core characteristic: top management commitment and continual improvement. The other options describe items that are typically handled in plans or supporting documents (e.g., incident management plan details, budget specifics, supplier constraints, or exercise lessons learned). Those elements may inform the BCMS, but they do not define what a BC policy is. The policy sets the framework and expectations; detailed procedures, constraints, and exercise learnings are managed elsewhere within the BCMS lifecycle.