It sets out the standards and requirements which govern key risk management activities such as inspection, maintenance, testing, business continuity and crisis response planning and competency development.