Interpreting the ‘organizational policy’ requirement in its context, this article argues that in principle crimes against humanity can be committed pursuant to or in furtherance of a policy of any organization that has the capacity to orchestrate a widespread or systematic attack against a civilian population.