Strategy and Planning 6 The Agency shall define, communicate, implement and monitor a 4.1 Understanding the organisation and its 6. Specifies suitable objectives strategy and planning process so as to cover long-term, medium context 12. Deploys control activities through policies and short term planning, including: 4.2 Understanding the needs and expectations and procedures - setting of objectives and indicators at every level, and updating of interested parties when necessary; 5.1 Leadership and commitment - allocating resources required to achieve policy, operational, 6 Planning financial and performance goals; 7.1 Resources - identifying responsibilities; 7.5 Documented information - establishing deadlines: - defining how the results will be evaluated. The Agency may conduct, as appropriate, impact assessments to assess the performance, analyse options and related impact on new initiatives. 7 The Agency shall identify and assess risks and opportunities to the 6 Planning 7. Identifies and analyses risk achievement of its objectives across the organisation, as a basis for 7.5 Documented information 8. Assesses fraud risk determining how they should be managed, to: 9.3 Management review - give assurance that the management system can achieve its intended results; - enhance desirable effects; - prevent, or reduce, undesired effects; - achieve improvement. 8 The Agency shall identify and assess changes that could 6.3 Planning of changes 9. Identifies and analyses significant change significantly impact on the IMS, the internal control system and the achievement of objectives. The changes shall be carried out in a planned manner considering the purpose of changes and potential consequences and available resources.
Strategy and Planning 6 The Agency shall define, communicate, implement and monitor a strategy and planning process so as to cover long-term, medium and short term planning, including: - setting of objectives and indicators at every level, and updating when necessary; - allocating resources required to achieve policy, operational, financial and performance goals; - identifying responsibilities; - establishing deadlines: - defining how the results will be evaluated. The Agency may conduct, as appropriate, impact assessments to assess the performance, analyse options and related impact on new initiatives. 4.1 Understanding the organisation and its context 4.2 Understanding the needs and expectations of interested parties 5.1 Leadership and commitment 6 Planning 7.1 Resources 7.5 Documented information 6. Specifies suitable objectives 12. Deploys control activities through policies and procedures 7 The Agency shall identify and assess risks and opportunities to the achievement of its objectives across the organisation, as a basis for determining how they should be managed, to: - give assurance that the management system can achieve its intended results; - enhance desirable effects; - prevent, or reduce, undesired effects; - achieve improvement. 6 Planning 7.5 Documented information 9.3 Management review 7. Identifies and analyses risk 8. Assesses fraud risk 8 The Agency shall identify and assess changes that could significantly impact on the IMS, the internal control system and the achievement of objectives. The changes shall be carried out in a planned manner considering the purpose of changes and potential consequences and available resources. 6.3 Planning of changes 9. Identifies and analyses significant change