Document code:  POL-0001.07  Security level:  Public  Effective date:  19/12/2019  ECHA Integrated Management System Strategy and Framework  The Agency has adequate mechanisms in place to mitigate risks and ensure uninterrupted operations,  continuity, security and everyday protection of the Agency’s staff, assets and information. Corporate  risk assessment includes all elements of ECHA Integrated Management System and all types of risks 2 .  The Agency is integrating risk management into the annual planning and reporting cycle, embedding  it in the decision – making process at all levels, using cost/risk-benefit analysis and other appropriate  techniques at process and project level, aiming at higher risk tolerance where opportunities are  pursued, and designing control activities in a cost-effective and efficient way, proportionate to the  underlying risks 3 . Principles:  Defining the activities, processes and their interactions, ensuring one-ECHA  cooperation and alignment to the strategic priorities to ensure objectives are met, and allow  for measurement of outcome and impact. The Agency defines its activities, processes and their interactions in alignment with its strategic  priorities and objectives, aiming to clearly identify the outcomes, the expected performance and  efficiency, as well as intermediate and long-term impact. The Agency ensures that its activities and processes are managed towards achieving effectiveness  and efficiency, executed through one-ECHA contribution by relevant competencies and functions, and  they deliver quality output according to ECHA possibilities and stakeholder needs and allow for  efficiencies and synergies both internally and with external parties.  ECHA aims at ensuring that its suppliers are managed in the most cost-effective and economic way in  line with the applicable environmental and sustainability criteria.  Principles:  Aiming at effective, efficient, integrated information, communication and data  solutions  The Agency is ensuring that its technology, information and data solutions are aligned to its strategy,  including its data management strategy, are well integrated to support efficiency and automation of  the Agency’s activities, while increasing the knowle dge base for more effective regulatory work,  sharing information on safe use of chemicals, proactively making the data re-usable to target users,  better leveraging the data for stakeholders and partners through interoperability, providing a “digital  2  Risks could be broadly defined as follows: governance and strategic risks, operational risks, human resources  risks, risks of fraud, risks of conflict of interests, business continuity risks, security risks, reputational risks,  communication and information risks, risks related to legality and regularity, external risks, as well as significant  external and internal changes that may pose both risks and opportunities.  3  Pursuant to the provisions of Article 30 FR on efficient internal control.  TEM-0129.01  Uncontrolled copy once printed. Ensure that the right version is in use.  Page  6  of  8 Characteristics  Component 3.2. Information and data management  Characteristics  Component 3.1. Activity management  3. Operations and operational structure 