The planning and implementation section of the document guides the organisation under the capstone of the policy, to develop a situational analysis of where the organisation is at present and what needs to be established to effectively identify threats and hazards, and to assess risks, provide control measures or other means to identify the threat and hazard, and to prevent, eliminate, control and mitigate the risk. Part of the planning and implementation process is also to develop and maintain a system to effectively manage emergencies and crisis, on both an organisation-wide and a local level.
As with any effective management system, this guidance also outlines a range of different ways to consider the measures necessary to evaluate the effectiveness of the system through means such as performance measurement, incident investigation, auditing and management review as well as a means to develop actions to continually improve the system.