These objectives are typically not part of the policy, but the organization should be able to show a connection between its objectives and policy. For example, if the organization has a policy stating that it will comply with all applicable laws, this policy should be reflected in the organization’s objectives if appropriate.