The agency must learn from its experiences to date and must fully assess the risks, review the current performance and develop clear objectives.