The organization should determine (P) and provide (D) in a timely (7.1.3) manner the resources (7.1) needed for the establishment, implementation, maintenance, and continual improvement (10.3) of the innovation management system (4.4).

The organization should consider (P):

a) a proactive, transparent, flexible, and adaptable approach for providing resources (7.1);

b) the capabilities (9) of, and limitations (10.2) on, existing internal (4.1.3) support (7);

c) what needs to be obtained from external providers (4.1.2; 4.2), e.g. by outsourcing or partnering (7.6);

d) internal and external collaboration (7.6), e.g. sharing or re-use, to optimize the use of resources (7.1);

e) securing resources (7.1) for innovation activities (8) separated from other activities;

f) the long-term build-up of capabilities (9) for innovation activities (8).

The organization should determine (P), provide (D), and manage (P-D-C-A) the people necessary for the effective implementation of its innovation management system (4.4).

The organization should consider (P):

a) the need to attract, recruit, and retain people;

b) forming teams with a diversity and mix (4.4.2) of people including different disciplines, personal attributes, and backgrounds to encourage cross-pollination that can result in unexpected positive (6.1) outcomes (9);

c) establishing appropriate incentives, including non-financial incentives, e.g. rewards and recognition (7.3);

d) protecting (7.8) innovators given the potential higher degree of risk (6.1) of innovation activities (8);

e) establishing and communicating (7.4) the terms and conditions for the ownership of ideas (8.3.3), handling of patents (7.5; 7.8) and exploitation of innovations (8), which can be subject to different national laws, regulations, and other agreements (7.5).

The organization should establish (P) an approach for the management of time for the effective (9) implementation of its innovation management system (4.4).

The organization should consider (P) allocating time:

a) generally, for innovation activities (8) and training (7.2) in a balanced way, e.g. as a percentage of overall working time;

b) specifically, to each innovation initiative (8.2) and for the different innovation processes (8.3);

c) for dedicated and other relevant roles in the organization (5.3), using allowances as appropriate.

The organization should establish (P) an approach for the management of knowledge for the effective implementation of its innovation management system (4.4).

The organization should consider (P):

a) capturing internal and external (4.1) knowledge, tacit or explicit, gained from intelligence (ISO 56006:2021) and experience, e.g. understanding (7.3) the context of the organization (4.1), lessons learned from success (9) and failure (10.2) of innovation initiatives (8.3) and from analysis (9.1.2) of performance (9) data (7.5);

b) facilitating knowledge access and re-use (7.4) to avoid the loss (6.1) of, or duplication, of existing knowledge;

c) maintaining an appropriate mechanism for information (7.5) analysis (9.1.2) and for managing existing and future knowledge, e.g. directories of people's areas of expertise and interests, or resource (7.1) planning data (7.5);

d) the level and means of confidentiality and protection of intellectual assets (7.8);

e) ethical issues (4.1; 4.4.2) related to the use of knowledge;

f) prioritizing external knowledge sources (7.5) by, e.g. reliability, accessibility, and cost.

Knowledge can be individual or collective, tacit, or explicit. Collective knowledge is gained from people (7.1.2) collaborating (7.4; 7.6), codifying, and sharing (7.4) their tacit and implicit knowledge.

External knowledge sources can be users, customers, partners, providers, competitors, consultants (4.2; 7.1.2), databases (7.5), expert networks, conferences, standards (7.5), academia (4.2; 7.1.2), etc.

The organization should determine (P) and provide (D) financial resources (7.1) for the effective (9) implementation of its innovation management system (4.4).

The organization should consider (P):

a) the financial opportunities, risks, (6.1) and constraints (4.1) associated with innovation activities (8), including the financial implications and other risks (6.1), of not innovating;

b) establishing funding principles, e.g. central financial resources (7.1) versus funding through local or operational budgets;

c) allocating dedicated financial resources (7.1) for innovation activities (8), e.g. as a percentage of annual budget or designating funds for innovation initiatives (8.2) by top management (9.3);

d) identifying and accessing relevant financial resources (7.1) outside the organization (4.3), e.g. from private and public investors, research agencies, partners, co-sponsors (4.2), innovation grants, tax credits for research and development, or crowdsourcing (7.1.2);

e) establishing investment principles, e.g. investing in internal versus external activities, investing in start-ups, corporate venture capital, or innovation accelerators (4.2);

f) the balance of funding across different time (7.1.3) horizons, different degrees of risk (6.1), and different types of innovations (8), e.g. incremental innovation or radical innovation;

g) ensuring the funding of other relevant resources (7.1) and support (7), e.g. people (7.1.2), time (7.1.3), infrastructure (7.1.6), or competence (7.2);

h) ensuring that the funding approach covers all activities (8) needed.

7.1.6.1 The organization should determine (P), provide (D), and maintain (A) the necessary physical and virtual infrastructure for the effective implementation of its innovation management system (4.4).

The organization should consider (P):

a) infrastructure to support (7) and facilitate the innovation management system (4.4) and its processes (8);

b) separation versus sharing of infrastructure, when appropriate, considering factors (4.1) such as flexibility, cost effectiveness, and coordination benefits;

c) what infrastructure needs to be obtained from external relevant interested parties (4.2), including users and customers (4.2; 7.1.2), e.g. by outsourcing or partnering (7.6);

d) pro-actively evaluate and consider advances in infrastructures, including new technologies, tools and methods (7.6), and statutory and regulatory requirements (7.5).

7.1.6.2 Infrastructure to support (7) innovation activities (8) can include:

a) buildings, facilities, and associated utilities, e.g. creative environments, research and development labs, maker spaces, simulation labs, or living labs;

b) research and simulation equipment, physical tools, other hardware, software, methods, advanced technologies, and models;

c) transportation resources (7.1);

d) information (7.5) and communication (7.4) technology, e.g. for the management of collaboration (7.6), ideas (8.3.3), portfolios (6.4), insights (8.3.2), talent (7.1.2; 7.2), projects (8.2), or programs (8), etc;

e) networks, e.g. knowledge (7.1.4) networks, or market (4.1) networks.

The organization should establish (P) an approach for the development and management of competencies.

7.2.1 The organization should:

a) determine (P) the necessary competence of persons (7.1.2) doing work (8) under its control (4.3) that affects the performance, effectiveness, and efficiency (9) of the innovation management system (4.4);

b) ensure that these persons (7.1.2) are competent (D) on the basis of appropriate education, training, or experience;

c) establish (P) an inventory of existing competencies of the organization and identify gaps (6.1);

d) where applicable, take actions to acquire (A) and continuously evaluate (C), improve (A), and renew (A) the necessary competence, and evaluate (C) the effectiveness (9) of the actions taken;

e) consider (P) the need for outsourced competence, e.g. collaborating (7.6) with or commissioning academia, consultants (7.1.2), external partners, innovation support services, or online resources (4.2) to assist with innovation activities (8);

f) establish (P) the necessary connections and collaborations (7.4; 7.6) between people (7.1.2) with different competencies to leverage the collective competence of the organization;

g) consider (P) the need for aligning internal competencies with relevant external interested parties (4.2) to achieve a common understanding (7.3) and a convergence of vocabulary, attitudes (4.4.2), and approaches;

h) retain (A) appropriate documented information (7.5) as evidence (7.5) of competence.

7.2.2 Competencies can include the ability to:

a) manage innovation activities (8), e.g. in terms of leadership (5), change management (6.1), resource (7.1) allocation, engage (7.3) and empower (5.3) people (7.1.2), team (7.1.2) facilitation, involvement (7.3), collaboration (7.6), foster a culture (4.4.2) supporting innovation activities (8), manage uncertainty (6.1), conduct research and manage intellectual property (7.8);

b) identify insights and opportunities (8.3.2), using e.g. market (4.1) and technology (7.1.6) analysis (9.1.2), bottleneck and gap analysis (9.1.2), ethnography, data-driven (7.5) experimentation and hypothesis testing (9), design thinking (8), scenario planning (6), analytics (9.1.2), and big data (7.5);

c) create ideas and concepts (8.3.3), e.g. creativity and provocative techniques, critical thinking, discovery skills (association, questioning, observing, experimenting, and networking), technical know-how (7.5), market (4.1) analysis (9.1.2), business case writing (7.5), and value realization modelling that includes generating user-value equations (4.2);

d) develop (8.3.3) and validate concepts (8.3.4), e.g. iterative learning techniques, design, testing and validation (8.3.4; 9), value realization planning (6), and project management;

e) develop (8.3.5) and deploy solutions (8.3.6) to realize value.

NOTE Applicable actions can include, for example, the provision of training to, the mentoring of, or the re-assignment of currently employed persons; or the hiring or contracting of competent persons or organizations.

The organization should ensure that all relevant persons (7.1.2) doing work under the organization’s control are aware (D)of:

a) the innovation vision (5.1.3), strategy (5.1.4), policy (5.2), and objectives (6.2);

b) the meaning and importance of innovation for the organization;

c) their contribution to the effectiveness and efficiency (9) of the innovation management system (4.4), including the benefits of improved (10) innovation performance (9);

d) the implications of not meeting (10.2) the innovation management system (4.4) guidance (ISO 56002:2019);

e) the availability of support (7) for innovation activities (8).

The organization should determine (P) the internal (4.1.3) and external (4.1.2) communications relevant to the innovation management system (4.4), including:

a) on what it will communicate;

b) why to communicate;

c) when (7.1.3) to communicate;

d) with whom (4.2; 7.1.2) to communicate;

e) how to communicate;

f) who (7.1.2) communicates.

Communication can be done to create awareness (7.3), increase people (7.1.2) engagement, prepare for action (8), establish thought leadership (5), influencing, build brand value, etc.

Communication can be internal (4.1.3), e.g. team (7.1.2) meetings, notice boards (7.5), intranets (7.1.6), newsletters (7.5), games, magazines (7.5), staff (7.1.2) conferences and training (7.2) as well as external (4.1.2), e.g. web sites (7.1.6), annual reports (7.5), corporate literature (7.5), white papers (7.5), briefings (7.5) to financial (7.1.5) institutions, users, customers, partners (7.6), providers and other relevant interested parties (4.2), advertising (7.5), press releases (7.5), trade shows, and professional conferences.

The organization's innovation management system (4.4) should include (D):

a) documented information suggested by this document (ISO 56002:2019);

b) documented information determined by the organization as being necessary for the effectiveness (9) of the innovation management system (4.4).

NOTE The extent of documented information for an innovation management system can differ from one organization to another due to:

1) the size of organization and its type of activities, processes, products, and services;

2) the complexity of processes and their interactions;

3) the competence of persons.

When creating (D) and updating (A) documented information, the organization should ensure appropriate:

a) identification (D) and description (D), e.g. a title, date, version, author (7.1.2), or reference number;

b) format (D), e.g. language, software (7.1.6) version, graphics, and media, e.g. paper or electronic;

c) review (C) and approval (C) for suitability and adequacy.

Documented information required by the innovation management system (4.4) should be controlled (C) to ensure:

a) it is available (P) and suitable for use (P), where and when it is needed;

b) it is adequately protected (D), e.g. from loss of confidentiality, improper use, or loss of integrity (10.2).

For the control of documented information, the organization should address the following activities, as applicable:

1) distribution (P), access (P), level of confidentiality (P), retrieval (A), and use (D);

2) storage (A) and preservation (A), including preservation of legibility;

3) control (C) of changes, e.g. version control;

4) retention (A) and disposition (A).

Documented information of external (4.1.2) origin determined by the organization to be necessary for the planning (6) and operation (8) of the innovation management system (4.4) should be identified (D), as appropriate, and controlled (C).

NOTE Access can imply a decision regarding the permission to view the documented information only, or the permission and authority to view and change the documented information.

The organization should determine (P), provide (D), and maintain (A) the necessary tools and methods for developing, maintaining, and improving (10) the innovation management system (4.4).

The organization should consider (P):

a) selecting (C) and providing (D) a mix of appropriate tools and methods supporting (7) innovation activities (8), as well as for different types of innovations activities (8);

b) creating (D) awareness (7.3) of, ensuring access to (P), and providing training (D) (7.2) for, the available tools and methods;

c) sharing (D), re-use (D) and collaboration in the use (D) of tools and methods.

Tools and methods can be of different types, including descriptive, provocative, participative (4.2), challenging (6.1), analytical (9.1.2), and communicative (7.4). They can take many forms and formats (7.5), including guides (7.5), instructions (7.5), games, templates (7.5), presentations (7.5), videos (7.5), software, and hardware (7.1.6).

Examples of tools and methods are back casting, ethnographic research, scenario planning (6), brainstorming (7.1.2), idea management (8.3.3), inclusive (4.2) design, and business model templates (7.5).

The organization should establish (P) an approach for the management of strategic intelligence (7.5).

The organization should consider (P):

a) the need (4.2) to acquire intelligence (7.5) from internal (4.1.3) and external (4.1.2)sources;

b) the need (4.2) to collaborate (7.6) with relevant interested parties (4.2);

c) the use of tools and methods (7.6), e.g. data mining, analytics (9.1.2), prediction markets, environmental scanning, and technology (7.1.6) surveillance (9.1);

d) different perspectives, e.g. present and future (7.1.3), internal (4.1.3) and external (4.1.2), demand and supply (7.1), providers and users, competitors (4.2), and related to new or changed products, services, processes, models, and methods (8);

e) the need (4.2) for developing influencing activities (8) to increase acceptance of innovations (8), e.g. evolution of regulatory requirements (7.5), standards (7.5), and innovation (8) ecosystems (4.1).

Strategic intelligence (7.5) can include activities to acquire (7.4), collect (7.4), interpret (7.3), analyse (9.1.2), evaluate (9.1.2), apply, and deliver to (8), or share (7.4) between, decision-makers (4.2; 7.1.2) and other relevant interested parties (4.2), the necessary data (7.5), information (7.5), and knowledge (7.1.4).

The organization should establish (P) an approach for the management of intellectual property aligned with, and supporting (7), the innovation strategy (5.1.4).

The organization should consider (P):

a) defining what intellectual property assets are to be, and not to be, protected and when (7.1.3), how, and where it will be protected, e.g. patent, copyrights, trademark, trade secrets, creative commons licensing, and open source licensing (7.5);

b) the rationale for creating, protecting, and utilizing intellectual property, e.g. value realization, obtain freedom to operate (8), and defend (6.1) against infringement (10.2);

c) the rationale for not protecting intellectual property, e.g. confidentiality, cost (7.1.5), speed (7.1.3), and risks (6.1);

d) establishing and maintaining an inventory (7.5) of the organization's intellectual assets;

e) regularly monitoring (9.1) and analysing (9.1.2) disclosed intellectual property that is relevant for the organization, as input to innovation activities (8), to ensure freedom to operate (8), as well as to avoid potential (6.1) infringement (10.2);

f) the need (4.2) for managing intellectual property, including establishing the appropriate processes (4.4; 8), clarifying ownership in relation to external partners (4.2), e.g. in collaborative (7.6) innovation initiatives (8.2), including clarification of the sharing (7.4) of intellectual property in the idea generation phases (8.3.3);

g) how to realize value from intellectual property, e.g. through licensing, cross-licensing, sale (7.1.5; 7.5), and collaborative partnerships (7.6);

h) establishing awareness (7.3) and providing training (7.2) in the organization about the approach, including ownership (4.3; 5.3) and confidentiality related to intellectual property, as well as the consequences of potential (6.1) infringement (10.2) of third-party (4.2) intellectual property, e.g. licensing and litigation (7.5) costs (7.1.5);

i) ensuring access or restriction to intellectual property to persons (7.1.2), internally (4.1.3) and externally (4.1.2), when necessary for their work, e.g. through confidentiality agreements (7.5), procedures (7.5), and policies (7.5);

j) how to manage infringements (10.2), potential (6.1) and actual, from other parties (4.2);

k) monitoring (9.1) the development and differences of relevant national legislations (4.1; 7.5) and other internationally applicable legal requirements (4.1; 7.5) and compliance commitments (7.5).

Intellectual property can include inventions, technologies (7.1.6), literary, scientific or artistic work (7.5), symbols, designs, methodologies, names or images (7.5), software (7.1.6), data (7.5), and know-how (7.5).

Intellectual property can be used to achieve objectives (6.2) such as brand building, differentiation and positioning of offerings, customer (4.2) loyalty, research and development, revenue (7.1.5) generation, etc.