Home > ISO Systems > ISO 9001 > Performance Evaluation

9. Performance Evaluation

9.1 Monitoring, Measurement, Analysis and Evaluation

9.1.1 General
Before measuring anything, four basics are settled:
1 What gets monitored and measured
2 The methods used to monitor, measure, analyse and evaluate — chosen so the results are actually valid
3 When the monitoring and measurement happens
4 When the results get analysed and evaluated
Performance evaluation: The organisation evaluates both the performance of the SHEQ management system and how effective it is overall — output and outcome, not just one or the other.

Records cover:

Evidence of the results
Maintenance, calibration or verification of measuring equipment
Key Performance Indicators
  • Safety incident rates
  • Environmental compliance metrics
  • Quality defect rates
  • Process performance indicators
Monitoring Methods
  • Continuous monitoring systems
  • Periodic inspections
  • Statistical process control
  • Digital dashboards
Measurement Equipment
  • Calibrated instruments
  • Software measurement tools
  • Environmental sensors
  • Quality testing equipment
Analysis Frequency
  • Real-time monitoring
  • Daily performance reports
  • Weekly trend analysis
  • Monthly comprehensive reviews
9.1.2 Customer Satisfaction
Customer satisfaction is tracked from the customer's side — what they perceive, not just what the organisation thinks it has delivered. The methods for collecting, monitoring and reviewing that signal are defined.

Customer Satisfaction Monitoring Methods:

Customer Surveys

Structured questionnaires and feedback forms

Product & Service Feedback

Direct feedback on delivered products and services

Customer Meetings

Regular face-to-face or virtual meetings

Market Share Analysis

Competitive positioning and market performance

Compliments & Complaints

Positive feedback and complaint tracking

Warranty & Dealer Reports

Claims analysis and dealer feedback

Customer Satisfaction Framework:

  • Data Collection: Multiple channels for gathering customer feedback
  • Analysis Tools: Statistical analysis and trend identification
  • Action Planning: Converting insights into improvement actions
  • Follow-up: Closing the loop with customers on improvements
  • Benchmarking: Comparing against industry standards
9.1.3 Analysis and Evaluation
Data from monitoring and measurement gets analysed — raw numbers do not produce decisions.

The analysis is used to evaluate:

1 Whether products and services are conforming
2 The level of customer satisfaction
3 The performance and effectiveness of the SHEQ management system
4 Whether planning translated into delivery
5 Whether actions on risks and opportunities actually worked
6 How external providers are performing
7 Where the system needs to be improved
Data Analysis Tools
  • Statistical process control
  • Trend analysis
  • Pareto analysis
  • Root cause analysis
  • Benchmarking studies
Evaluation Criteria
  • Performance targets
  • Historical baselines
  • Industry benchmarks
  • Legal requirements
  • Stakeholder expectations
Reporting Methods
  • Performance dashboards
  • Management reports
  • Trend charts
  • Scorecards
  • Executive summaries
9.1.4 Evaluation of Compliance
A defined process exists for evaluating compliance with legal and other requirements — and is maintained as those requirements shift.

The process covers:

1 Frequency and method of compliance evaluation
2 Evaluation itself, and action where gaps are found
3 Live awareness of where the organisation stands against legal and other requirements
4 Records of the evaluation results

Compliance Management Framework:

  • Legal Register: Comprehensive database of applicable requirements
  • Compliance Calendar: Scheduled evaluations and reporting deadlines
  • Assessment Methods: Audits, inspections, and self-assessments
  • Gap Analysis: Identification of non-compliance issues
  • Corrective Actions: Systematic approach to address deficiencies
  • Monitoring Systems: Ongoing compliance tracking and alerts

Compliance Evaluation Areas:

Environmental Compliance

Environmental regulations, permits, and standards

Health & Safety

Occupational health and safety legislation

Quality Standards

Industry standards and customer requirements

Regulatory Requirements

Sector-specific regulations and codes

9.2 Internal Audit

9.2.1 General
Internal audits run on a planned schedule and tell management whether the SHEQ management system:
1 Conforms to:
  • The organisation's own internal requirements for the system
  • The requirements of the relevant international standards
2 Is effectively implemented and maintained — not just documented
9.2.2 Internal Audit Programme

Running a credible audit programme means:

1 Planning and maintaining the programme — frequency, methods, responsibilities, reporting — sized to the importance of the processes audited, changes in the organisation, and results from previous audits
2 Defining audit criteria and scope upfront, audit by audit
3 Selecting auditors and running audits in a way that protects objectivity and impartiality
4 Reporting results to relevant management — and, where appropriate, to workers, their representatives and other interested parties
5 Acting on findings — corrections and corrective actions — without delay
6 Retaining records of the programme and the audit results

Audit Planning Considerations

Risk-Based Approach
  • Process importance assessment
  • Previous audit results
  • Organizational changes
  • Compliance requirements
Audit Frequency
  • Critical processes: Quarterly
  • Important processes: Semi-annually
  • Support processes: Annually
  • New processes: Within 6 months
Auditor Competence
  • Technical knowledge
  • Audit skills training
  • Independence requirements
  • Communication abilities

Audit Execution Process

Opening meeting and scope confirmation
Document review and evidence gathering
Interviews with personnel
Observation of activities
Finding documentation and classification
Closing meeting and report discussion

Audit Evidence Types:

  • Documentary: Procedures, records, reports
  • Physical: Equipment, facilities, products
  • Testimonial: Interviews, statements
  • Analytical: Data analysis, trends

Follow-up and Closure

Corrective action planning
Implementation monitoring
Effectiveness verification
Finding closure
Lessons learned capture
Programme improvement
Communication: Audit results reach the people who can act on them — relevant management, workers, worker representatives and other interested parties as appropriate.

9.3 Management Review

9.3.1 General
Top management reviews the SHEQ management system on a planned cadence — checking it remains suitable, adequate, effective, and lined up with the organisation's strategic direction.
9.3.2 Management Review Inputs

Inputs to the review include:

1 Status of actions from previous management reviews
2 Changes in external and internal issues affecting the quality management system
3 Performance and effectiveness data — including trends in:
  • Customer satisfaction and feedback from interested parties
  • Progress against quality objectives
  • Process performance and product/service conformance
  • Non-conformities and corrective actions
  • Monitoring and measurement results
  • Audit findings
  • External provider performance
4 Whether resources are adequate
5 Effectiveness of actions on risks and opportunities
6 Improvement opportunities
Performance Data
  • KPI dashboards
  • Trend analysis
  • Benchmark comparisons
  • Financial performance
Stakeholder Feedback
  • Customer satisfaction surveys
  • Employee feedback
  • Supplier evaluations
  • Regulatory feedback
System Effectiveness
  • Audit findings
  • Nonconformity trends
  • Process capabilities
  • Improvement initiatives
9.3.3 Management Review Outputs

The review produces decisions and actions on:

1 Whether the SHEQ management system is still suitable, adequate, and effective at delivering its intended outcomes
2 Improvement opportunities to pursue
3 Whether the system itself needs changing
4 Resource adjustments needed
5 Specific actions to be taken
6 Knock-on implications for the organisation's strategic direction
Documentation: Records of management review outcomes are retained as evidence.
Decision Categories
  • Strategic decisions
  • Resource allocations
  • Process improvements
  • System changes
Action Planning
  • Specific objectives
  • Assigned responsibilities
  • Timeline milestones
  • Success criteria
Follow-up Mechanisms
  • Progress tracking
  • Regular updates
  • Effectiveness reviews
  • Course corrections

Management Review Best Practices

Effective Review Characteristics:

  • Strategic Focus: Align with organizational strategy and objectives
  • Data-Driven: Base decisions on factual information and analysis
  • Forward-Looking: Consider future challenges and opportunities
  • Action-Oriented: Result in clear, actionable decisions
  • Balanced Perspective: Consider all stakeholder interests
  • Regular Cadence: Maintain consistent review schedule

Review Meeting Structure:

Executive summary of key performance indicators
Review of previous action items and progress
Analysis of system performance trends
Discussion of significant changes and their impacts
Identification of improvement opportunities
Resource adequacy assessment
Strategic alignment verification
Decision making and action planning

Success Factors:

  • Executive Engagement: Active participation from top management
  • Quality Information: Accurate, relevant, and timely data
  • Cross-functional Input: Representation from all key areas
  • Clear Outcomes: Definitive decisions and action plans
  • Effective Follow-up: Systematic tracking and review