The operator monitors and reviews the effectiveness of its safety measures and the implementation of the SMS to determine whether they achieve their intended outcomes, confirming that risks are managed as intended, that controls remain suitable and effective, and that emerging or increasing risks are found before harm; no monitoring method, review tool, documentation format or outcome is prescribed. The criteria: monitoring checks whether risk controls and key system requirements are implemented and operating effectively, not only high-level outcomes; what is monitored derives from the identified hazards, risks and controls and targets the areas where failure or degradation would matter most; monitoring draws on operational records, observations, personnel feedback, incident and near-miss information and other data; it can detect change, drift or emerging risk including trends before serious incidents; defined triggers (incidents, near misses, control failures, concerns raised, significant change, new information) initiate review; periodic review runs at intervals commensurate with risk, more often or deeper for higher-risk activities; reviews consider whether risk assessments remain accurate and controls still suitable and effective given changes in operations, environment or knowledge; reviews consider whether previously adopted or rejected controls remain appropriate without presuming change is required; and the arrangements operate in practice and inform timely consideration of public risk.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.