The management review should include assessment of the status of actions from previous reviews; management system performance including trends in nonconformities and corrective actions, monitoring and measurement results and audit findings; changes in the supply chain and the effectiveness of supply chain continuity arrangements; other changes in the organization and its context and feedback from interested parties that can affect the system; and opportunities for continual improvement. The review gives top management the opportunity to assess the system's continuing suitability, adequacy and effectiveness, should cover the BCMS scope and any exclusions though not necessarily every element at once, and can proceed over a period; top management's review of BCMS implementation and results should be planned and assessed regularly, with formal review structured, documented and scheduled appropriately even where continuous review is practised, and the people involved in implementing and resourcing the BCMS should take part; additional triggers for review beyond the scheduled ones include sector and industry trends and best practice for benchmarking, new regulatory requirements, and incident experience, where the review should be held after any response to disruption whether or not the response procedure was invoked, examining, if it was, the procedure against the chronology of events and how and why it was applied, and if not, why it was not and whether that was the right decision, and where reviewing disruptions affecting other organizations in the same sector can also be useful.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.