At planned intervals top management reviews the OH&S management system so that it stays suitable, adequate and effective. Inputs cover: where actions from earlier reviews stand; changes in internal and external issues, in what interested parties need and expect, in legal and other requirements, and in risks and opportunities; how far the policy and objectives have been achieved; information on OH&S performance, including incidents, nonconformities, continual improvement and corrective actions, results of monitoring and measurement, the outcome of compliance evaluation, audit results, consultation and participation of workers, and risks and opportunities; whether resources are adequate; relevant communications with interested parties; and opportunities for continual improvement. Outputs cover decisions on whether the system remains suitable, adequate and effective, on opportunities to improve, on any change needed, on resources, on actions, on integration with business processes, and on what all this means for strategic direction. Top management passes the relevant outputs on to workers and their representatives, and documented information is retained.
This control maps to 43 controls across 29 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 43 it maps to, and the evidence behind each claim, over MCP and REST.