ISO/DIS 29502
ISO/DIS 29502
ISO/DIS 29502: Operating management systems — Conformity assessment guidelines and criteria

ISO/DIS 29502:2026(en)

ISO/TC 67/WG 2

Secretariat: NEN

Date: 2025-11-21

Operating management systems — Conformity assessment guidelines and criteria

© ISO 2026

All rights reserved. Unless otherwise specified, or required in the context of its implementation, no part of this publication may be reproduced or utilized otherwise in any form or by any means, electronic or mechanical, including photocopying, or posting on the internet or an intranet, without prior written permission. Permission can be requested from either ISO at the address below or ISO’s member body in the country of the requester.

ISO copyright office

CP 401 • Ch. de Blandonnet 8

CH-1214 Vernier, Geneva

Phone: +41 22 749 01 11

Email: copyright@iso.org

Website: www.iso.org

Published in Switzerland

Contents

Foreword 3

Introduction 4

1 Scope 5

2 Normative References 5

3 Terms and Definitions 5

4 Operating management system conformity assessment context 6

5 Assessment program management 6

5.1 Assessment user cases 6

5.2 Assessment Programme management 7

5.3 Management system maturity criteria 7

5.4 Assessor roles knowledge and skills 7

5.5 Maturity Assessment Process 7

5.5.1 Plan assessment 8

5.5.2 Conduct assessment 8

5.5.3 Determine maturity levels 9

5.5.4 Assessment reporting and feedback 9

5.6 Assessment Tools 10

6 Assessment findings analysis to inform improvement 10

6.1 Assessment determination review 10

6.2 Trend analysis and benchmarking 10

6.3 Improvement Actions 11

Annex A (informative) Implementation Maturity Assessment Criteria 12

Annex B (informative) Assessment Tool 40

B.1 Overview 40

B.2 Access and Data Management 40

B.3 Assessment Management 40

B.4 Analysis 41

Bibliography 42

Foreword

ISO (the International Organization for Standardization) is a worldwide federation of national standards bodies (ISO member bodies). The work of preparing International Standards is normally carried out through ISO technical committees. Each member body interested in a subject for which a technical committee has been established has the right to be represented on that committee. International organizations, governmental and non-governmental, in liaison with ISO, also take part in the work. ISO collaborates closely with the International Electrotechnical Commission (IEC) on all matters of electrotechnical standardization.

The procedures used to develop this document and those intended for its further maintenance are described in the ISO/IEC Directives, Part 1. In particular, the different approval criteria needed for the different types of ISO documents should be noted. This document was drafted in accordance with the editorial rules of the ISO/IEC Directives, Part 2 (see www.iso.org/directives).

ISO draws attention to the possibility that the implementation of this document may involve the use of (a) patent(s). ISO takes no position concerning the evidence, validity or applicability of any claimed patent rights in respect thereof. As of the date of publication of this document, ISO [had/had not] received notice of (a) patent(s) which may be required to implement this document. However, implementers are cautioned that this may not represent the latest information, which may be obtained from the patent database available at www.iso.org/patents. ISO shall not be held responsible for identifying any or all such patent rights.

Any trade name used in this document is information given for the convenience of users and does not constitute an endorsement.

For an explanation of the voluntary nature of standards, the meaning of ISO specific terms and expressions related to conformity assessment, as well as information about ISO's adherence to the World Trade Organization (WTO) principles in the Technical Barriers to Trade (TBT), see www.iso.org/iso/foreword.html.

This document was prepared by Technical Committee ISO/TC 67, Oil and gas industries including lower carbon energy activities, in collaboration with the ISO Committee on conformity assessment (CASCO).

Any feedback or questions on this document should be directed to the user’s national standards body. A complete listing of these bodies can be found at www.iso.org/members.html.

Introduction

Conformity assessment, provides a means of providing assurance that the organization has implemented a system for the management of the relevant aspects of its activities, products and services, in line with the organization’s policy, objectives and obligations and the requirements of the respective international management system standards.

An organization that wishes to determine the conformance and maturity of its operating management system can do so by:

— making a self-assessment as the basis for determination and self-declaration, or

— seeking confirmation of its conformity and maturity by parties having an interest in the organization such as partners, stakeholders and customers, or

— seeking confirmation of its conformity and maturity by parties external to the organization.

This document provides assessment guidelines and implementation maturity criteria for bodies undertaking conformity assessment of operating management systems developed in accordance with the requirements of ISO DIS 29501, Operating management systems – Requirements with guidance for use.

Observance of these guidelines is intended to ensure that bodies undertaking assessment activities operate in a competent, consistent and impartial manner, thereby facilitating the recognition of their determinations and the acceptance of their declarations on a national and international basis.

Independent assessment of an operating management system provides demonstration that the management system of the organization:

a) conforms to specified requirements;

b) is capable of consistently achieving its stated policy and objectives;

c) is effectively implemented;

d) enables sustained improvement.

Conformity assessment, of a management system, thereby provides value to the organization, its customers and interested parties.

The guidelines provided in this document are consistent with the principles and requirements established in ISO/IEC 17021-1 and the guidance provided in ISO 19011.

In instances where an organization elects to engage an external party to assess the conformity and maturity of its operating management system it is recommended that such organizations conform with ISO/IEC 17020

In this document, the following verbal forms are used:

— “shall” indicates a requirement;

— “should” indicates a recommendation;

— “may” indicates a permission;

— “can” indicates a possibility or a capability.

Further details can be found in the ISO/IEC Directives, Part 2.

Operating management systems — Conformity assessment guidelines and criteria

1.0 Scope

This document provides, assessment guidelines and criteria for bodies undertaking conformity assessment of operating management systems developed in accordance with the requirements of ISO 29501 Operating management systems – Requirements with guidance for use.

The assessment guidelines and criteria provided in this document can be implemented by:

— organizations undertaking self-assessment as the basis for determination and self-declaration (first part), or

— parties having an interest in the organization such as partners, stakeholders and customers (second party), or

— independent parties providing conformity assessment services (third party).

NOTE 1 ISO/IEC 17020 – Conformity assessment - Requirements for the operation of various bodies performing inspection, contains requirements for the competence of bodies performing inspection and for the impartiality and consistency of their inspection activities

NOTE 2 ISO 19011 – Guidelines for auditing management systems, provides guidance on auditing management systems, including the principles for auditing, managing an audit programme and conducting management system audits, as well as guidance on the evaluation of competence of individuals involved in the audit process. These activities include the individual(s) managing the audit programme, auditors and audit teams.

NOTE 3 ISO/IEC 17021-1, Requirements for bodies providing audit and certification of management systems – Part 1 Requirements can be used as reference should organizations seek assessment of their operating management system by third-party conformity assessment bodies.

2.0 Normative References

The following documents are referred to in the text in such a way that some or all of their content constitutes requirements and guidelines relevant to this document. For dated references, only the edition cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies.

ISO 29501, Operating management systems – Requirements with guidance for use

ISO/IEC 17000, Conformity assessment — Vocabulary and general principles

3.0 Terms and Definitions

For the purposes of this document, the terms and definitions given in ISO/IEC 17000 and ISO 29501 apply.

ISO and IEC maintain terminological databases for use in standardization at the following addresses:

— ISO Online browsing platform: available at https://www.iso.org/obp

— IEC Electropedia: available at https://www.electropedia.org/

4.0 Operating management system conformity assessment context

ISO 29501 is a management system standard that establishes a discipline agnostic framework, requirements and guidance for owner/operators of assets/facilities to establish operating management systems consistent with their context, business and operational objectives and obligations.

This document establishes guidelines and criteria for assessing an organization’s level of conformance to the ISO 29501 requirements and the degree to which the operating management system enables the sustained success of the organisation.

The management system principles and conformity assessment guidelines and criteria included in ISO 29501 and this document are aligned with:

— phased management system implementation approach defined in ISO 14005 Environmental management systems — Guidelines for a flexible approach to phased implementation,

— quality of an organisation approach defined in ISO 9004 Quality management — Quality of an organization — Guidance to achieve sustained success.

Conformity assessment programs implemented in accordance with this document should be established as a key element of the organisation’s performance evaluation processes required by Clause 9 of ISO 29501.

This document does not prescribe specific requirements for undertaking assessments and audits. Adoption of the assessment and auditing management guidelines provided in ISO 19011 is recommended.

5.0 Assessment program management

5.1 Assessment user cases

Operating management system conformity assessments can be employed during any time or phase of the planning, implementation and improvement of an organisation’s operating management system.

Assessment purposes can encompass:

— single, current state, assessment of a defined organization/scope

— current state assessment and future state vision comparison including identification of actions proposed to achieve the desired future state (two assessment records)

— multiple assessments capturing changes in maturity over time

— multiple assessments of different business units or functions within an organization to benchmark performance and to identify and leverage practices as the basis for organization wide improvement

— multiple assessments benchmarking peer organizations and to identify and leverage best practice for broader segment or community benefit.

Subject to their purpose and objectives assessment outputs can be used to:

— establish a base case ISO29501 gap analysis to inform an operating management system implementation plan

— inform management review of operating management system implementation maturity against implementation plan objectives

— inform identification of opportunities to improve the operating management system to realize business objectives.

Refer to clause 7 Assessment findings analysis to inform improvement.

5.1.1 Assessment Programme management

The scheduling of operating management system maturity assessments within the organisation should be integrated with the assessment and audit programme implemented in accordance with ISO 29501 Clause 9.2.

The frequency of assessments should be informed by implementation or improvement plan milestones and performance in meeting operating management system and business objectives.

5.1.2 Management system maturity criteria

This document defines five generic maturity levels as the basis for determining the degree to which an organisation addresses ISO 29501 requirements, and the value realised through their implementation.

The levels are defined as:

— Awareness

— Approach

— Deployment

— Improving

— Transforming

Section 5,3 provides generic guidance on the characteristics and objective evidence required for each maturity level determination.

Annex A includes a matrix of maturity criteria for each ISO 29501 requirement designed to guide individuals undertaking conformity assessments to make assessment determinations.

5.1.3 Assessor roles knowledge and skills

Individuals managing assessment programs should have pre-requisite competence consistent with the requirements of ISO 19011 Section 5.4.2.

The selection of assessment team members should follow the requirements of ISO 19011 Sections 5.5.4 and 7 with particular emphasis on establishing an appropriate balance between assessment, management system and technical competence relevant to the operational context of the organisation.

The assessment team leader should have in depth knowledge of assessment planning and execution in respect to ISO 29501 requirements and the maturity criteria defined in Appendix A.

Supporting assessors and technical experts should be included consistent with applicable discipline management systems and technologies.

5.1.4 Maturity Assessment Process

Organisation should establish an assessment process consistent with the guidance provided in ISO 19011 Section 6.

Further to the generic guidance provided in ISO 19011 operating management system maturity assessments should address the following:

5.1.5 Plan assessment

Assessment Terms of Reference should be developed by assigned lead assessors based on the planned scope, refer 5.2, discussions with sponsors and review of pertinent reference materials.

Terms of reference should define:

Purpose: brief statement of scope and boundaries

Sponsor: individual(s) on whose behalf the assessment is conducted.

Objectives: brief overview of assessment objectives and key focus areas

Background/risks/opportunities: pertinent background factors, risks and opportunites

Team: assessment team leader and team members

Date and location: assessment timing and venue(s)

Methodology and reporting: approach followed to conduct, analyse findings and report

List of interviewees and key documents: people who will be interviewed and key documents that will be considered

Terms of Reference should be agreed with assessment sponsors and the assessed organisation’s management.

5.1.6 Conduct assessment

Assessment methodologies should be scaled in line with the scope, complexity, and location(s) of the participants.

Face-to-face assessment practices are preferred.

Subject to contractual and privacy conditions, virtual communication technologies can be employed when access is restricted or where such technologies facilitate the use of specialist subject matter competencies for specific elements of an assessment.

Team leaders should confirm the methodology and associated logistics, enabling technologies and interview schedules with the organisation prior to commencement.

Assessment opening, progressive and closing meetings should be scheduled to ensure effective communication of assessment scope, objectives, schedule and findings and clarification of issues which can inform assessment determinations.

Team leaders directly, or through direction of team members should, undertake interviews and assess facilities, operating practices, services and products, and associated information to determine the level of conformance with the requirements using the maturity criteria.

Determinations of maturity should be based on objective evidence and agreed with the assessed organisation.

Determinations should be progressively recorded against maturity criteria and should include:

— Description of findings

— Objective evidence on which findings are based

— Maturity determination; see 5.5.3

Assessment findings can also incorporate:

— Initial analysis of the cause and potential consequence of identified issues

— associated risks and opportunites

— recommended actions to mitigate risks and realise opportunites

— recommended actions to increase management system maturity.

Following completion of audit scopes and compilation of preliminary determinations, team leaders should meet with the organisation’s management teams to provide feedback and to agree determinations and recommendations and to provide an opportunity to discuss and clarify issues.

5.1.7 Determine maturity levels

The maturity level characteristics and generic evidence descriptions provided in Table 1 can be employed to inform maturity level determination

Table 1 — Maturity Level Characteristicss.

Level

Characteristics

Evidence

Awareness

Management demonstrates understanding of and commitment to addressing a requirement.

Open discussions with Top Management and supporting organisational levels demonstrating levels of understanding of and commitment to applying the principles and requirements.

Approach

Defined plans and processes meet the requirement.

Availability of documented information (plans, process documentation, supporting tools) addressing applicable requirements.

Deployment

Plan/process effectively implemented including baseline correction/corrective action/continuous improvement (Clause 10.2).

Discussions with process users to ascertain levels of awareness, engagement and competence confirmed by process performance measures demonstrating achievement of intended process requirements and objectives, and when applicable, implementation of actions to address unplanned outcomes.

Improvement

Sustained improvement with demonstration of value realised or protected by the improvements.

Discussions with process owners and uses to ascertain levels of empowerment to introduce improvements confirmed by performance trends that demonstrate sustained improvement in performance.

Transformation

Demonstration that the OMS is a strategic enabler of step changes in the operations and operational performance including engagement with and contributions to stakeholders.

Case studies demonstrating the realization of strategic (transforming) business initiative objectives through application or operating management system processes.

5.1.8 Assessment reporting and feedback

Following completion of assessents team leaders should review the draft findings and finalise in line with closeout discussions and clarification of any issues or objective evidence which informed the determinations and, when applicable, recommended actions.

Assessment reports should include concise descriptions of findings and maturity determinations and the objective evidence on which determinations were based; refer 5.5.2.

Reports should include an executive summary which:

— establishes overall maturity ranking

— recognises strengths

— highlights significant risks and opportunities

When an assessment forms part of a series of assessments; refer Section 5.1, executive summaries can also include analysis of maturity trends and recommendations to address or leverage associated issues and opportunities.

If there are significant changes made to the determinations the organisation should be provided an opportunity to review and confirm their agreement to the changes prior to issue of the report. In the event of dispute over determinations, the associated issues should be referred to the audit sponsor for arbitration.

5.2 Assessment Tools

Organisations undertaking conformity assessments can use assessment management tools to plan, undertake and report assessments.

The purchase of this document entitles use of the companion assessment tool which is designed to provide a standardised record and analysis of assessments to the ISO29501 requirements benchmarked against the ISO29502 maturity criteria.

Use of the assessment tool is subject to the copyright provisions of this document

The tool may be accessed via https://iso29502.u-sws.com/

See Annex B for an overview of the Assessment Tool, including representative outputs of assessment determinations and analysis.

6.0 Assessment findings analysis to inform improvement

6.1 Assessment determination review

Assessed organisations should review assessment outputs to inform review of the suitability and effectiveness of the operating management system against planned development status and when required amend development plans and initiate improvement actions.

6.1.1 Trend analysis and benchmarking

Organisations can apply qualitative scoring or risk and opportunity ranking to assessment determinations to analyse individual or multiple assessment results to inform trend analysis, benchmarking and as inputs to management review and actions to address nonconformance with requirements and improvement opportunities.

The ISO 29502 Assessment Tool; see Annex B; includes weighted scoring algorithms and graphical representations of results as aids to trend analysis and benchmarking; refer 5.1 Assessment User Cases.

6.1.2 Improvement Actions

Corrective and improvement actions raised based on conformity assessment determinations should be managed in accordance with the organisation’s improvement and corrective management processes required by Section 10 of ISO 29501.

Note: The ISO 29502 Assessment Tool does not include provisions for action management.


  1. (informative)

    Implementation Maturity Assessment Criteria

Table A.1<Tbl_--></Tbl_-->

Section Title

Implementation Maturity Criteria

Awareness

Approach

Deployment

Improving

Transforming

4

Context of the organization

4.1

Understanding the organization and its context

 

Top management recognition that the organization's context and the issues that affect its ability to achieve its purpose, objectives and obligations should inform the scope and design of the OMS.

Evidence:

1)   Top Management articulates the purpose, context, and key issues for the business

2)   Informal approach to the analysis of external and internal issues

3)   Limited documentation of purpose, context, and key issues

Processes established to determine the context and issues that affect its ability to achieve its purpose, objectives and obligations to inform the scope and design of the OMS.

Evidence:

1)   Process to determine the context and associated issues and it’s use to inform OMS scope and design proven

2)   Analysis within the process includes consideration of 4.1 a-f

3)   Process outputs (context and issues) documented in a form suitable to inform determination of OMS scope (4.3), design (4.4), policies (5.2) and planning (6.1)

Context description including relevant external and internal issues are analysed, understood and available to inform the scope and design of the OMS.

Evidence:

1)   Formalised process(es) and tools implemented to analyse external and internal issues

2)   Formalised process(es) and tools in place to analyse internal context to identify weaknesses and strengths

Pre-emptively identify and analyse changes in the context and issues to inform the scope and design of the OMS.

Evidence:

1)   Analysis of performance and change in factors (9.1) affects the context and associated issues

2)   Processes in place to understand risks and opportunities related to changes in context and issues

3)   Evolving context description in response to changes in context and issues

The OMS is a key enabler for transforming the context to benefit the organization, stakeholders, and society.

Evidence

1)   Leading collaboration arenas or networks with stakeholders

2)   Assessment of stakeholder objectives and how external context influences the organization’s objectives

3)   Work to actively develop the external context to benefit stakeholders and the Organization

4)   Participation in (leads, initiates, supports) initiatives that contribute to realization of United Nations sustainability goals and climate change

4.2

Understanding the needs and expectations of stakeholders

 

Top Management recognition of the importance of stakeholder perceptions and their expectations and requirements.

Evidence:
1)   Top management articulates the importance of stakeholder engagement and relationships

2)   Top management articulates concepts of regulatory and social licence to operate.

3)   Management articulates approach to relevant stakeholder identification and analysis of expectations and requirements

4)   Management articulates capability gaps in existing stakeholder engagement plans and monitoring processes

5)   Expectations and requirements to be addressed by the OMS not defined

Process established for identifying relevant stakeholders and for managing their expectations and requirements.

Evidence:
1)   Process for relevant stakeholder identification established

2)   Process defines how to identify and analyse stakeholder expectations and requirements.

3)   Process defines approach for determining which expectations and requirements are to be managed through the OMS

4)   Stakeholder engagement strategies and performance monitoring processes defined

5)   Monitoring processes include techniques to attain feedback and to assess perceptions on fulfilment of expectations and requirements

6)   Processes include protocols for using monitoring information to inform revised stakeholder engagement strategies and process improvement to enhance stakeholder perceptions

Stakeholder expectations and requirements and monitoring of these are understood and managed through the OMS.

Evidence:
1)   Process for stakeholder identification and management is effectively deployed

2)   Analysis and outputs inform the organization's risks and opportunities and their treatment

3)   Relevant stakeholder expectations and requirements are identified and managed through the OMS

4)   Demonstration that stakeholder requirements are used to inform OMS scope (4.3), processes (4.4) and overall business objectives and plans

5)   Leadership visible engagement in stakeholder management and effective communication

6)   Organization addresses trends and acts on stakeholder feedback to improve processes and performance to meet expectations and requirements

Knowledge of and prioritization of stakeholder expectations and requirements delivers business improvements and enhances stakeholder relationships.

Evidence:
1)   The effectiveness of processes for stakeholder identification and management is monitored and improved when required

2)   Stakeholder monitoring activities regularly inform opportunities for improvement

3)   Organization engages relevant industry bodies or associations to identify, analyse and adopt good practices on stakeholder identification and management

4)   Performance in meeting stakeholder expectations and requirements (9.1) informs corrective actions and process improvement initiatives

5)   Measured stakeholder satisfaction rates are constantly improving

Stakeholder expectations and requirements are integral to the evolution of business strategies and objectives and to the design and performance of the OMS.

Evidence:

2)   Mature stakeholder relationships lead to the identification and achievement of new business streams and technologies

3)   Stakeholder relationships and agreements lead to mutually beneficial outcomes that enhance the sustainability of the organization, it’s stakeholders and the communities in which it operates

4)Positive trends in Social licence to operate demonstrated e.g. through public domain social media

4.3

Determining the scope of the operating management system

 

Top management recognition that the scope and boundaries of the OMS should be informed by the organizational context and issues.

Evidence:

1)   Top management articulates rationale and understanding of the need to consider context and issues when defining OMS scope and boundaries

Processes established for defining and managing OMS scope and boundaries.

Evidence:

1)   Proven approach or process

2)   Process inputs include context and issues (outputs of 4.1 and 4.2)

3)   Process outputs document the scope and boundaries

OMS scope and boundaries are defined and are aligned with the organization’s objectives, context and associated issues.

Evidence:

1)   Scope and boundaries of the OMS available as documented information

2)   The scope and boundaries are traceable to the objectives, context and issues

2)   The scope and boundaries identify operating activities delivered using outsourced products and services

Performance evaluation, management review and improvement initiatives inform or are informed by changes to OMS scope and boundaries.

Evidence:

1)   Performance evaluation identifies issues and improvement opportunities that inform changes in OMS scope and boundaries

2)   Management review includes decisions to implement changes to OMS scope and boundaries

Agile OMS enables business transition and informs strategic decisions and business objectives.

Evidence:

1)   The decision of strategic change includes consideration of OMS

2)   Adapted scope influences external party scopes to optimise business value for the organization and stakeholders

4.4

Operating management system

 

Top Management recognize the need for a structured approach to establish and maintain OMS.

Evidence:

Top Management articulates OMS development principles that:

1)   are informed by the requirements and issues identified in 4.1.and 4.2

2)   are designed to enable interdependencies between operating lifecycles and functional objectives and requirements (e.g. quality, health, safety)

3)   recognise that aesthetics and user experience of the structure, content and deployment influence the awareness and engagement of people

Note: Assessment and ranking of these criteria should be finalised after assessment of the OMS requirements is complete

OMS framework defined, and the development and implementation plan agreed.

Evidence:

1)   Development strategy and resources agreed by Top Management

2)   Design, i.e. core elements, processes including interdependencies) and information hierarchy defined

3)   Roles and responsibilities for the development and implementation defined

4)   Main business processes and process owners defined

5)   Development and implementation plan prioritised based on operational opportunities and risks identified

OMS effectively implemented as per the agreed scope and boundaries.

Evidence:

1)   Processes fully implemented and provide governance over development and implementation of operational and functional processes

2)   Process controls include control over outsourced processes, products and services

3)   Process controls and performance indicators in place and performance reviewed (9.1)

4)   Processes revised in response to changes in context, objectives and unplanned process outcomes

OMS processes are informed by and inform business activities, improvements and risk-based decisions.

Evidence:

1)   OMS control and performance indicators are used to inform improvements

2)   Improvement effectiveness is monitored and assessed

3)   Integration of business tools and OMS processes provides inherent process controls (people independent)

4)   Systematic analysis of OMS processes and business performance to identify and drive improvement

OMS agility and scalability enables different operating models to integrate stakeholder perspectives, objectives and capabilities.

Evidence:

1)   Varying operational models demonstrated

2)   Designed to cater for different internal and external organizational and business models

3)   Due diligence demonstrated for significant changes and innovations to operations

4)   Integration of OMS processes between stakeholders

5)   Systematic measurement of organization and stakeholder expectations and obligations

5

Leadership

5.1

Leadership and Commitment

 

Top Management is aware of their obligations to influence the OMS and for establishing strategies, objectives and resources for OMS development.

Evidence:

1)   Management articulates leadership requirements and the role of effective management systems as enablers of business objectives

2)   People awareness of Top Management OMS aspirations

3)   Leadership principles and Top Management roles reflected in development strategies and allocated resources

4)   Top management articulates the importance of an OMS in support of licence-to-operate and achieving stakeholder satisfaction

Management system development strategies and plans endorsed and promoted by Top Management as key enablers of the organization's strategic direction and obligations.

Evidence:

Top Management:

1)   OMS roles and authorities defined

2)   Participation in framing, authorisation and communication of OMS development strategies and plans

3)   Confirms OMS development plans meet stakeholder requirements in respect to licence-to-operate

4)   Communicate and support plan implementation

5)   Reviews development progress and recognises success and implements actions to address risks to achieving plan objectives

Top Management leadership results in people’s awareness of and engagement in OMS implementation.

Evidence:
Top Management:

1)   Participation according to their defined roles

2)   Personal performance objectives and performance reviews include performance indicators for OMS responsibilities

3)   Promotion of OMS, for example, formal communications, informal engagement, site visits

4)   Behaviour recognised by the organization and stakeholders as consistent with leadership principles for an effective OMS

5)   Facilitates resolution of escalated issues, including issues that impact licence-to-operate

Top Management leads a culture of sustained improvement consistent with OMS principles and objectives.

Evidence:

1)   Business objectives, strategies and resources establish improvement objectives and measures

2)   Top Management participation in improvement and innovation initiatives

3)   Top Management encourage and recognise improvement initiative outcomes

4)   Top Management lead management review and communicate the outputs and planned actions

5)   Engage stakeholders where improvement initiatives influence licence-to-operate

Top Management leads use of OMS to inform strategies, objectives and decisions for significant organization and operational changes and stakeholder relationships.

Evidence:

1)   Top Management advocates identification, framing and execution of significant changes using applicable OMS processes

2)   Due diligence in respect to internal and external requirements and obligations demonstrated

3)   Associated material risks and opportunities are identified assessed and residual risk agreed consistent with defined authorities

4)   Top Management proactively monitors and addresses adverse performance trends against initiative objectives and stakeholder obligations and perceptions

5.2

Policy

 

Top Management is aware of the need to establish and effectively communicate policies.

Evidence:

1)   Managers can articulate policy principles

2)   Business policies and principles are discussed and referenced

3)   Policy development and deployment strategy established

Policy management processes aligned with organization values, strategic direction and objectives defined.

Evidence:

1)   Processes defined, authorised and communicated

2)   Processes meet the requirements of (5.2 a, b, c & d)

3)   Schedule of proposed policies and implementation milestones established

Policies issued, communicated and people awareness and behaviours reflect policy requirements.

Evidence:

1)   Policies defined and deployed to the organization and stakeholders

2)   Operating procedures align with policies and expectations (e.g. relationships established in OMS information

2)   Measures in place to ascertain awareness levels and conformance

3)   Top Management communication and support for policies

Policies inform improvement initiatives and are routinely reviewed and amended in response to changes in context, strategies and stakeholder feedback.

Evidence:

1)   Improvement outcomes related to policy expectations, e.g. with measurable improvement in objective measures demonstrated

2)   Periodic reviews and policy improvements demonstrated

Policies lead and establish governance over strategic scope and organizational and operational change initiatives.

Evidence:

1)   Policies mandate innovation and transformation initiatives that align with strategic direction and objectives

2)   Innovation and transformation initiatives reflect policy expectations with measurable benefits in line with initiative goals

5.3

Roles, responsibilities, and authorities

 

Top Management committed to developing and maintaining an organization structure, roles, accountabilities and authorities.

Evidence:

1)   Strategies for defining the organization structure and associated roles and authorities available

2)   Strategies include specific requirements and accountabilities for OMS development and deployment

Processes established to manage the organizational structure and associated roles, accountabilities and authorities empowering the organization to develop, implement and maintain the structure.

Evidence:

1)   Processes include requirements to issue, review and update the structure and role descriptions including responsibilities, competencies and authorities

2)   Structure includes responsibilities and resources for OMS custodianship, implementation and improvement

Planned organizational structure roles and resources implemented and maintained consistent with operational requirements.

Evidence:

1)   Structure communicated and resources allocated consistent with operational plans and competency requirements (7.1.1)

2)   Role descriptions and assigned level of authorities communicated and acknowledged

3)   Structure, roles and resources subject to routine review and amendment in line with changing operational requirements

Organization structure effectiveness and efficiency is monitored and improved in line with performance and changes in context and strategic intent.

Evidence:

1)   Organizational structure is dynamic reflecting changes in context and strategic direction

2)   Metrics implemented to test the level of organizational effectiveness and efficiency

3)   Performance outcomes inform changes to organization structure including enabling resources and accountabilities

Organizational structure, roles and responsibilities responsive to emerging context and strategic direction.

Evidence:

1)   Agile organization constantly realigning to the direction and context of the company

2)   Personnel challenge and improve the context of their roles to align with strategic direction

3)   OMS accountabilities and resources drive the performance and sustainability of the OMS

6

Planning

6.1

Actions to address risks and opportunities

 

Management recognises that risk and opportunities should be considered when establishing the OMS framework, processes, objectives and controls.

Evidence:

1)   Management articulates principal risks and opportunities associated with the operations context (4.1 and 4.2), and that they should be managed through the design of the OMS

2)   Management articulates strategies for establishing overarching risk and opportunity management practices as essential elements of the OMS..

Risk management processes provide the basis for determining risks and opportunities associated with the context and provides inputs for planning, setting objectives and process controls.

Evidence:

1)   Risk and opportunity management principles defined in policies and expectations

2)   Core risk management processes established

3)   Management ability to present risk management principles, processes and tools

4)   Risk identification and management controls considered during development of core business management processes

5)   Criteria defined for escalation of decisions for risks and opportunities

Risk management processes identify and manage risks and opportunities throughout the organization.

Evidence:

1)   Risk and opportunities are systematically registered, assessed and controlled throughout the organization

2)   Risk treatment actions implemented and verified

3)   Management decisions, including escalation, are informed by analysis of risk and opportunities

4)   Business processes embed risk and opportunity assessment

5)   Provider risks are shared and managed

Risks and opportunities inform sustained improvement in organization objectives, processes and operational performance.

Evidence:

1)   Improvement proposals initiated to mitigate risks or to realise opportunities

2)   Improvement initiatives are subject to analysis of associated risks and opportunities

3)   Improvement initiative decisions are subject to a defined delegation of authorities consistent with risk levels

Innovation (step-change) initiative objectives, plans and controls are based on and are responsive to associated risks and opportunities.

Evidence:

1)   Innovation management protocols mandate due diligence for associated organization and stakeholder risks and opportunities

2)   Risk and opportunities for the wider external stakeholder context are managed

3)   Partner and supply chain risks and opportunities are considered, and responsibility for their management is assigned and verified

4)   Performance against initiative (step-change) objectives is measured, analysed and corrective action implemented when necessary

6.2

Objectives and planning to achieve them

 

Management recognises the importance of establishing objectives and plans for their realization,

Evidence:

Management articulates:

1)   an understanding of the importance of setting objectives

2)   strategies for ensuring objectives established in line with 6.2 a) to h) inform the design and application of the operating management system

3)   strategies for establishing plans for achieving objectives

4)   gaps in existing planning capabilities

Processes defined for setting objectives and plans for their implementation.

Evidence:

Processes define:

a) Criteria for setting objectives as process inputs

b) Traceability to associated objectives, risks and opportunities demonstrated

c) Participation and decisions in accordance with applicable responsibilities and authorities

d) Functional and stakeholder interdependencies

d) Resources allocation consistent with planned activities

e) Performance measures defined validate plan implementation effectiveness

Operational plans and performance measures aligned with business objectives implemented.

Evidence:

1)   Planning consistently implemented across the organization

2)   Planning outputs traceable to applicable objectives

3)   Planning outputs ensure relevant employee and functional involvement in the delivery of objectives

4)   Planning outputs address stakeholder expectations and obligations

5)   Objectives, plans and associated measures revised in response to performance evaluation and management review; refer Clause 9.0

Objectives and plans inform or are informed by improvement initiatives with associated measures employed to evaluate the value created or protected by improvement initiatives.

Evidence:

1)   Interdependency of new or changed objectives and improvement initiatives demonstrated

2)   Value created or protected through improvement initiatives measured against associated objectives

3)   Interdependency of objectives and improvement initiatives informed by or inform stakeholder engagement and communication e.g. regulators, organizations, supply chain, communities

Operational planning is agile, proactively responding to and informing emerging business, context, strategies and objectives.

Evidence:

1)   Emerging business strategy objectives are reflected in planning outputs

2)   Planning outputs are proactively amended in response to changes to strategies and objectives

3)   Stakeholders, partners and suppliers share planning activities, inputs and outputs consistent with their respective objectives and agreements

4)   Performance trends reflect planning output contributions to delivery of strategy objectives

 

 

 

 

 

 

 

 

6.3

Planning of change

 

Management recognises the risks associated with uncontrolled change and has established strategies to manage change

Evidence:

1)   Top management articulates change management principles and strategies

2)   Management articulates existing change management processes and associated capability gaps

Management of change processes defined.

Evidence:

Processes include controls encompassing:

a)   Integrated focus on administrative, technical, and organizational change

b)   Consideration of associated risks and opportunities

c)   Escalation protocols

d)   Verification of change implementation and effectiveness

Management of change is effectively implemented for applicable operations.

Evidence:

1)   Management prescribe and verify implementation of MoC processes

2)   Risk and opportunity impacts are considered for all changes

3)   MoC controls extend to externally sourced processes, products and services

4)   Information demonstrates:

a)   clear definition of change, impacts, interdependencies

b)   stakeholder engagement, agreement,

c)   risk and opportunity assessment

d)   decision authorities

e)   implementation

Management of change process effectiveness is assessed and amended in response to changing context, requirements, risks opportunities or trends.

Evidence:

1)   Improvement management processes, refer Clause 10, invoke risk assessment and MoC pre-requisites for implementing proposed process, facility and product improvements

2)   Analysis and learning from MoC, including involvement of applicable stakeholders

3)   Positive MoC process capability trends demonstrating value protected or realized through MoC

Organization culture embraces Management of Change to facilitate decisions on emerging business, strategies, opportunities and objectives.

Evidence:

1)   Management of change principles are integral to the organisation’s values and high-level policies

2)   The organization and key stakeholders align MoC principles when engaging in step changes

3)   Pro-active approach to employ MoC to inform external step change decisions

6.4

Planning for contingency, emergency, crisis and business continuity

 

Management recognizes the need to identify and be prepared for unplanned events and outcomes.

Evidence:

1)   Top management articulates understanding of operational risks and existing plans, processes and capabilities

2)   Top Management demonstrates understanding of associated regulatory obligations and the degree to which the organization conforms with such requirements

Business continuity and emergency response planning processes defined.

Evidence:

1)   Key risks and obligations that may necessitate business continuity or emergency responses identified to inform process development

2)   Planning processes, including definition of process inputs, outputs and controls for each risk scenario defined

3)   Processes proven against applicable risk scenarios and regulatory requirements

Business continuity and emergency response plans addressing risk exposures and requirements associated with the operations implemented.

Evidence:

1)   Emergency response and business continuity plans, covering all key activities are established and maintained

2)   Resources are shared with partners to establish their own emergency response and business continuity plans

3)   Providers (suppliers and contractors) are considered in emergency response and business continuity plans

4)   Exercises are undertaken with predefined performance indicators to revalidate plans

5)   Provider capabilities assessed and mitigation implemented to address capability gaps consistent with prevailing influence

Business continuity and emergency response plans are revised in response to stakeholder feedback, learning from events, and performance evaluation.

Evidence:

1)   Learning from former projects and experience feedback are integrated into reviews of emergency response and business continuity plans

2)   Exercise performance trends are analysed and used to improve processes

5)   Emergency response and business continuity planning approach is tested through simulating or involving all stakeholders and complex scenarios

6)   The organization demonstrates a clear link between organization, technical and administrative changes and the potential associated changes in business continuity or emergency response plans

Organization informs industry practices and integrates stakeholder capabilities when planning for business contingencies and emergencies in opportunities and business decisions.

Evidence:

1)   Case studies demonstrate that the organization is leading the evolution of industry processes, standards and systems for emergency response and business continuity

2)   Organization demonstrates interface testing of their business continuity plan with stakeholders

3)   Challenge or manage stakeholder response and continuity and interdependency risk and opportunity

7

Support

7.1

Resources

7.1.1

People resource management

 

 

 

 

 

Management recognizes the importance of people to meet its objectives and is aware of applicable statutory obligations with respect to people management.

Evidence:

1)   Management at different levels articulate the importance of their people for the operation of the business

2)   Management awareness of applicable external requirements and legislative obligations with respect to people management

Processes defined for determining and managing the people required to operate the business.

Evidence:

1)   Processes established for people management, including consideration of:

—   Forecasting, budgeting and resource allocation

—   Required roles and pre-requisite competencies defined

—   People development and remuneration

—   Recruitment, onboarding, deployment and demobilisation

2)   Processes include consideration of compliance with applicable legislation and contractual obligations

People necessary for the operation and control of the business available and managed in accordance with process requirements and obligations.

Evidence:

1)   Capacities and required competencies, defined and fulfilled, including capacities available through stakeholders, partners and external providers

People management and development process improvements increase people effectiveness and operational performance and control.

Evidence:

1)   People capacity levels (numbers, competencies) responsive to organisational, process and technology change and improvements

2)   Performance indicator trends inform opportunities for people development

3)   Responsive to changing needs and priorities by adjusting people development and management processes, including processes employed by external providers

4)   Increasing satisfaction and productivity through people development and management

Agile (pre-emptive creation of new or changed role capacity and capability to deliver transforming business strategies.

Evidence:

1)   Technology developments, the political landscapes, and markets relevant to business strategies analysed to foresee changes that may have a strategic impact on people capability and capacity

2)   New and changing roles are linked to strategic initiatives

3)   Transformation changes include transformation of people management and development processes in an agile and sustainable manner

7.1.2

Infrastructure

 

Management recognises the importance of infrastructure to meet its objectives and obligations.

Evidence:

1)   Management articulates the infrastructure they maintain to operate their business

2)   Management articulates how they acquire and manage infrastructure

3)   Management demonstrates an understanding of external requirements and legislative obligations with respect to infrastructure acquisition and management

Infrastructure resources acquisition and management processes defined.

Evidence:

1)   Processes defined for infrastructure resource management provide for the definition of:

—   Existing infrastructure capabilities

—   Operating Infrastructure resource capability planning

—   Financial resources required to acquire and maintain infrastructure (CAPEX, OPEX)

—   applicable infrastructure legislation, regulations obligations and sustainability objectives

Infrastructure resources required for planned operations to meet business objectives provided and maintained.

Evidence:

1)   Infrastructure acquisition and management processes, including capacity and capability indicators implemented with active management oversight

2)   Planned capacities and identified infrastructure are achieved, including the consideration of capacities available through stakeholders, partners and external providers.

3)   Controls of operational processes established to identify systematic defects and gaps related to infrastructure management.

Infrastructure improvements sustainably increase operational effectiveness and process control.

Evidence:

1)   Performance indicator trends inform opportunities for infrastructure improvements

2)   Active management commitment to assess and action potential improvements

3)   Positive capacity, reliability and availability trends

5)   Early adoption of new infrastructure technologies and solutions

Agile (pre-emptive acquisition, adoption or access to new infrastructure to enable transforming business strategies and objectives.

Evidence:

1)   Research, technology developments, political landscapes, and markets relevant to business strategies analysed to foresee infrastructure changes that may have a strategic impact on capability management

2)   Infrastructure designs linked to strategic initiatives, integrating complete life cycles to meet sustainability objectives

3)   As the organization transforms, it transforms its infrastructure management and improvement processes in an agile and sustainable manner

7.1.3

Environment for the operation of processes

 

Management recognition that operating (social, psychological and physical) environments inform and impact the organization’s ability to achieve its objectives and obligations.

Evidence:

1)   Management articulate the operating environments that influence operating performance

2)   Management demonstrate knowledge of external requirements / legislative obligations with respect to operating environments

Processes for the identification and control of operating environments defined.

Evidence:

1)   Policies, procedures and plans developed to define the controls for the operating environment e.g., Human Factors

2)   Objectives established with respect to the operating environment

3)   Operational planning processes include provisions for identifying operating environment conditions and factors, and for the implementation of appropriate process controls.

Operating environments systematically managed.

Evidence:

1)   Management at different levels have defined objectives reflecting operating environment objectives

2)   Resources deployed to manage operating environment requirements

3)   Measurement and analysis of social, psychological and physical environment indicators e.g. surveys, reviews, trend analysis

5)   People and their representatives involved in processes related to operating environments

6)   Operating environment requirements extended to providers.

Sustained improvement in operational performance realised through improvements in the operating environment

Evidence:

1)   Operating environment requirements and performance inform and are informed by improvement initiatives.

2)   Sustained improvement trends in social, psychological and physical environment indicators

3)   Operational and stakeholder performance improvements realized through operating environment improvements

4)   People engagement and empowerment indicator improvements realized through operating environment improvements

5)   Operating environment improvement initiatives extended to stakeholders e.g. partners, contractors

Operating environment principles and aspirations deployed across the organisation’s span of influence.

Evidence:

1)   Operating environment objectives, processes and performance benchmarked using known industry criteria or good practices e.g., UN Sustainability goals

3)   Investment and contributions to scientific research and development to learn and enhance the organisation’s and its stakeholder’s operating environment e.g., University collaborations, active role in industry work groups.

7.2

Competence

 

Management recognizes the importance of its people’s competencies to achieve its objectives and to meet contractual and regulatory obligations.

Evidence:

1)   Management articulates the need for defining and achieving pre-requisite competency requirements

2)   Management is aware of statutory and contractual qualification obligations.

Processes defined to determine competency requirements, assess existing competencies, and develop new competences.

Evidence:

1)   Process for maintaining regulatory training and qualification records defined

2)   Competency definition and assessment process defined, communicated and proven.

3)   Training and Development Program defined, resourced and implementation plan established.

Competency requirements defined, competencies assessed, effective participation controls and development plans established to redress competency gaps.

Evidence:

1)   Competency requirements defined when required to meet operational objectives, contractual requirements and statutory obligations

2)   Provider competency management requirements defined and conformance verified

2)   Competency assessment records in place for person(s) doing work under the organisations control

3)   Process competency pre-requisite controls demonstrated

4)   Training and development plans established to redress competency gaps

Competency requirements, controls and development plans are amended to address emerging risks, lessons and new or improved activity and technology requirements.

Evidence:

1)   Individual development plans, appraisal and performance indicators are aligned with organization objectives

2)   Where competency is identified as the root cause of unplanned outcomes or performance trends the related competency requirement or control is revised to redress the risks

3)   Competency requirements and controls are established when required to enable process or technology improvements.

Agile, pre-emptive, creation of new and changed roles and capability to deliver transforming business strategies.

Evidence:

1)   Technology developments, political landscapes and markets relevant for business strategies analysed to foresee changes that may have a strategic impact on capability management

2)   As the organization transforms, it transforms its people management and development processes in an agile and sustainable manner

3)   New and changed roles and capabilities contribute to the realisation of strategic initiative objectives

7.3

Awareness

 

Top management recognises the importance of people's awareness of and engagement with the OMS.

Evidence:

1)   Top management articulates the importance of people awareness and engagement

2)   Management demonstrates existing OMS promotion activities and associated capability gaps

OMS learning processes and strategies to influence and assess the level of awareness and engagement defined.

Evidence:

1)   Strategies established to promote awareness and to enable engagement

2)   Roles, responsibilities and resources for process implementation established

3)   Communication and training processes include; OMS framework, policies and processes, including communication of system changes.

People are trained in the OMS framework and policies and the process they employ and levels of awareness and engagement measured.

Evidence:

1)   OMS induction and training programs implemented

2)   Customised training delivered to meet specific process needs and competencies

3)   Training provided to ensure awareness and adoption of OMS changes

4)   Feedback loop to capture and respond to comments and suggestions implemented

5)   Measurement of awareness and engagement demonstrated

6)   Process and measurement extend to providers where required to maintain control of externally sourced processes, products and services.

Effectiveness of management system awareness engagement analysed to identify and implement improvement opportunities.

Evidence:

1)   Monitoring the effectiveness of the processes to increase awareness and engagement

2)   Role specific training and awareness program demonstrated

3)   Induction and training is a two way process, where people are empowered to raise issues and opportunities

4)   Organization measures the level of awareness and is responsive to feedback from relevant stakeholders (9.2).

Organization culture (where awareness and engagement) sustain and enable business strategies and objectives.

Evidence:

1)   Agile induction and training practices responsive to emerging business strategies

2)   Emerging business strategies include opportunities to leverage, acquire and apply enabling awareness and engagement practices and technologies

3)   Stakeholders are aligned with the awareness culture.

7.4

Communication

 

Top management recognises the importance of communication.

Evidence:

1)   Top management can articulate the importance of communication

2)   Intent is in place to build communication processes

3)   Some awareness of communication objectives and governance requirements demonstrated.

Communication processes including governing authorities defined.

Evidence:

1)   Defined processes for communicating internally and externally

2)   Roles and authorities for communication are defined.

Communication processes are implemented and effective.

Evidence:

1)   Records of communication is aligned with communication processes

2)   Communication processes adapted to meet different business needs

3)   Governing criteria defined (what, when, whom, who)

4)   Communication protocols with partners, providers and stakeholders in place

5)   Measurement of communication control and effectiveness demonstrated.

The effectiveness of communication analysed to identify and implement communication improvement opportunities.

Evidence:

1)   Effectiveness of communication processes monitored to confirm that communications are interpreted and understood as intended

2)   Actions to improve the quality of communication in response to feedback from people and external parties demonstrated

3)   Demonstrated ability to amend or adopt new communication practices and technologies.

Communication strategies employed to manage stakeholder expectations and as key enablers of emerging business opportunities.

Evidence:

1)   Communication is agile and responsive to stakeholder perceptions and emerging business requirements

2)   Actively explore opportunities to develop, leverage, acquire and apply new communication practices and technologies

3)   Organization engages with stakeholders, partners and suppliers to identify acquire and employ innovative communication solutions to enable realization of strategy objectives.

7.5

Documented information

 

Top management recognize the importance of effective management of information resources.

Evidence:

1)   Management at different levels articulate the need to manage and control information

2)   Management demonstrates current information management processes and any associated capability gaps.

Processes for defining, managing and controlling documented information defined.

Evidence:

1)   Process is defined to create, control, manage and protect internal and external information,

2)   Roles are defined to deliver and manage documented information

3)   Resources are defined and plans to support deployment of the process in place

4)   Information specifications risk based to address business needs.

Structured approach for managing and controlling documented information effectively implemented.

Evidence:

1)   Documented information is managed as per defined processes, with clear responsibilities and accountabilities.

2)   Process information, input and outputs are defined and subject to appropriate controls.

3)   Resources are allocated as planned and adequate to manage the volume and classifications of documented information.

4)   Classification and access controls for documented information are effective.

5)   Documented information is presented in formats that can be interpreted and used by the intended users.

6)   Documented information controls extend to information shared with and by stakeholders and providers.

The effectiveness of documented information management processes routinely assessed and actions implemented to address risks and leverage improvement opportunities.

Evidence:

1)   Records of effectiveness checks of the process, including any trends are available and regularly analysed.

2)   Performance trends demonstrate responsiveness to issues and improvement opportunities related to documented information

3)   Results of checks and controls address improvement opportunities, and these are being considered and actioned with clear evidence.

Documented information management processes and practices provide knowledge required to realise long-term strategy and business objectives.

Evidence:

1)   Documented information management practices and tools evolve to integrate technology and digital aspects to improve efficiency of processes.

2)   Documented information management practices and tools integrate stakeholder and provider information.

3)   Existing systems transform data to information and knowledge to inform decision making

4)   Information tools contextualise data and information and constantly inform users and help evolve ways of working.

7.6

Science technology and engineering

7.6.1

General

 

Top Management recognizes the role of science, technology and engineering capabilities in meeting business objectives.

Evidence:

1)   Management articulate need for strategies leveraging science and technology and engineering

2)   Basic capabilities established consistent with existing business requirements

3)   Relevant science, technologies and engineering solutions monitored and acquired.

Plans established for the development of science, technology and engineering capabilities aligned with business objectives.

Evidence:

1)   Science, technology and engineering strategy established, reflecting business objectives

2)   Plan and business case for implementing strategies defined

3)   Strategy and plan include provisions for externally sourced engineering services, technologies and engineering

4)   Budgets are allocated to deliver the strategy and plan

5)   Performance measures including criteria for operational integrity and sustainability defined.

Planned science, technology and engineering capabilities implemented.

Evidence:

1)   Science, technology and engineering strategies adopted or adapted throughout the organization

2)   Plans for strategy implementation resourced and deployed

3)   Planned technology development and acquisition milestones and objectives realised

4)   Performance measures analysed and when required actions implemented to address adverse trends.

Science, technology and engineering needs and capabilities routinely reassessed and actions implemented to improve existing capabilities and address capability gaps.

Evidence:

1)   Performance evaluation outputs inform review of science, technology and engineering strategies and plans

2)   Performance trends demonstrate sustained improvement in science, technology and engineering capabilities

3)   Developments in science, technology and engineering are monitored and inform updates to strategies and plans,

4)   Evolving plans and strategies leverage externally sourced capabilities (e.g. through partnerships, supply chain and academic institutions).

New and emerging technologies actively pursued as key strategic enablers to the transformation of existing capabilities and the realisation of new business opportunities.

Evidence:

1)   Demonstration of initiatives to lead or sponsor research and development of technologies

2)   Acquisitions or partnerships to access new capabilities and technologies

3)   Extensive collaboration, benchmarking and influencing of broader industry technology capabilities and sustainability outcomes (beyond organization's own objectives)

4)   Proven case studies of the role of science, technology and engineering in realising new business opportunities and more broadly across the sectors the organization engages.

7.6.2

Design lifecycle

 

Top management recognises the importance of structured protocols for the management and delivery of science, technology and engineering solutions.

Evidence:

1)   Management articulates the need for a structured approach to the management of science, technology and engineering activities within their operations

2)   Basic processes established to manage delivery of engineering solutions consistent with regulatory obligations.

Framework for developing and deploying science, technology and engineering capabilities and solutions defined.

Evidence:

1)   Processes for development and deployment of technology defined

2)   Processes for engineering established to support opportunity realisation and established operations defined

3)   Processes address management and control of outsourced science, technology and engineering services

4)   Performance measures defined for 1), 2) and 3)

5)   Alignment with recognised quality management system requirements demonstrated.

Planned management framework and processes for existing science, technology and engineering activities implemented.

Evidence:

1)   Processes for development and deployment of technology and engineering / design implemented

2)   Planned process controls, including review verification and validation of in-process engineering and output solutions demonstrated.

3)   Controls extend to outsourced science, technology and engineering services

4)   Processes and tools are subject to corrective action when identified as the source of nonconforming process trends or outcomes.

Sustained improvements in science, technology and engineering management processes demonstrated.

Evidence:

1)   Internal performance, stakeholder expectations and perceptions and benchmarking analysed to inform improvement initiatives

2)   Improved processes, tools and competencies are implemented to realise evolving or new technology capabilities

3)   Improvements in processes extend to outsourced science, technology and engineering services

4)   Performance measures demonstrate sustained improvement in the suitability and effectiveness of internal and outsourced science, technology and engineering management processes.

The processes for science, technology and engineering inform and enable business strategies to leverage new business opportunities.

Evidence:

1)   Demonstrated program of reviews of science, technology and engineering management process capabilities

2)   External benchmarking leveraged to inform transformation of science, technology and engineering design processes and tools both within the organization and through contributions to standardisation across the sector

3)   Agile development and deployment of new capabilities and technologies in support of business reengineering and new business streams

4)   Case studies demonstrating step change in design and development management and standardisation and broader application of design solutions (design one build many).

7.7

Externally provided processes, products and services

7.7.1

General

 

Top management recognize the need for and implications of external provided processes, products and services.

Evidence:

1)   Management articulate the organization’s use of external provided processes, products and services

2)   Management can describe existing processes and controls including perceptions of capability gaps and associated risks and opportunities

Strategies and processes defined to manage externally provided processes, products or services.

Evidence:

1)   Strategies for supply chain engagement, plans and control defined.

2)   Scope for external provided processes, products and services defined

3)   Processes for establishing and managing external processes and use of products and services defined

4)   Process independencies including risk management related to externally provided processes products and services defined

5)   Roles and responsibilities to manage externally provided processes, products and services defined

6)   Resources allocated to manage externally provided processes, products and services.

Externally provided processes, products and services managed in accordance with defined strategies and processes.

Evidence:

1)   Records demonstrate external processes, use of products and services managed in accordance with defined processes

2)   Regular assessment and treatment of provider risks and opportunities

3)   The effectiveness of the processes measured and monitored.

4)   Provider engagement, and levels of conformity assessment based on associated risks

5)   Defined integration between provider and internal systems established.

Development of strategies and processes for managing externally provided processes, products or services, is informed by improvement initiatives consistent with associated risks and opportunities.

Evidence:

1)   Risk assessments inform application and improvement of provider management processes.

2)   Active engagement in and leveraging of provider improvement initiatives.

5)   Contracting strategies are amended in line with changing opportunities and provider performance.

Risk-based integration of external providers seen as extension of the organization to leverage business opportunities.

Evidence:

1)   Industry leader in Provider collaboration and partnering strategies

2)   Aligned objectives and mutually beneficial rewards

3)   Driving standardisation efforts in and across industries

7.7.2

Provider capability

 

Top management recognizes the need to assess provider capability and associated risks.

Evidence:

1)   Management articulate need to know their providers’ capabilities

2)   Management is aware of existing processes and knowledge relating to provider capability and associated gaps and risks.

Process defined for assessing provider capability as basis for selecting and subsequently defining controls to be implemented for externally sourced processes, products and services.

Evidence:

1)   Defined processes for assessment of provider capabilities

2)   Management articulate need for differentiated supplier assessments but not implemented in processes.

Processes for assessment of provider capability implemented and assessment outputs employed to inform provider selection and control decisions.

Evidence:

1)   Defined process implemented consistent with supply chain scopes, complexity and risk

2)   Capability assessment records employed to inform, selection of bidders, proposal evaluation and level of controls to be implemented for successful providers

3)   Provider assessment records revised based on performance and intelligence regarding organizational changes that may impact capability.

Provider capability assessment employed to inform and be informed by contracting strategies, provider relationships and forms of agreements and controls.

Evidence:

1)   Provider capability knowledge employed to capture learning and to inform improvements both internally and by providers

2)   Provider capability assessment employed to inform supply chain models and forms of agreements.

Knowledge of provider capabilities inform supply chain engagement strategies in support of evolving business development opportunities.

Evidence:

1)   Knowledge of Provider capabilities inform strategic engagement strategies

2)   Capability knowledge informs analysis of risks and opportunities as pre-requisite to engaging providers in support of evolving business opportunities

3)   Provider relationships provide transparency/openness in the organization's access to

provider capability knowledge.

7.7.3

Type and extent of control

 

Top management recognizes the need to define scope and requirements and to assess provider performance and conformity.

Evidence:

1)   Management articulate understanding of contractual forms of agreements and requirements

2)   Management can demonstrate existing processes and controls employed to manage provider performance and ensure conformance with requirements.

Process defined to specify and agree provider scopes, requirements and controls and to manage provider performance and conformity.

Evidence:

1)   Provider management processes defined including:

a)   Specification of scopes and associated management and technical requirements

b)   Risk and criticality assessment as the basis for establishing controls and planning conformity assessment activities

c)   Performance assessment and reporting

d)   Analysis and management of nonconformance

2)   Process implementation plan including pre-requisite resources, competencies and performance criteria defined.

Provider management processes implemented and control over externally provided processes, products and services demonstrated.

Evidence:

1)   Supply scopes and associated management and technical requirements adequately defined

3)   Provider selection informed by capability assessment specific to supply scopes and requirements

4)   Conformity assessment activities informed by risk and criticality assessments

5)   Conformity verified, validated against requirements and obligations with prerequisite documented information

6)   Nonconformance managed and corrected.

Sustained provider value creation and protection demonstrated through positive performance and conformance trends.

Evidence:

1)   Provider performance in meeting requirements regularly reviewed with review outputs informing improvement initiatives (internal and external.

2)   Conformity assessment controls amended (increased/decreased) in response to performance trends and associated risks

3)   Extent of reliance on provider controls reflects conformance performance trends).

Substantial strategic integration of providers in the organization's operations with delegation of controls consistent with demonstrated provider capabilities and performance.

Evidence:

1)   Strategic agreements establishing provider scope, objectives, controls and performance criteria

2)   Providers develop detailed scopes and technical solutions/controls in accordance with overarching principles (e.g. ISO TR 13879, ISO TR 13880)

3)   Providers execute and demonstrate conformance with Organization assessment limited to regulatory requirements (e.g. ISO TR 13881)

4)   Strategic relationships performance positively benchmarked against best-in-class peers, e.g. aerospace, automative.

8.0

Operation

8.1

Operational planning and control

 

Top management recognises the need for operational planning to achieve lifecycle objectives.

Evidence:

1)   Management articulates the need for planning the application of the OMS for specific operations and activities

2)   Management demonstrates an understanding of existing operational planning processes and associated capability gaps.

Processes for planning the activities and key functions to be employed at each stage of business operating lifecycles defined.

Evidence:

1)   Planning processes defined for specific business activities

2)   Processes require deliverables and control criteria to be included in plans

3)   Processes enable scalable application of processes and controls based on the scope, complexity and risks and opportunities associated with specific operations.

Activities and key functions employed at each stage of business operating lifecycles are planned and controlled against plan requirements.

Evidence:

1)   Operational planning processes implemented for all business activities

2)   Plans and contingencies established for business activities

3)   Plans provide the controls to manage unplanned events and outcomes

4)   Records demonstrate execution of activities according to plans

5)   Providers aligned with processes for planning activities and key functions.

The efficiency and effectiveness of operational planning processes monitored to identify and implement improvement opportunities.

Evidence:

1)   Systematic analysis of outcomes to inform planning of improvements and opportunities

2)   Operating plans amended to address adverse trends or realise improvement opportunities

3)   Operating controls responsive to changes in requirements and performance outcomes

4)   Processes in use by providers are informed by or inform improvement of the Organization's planning processes and plans.

Agile operating models, planning processes and contracting strategies enable emerging opportunities.

Evidence:

1)   Demonstrated diversity in approach including leveraging and delegating operational planning activities with partner and provider organizations

2)   Operating models established for different business streams consistent with stakeholder expectations, risk and opportunities.

8.2

Business opportunity realization (Development Phase)

 

Top management recognise the need for a defined methodology to manage identification and realisation of business opportunities.

Evidence:

1)Top Management articulate the need to define opportunity identification and realisation processes that enable the achievement of business objectives

2)   Management demonstrates an understanding of existing opportunity lifecycle management processes and capabilities.

Risk-based processes to identify and realise (develop) business opportunities defined.

Evidence:

1)   Adaptable and saleable processes and methodologies defined, which address Clause 8.2 points a) to f)

2)   Processes include definition of lifecycle phases and decision-making criteria for the progression of opportunities and commitment of organization resources.

3)   Processes include definition of controls and associated technical and financial authorities governing the progression of opportunities notably investment decisions and the handover/acceptance for the Operations phase.

Realization of business opportunities planned and managed through the risk-based application of the lifecycle management processes.

Evidence:

1)   Business opportunities systematically registered and tracked

2)   Business opportunities subject to formal decisions and progressed using predefined risk-based processes

3)   Opportunity realisation plans include definition of scope and associated controls over partner, provider and stakeholder contributions to opportunity realisation

4)   Opportunity performance criteria measured and resultant trends analysed and adverse trends addressed.

The efficiency and effectiveness of opportunity realisation processes monitored to identify and implement improvements.

Evidence:

1)   Systematic project reviews identify lessons leading to process improvement initiatives.

2)   Documented improvements in project delivery performance criteria and norms inform risk based business case decisions

3)   Provider performance and capabilities contribute to improvements in lifecycle management processes.

Identification and realization of business opportunities that extend the organization’ s strategic direction and scope.

Evidence:

1)   Opportunities are undertaken in new or emerging areas

2)   Opportunities are realised through unconventional operating models

3)   Contracting strategies enable optional realisation via partnerships, alliances, acquisitions or divestment

8.3

Operate and maintain

8.3.1

Plan

 

Top Management recognises their business operational objectives and regulatory obligations and the imperative of planning existing asset operations and maintenance to deliver customer and stakeholder obligations.

Evidence:

1)   Management articulates the need for planning and plans to sustain operations of established assets

2)   Management demonstrates an understanding of business operating objectives and stakeholder/regulatory obligations and the degree to which they are achieved

3)   Management demonstrates an understanding of existing operational planning capabilities.

Processes for developing operational philosophies and planning processes for existing and planned operational assets defined.

Evidence:

1)   Operating and maintenance philosophy principles and requirements defined

2)   Pre-requisite Operations engagement during opportunity realization (facility development) including operations readiness governance defined (8.2)

3)   Planning cycles, criteria and resourcing principles defined

Integrated operations plans needed to sustain asset operations to deliver customer and stakeholder obligations.

Evidence:

1)   Plans aligned with and are responsive to, changes in production (sales) commitments and with asset rated capacities.

2)   Plans consistent with asset integrity, availability and reliability factors

3)   Plans fully resourced (people, facility, spares, environment, knowledge) including outsourced resources

4)   Plans include risk-based contingencies

5)   Actual verses planned performance parameters recorded.

Integrated operational plans are responsive to operational performance and feedback, capacity, capability, risks, market conditions and stakeholder requirements and commitments.

Evidence:

1)   Actual verses planned performance parameters analysed

2)Operating improvements e.g. performance above rated capacity inform improvements in operational forecasts and plans (8.3.2)

3)   Improvements in integrity, availability and reliability performance inform operational plans and contingencies (8.3.3)

4)   Plan resource forecasts (people, facility, spares, environment, knowledge) including outsourced resources, reduced based on operating (8.3.2) and maintenance (8.3.3) improvement outcomes.

Forecast and proven performance outputs enable investment in business strategies and disruptive changes to business concepts and technologies.

Evidence:

1)   Forecast (planned) operating performance (revenue/value) used as basis for funding transformation investments (8.2)

2)   Diverse operating models and contracting strategies employed including operator and non-operator participation to deliver operational objectives.

8.3.2

Operate

 

Top management recognise regulatory requirements, operating philosophies and delivery commitments associated with existing operating assets.

Evidence:

1)   Management articulates understanding of and commitment to meeting operating objectives and obligations associated with existing assets

2)   Management demonstrate an understanding of existing operating processes, performance criteria and controls and associated capability gaps.

Asset operating processes and controls defined.

Evidence:

1)   Assessment of the required processes and controls to operate existing assets within operational envelopes to meet output commitments

2)   Process for defining operating processes and controls includes risk-based consideration of associated stakeholder commitments and obligations when defining processes and controls

3)   Procedures and processes developed and validated for use (operational readiness).

Asset operating processes and controls implemented, and effectiveness verified.

Evidence:

1)   Monitoring trends related to performance and outputs

2)   Monitoring trends on incidents, non-routine operations, non-conformance etc.

3)   People have the prerequisite competences and are trained in the operational procedures and processes they undertake

4)   Process controls extend to Providers involved in asset operations.

Asset operating processes and controls responsive and optimised based on performance feedback and commitments and informs business improvement opportunities.

Evidence:

1)   Operating performance trends, deviations and events analysed

2)   Provider operating knowledge informs analysis and actions

3)   Corrective, preventive and improvement actions implemented based on analysis findings

4)   Analysis findings impacting operations scheduling and resource forecasts informs operational planning (8.3.1)

5)   Asset or business improvement opportunities identified through analysis informs opportunity realisation (8.2).

Operational performance and learnings inform and enable business strategies and disruptive changes to business concepts and technologies.

Evidence:

1)   Operational learnings and knowledge inform business opportunities (8.2)

2)   Operating performance (revenue/value) sustains transformation investments (8.2)

3)   Operations a key participant in opportunity realization (8.2).

8.3.1

Maintain

 

Top management recognize obligations to maintain assets in accordance with performance requirements, maintenance philosophies and reliability and availability commitments.

Evidence:

1)   Management articulates a commitment to establishing inspection and maintenance controls

2)   Management articulates the relevant requirements that apply when maintaining asset performance and integrity

3)   Management demonstrate an understanding of existing maintenance philosophies and programs and associated capability gaps.

Asset maintenance philosophies processes and controls defined.

Evidence:

1)   Processes and controls required to implement maintenance philosophies determined

2)   risk assessment undertaken to establish controls required to maintain operating and integrity performance standards.

3)   Resource (people, facility, spares, environment, knowledge) requirements defined

4)   Outsourced maintenance scopes of work defined

5)   Maintenance processes and controls developed and validated for use (operational readiness.

Asset maintenance philosophies, processes and controls implemented and application verified.

Evidence:

1)   Maintenance procedures and resources available at point of use

2)   People, including outsourced resources, have the prerequisite competences and are trained in the maintenance processes and controls they undertake

3)   Maintenance performance and output trends recorded

4)   Deviations to planned maintenance subject to MoC

5)   Incidents, non-routine operations, nonconformity attributed to maintenance recorded and corrected.

Asset maintenance processes and controls responsive and optimised based on performance feedback and commitments and informs business improvement opportunities.

Evidence:

1)   Maintenance performance trends, deviations and events analysed

2)   Provider maintenance knowledge informs analysis and actions

2)   Corrective, preventive and improvement actions, including provider actions, implemented based on analysis findings

3)   Analysis findings impacting maintenance scheduling and resource forecasts informs operational planning (8.3.1)

4)   Asset or business improvement opportunities identified through analysis informs opportunity realisation (8.2).

Maintenance performance sustains operational performance and learnings inform business strategies and disruptive changes to business concepts and technologies.

Evidence:

1)   Predictive maintenance eliminates unplanned maintenance through use of intelligent systems

2)   Maintenance learnings and knowledge informs business opportunities (8.2)

3)   Maintenance a key participant in opportunity realization (8.2).

8.4

Response to unplanned events and outcomes

 

Top management recognizes the organization’s and their individual obligations and the associated need to validate the plans for business continuity and emergency response.

Evidence:

1)   Top Management articulates understanding off and commitment to validating processes established in 6.3 and 8.1.

2)   Top management demonstrates an understanding of existing validation processes and outcomes and associated capability gaps.

Processes to record and analyse actions taken to control and correct (actual or test scenario) unplanned events defined.

Evidence:

1)   Processes established to test and validate the plans and introduce controls, in response to events and outcomes

2)   Pre-requisite capabilities and competencies defined

3)   Pre-requisite resources, including external resources defined

4)   Plans for emergency drills are defined.

Plans and process for responding to unplanned events are tested periodically, initiated when required and performance in response to test scenarios or actual events recorded and analysed.

Evidence:

1)   Plans and processes tested as planned

2)   Pre-requisite capabilities are fulfilled, and capability effectiveness tested through testing

3)   Dependencies on external capabilities validated

4)   Historic event records meet applicable plan/process requirements and provide trail of events, actions taken and analysis

5)   Information communicated to stakeholders in accordance with plans and obligations,

6)   Analysis outcomes and lessons inform planning (6.4, 8.1).

Sustained improvement in the effectiveness of controls established to respond to unplanned events and outcomes.

Evidence:

1)   Performance trends in responses to actual and test scenario events analysed to inform improvements in operational planning (8.3.1)

2)   Emergency training needs are reviewed and adjusted according to risk analysis of planned operational changes and associated event scenarios

3)   Stakeholders (partners, contractors, organizations, authorities are engaged in analysis of event scenarios and capabilities and resultant improvement initiatives

4)   Stakeholders are openly debriefed following scenario testing and lessons and validation of resultant improvement actions shared with relevant stakeholders.

Recognized leader of evolution of industry approaches, standards and methodologies for validating and responding to unplanned events and outcomes.

Evidence:

1)   Initiate/participation in collaborative arrangements for responding to unplanned events in peer organizations

2)   Active benchmarking and participation in industry continuity and unplanned event standardisation initiatives

3)   Influencer of peers, government and communities in establishing best practice across all communities in which operations are undertaken.

9.0

Performance evaluation

9.1

Monitoring, measurement, analysis and evaluation

 

Top management recognises the importance of performance evaluation as the basis for determining the effectiveness for the OMS and for demonstrating conformance and informing business decisions and improvement.

Evidence:

1)   Top Management articulates an understanding of the dependency of the achievement of business objectives and obligations and OMS capability

2)   Management demonstrates existing processes and capabilities for assessing OMS effectiveness and performance in the achievement of objectives and obligations.

Performance evaluation plans and processes defined.

Evidence:

1)   Performance evaluation plans and objectives defined, including externally provided products, processes and services

2)   Processes and measurement criteria developed to monitor and measure performance of the OMS and against business objectives (6.2), and to determine conformance with customer/stakeholder requirements and compliance with regulatory obligations

3)   Resources (people, tools etc) including external resources, required to implement monitoring, measurement, analysis and evaluation processes defined.

Monitoring and measurement data generated and subject to evaluation and used to inform process management, controls and business decisions.

Evidence:

1)   Data and analysis outputs conform with applicable measurement criteria

2)   Externally sourced data analysed and integrated

3)   Analysis outputs communicated to inform decisions/actions (Human or machine-based decisions/actions as applicable)

4)   Evaluation of analysis outputs against requirements and objectives by relevant functional, process and business owners to inform decisions and actions demonstrated.

Performance evaluation is assessed to inform sustainable improvements to evaluation processes and tools.

Evidence:

1)   Performance evaluation outputs reviewed to validate suitability, relevance and value

2)   Data capture and analysis methodology performance reviewed to identify potential improvements in techniques, hardware/software tools and competencies to increase efficiency, accuracy and reliability of output information.

The Organization demonstrates the use of benchmarking, disruptive relationships and technologies to deliver measurement and evaluation solutions.

Evidence:

1)   Acquisition or outsourcing of digital solutions including machine readability and learning to automate evaluation and decisions

2)   Contributing to and drawing on benchmarked data and analysis sources

3)   Transparent communication/sharing of information with partners, providers and other stakeholders.

9.2

Internal Audit

 

Top Management recognises the value of audit and assessment activities to validate the effectiveness of the OMS.

Evidence:

1)   Management articulates the value off systematic management system audit and assessment programs

2)   Management demonstrates existing assessment and assessment practices and associated capability gaps.

Processes for planning executing and reporting audits and assessments defined.

Evidence:

1)   Process and criteria for establishing and prioritising assessment programs defined.

2)   Process defined for planning executing and reporting audits and assessments defined

3)   Assessor competency requirements and associated qualification processes defined.

Audit and assessment program effectively implemented.

Evidence:

1)   Risk based, multidisciplinary, coordinated assessment plan(s) established

2)   Assessment teams established with pre-requisite auding and subject matter competence and experience and independence

3)   Records of performed assessments according to plan that include objective, scope, criteria. conclusion, assessment and necessary data

5)   Assessment terms of reference and findings endorsed in accordance with line and functional authorities.

Audits and assessments are used to benchmark business processes to proactively inform improvements.

Evidence:

1)   Risks and opportunities identified in assessments systematically inform improvement of business processes and objectives

2)   Assessment plans integrate (rather than duplicate) stakeholder and provider assessment and assessment processes and capabilities.

The effectiveness of mature business processes and inherent controls enable audits and assessments to be limited to emerging business opportunities and risks.

Evidence:

1)   Process control effectiveness demonstrated by performance evaluation trends (refer 9.1 enables reduced assessment requirements

2)   Assessment findings demonstrate high levels of process suitability and effectiveness with minimal recurrence

3)   Audit and Assessment resources targeted on emerging business opportunities and changes in stakeholder requirements and expectations.

9.3

Management review

 

Top management recognises the value of reviewing management system and business performance against objectives.

Evidence:

1)   Top management articulates their expectations for systematic review of performance in achieving objectives including the influence management system capability has on business performance

2)   Management demonstrates existing management review requirements, practices, outputs and associated capability gaps.

Management review processes defined

Evidence:

1)   Management review process addresses requirements 9.3

2)   Management review schedule encompassing the organization's scope, context and objectives defined and resourced.

Management reviews implemented in accordance with agreed plans with review outputs informing business decisions.

Evidence:

1)   Management reviews undertaken in accordance with process

2)   Management reviews address organization's scope, context and objectives

3)   Reviews analyse OMS performance in respect to the achievement of business objectives and obligations

4)   Review findings inform corrective and improvement actions

5)   Top management decision(s) informed by review outputs.

6)   Management review outcomes appropriately communicated within the organization and to stakeholders.

Management review outputs inform business strategies, objectives and improvement plans, considering stakeholder requirements and expectations.

Evidence:

1)   Management review processes/plans address organizational interdependencies from business unit and functional perspectives (Important for Large and/or complex organizations)

2)   Joint ventures and providers included in scope of management reviews

3)   Business strategies and objectives traceable to management review outcomes and decisions (Case study examples)

4)   Top management trigger extraordinary management reviews in response to changing requirements and performance trends.

Management reviews inform and are informed by emerging business and technology opportunities and realisation of strategies and objectives.

Evidence:

1)   Management review processes/plans include consideration of emerging business and technology opportunities

2)   Management review outputs provide performance indicators that inform decisions on the organization's readiness/capacity to develop or acquire new business opportunities and technologies

3)   Due diligence when assessing acquisition of emerging business opportunities and technologies includes analysis of any related management system capabilities, controls and associated risks.

10

Improvement

10.1

Continual Improvement

 

Top management recognise the value of improvement, learning and innovation.

Evidence:

1)   Top management articulate commitment to improvement to achieve sustained business performance

2)   Management demonstrate existing improvement, learning and knowledge management capabilities and associated gaps.

Improvement, learning and innovation processes defined.

Evidence:

1)   Processes for improvement, learning and innovation defined

2)   Toolbox available e.g., techniques, tools, information)

3)   Implementation plan and associated performance measures defined

4)   Improvement, learning and innovation facilitation resources available.

Improvement, learning and innovation framework is implemented.

Evidence:

1)   Opportunities related to improvement, learning and innovation identified and managed in accordance with applicable processes and tools.

2)   Performance measures established to analyse the effect of improvement, learning and innovation

3)   Changes to internal and external issues monitored to inform improvement opportunities and related risks

4)   Employees demonstrate an understanding of the improvement, learning and innovation framework

5)   Implementation extends to key suppliers and partners

6)   Acquired knowledge and opportunities communicated internally and to stakeholders.

Improvement, learning and innovation initiatives demonstrate positive performance trends in realising process and business objectives.

Evidence:

1)   Positive trends for defined metrics and objectives

2)   Evaluation of all improvement. learning and innovation outcomes informs development of improvement processes and future initiatives

3)   Improvement, learning and innovation is embedded in the Organization's culture (e.g. employees demonstrate mature understanding of improvement processes and resources, personal goals defined, management communication campaigns)

4)   Improvement initiatives implemented beyond the Organization (e.g. Partners, Suppliers, Universities, NGOs).

Improvement, learning and innovation informs disruptive changes to business objectives and processes reflecting emerging business and stakeholder context and value.

Evidence:

1)   Organization uses the learnings from improvement and innovation to develop and, validate a comprehensive body of knowledge

2)   Organization routinely leverages the knowledge to inform business strategies and

3)   Organization benchmarks and leverages knowledge beyond existing context and stakeholder expectations when framing strategies and realising opportunities

4)   Organization defines and applies a value generation model to validate the value realised through business initiatives.

10.2

Nonconformity and Corrective Action

 

Top management recognise the need to address unplanned events, outcomes or non-conformities and their causes.

Evidence:

1)   Top management articulate an understanding of why unplanned events, outcomes or non-conformities need to be addressed systematically

2)   Management demonstrate existing corrective action practices and associated capability gaps.

Processes to address unplanned events, outcomes or non-conformities and their causes defined.

Evidence:

1)   Process defined including protocols and tools for:

a)   Immediate control and correction responses as per Clause 8.4

b)   analysis of causes consistent with the event context and risks)

c)   definition, implementation and verification of the effectiveness of actions

d)   Communication of unplanned events, outcomes or non-conformities

2)   Implementation plans and pre-requisite resources available.

Unplanned events, outcomes and non-conformities controlled, corrected and corrective action implemented to prevent reoccurrence.

Evidence:

1)   Systematic use of processes throughout the organization

2)   Management clear on expectations to handling of unplanned event, outcome or nonconformity

3)   Analysis outputs establish significance, risks and associated causes

4)   System/tools and metrics track status against commitments to address unplanned events, outcomes or nonconformities and related actions

5)   Processes include controls over unplanned events, outcomes or nonconformities and related actions in the supply chain

6)   Effectiveness of actions measured and verified.

Business performance improvements realized by preventing or leveraging reoccurrence of unplanned events and outcomes.

Evidence:

1)   Monitoring of effect and efficiency of processes to address unplanned events, outcomes or non-conformities

2)   Integration of functional processes for managing actions related to unplanned events, outcomes or nonconformities

3)   Interdependencies and impact of actions understood and aligned with stakeholders

4)   Reoccurrence is measured and managed (opportunities captured, controls implemented).

5)   History of unplanned events is employed when framing and planning new activities

Knowledge gained through the analysis and actioning of unplanned events and outcomes informs business strategies and opportunity realization.

Evidence:

1)   Learnings from unplanned events and outcomes is included in the organizations body of knowledge and as such informs innovation and business strategies, see 10.1

2)   Organization benchmarks, shares its knowledge and leverages strategies and approaches employed by stakeholder organizations.

3)   Organization benchmarks, shares its knowledge and leverages strategies beyond its core sector stakeholder communities.

10.3

Organizational knowledge

 

Top management recognize the value of organizational knowledge to achieve operational performance and business objectives.

Evidence:

1)   Top management articulate commitment to knowledge development as a key enabler of business performance

2)   Management demonstrates current knowledge management strategies and processes and proposed strategies to address knowledge gaps.

Organizational knowledge requirements and management processes defined.

Evidence:

1)   Processes for knowledge acquisition and management defined

2)   Enabling, plans, techniques, templates are available

3)   Implementation plans and pre-requisite resources available.

Integrated Knowledge, Learnings and gap closure framework implemented.

Evidence:

1)   Application of knowledge related to business processes implemented.

2)   Operations related knowledge measured for its effectiveness in processes, assets and people

3)   Improvements based on knowledge application communicated to stakeholders

4)   Engaging with external organizations to improve knowledge gap closure opportunities

Knowledge acquisition and application realizes positive impacts to process performance and business outcomes.

Evidence:

1)   Positive trends for defined knowledge related objectives and metrics

3)   Evaluation of learning and operational efficiency outcomes informs improvement processes and initiatives

4)   Organizational knowledge is embedded in the Organization's culture (e.g. employees demonstrate mature understanding of operational processes and resources, management communication campaigns).

Organizational knowledge recognised as a key differentiator when implementing or acquiring emerging technologies and business opportunities.

Evidence:

1)   Organization’s body of knowledge informs innovation and business strategies, see 10.1

2)   Organizations knowledge is leveraged when planning and realising emerging business opportunities strategies

3)   Organization benchmarks and shares its knowledge to the benefit of the communities in which it operates.


  1. (informative)

    Assessment Tool
    1. Overview

Organisations undertaking conformity assessments can use assessment management tools to plan, undertake and report assessments.

The purchase of this document entitles use of the companion assessment tool which is designed to provide a standardised record and analysis of assessments to the ISO 29501 requirements benchmarked against the ISO 29502 maturity criteria.

The assessment tool including user guidance may be accessed via https://iso29502.u-sws.com/.

Use of the assessment tool is subject to the copywrite provisions of this document.

    1. Access and Data Management

The Assessment Tool has been created as a SinglePage application (SPA) to create an environment where the user’s data is stored on their own device or organisation’s domain and can only be shared by use of the SPA inport and export functions.

This facility enables users to manage information internally and when they choose, sharing of information for collaboration purposes, in conformace with their organisation’s information management policies.

    1. Assessment Management

The Edit Assessment function is used to manage new and existing assessment records following the generic assessment methodology defined in Section 5.5.

Once opened, the Assessment Listing, can be used to add new assesssments, import existing assement files and to export assessment files.

The edit function is used to manage new and existing assessment records,

The Terms Tab; is used to develop the terms of reference; refer 5.5.1.

The Resources Tab is used to manage assessment resources during planning and execution of assessments including:

— Sponsors

— Assessment Team

— Interviewees

— Reference Information

The Criteria Tabs, Sections 4 to 10; see Figure B.4, are used to record assessment findings, link related documented information and allocate maturity level s.

The Summary Tab is used to develop the assessment executive summary based on analysis of the assessment findings and maturity determinations.

    1. Analysis

The Assessment Tool Dashboard, can be employed to compare the results of multiple assessments uploaded to the application.

Use of the dashboard should be informed by the assessment user case, refer 5.1.

Assessments that form one of a series of assessments can employ comparative analysis of related assessments to inform the findings and executive summary.

Bibliography

[1] ISO/DIS 29501, Operating management systems — Requirements with guidance for use

[2] ISO/IEC/TS 17020, Conformity assessment - Requirements for the operation of various bodies performing inspection

[3] ISO/IEC/TS 17021‑1, Conformity assessment — Requirements for bodies providing audit and certification of management systems — Part 1: Requirements

[4] ISO 19011:2011, Guidelines for auditing management systems

[5] ISO 14005, Environmental management systems — Guidelines for a flexible approach to phased implementation

[6] ISO 9004, Quality management — Quality of an organization — Guidance to achieve sustained success

espa-banner