Sch 10 para 23 Monitoring: a structured approach to ensure that risk control measures are in place, working correctly and achieving the organisation's objectives
(1) The organisation must have a procedure to regularly collect, monitor and analyse relevant safety data, including— (a) the performance of relevant processes; (b) the results of processes, including all contracted services and products; (c) the effectiveness of risk control arrangements; (d) information on experience, malfunctions, defects and repairs arising from day-to-day operation and maintenance. (2) The organisation must have procedures to ensure that accidents, incidents, near-misses and other dangerous occurrences are reported, logged, investigated and analysed. (3) For a periodic review of all processes, the organisation must have an internal auditing system which is independent, impartial and acts in a transparent way. This system must have procedures in place to— (a) develop an internal audit plan, which can be revised depending on the results of previous audits and monitoring of performance; (b) analyse and evaluate the results of the audits; (c) propose and implement specific corrective measures/actions; (d) verify the effectiveness of previous measures/actions.