A.9 Performance evaluation: guidance, not a requirement
Annex A.9 explains monitoring and measurement, evaluation of compliance, internal audit and management review. It is informative guidance. It is where the difference between collecting data and evaluating performance is made clear.
What the guidance covers
- How to decide what to monitor, the methods and criteria, and when to analyse and communicate
- How to evaluate compliance with each legal and other requirement
- How to run an internal audit programme that tests effectiveness, not only documentation
- How to run a management review that takes every required input and produces decisions
How to use it
Use A.9 when the management review is an incident statistics meeting. The guidance supports an agenda built from the clause inputs, a minute that records decisions and resources, and a report back to workers. It also supports a compliance evaluation that covers operational duties, not only permits, and a review that starts with the previous actions rather than the latest incident.
What it does not add
A.9 does not require a dashboard, a software tool or a fixed audit frequency. It does not make every indicator a KPI. The requirements remain in Clause 9.
The draft keeps 9.1 and 9.1.2, retains the internal audit clauses and splits management review into 9.3.1 General, 9.3.2 Inputs and 9.3.3 Results, replacing outcomes with results.
Read across
Source for Annex A.9: ISO 45001:2018, Annex A, informative, retrieved 18 October 2026. The draft note rests on the public DIS contents and the named summaries. Every source.