At a glance
- Ref
- OH-16
- Theme
- Assurance
- Held source
- ISO/IEC 42001:2023
- Citation
- ISO/IEC 42001:2023, 10.1
- Evidence
- 3 items
- Gaps
- 2 common
Evidence to keep
- Continual improvementAn improvement log or plan
- Continual improvementManagement review minutes over successive cycles
- Continual improvementEvidence of the effect of the improvement
Questions before you sign
- What did the last oversight improvement change?
- Did the measure improve?
- Is the improvement recorded where the auditor can see it?
The requirement, in our words
Keep making the management system more suitable, adequate and effective, and record the improvements and their effect.
What it means for human oversight
Improvement should come from the oversight data, not only from audit findings. A repeated override pattern, a slow response time or a near miss is an improvement input.
How to evidence it
Attach the artefacts above to the Continual improvement row with the system name, the owner and the date. The first one is the anchor: An improvement log or plan. The OH-16 file is complete when the named person can produce that artefact and explain the decision it records, without asking someone else where it is.
The reviewer will sample one live decision and ask for Management review minutes over successive cycles. If that artefact for OH-16 cannot be produced, the row is a gap, whatever the policy says.
OH-16 carries 3 evidence items and 2 common gaps. For continual improvement, the evidence is a dated record that the control operated, not a statement that it exists in a policy. The OH-16 statement above is ours, written from ISO/IEC 42001:2023, 10.1, not a reproduction of the licensed text.
Common gaps
- Improvement limited to fixing audit findings
- No evidence the change improved the control
Related units
Source for this page: ISO/IEC 42001:2023, 10.1. Open ISO/IEC 42001:2023, 10.1 and compare it with the OH-16 statement above. Retrieved 2026-10-21.