Our own servers in Europe · GDPR · Support in your language
ES EN CA
Let's talk

Module 4 of 5 · ISO 19600 · Section 4

Monitoring and measurement

ISO 19600 recommends measuring the system with indicators and reviewing it periodically, not just trusting the controls are there.

Content reviewed on

Compliance indicators

Metrics such as reports handled, training completed or incidents detected, to know whether the system works.

Internal audit

A periodic system review, focused on the highest-risk areas identified on the map.

Management review

Management reviews the system using the monitoring data and decides on adjustments if needed.

What an auditor usually asks for

  • Defined compliance indicators with tracking
  • An internal system review programme
  • Management review minutes
  • Documented adjustments after each review

How to cover monitoring in Kimobox

  1. 1Set up compliance indicators to calculate themselves from the system's records.
  2. 2Plan the internal review prioritizing the highest-risk areas.
  3. 3Log management review decisions with their follow-up.

Compliance indicators stay visible on a dashboard, not scattered across loose reports.

See audits and indicators in the quality portal

Where each figure comes from

References to the official text in force. If a standard is revised, this page is updated and the review date says so.

  1. ISO 19600:2014 — Compliance management systems. Guidelines (withdrawn) ISO · Withdrawn
  2. ISO 37301:2021 — Compliance management systems. Requirements ISO · April 2021
← Previous Implementation: controls, training and whistleblowing channel Next → Continual improvement