The IMS approach, based on ISO guidelines asks these key questions:
“What is the purpose of the business? How does it actually work? What are its processes?”
….then identifies the following steps:
Define & Determine
- The purpose of the organization
- The policies and objectives of the organization
- The processes in the organization
- The sequence of the processes
- Process documentation
- The activities within the process
- The risks in each process and assess significance
- Prioritise process risks based on significance
- The monitoring and measurement requirements
- The resources needed
- Verify processes and activities against planned objectives