Continual improvement of an EOMS based on ISO 21001
This domain tests clause 10 and the discipline of closing the loop.
Nonconformity and corrective action (10.2)
For each nonconformity: react and control it, correct it, evaluate the need for action to eliminate the cause, implement that action, review its effectiveness, and update risks and the EOMS where needed. Correction fixes the instance; corrective action removes the cause. Root-cause analysis (5 Whys, fishbone, process mapping) should reach systemic causes such as unclear criteria, missing competence or inadequate resourcing, not individual carelessness.
Continual improvement (10.3)
Beyond fixing failures, the organization improves performance: analysing trends, benchmarking against peer institutions, acting on learner feedback, piloting pedagogical or digital innovation and improving process efficiency. Improvements need owners, measures and a review point.
Worked example
Certificates are repeatedly issued late. Correction: reissue the affected certificates. Root cause: the assessment board record has no agreed sign-off date and one faculty member collects signatures sequentially. Corrective action: define sign-off deadlines, use a shared tracker, add the deadline to the assessment procedure and monitor issue time monthly. Effectiveness is verified after two cycles and the risk register entry on certification delay is updated.
Traps
Closing a nonconformity as soon as the fix is done; writing retrain staff as the permanent action; no effectiveness check; logging improvement ideas with no prioritisation; confusing 10.3 with 10.2 so the only improvements are reactions to audit findings.