The organization must establish a formal program to monitor, measure, analyze, and evaluate the performance and effectiveness of its AI Management System (AIMS).

To implement this program, the organization must define and document:

• What needs to be monitored and measured (e.g., the performance of AI systems, the effectiveness of risk controls, progress towards achieving AI objectives).
• The methods that will be used for monitoring, measurement, analysis, and evaluation to ensure the results are valid and reliable.
• The timing of these activities, including how often monitoring and measuring will be performed, and when the results will be formally analyzed and evaluated.

The organization must keep documented information (records) of all the results from these activities as evidence of the AIMS's performance and effectiveness.

The organization must establish and maintain a formal process for the continual improvement of its AI Management System (AIMS).

The objective of this process is to proactively and systematically enhance the overall suitability, adequacy, and effectiveness of the management system over time. Improvement activities should be based on the outputs of other AIMS processes, including:

• The results of monitoring and measurement activities.
• The findings from internal and external audits.
• The decisions and opportunities identified during top management reviews.
• The analysis of nonconformities and the effectiveness of corrective actions.