1. ISO 22301:2019, Security and resilience — Business continuity management systems — Requirements.
Clause 9, "Performance evaluation": This clause mandates the organization to evaluate the performance and effectiveness of the BCMS through monitoring, measurement, internal audit, and management review.
Clause 10.2, "Continual improvement": This clause explicitly links the outputs of performance evaluation to improvement, stating, "The organization shall continually improve the suitability, adequacy and effectiveness of the business continuity management system." The inputs for this improvement come directly from the results of analysis, evaluation, audits, and management reviews (Clause 9). This demonstrates that the purpose of evaluation is optimization.
2. Zairi, M. (1994). "Benchmarking: the best tool for measuring competitiveness." Benchmarking for Quality Management & Technology, 1(1), 11-24.
Page 12, Section "The process of benchmarking": This academic paper establishes benchmarking as a "continuous process of measuring products, services, and practices against the toughest competitors or those companies recognized as industry leaders." The goal is to identify gaps in performance and implement changes to achieve superiority, which is a form of process optimization.
3. Karabegović, I., & Vugdalić, N. (2013). "The Importance of the Application of PDCA Cycle in the Process of Improving the Quality of a Product." Tehnički vjesnik, 20(2), 309-314.
Page 310: This paper explains the PDCA cycle in the context of ISO standards, stating that the "Check" phase involves "monitoring and measuring processes and products... and reporting the results." The subsequent "Act" phase involves "taking actions to continually improve process performance," directly linking evaluation activities (like audits and performance measurement) to process improvement and optimization.