Division 3.2 For each defined indicator referred to in point 2.4, the following shall be carried out:

a collection of necessary information;

an evaluation as to whether the processes, procedures, technical, operational and organisational risk control measures are correctly implemented;

a check on whether the processes, procedures, technical, operational and organisational risk control measures are effective and whether they achieve the expected outcomes;

an evaluation of whether the management system as a whole is correctly applied and whether it achieves the expected outcomes;

an analysis and evaluation of instances of identified non-compliance with points (b), (c) and (d), as well as identification of their causes.