What the requirement covers and what an annual routine adds
Section 5(8) of Norway's Internal Control Regulations requires systematic monitoring and review, recorded in writing. It sets no universal annual date. Section 7-1 of the Regulations concerning Organisation, Management and Employee Participation requires regular risk assessment and reassessment following relevant changes.
An annual session is suggested here as a working routine. Match timing and frequency to the work, risk and any specific requirements. A new chemical, method or experience after an incident may need attention well before your next scheduled review.
Prepare information people recognise
Bring together the most useful information before the meeting or working session. Choose real events and procedures you can discuss, and give workers an opportunity to contribute their experience.
- What has changed in tasks, workplaces, staffing, equipment or coordination?
- Which incidents and recurring findings point to the same problem?
- Which actions are complete, which remain open and where has the effect been checked?
- Which procedures are difficult to use or produce different answers in practice?
- What training needs or other unresolved questions have emerged?
Fictional example: the work has changed
An imaginary service business used to make short visits to private customers. During the year, it has accepted more jobs in premises that stay occupied while work takes place. At the review, workers see that the same access questions recur in incident records and inspection notes.
They decide to improve the preparation procedure for these assignments and try it on the next relevant jobs. One person follows up the change, and they agree when to assess the experience. This is a fictional example of making a decision, rather than evidence of a real completed annual review.
Finish with decisions people can act on
A useful record explains what you examined, who contributed, what you concluded and what remains uncertain. Distinguish deciding to investigate further from deciding to change a procedure.
Give each follow-up task an owner, a deadline and a way to assess the outcome. Keep unresolved questions visible. Also agree how the decisions will reach the people who need to use the procedures.
Common pitfalls
Changing a document date does not explain what was examined. 'Everything works' offers little information without examples from the work. Repeatedly moving deadlines can also hide a need for a different approach or more capacity.
Do not wait for the annual review to handle an issue that needs attention now. Use the session to learn from follow-up throughout the year and improve how the next change is identified.
The next step in RettHMS
RettHMS brings together the business profile, documents, incidents, actions and changes for a guided annual review. AI can help draft notes and an action plan. The business evaluates and approves the result; an AI-generated text is not a completed professional audit or a compliance guarantee.