Module Learning Objective

build indicators that assess implementation of measures

1. Regulatory Concept & Core Standards

Today we will learn to build indicators that assess implementation of measures. Throughout the video, consider the difference between knowing a rule and applying it to a decision. We will work through an example, identify a possible failure and develop a response that can be used at work. After preventive measures are approved, the organisation must establish whether they were implemented and produce results. This course addresses indicators, evidence and review. Internal timetables are management choices unless a specific national obligation is expressly identified.

An indicator needs a definition, source and period. A percentage without its denominator can mislead. Coverage measures how many required situations were handled. Quality assesses whether handling was adequate. Evidence can include approvals, review records, tests and training results. Collect proportionately without duplicating unnecessary personal data.

Apply the following rule: Distinguish data held in the intake system from investigation records and the reporting register. Article 32 provides for deletion from the system after three months if no investigation has begun, with an exception for anonymised evidence that the system operates. Personal data in the register must not be kept for more than ten years.

2. Practical Implementation & Procedure

Define numerator and denominator before calculating. State exclusions and unassessed situations. Choose a reliable source and update owner. Combine implementation indicators with quality checks. If sampling, explain the method and limits. Evidence must allow the calculation to be reconstructed. Before moving on, turn this procedure into a sequence you could explain to a colleague. Identify the first check, the action that depends on its outcome and the record that allows the decision to be reconstructed. Follow the sequence on screen and identify the point where an error would change the result.

3. Case Study & Compliance Action

Twenty records were reviewed out of forty suppliers requiring assessment in the period. Coverage is 50%, not 100% simply because the team completed every record sent to it. Define the correct population before measuring completed work. Now read the case carefully. Separate established facts from information you would still need to confirm. Do not add motives or events that have not been described. This distinction matters when choosing a response proportionate to the information available.

The exercise is as follows: Why are ‘twenty completed reviews’ insufficient to measure coverage? Choose an answer and write one sentence explaining it. During the pause, compare your choice with the criteria we have just considered. Also think about the material you would retain to explain the decision later.

The required total is missing. Work volume does not establish coverage. Specify population, period and exclusions so that the result can be understood and checked.

One mistake to avoid is: choosing a denominator that makes performance look better.

Now apply the national rule to a second decision. The system deletes every case five years after receipt, regardless of the country and any pending proceedings. Is that appropriate?

No. Identify the local rule, starting event and any limits or extensions. A uniform schedule may delete records too early or retain them too long. Document the decision by category, include copies and define who reviews a suspension of deletion, rather than keeping everything indefinitely.

National Legal Framework: Ley 2/2023 (Protección de los Informantes), transposing Directive (EU) 2019/1937 of the European Parliament and of the Council on the protection of persons who report breaches of Union law.