15. Continuous Improvement

15.1 Corrective Actions

Improvement actions are defined and followed up in three ways:

First of all the KPIs are reviewed on a half yearly basis and targets are set and evaluated. The risk assessment approach is used to define the priority for improvement actions or mitigation plans.

Secondly, on a half yearly basis, opportunities and threats are defined and translated into improvement actions.

Finally, nonconformities are monitored on a weekly basis as part of the regular weekly meet-up and translated in- and followed up as corrective actions.

The quality management system is audited by the management team on a yearly basis, leading to improvements of the processes as reflected in this handbook.

If and when required key customers are invited to perform an audit on the quality management system.

15.2 Preventive Actions

Preventive actions are implemented when potential risks or weaknesses are identified, e.g. as part of vulnerability detections or performance evaluation, before they result in incidents or operational issues.

These actions help strengthen the organisation’s resilience and operational reliability.

15.3 Improvement Register

OpenRemote maintains a register of improvement actions derived from risk assessments, audits, or operational reviews reflected in the risk management register, quality KPIs and improvement, Data security and improvement, and sprint planning (see section 16).

These registers track the status of each improvement initiative and identify responsible owners.