Skip to content

Evidence request lists

ISO 41001:2018 - Facility Management Systems

Evidence request list. 48 controls, 48 carrying auditor artefact guidance. Generated from the compliance knowledge graph on 11 September 2026. Published by The Art of Service.

Clause 10: Improvement

ISO-41001-10.1
Nonconformity and corrective action

Requires addressing nonconformities, determining root causes, and implementing corrective actions to prevent recurrence.

Artefacts an auditor will ask for
  • Root cause analysis records
  • Innovation maturity reassessment
  • Continual improvement register
  • Nonconformity and corrective action log
  • Process improvement proposals tracker
Where this commonly fails
  • Maturity reassessment skipped year over year
  • Root cause analysis stops at symptom level
  • Improvement register stale, items older than 12 months unactioned
  • Nonconformities not logged or trended
  • Lessons learned stored but never reused
ISO-41001-10.2
Continual improvement

Requires continual improvement of the suitability, adequacy, and effectiveness of the FM management system.

Artefacts an auditor will ask for
  • Improvement initiative business cases
  • Retrospective and post-mortem notes
  • Innovation maturity reassessment
  • Nonconformity and corrective action log
  • Feedback loop documentation
Where this commonly fails
  • Improvement register stale, items older than 12 months unactioned
  • Maturity reassessment skipped year over year
  • Root cause analysis stops at symptom level

Clause 4: Context of the Organization

ISO-41001-4.1
Understanding the organization and its context

Requires defining internal and external factors influencing facility performance and the FM management system.

Artefacts an auditor will ask for
  • Competitor innovation benchmark
  • Trend and foresight scan report
  • Innovation context register
  • Stakeholder map with innovation interests
  • Innovation maturity baseline assessment
Where this commonly fails
  • Innovation maturity baseline never established
  • Strategic intelligence not feeding into innovation decisions
  • Context analysis treated as one-off, not refreshed annually
ISO-41001-4.2
Understanding the needs and expectations of interested parties

Requires identifying stakeholders and their expectations relating to facility management services.

Artefacts an auditor will ask for
  • Market and technology radar
  • Innovation context register
  • Trend and foresight scan report
  • PESTEL/SWOT analysis covering innovation landscape
Where this commonly fails
  • Strategic intelligence not feeding into innovation decisions
  • Innovation maturity baseline never established
  • Internal capability gaps not assessed against strategy
  • Stakeholder map omits external innovation partners (universities, startups)
ISO-41001-4.3
Determining the scope of the FM management system

Requires defining the boundaries, applicability, and scope of the facility management system.

Artefacts an auditor will ask for
  • Strategic intelligence brief
  • IMS scope statement signed by leadership
  • PESTEL/SWOT analysis covering innovation landscape
Where this commonly fails
  • Innovation maturity baseline never established
  • Strategic intelligence not feeding into innovation decisions
  • Trend scanning is ad hoc and undocumented
  • Stakeholder map omits external innovation partners (universities, startups)
ISO-41001-4.4
Facility management system

Requires establishing, implementing, maintaining, and continually improving the FM system using PDCA.

Artefacts an auditor will ask for
  • Market and technology radar
  • Trend and foresight scan report
  • PESTEL/SWOT analysis covering innovation landscape
  • Competitor innovation benchmark
Where this commonly fails
  • Innovation maturity baseline never established
  • Internal capability gaps not assessed against strategy
  • Trend scanning is ad hoc and undocumented

Clause 5: Leadership

ISO-41001-5.1
Leadership and commitment

Requires top management to demonstrate leadership and commitment to the FM management system, including strategic alignment.

Artefacts an auditor will ask for
  • Executive innovation charter
  • Innovation council terms of reference
  • RACI for innovation roles
  • Board minutes referencing innovation strategy
  • Innovation vision and strategy document
Where this commonly fails
  • Culture barriers to risk-taking not addressed by leadership
  • Governance forum lacks decision-making authority
  • No clear accountability for innovation outcomes
ISO-41001-5.2
Facility management policy

Requires establishing an FM policy appropriate to the purpose and context of the organization.

Artefacts an auditor will ask for
  • RACI for innovation roles
  • Board minutes referencing innovation strategy
  • Innovation vision and strategy document
  • Innovation governance framework
  • Leadership innovation commitments register
Where this commonly fails
  • Innovation strategy disconnected from corporate strategy
  • Roles and responsibilities for innovation undefined
  • Culture barriers to risk-taking not addressed by leadership
  • Governance forum lacks decision-making authority
  • Innovation policy not formally approved or communicated
ISO-41001-5.3
Organizational roles, responsibilities and authorities

Requires assignment and communication of FM roles, responsibilities, and authorities at relevant levels.

Artefacts an auditor will ask for
  • Innovation council terms of reference
  • Leadership innovation commitments register
  • Board minutes referencing innovation strategy
  • Approved innovation policy
  • RACI for innovation roles
  • Executive innovation charter
Where this commonly fails
  • No clear accountability for innovation outcomes
  • Executive sponsorship limited to lip service, no time committed
  • Innovation strategy disconnected from corporate strategy
  • Innovation policy not formally approved or communicated
  • Roles and responsibilities for innovation undefined

Clause 6: Planning

ISO-41001-6.1
Actions to address risks and opportunities

Requires identifying and planning actions to address risks and opportunities that affect the FM system outcomes.

Artefacts an auditor will ask for
  • Innovation portfolio dashboard
  • Risk treatment plan
  • Initiative prioritisation scorecard
  • Resource allocation plan
Where this commonly fails
  • Portfolio biased toward horizon 1 incremental projects
  • Initiative prioritisation done by HiPPO not criteria
  • Opportunities and risks tracked separately with no link to objectives
  • Innovation objectives lack measurable targets
  • No resource plan tied to portfolio priorities
ISO-41001-6.2
Facility management objectives and planning to achieve them

Requires establishing measurable FM objectives consistent with policy and planning the activities to achieve them.

Artefacts an auditor will ask for
  • Risk treatment plan
  • Portfolio balancing model (horizons 1/2/3)
  • Resource allocation plan
  • Action plans tied to innovation objectives
  • Opportunity and risk register
  • Innovation portfolio dashboard
Where this commonly fails
  • Risk treatment plans absent for high-uncertainty bets
  • Portfolio biased toward horizon 1 incremental projects
  • Initiative prioritisation done by HiPPO not criteria
  • No resource plan tied to portfolio priorities
ISO-41001-6.3
Planning of changes

Requires changes to the FM system to be carried out in a planned manner considering their purpose and consequences.

Artefacts an auditor will ask for
  • Initiative prioritisation scorecard
  • Innovation portfolio dashboard
  • Change management plan for innovation initiatives
  • Innovation objectives with measurable targets
Where this commonly fails
  • Risk treatment plans absent for high-uncertainty bets
  • Initiative prioritisation done by HiPPO not criteria
  • Innovation objectives lack measurable targets

Clause 7: Support

ISO-41001-7.1
Resources

Requires determining and providing resources including competent people, infrastructure, and work environment for the FM system.

Artefacts an auditor will ask for
  • Competence matrix for innovation roles
  • Training records and learning paths
  • Resource and budget plan for innovation
  • Communication plan (internal/external)
  • Strategic intelligence repository
Where this commonly fails
  • Competence requirements for innovation roles not defined
  • IP register incomplete, ownership disputes likely
  • Strategic intelligence siloed in one team
ISO-41001-7.2
Competence

Requires ensuring persons performing FM work have appropriate competence based on education, training, or experience.

Artefacts an auditor will ask for
  • Training records and learning paths
  • Partnership and collaboration agreements
  • Communication plan (internal/external)
  • Knowledge repository / lessons learned database
Where this commonly fails
  • Innovation budget not ring-fenced from operating budget
  • Time allocation for innovation crowded out by BAU
  • Partnership agreements lack IP and confidentiality clauses
  • Tools and methods inconsistent across teams
ISO-41001-7.3
Awareness

Requires persons performing work under the organization's control to be aware of the FM policy and their contribution.

Artefacts an auditor will ask for
  • Innovation infrastructure inventory
  • Time-allocation policy (e.g., 10% innovation time)
  • Communication plan (internal/external)
Where this commonly fails
  • Strategic intelligence siloed in one team
  • IP register incomplete, ownership disputes likely
  • Innovation budget not ring-fenced from operating budget
  • Time allocation for innovation crowded out by BAU
ISO-41001-7.4
Communication

Requires determining internal and external communication needs relevant to the FM management system.

Artefacts an auditor will ask for
  • Competence matrix for innovation roles
  • Communication plan (internal/external)
  • Innovation infrastructure inventory
  • IP register and assignment agreements
Where this commonly fails
  • Partnership agreements lack IP and confidentiality clauses
  • Time allocation for innovation crowded out by BAU
  • Innovation budget not ring-fenced from operating budget
ISO-41001-7.5
Documented information

Requires creation, updating, and control of documented information necessary for the FM system.

Artefacts an auditor will ask for
  • Document control register for IMS
  • Communication plan (internal/external)
  • Innovation tools and methods catalogue
  • IP register and assignment agreements
  • Training records and learning paths
  • Partnership and collaboration agreements
Where this commonly fails
  • IP register incomplete, ownership disputes likely
  • Knowledge from past projects not captured or reused
  • Competence requirements for innovation roles not defined
ISO-41001-7.6
Organizational knowledge

Requires determining, maintaining, and making available the knowledge necessary for the operation of FM processes.

Artefacts an auditor will ask for
  • Partnership and collaboration agreements
  • Strategic intelligence repository
  • Innovation infrastructure inventory
  • Competence matrix for innovation roles
Where this commonly fails
  • Knowledge from past projects not captured or reused
  • Strategic intelligence siloed in one team
  • IP register incomplete, ownership disputes likely
  • Partnership agreements lack IP and confidentiality clauses
  • Time allocation for innovation crowded out by BAU

Clause 8: Operation

ISO-41001-8.1
Operational planning and control

Requires planning, implementing, and controlling processes needed to meet FM requirements and deliver services.

Artefacts an auditor will ask for
  • Outsourced process controls and contractor briefs
  • Operating procedures for each SEU
  • Shift handover logs covering energy
  • Maintenance plan tied to energy performance
  • Change management records affecting energy
  • Setpoint and operating window register
Where this commonly fails
  • Outsourced providers have no energy obligations
  • Operating criteria not documented for SEUs
  • Maintenance focused on uptime not energy
ISO-41001-8.2
Coordination with stakeholders

Requires coordination of FM activities with relevant interested parties and demand organizations.

Artefacts an auditor will ask for
  • Commissioning records validating energy performance
  • Design review minutes covering energy
  • Life cycle cost or energy assessment records
  • Capex business case template requiring EnPI impact
  • Specification checklist for energy efficient equipment
  • Design brief template with energy criteria
Where this commonly fails
  • Commissioning does not verify energy performance
  • No life cycle cost analysis
  • Design briefs silent on energy
ISO-41001-8.3
Integration of services

Requires integration of FM services to optimize facility performance and support organizational objectives.

Artefacts an auditor will ask for
  • Energy supply contracts and tariff analysis
  • Supplier evaluation records covering energy claims
  • Contractor briefs referencing the energy policy
  • Purchase order checklist for energy criteria
  • Specification template for energy using equipment
  • Procurement procedure with energy criteria
Where this commonly fails
  • Procurement decisions based on capex only
  • Suppliers not assessed against energy criteria
  • Energy specifications not communicated to suppliers
  • No life cycle energy assessment for purchases
ISO-41001-8.4
Control of outsourced processes and services

Requires management and control of outsourced FM services to ensure they meet specified requirements.

Artefacts an auditor will ask for
  • Records demonstrating top management oversight
  • Management review minutes covering energy performance
  • EnMS clause mapping to the control
  • Internal audit results for the EnMS
  • Action plan aligned with clause 6.2
Where this commonly fails
  • Top management oversight not evidenced
  • Control implemented without explicit link to the EnMS
  • Continual improvement not demonstrated through EnPIs
  • Energy performance impact not assessed

Clause 9: Performance Evaluation

ISO-41001-9.1
Monitoring, measurement, analysis and evaluation

Requires determining what needs to be monitored and measured for FM performance evaluation.

Artefacts an auditor will ask for
  • Innovation KPI dashboard
  • Innovation analytics report
  • Customer and partner feedback summary
  • Internal audit programme and reports
  • Audit nonconformity log
Where this commonly fails
  • Internal audits of IMS not scheduled
  • Management reviews skip innovation as an agenda item
  • Lagging indicators only, no leading indicators
ISO-41001-9.2
Internal audit

Requires conducting internal audits at planned intervals to verify FM system conformance and effectiveness.

Artefacts an auditor will ask for
  • Benchmarking study results
  • Management review minutes and actions
  • Internal audit programme and reports
  • Performance evaluation criteria document
  • Innovation analytics report
  • Balanced scorecard for innovation
Where this commonly fails
  • Lagging indicators only, no leading indicators
  • Management reviews skip innovation as an agenda item
  • KPIs measure activity (idea count) not outcomes (revenue, adoption)
  • Customer feedback not systematically captured
ISO-41001-9.3
Management review

Requires top management review of the FM system for continuing suitability, adequacy, and effectiveness.

Artefacts an auditor will ask for
  • Benchmarking study results
  • Internal audit programme and reports
  • Innovation KPI dashboard
  • Management review minutes and actions
Where this commonly fails
  • Lagging indicators only, no leading indicators
  • Management reviews skip innovation as an agenda item
  • Evaluation criteria differ across portfolio without rationale

Context

ISO41001-4.1
Understanding the Organization and Its Context

Determine external and internal issues relevant to the FM system and the demand organization served.

Artefacts an auditor will ask for
  • FM context analysis
  • Demand organization profile
  • Portfolio summary
Where this commonly fails
  • FM context not linked to core business strategy
ISO41001-4.2
Needs and Expectations of Interested Parties

Identify interested parties relevant to FM and their requirements.

Artefacts an auditor will ask for
  • Stakeholder register including occupants, demand org, suppliers, authorities
  • Service level expectations matrix
Where this commonly fails
  • Occupant feedback not captured
ISO41001-4.3
Scope of FM System

Define the boundaries and applicability of the FM management system.

Artefacts an auditor will ask for
  • Documented scope statement
  • Facilities and services in/out of scope list
Where this commonly fails
  • Scope excludes outsourced services in error

Improvement

ISO41001-10.1
Nonconformity and Corrective Action

Respond to nonconformities and take corrective action.

Artefacts an auditor will ask for
  • NC register
  • RCA records
  • Verified effectiveness
Where this commonly fails
  • Recurring NCs without escalation
ISO41001-10.2
Continual Improvement

Continually improve the suitability, adequacy, and effectiveness of the FM system.

Artefacts an auditor will ask for
  • Improvement register
  • Benchmarking outputs
  • Innovation pipeline
Where this commonly fails
  • No benchmarking against peer portfolios

Leadership

ISO41001-5.1
Leadership and Commitment

Top management demonstrates leadership and commitment to the FM system.

Artefacts an auditor will ask for
  • Executive sponsor designation
  • Steering committee minutes
  • Strategic FM plan signed off
Where this commonly fails
  • FM seen as cost center only
ISO41001-5.3
Roles, Responsibilities, and Authorities

Assign and communicate roles, responsibilities, and authorities for the FM system.

Artefacts an auditor will ask for
  • FM organization chart
  • RACI matrix
  • Role descriptions
Where this commonly fails
  • Authority limits unclear for supplier sign-off

Operations

ISO41001-8.1
Operational Planning and Control

Plan, implement, and control FM processes to meet requirements.

Artefacts an auditor will ask for
  • Service delivery plans
  • Maintenance schedules (PPM)
  • Work order system records
Where this commonly fails
  • PPM compliance below target
ISO41001-8.2
Coordination with Interested Parties

Coordinate FM activities with demand organization and other interested parties.

Artefacts an auditor will ask for
  • Service level agreement with demand org
  • Joint planning meeting minutes
Where this commonly fails
  • No regular coordination cadence
ISO41001-8.3
Integration of Services

Integrate FM services including hard and soft FM and outsourced provision.

Artefacts an auditor will ask for
  • Integrated FM service map
  • Contract architecture diagram
  • Performance dashboards across services
Where this commonly fails
  • Soft and hard FM measured separately, never integrated
ISO41001-8.4
Procurement of FM Services

Procure FM services from suppliers with controls to ensure conformity to requirements.

Artefacts an auditor will ask for
  • Supplier selection criteria
  • Contract templates with service specifications
  • Supplier performance reviews
Where this commonly fails
  • Supplier KPIs not reviewed quarterly
ISO41001-8.5
Emergency Preparedness and Response

Establish processes to prepare for and respond to FM-related emergencies.

Artefacts an auditor will ask for
  • Business continuity plan for facilities
  • Emergency response procedures
  • Drill records
Where this commonly fails
  • BCP not exercised in past 12 months

Performance

ISO41001-9.1
Monitoring, Measurement, Analysis, and Evaluation

Monitor and measure FM performance and effectiveness of the FM system.

Artefacts an auditor will ask for
  • KPI dashboard
  • Occupant satisfaction surveys
  • SLA performance reports
Where this commonly fails
  • Occupant surveys not conducted
ISO41001-9.2
Internal Audit

Conduct internal audits of the FM system at planned intervals.

Artefacts an auditor will ask for
  • Audit programme
  • Audit reports
  • CAR register
Where this commonly fails
  • Auditors lack FM domain knowledge
ISO41001-9.3
Management Review

Top management reviews the FM system at planned intervals.

Artefacts an auditor will ask for
  • Review minutes with required inputs and outputs
Where this commonly fails
  • Review inputs incomplete

Planning

ISO41001-6.1
Actions to Address Risks and Opportunities

Plan actions to address risks and opportunities relevant to the FM system.

Artefacts an auditor will ask for
  • FM risk register
  • Treatment plans
  • Integration with enterprise risk
Where this commonly fails
  • FM risks not escalated to enterprise level
ISO41001-6.2
FM Objectives and Planning

Establish FM objectives at relevant functions, levels, and processes and plan to achieve them.

Artefacts an auditor will ask for
  • FM objectives register
  • KPI dashboard linked to demand org needs
  • Resource plan
Where this commonly fails
  • Objectives focus on cost, omit user experience

Policy

ISO41001-5.2
Policy

Establish an FM policy appropriate to the purpose of the organization.

Artefacts an auditor will ask for
  • Signed FM policy
  • Distribution records
Where this commonly fails
  • Policy not communicated to suppliers

Support

ISO41001-7.1
Resources

Determine and provide resources needed for the FM system and FM services.

Artefacts an auditor will ask for
  • Budget allocation
  • Headcount plan
  • Tools and CAFM system inventory
Where this commonly fails
  • CAFM tool underutilized
ISO41001-7.2
Competence

Ensure competence of persons doing FM work that affects performance.

Artefacts an auditor will ask for
  • Competence matrix for FM and supplier staff
  • Training records
  • Certifications register
Where this commonly fails
  • Supplier competence not verified
ISO41001-7.3
Awareness

Ensure persons doing FM work are aware of policy, objectives, and contributions.

Artefacts an auditor will ask for
  • Induction materials
  • Toolbox talks
  • Awareness sign-offs
Where this commonly fails
  • Contractor inductions inconsistent
ISO41001-7.4
Communication

Determine internal and external communications relevant to the FM system.

Artefacts an auditor will ask for
  • Communication plan
  • Occupant communication channels
  • Supplier communication protocol
Where this commonly fails
  • No occupant feedback mechanism
ISO41001-7.5
Documented Information

Create, update, and control documented information for the FM system.

Artefacts an auditor will ask for
  • Document register
  • Asset registers
  • As-built drawings library
Where this commonly fails
  • Asset registers incomplete
Assembled from the framework's own control set. Every line traces to a control in the graph, so this pack is regenerated rather than written, and stays current as the graph does.

Assembled from the framework’s own control set, so this list is regenerated rather than written and stays current as the graph does.