Understanding and influencing context
Resilience depends on a current understanding of the internal and external environment, including the relationships and dependencies that affect the organization's ability to deliver its purpose.
What clause 5.3 says
The clause asks the organization to look past today's work, plan and formal boundary; to understand, collaborate with and strengthen relationships with relevant interested parties; and to monitor the context, including interdependencies, the political and regulatory environment and competitor activity. It also asks for cooperation at all levels and collaboration with others who pursue the same aim. The scope of context is wide on purpose. A supplier failure, a change in regulation, a shift in public expectation or a new competitor can each change what resilience requires. The clause does not ask for a one-off environmental scan. It asks for a capability to notice and interpret change, and for relationships that make the interpretation better than a desk exercise.
Why it matters
Context work fails in two ways. It becomes a long document that no one reads, or it becomes a monthly news summary with no consequence. The attribute is about influence as well as understanding: the organization should be able to shape some of its environment, not only react to it. That is why collaboration and relationships sit in the same clause as monitoring. A team that understands a regulator's direction early can adapt before a rule bites. A team that only reads the final text has fewer options.
What good looks like
Build a context register with four columns: the factor, the source, the implication for the organization's objectives, and the owner. Review it on a fixed rhythm and at every significant change. Add a relationship map for the interested parties who can influence the context, and record what the organization is doing to strengthen those relationships. Test the register by asking which entry changed a decision in the last year.
Evidence a reviewer asks for
There is no ISO certification or accredited assessment scheme for ISO 22316. The assessor here is your internal auditor, a customer assurance team or a consultant.
An assessor will ask how the organization knows the context has changed and who acts on that knowledge. A register with no decisions attached is monitoring, not understanding.
- Context register Factors, sources, implications and owners, with the last review date
- Interdependency map The critical dependencies and the parties that control them
- Relationship plan The interested parties who can influence the context and the actions taken with them
- Influence example A case where the organization shaped or anticipated a change rather than reacting to it
Where it commonly fails
- The context is reviewed once a year in a workshop with no follow-up.
- The register lists factors but not implications or owners.
- Relationships with regulators and critical suppliers are managed by one department in isolation.
What to do before the second edition
Take the last three strategic decisions and trace the context evidence behind them. Where the evidence is thin, the register is decorative. Rebuild it around the decisions the organization actually faces.
Read across
- 4.1 General
- 5.6 Shared information and knowledge
- 5.8 Development and coordination of management disciplines
- 6.3.1 Methods and processes
← 5.2 Shared vision and clarity of purpose5.4 Effective and empowered leadership →