Management review under ISO 9001 remains one of the most misunderstood requirements in quality management systems. Many organisations treat it as a compliance checkbox: schedule a meeting, run through some data, sign off on minutes, and move on. The result is that management review fails to deliver its primary purpose—providing leadership with clear evidence that the quality management system is performing effectively and driving genuine business improvement. When conducted properly, management review becomes a powerful mechanism for steering organisational strategy, identifying systemic risks, and ensuring that quality fundamentals remain aligned with business objectives.
On this page
What Management Review Actually Is Under ISO 9001:2015
ISO 9001:2015 Clause 9.3 defines management review as a formal evaluation of the quality management system's suitability, adequacy, and effectiveness. This is not a casual discussion or a performance metrics update. It is a structured, documented review conducted by top management (not delegated entirely to the quality team) that assesses whether the QMS continues to meet organisational needs and external requirements.
The standard stipulates that management review must address specific input items, include documented outputs, and be retained as evidence. Many organisations skip this formality, but the requirement exists because systems that lack active leadership oversight tend to drift toward non conformance. Without regular formal review at the management level, quality initiatives become disconnected from business strategy, and systemic problems emerge undetected.
Top management in this context means those individuals with authority and accountability for the organisation's strategic direction. For a small business, this might be the managing director and senior managers. For larger enterprises, it typically involves the executive leadership team or quality steering committee. The key is that these people have real authority to commit resources and drive change based on review findings.
Exemplar Global Recognised Training ProviderRTP No. 310970
The Input Requirements: What Data Must Be Gathered
ISO 9001:2015 specifies that management review must consider the status of actions from previous reviews. This creates a continuity mechanism. If the March review identified that customer complaint response time needed improvement, the June review must confirm whether that action was actually completed and whether it worked. This prevents the organisation from making the same commitments repeatedly without follow through.
The standard also requires review of changes in external and internal issues. External issues include regulatory changes, market shifts, competitive threats, and supply chain disruptions. A manufacturing business might need to address new product safety regulations. A service provider might face new data protection requirements. Internal issues include organisational restructuring, resource constraints, system capability gaps, and stakeholder feedback. The point is that management review provides a formal mechanism to evaluate whether the QMS remains fit for purpose as the operating environment changes.
Performance against quality objectives must be presented. If your organisation set an objective to reduce customer complaints by 15 percent in 2024, the management review must present actual performance against that target. This is not aspirational reporting. Use actual data. If performance is below target, the review must explore why and decide whether to extend the timeline, revise the objective, or implement additional controls.
Customer satisfaction data is mandatory input. This should include formal feedback, complaints analysis, product or service returns, and warranty claims. Many organisations collect this data but fail to synthesise it for management view. A manufacturing business might track complaints by product line; the review should examine trends across product families and identify patterns. A professional services firm should analyse client feedback by service type and seniority level to uncover systemic issues versus isolated complaints.
Nonconformity trends from internal audits must be included as input. The review should examine whether nonconformities are increasing, decreasing, or stable. More importantly, analyse whether repeat nonconformities indicate inadequate corrective action or deeper system design problems. A recurring finding that staff are not following documented procedures might point to procedures that are unclear or disconnected from actual work.
Supplier performance data provides critical input. ISO 9001 requires organisations to evaluate suppliers of external processes, products, and services. Management review should assess whether supplier performance is meeting expectations, whether quality issues are emerging from particular suppliers, and whether supply chain risk is increasing. This input might trigger decisions to qualify additional suppliers, renegotiate terms, or invest in supplier development.
Resource adequacy must be considered. Do you have sufficient personnel, infrastructure, technology, and budget to maintain the QMS and pursue quality objectives? If capacity constraints are limiting your ability to conduct internal audits or handle customer complaints effectively, this is a management review issue. Resource constraints that affect system performance require management decision and action.
Structuring the Management Review Meeting
Effective management review requires advance preparation. The quality manager or management representative should prepare a comprehensive report two weeks before the meeting. This report consolidates all required input data in a format that senior leaders can digest without wading through supporting detail. Create an executive summary that highlights key performance indicators, trends, risks, and issues that require management decision.
The report should use visual presentation where possible. A dashboard showing performance against quality objectives, trending nonconformity data, customer satisfaction scores, and supplier performance is more useful than dense narrative text. Many organisations use a simple format: metric, current performance, target, status (on track or at risk), and trend (improving, declining, or stable). This format forces clarity and prevents the review from becoming a report reading exercise.
Distribute the report at least one week before the meeting so attendees can review content in advance. This prevents management review from becoming a presentation where you are explaining data to people seeing it for the first time. Instead, the meeting can focus on analysis, decision making, and action identification.
Schedule the meeting for at least 90 minutes for a small to medium organisation, longer for larger enterprises. Do not attempt to conduct management review as a 30 minute agenda item within a broader executive meeting. This abbreviated approach typically results in superficial discussion and weak decisions. Management review deserves dedicated time and focus.
Start the meeting by reviewing outputs from the previous management review. Confirm that committed actions were completed and assess their effectiveness. If an action is incomplete or ineffective, discuss why and decide whether to extend, revise, or escalate the issue.
Then systematically work through the required input areas: external and internal issues, performance against objectives, customer satisfaction, nonconformity trends, supplier performance, and resource adequacy. For each area, ask the team whether any changes to the QMS are required, whether resource allocation needs adjustment, or whether strategic priorities need updating.
Making Decisions and Documenting Outputs
Management review outputs must include decisions and actions relating to the QMS's continuing suitability, adequacy, and effectiveness. This is the critical section. The meeting should conclude with specific, documented decisions. Examples include:
- Approval to revise quality policy based on changed business strategy
- Approval to reallocate resources to address identified risk areas
- Decision to modify quality objectives based on performance data
- Approval to implement new controls to address emerging supplier quality issues
- Commitment to invest in new quality management software
- Decision to engage a consultant to address a specific system weakness
- Direction to management to provide additional training in a particular process area
These outputs must be recorded in meeting minutes. Many organisations document management review minutes in vague terms that offer little clarity about what was actually decided. Instead, use a format that captures: decision made, responsible party, required resources, target completion date, and success criteria. This creates accountability and provides evidence during certification audits that management review leads to genuine action.
The standard also requires outputs to address the need for changes to the QMS. Some reviews will conclude that no changes are required; the system is functioning effectively and the operating environment has not shifted significantly. Document that decision explicitly. Other reviews will identify necessary changes. These must be assigned to responsible parties with target completion dates.
Outputs must address resource needs. This might include personnel, infrastructure, competency development, technology investment, or budget allocation. By documenting these needs in management review, you create a direct link between QMS performance and business resource allocation.
Document whether the management review determined that the QMS remains suitable for achieving its intended outcomes and conforming to customer and regulatory requirements. This is the core question. If the answer is no, what changes are required? If the answer is yes, what evidence supports that conclusion?
Avoiding Common Management Review Failures
The most common failure is treating management review as a presentation to management rather than a meeting where management actively participates in decision making. Quality managers often approach the meeting with a fixed agenda and predetermined conclusions, then present findings to a passive audience. This defeats the purpose. Top management must be active participants who challenge assumptions, ask difficult questions, and make real decisions about resource allocation and system changes.
Another frequent problem is including excessive detail in the review without providing appropriate analysis. Management does not need to review individual audit findings from the past quarter. Instead, synthesise nonconformity data: how many nonconformities were identified, in which process areas, are there repeat findings, what is the trend? This level of analysis is what informs decision making.
Many organisations fail to link management review to business strategy. Quality objectives should align with business priorities, and management review should explicitly examine whether current QMS design and resourcing support strategic delivery. If your business is pursuing aggressive growth in a new market segment, does your quality system have the capacity to support that expansion? If supply chain resilience is a strategic priority, does your supplier management process include appropriate risk assessment? These connections must be made explicit during management review.
Insufficient follow up is another failure mode. Management review identifies that corrective actions from the previous review were not completed, but nothing happens as a result. The next review repeats the same observation. This cycle indicates that management review lacks teeth—there are no real consequences for failing to complete committed actions. Develop a mechanism to track and escalate overdue actions, and ensure that responsibility assignments include explicit accountability.
Some organisations schedule management review annually, despite the standard requiring that frequency is determined by the organisation. For most businesses, annual review is insufficient. Quarterly or biannual review is more appropriate because it allows timely response to emerging issues and keeps QMS development aligned with business changes. However, frequency should be determined by actual need, not regulatory assumption.
Exemplar Global Recognised Training ProviderRTP No. 310970Integrating Management Review With Internal Audit Findings
Internal audit provides critical input to management review, but many organisations fail to use this information effectively. ISO 9001 Clause 9.2 requires that internal audits are conducted to evaluate conformance and effectiveness of the QMS. This means audit findings should reveal whether processes are performing as designed and whether the system design itself is adequate.
When presenting audit data to management review, move beyond counting nonconformities. Instead, analyse findings by process area: which areas show consistent control, which areas are generating repeated findings, which areas show improving or declining trends? A manufacturing business might find that nonconformities are concentrated in the production planning process. This pattern suggests that the problem is not random operator error but a systemic design or capacity issue requiring management attention.
Audit findings should also inform decisions about resource allocation. If audits consistently identify that staff lack competency in a particular area, management review must decide whether to invest in training, revise procedures, or restructure roles. This decision requires management accountability, not just quality department problem solving.
Using Management Review to Drive Continuous Improvement
Effective management review is not a compliance formality; it is a mechanism for driving continuous improvement. The meeting should identify systemic opportunities for improvement, not just problems requiring corrective action. For example, if customer satisfaction surveys reveal that customers value rapid response to inquiries, management might decide to invest in new communication technology or restructure complaint handling to prioritise speed.
Management review should also examine whether quality objectives remain appropriate or whether they should be adjusted based on performance and changing business environment. An organisation that has consistently exceeded a quality objective might increase the target. An organisation facing economic headwinds might adjust objectives to focus on cost efficiency alongside quality.
The review provides an opportunity to examine whether the QMS is supporting business growth. If the organisation is expanding into new product lines or markets, does the quality system need to evolve? Are new risks emerging that require additional controls? Are there opportunities to streamline processes to improve efficiency?
By positioning management review as a strategic business conversation rather than a compliance obligation, the organisation creates conditions for genuine improvement. Staff at all levels will recognise that management is actively engaged in quality performance, which reinforces the importance of QMS compliance and drives engagement with quality initiatives.
Audit Workshop offers accredited ISO training across ISO 9001, ISO 14001, and ISO 45001 at Foundation, Internal Auditor, and Lead Auditor levels. Our courses are Exemplar Global recognised and designed for professionals who want both standard knowledge and practical audit skills.
