ISO 14001 management review: the inputs, the results, the record, and how to run it in one meeting a quarter

What does clause 9.3 of ISO 14001 require?

Clause 9 of ISO 14001, Performance evaluation, ends with the management review. Monitoring (9.1.1), the evaluation of compliance (9.1.2) and the internal audit (9.2) produce the facts, and 9.3 is where the people who direct the organisation weigh those facts and decide. The 2026 edition restructured the clause into three parts: 9.3.1 General, 9.3.2 Management review inputs and 9.3.3 Management review results. The 2015 edition said outputs.

Put plainly, top management reviews the EMS at planned intervals, looks at a defined set of inputs and ends with decisions. It is the one point where every other clause meets: are the significant aspects still right, is each site within its permits, are objectives on track, and does the system have the people and money it needs?

The inputs do not come from nowhere. Every one of them is something another clause has already produced, which is why the agenda below is built from the clauses that produce them. Two of those sources have their own guides: building the aspects and impacts register and the compliance obligations and legal register.

How often, and who attends

The standard requires planned intervals and leaves the frequency to you, so an auditor first looks for a dated schedule for the year, kept. Certification bodies look at reviews throughout the cycle: ISO/IEC 17021-1, the standard they are accredited to, has Stage 1 evaluate whether management reviews are planned and performed, and requires every surveillance audit to include management review.

Top management means the person or group directing the organisation at the highest level for the certified scope. For a single plant that is usually the general manager and department heads. For a multi-site certificate it is the leadership that controls all the sites, with each site manager reporting that site's results. Alongside them:

• the environmental lead, who prepares the pack and keeps the minutes;
• the owners of the processes linked to significant aspects, such as production, maintenance, logistics and facilities;
• the internal audit lead, reporting on the programme;
• purchasing, where contractors and suppliers carry significant aspects.

Running it in one meeting a quarter

An annual review meets the wording, but a permit exceedance in March should not wait until December. Sterling's practice is a review of about an hour and a half each quarter with the same agenda every time. Presenters send one page per item four or five working days ahead, showing the trend against the limit or target, and each page ends with a proposal the meeting can accept or change.

In the last quarter of the year, add the annual trends, next year's environmental objectives and a check that the policy and the scope still fit the business.

What the review must decide

A review without results has not happened, whatever the attendance sheet says. The decisions we expect to see in a sound ISO 14001 review fall under four headings.

• Improvement. What will be done to improve environmental performance, feeding continual improvement under 10.1: a new objective, a tighter operating criterion, a waste stream to eliminate.
• Changes to the system. A new site, process, chemical or supplier that alters the aspects, taken forward through 6.3, Planning of changes, before it goes live.
• Resources. Monitoring equipment, laboratory testing, bunding, competent people or time, approved or refused with a reason.
• Objectives off track. Where an objective is missing its target, what happens next: more resource, a revised plan or a revised target, with the reason recorded.

A reasoned decision to change nothing is a legitimate result for one heading in one quarter. A year of reviews with no decision under any heading tells an auditor that the review is watching rather than steering.

The record auditors ask for

Keep the minutes as documented information; they are the evidence that the review took place and what it decided. An auditor reading them checks five points: the date and who attended, with top management present; each agenda item addressed and the data it relied on referenced; the decisions under each heading; an owner and due date for every action; and, at the following review, what became of each action.

An auditor picks one decision, say approval of a new effluent sampling point or a revised waste objective, and follows it into the monitoring plan or the objectives register. A decision to change the system should reappear as a planned change under 6.3. Expect the general manager to be asked what the last review decided. How auditors sample this at each stage is covered in the Stage 1 and Stage 2 guide.

What a weak management review looks like

At gap analysis the pattern we meet most often is a review held once, shortly before the certification audit, consisting of an environmental report read aloud and minutes that say the information was noted.

Organisations running ISO 45001 alongside ISO 14001 can hold one HSE review, provided each standard's inputs appear on the agenda; the ISO 14001 and ISO 45001 guide explains the combined system.

Where Effivity fits

Effivity's environmental management software includes a management review module, and the data presenters need sits in its other EMS modules: aspects and impacts, compliance obligations, waste, emergency response, performance evaluation, nonconformance and internal audit. Effivity is included with the engagement, at no additional cost, and is used in 50+ countries; the Effivity for ISO 14001 guide maps the modules to the standard.

ISO 14001 management review: questions buyers ask