ISO 9001 management review: the inputs, the outputs, the record, and how to run it in one meeting a quarter

What clause 9.3 requires, in three parts

Management review is where the people who run the organisation look at what the quality management system has produced and decide what happens next. In ISO 9001:2026 it is clause 9.3, under Performance evaluation, with three sub-clauses: 9.3.1 General, 9.3.2 Management review inputs and 9.3.3 Management review results. The 2015 edition called the third part outputs, and many organisations still use that word.

Under 9.3.1, top management reviews the system at planned intervals to confirm it remains suitable, adequate, effective and aligned with the organisation's strategic direction.

The inputs, by topic

• the status of actions from earlier reviews;
• changes in external and internal issues relevant to the system;
• changes in the needs and expectations of relevant interested parties, new in 2026;
• information on performance and effectiveness, including trends in customer satisfaction and feedback, how far quality objectives were met, process performance and conformity of products and services, nonconformities and corrective actions, monitoring and measurement results, audit results and the performance of external providers;
• the adequacy of resources;
• the effectiveness of actions taken on risks and opportunities;
• opportunities for improvement.

The results, by topic

The review must end in decisions and actions on improvement opportunities, any need to change the system and resource needs, with documented information as evidence. Global ACI's transition requirements list two changes to the inputs in 2026: the interested-party item, and wording that requires the review to include the inputs, where the 2015 text only asked that they be considered. Our ISO 9001:2026 transition guide covers the rest of the revision.

How often, and who must be in the room

ISO 9001 sets no frequency, only planned intervals, so the first evidence is a dated plan for the year, kept. Certification bodies check the reviews at every stage: under ISO/IEC 17021-1, the standard they are accredited against, the Stage 1 readiness review evaluates whether management reviews are planned and performed, and every surveillance audit includes management review.

Top management must attend: the person or group who directs and controls the organisation at the highest level, for the scope being certified. Process owners present their own results, the internal audit lead reports on the programme, and the quality coordinator prepares the pack and writes the minutes.

Running it in one meeting a quarter

An annual review satisfies the wording but decides on data that is months old. Sterling recommends a 90-minute review every quarter with the same agenda each time, and three habits make it work. The pack goes out five working days ahead, one page per item, each showing a trend rather than a single month. Every presenter brings a recommendation, so the meeting decides rather than watches. The chair states each decision for the minutes, even when it is to change nothing.

In the final quarter, add the year's trends, next year's quality objectives and a check that the policy and scope still fit.

The record auditors ask for

ISO 9001 requires documented information as evidence of each review's results. The record is the minutes, not the slides, and an auditor reads them for five things:

• the date and attendees, with top management present;
• every input addressed, if only to note no change, with the data referenced;
• decisions under improvement, changes to the system and resources;
• an owner and a due date for each action;
• at the next review, the status of each action.

The minutes are then tested against reality. A typical line of enquiry follows one decision, such as a revised objective or an approved hire, into the objectives register or the recruitment file, and a decision to change the system should reappear under clause 6.3, Planning of changes. Auditors also ask top management what the last review decided: a managing director who can name two decisions and their outcome is stronger evidence than any template. The Stage 1 and Stage 2 guide covers the sampling.

What a weak management review looks like

The weak review we meet most often at gap analysis is a slide deck: forty charts, a round of comments and minutes saying the data was reviewed and noted. Nothing in it is wrong, and nothing in it is a result.

Folding it into meetings you already hold

ISO 9001 does not require a separate meeting called management review, and a separate meeting is often what turns it into theatre. If your leadership team already holds a quarterly business review, make management review a standing part of it, under four conditions: that part of the agenda is headed as the management review and follows the input headings; top management is present; its decisions enter the business's normal action log with owners and dates; and its minutes can be produced on their own.

Where monthly meetings already track KPIs or complaints, the review reads the quarter's trend rather than repeating the detail. Organisations also running ISO 14001 or ISO 45001 can review all their systems in one session if each standard's inputs are covered; see the integration guide.

How Effivity records the review

In Effivity's Management Review module you define the agenda or start from one Effivity suggests, attendees are e-mailed automatically, minutes are written against each agenda point, and decisions become action plans, so the status reported next quarter comes from the same record. The figures presenters need, from audit findings and nonconformities to complaints, supplier evaluations, risks and objectives, sit in Effivity's other modules. Effivity is included with the engagement, at no additional cost, and is used in 50+ countries; the Effivity guide maps its modules to ISO 9001.

ISO 9001 management review: questions buyers ask