Guide · Review
The ISO management review meeting, explained
The management review is where the owner actually looks at whether the management system is working — and it's a clause every auditor checks. Done well it takes an hour and genuinely improves the business. Here's who needs to be there, how often, exactly what to cover, and a ready-to-use agenda.
What it is
A management review (ISO 9001/14001/45001 clause 9.3) is a formal check-in where top management reviews how the management system is performing and decides what to change. It's not a document you write once — it's a recurring meeting with defined inputs and defined outputs, minuted as evidence. Skipping it, or faking one the week before your audit, is one of the more common findings.
Who attends, and how often
"Top management" must be involved — in a small business that's the owner or managing director, plus whoever runs the system day to day. Hold it at planned intervals: at least annually, though quarterly or six-monthly is common, especially heading into certification. What matters is that the interval is planned and the review actually happens on schedule.
The required inputs (clause 9.3.2)
Your review has to consider, at minimum:
- Status of actions from previous management reviews.
- Changes in external and internal issues relevant to the system.
- Customer satisfaction and feedback from interested parties.
- The extent to which objectives have been met.
- Process performance and conformity of products and services.
- Nonconformities and corrective actions.
- Monitoring and measurement results, and audit results.
- Performance of external providers (suppliers and subcontractors).
- Adequacy of resources.
- Effectiveness of actions taken to address risks and opportunities.
- Opportunities for improvement.
For ISO 14001 and 45001, add your compliance obligations status, incident and consultation results, and progress on environmental or safety objectives.
The required outputs (clause 9.3.3)
The review must produce decisions and actions on: opportunities for improvement, any need to change the management system, and resource needs. In practice that means a short list of decisions with owners and dates — the evidence that the review led somewhere.
The inputs, compiled for you
The tedious part of a management review is gathering the inputs — audit results, objectives progress, actions, supplier performance, compliance status. BigTick compiles them from your live system into a management-review record, so you walk into the meeting with the numbers already in front of you and walk out with minuted decisions.
A ready-to-use agenda
- Actions and decisions from the last review.
- Changes affecting the business (issues, risks, interested parties).
- Customer feedback and complaints.
- Objectives & targets — progress.
- Audit results (internal and external) and corrective actions.
- Incidents, nonconformities and monitoring results.
- Supplier and subcontractor performance.
- Compliance obligations status.
- Resources and training needs.
- Improvement opportunities and decisions — with owners and dates.
Run a management review that passes the audit
BigTick compiles your inputs, templates the agenda and minutes, and keeps the record on file — so every review ticks every required input, every time.
Start a free trialFrequently asked questions
How often should a management review be held?
At planned intervals — at least annually for most small businesses, often quarterly or six-monthly heading into certification. The key is the interval is planned and the review actually happens and is recorded.
Who needs to attend?
Top management must be involved — usually the owner or managing director in a small business, plus whoever runs the system. It demonstrates leadership is engaged, not just delegating compliance.
What are the inputs and outputs?
Inputs (9.3.2) include previous actions, changes and risks, customer feedback, objectives progress, audit and monitoring results, nonconformities, supplier performance, compliance status, resources and improvement opportunities. Outputs (9.3.3) are decisions on improvements, system changes and resource needs.
Related guides
A plain-English summary of ISO clause 9.3, not a substitute for the standard or certification advice.