ISO 9001 management review: required inputs, outputs and an agenda template
By Evin Lim, Founder and Managing Director, AA Alive Sdn Bhd · Published
Key points
- Clause 9.3 requires top management to review the QMS at planned intervals to make sure it stays suitable, adequate, effective and aligned with the company’s strategic direction.
- The review must consider specific inputs, including previous actions, changes, performance data, resources, risks and improvement opportunities.
- Outputs must include decisions on improvement, changes to the QMS and resource needs, and the results must be kept as a record.
- Certification bodies expect at least one management review before the first certification audit.
Why the management review matters
The management review is where top management looks at the whole quality management system and decides what to change. Auditors use it to judge leadership commitment (clause 5.1), so a meeting that only reads out numbers without any decisions is a common weakness.
Required inputs (clause 9.3.2)
| Input | What to bring to the meeting |
|---|---|
| Status of actions from previous reviews | Action list from the last minutes, with status |
| Changes in external and internal issues | Market, regulation, customers, staff, technology, climate-related issues |
| Customer satisfaction and feedback from interested parties | Survey results, complaints, compliments, returns |
| Extent quality objectives were met | Objective scorecard: target vs actual |
| Process performance and conformity of products and services | KPIs, reject and rework rates, on-time delivery |
| Nonconformities and corrective actions | Open and closed NCs, repeat issues |
| Monitoring and measurement results | Trends from clause 9.1 data |
| Audit results | Internal and external audit findings |
| Performance of external providers | Supplier ratings, late or rejected deliveries |
| Adequacy of resources | People, equipment, infrastructure, work environment |
| Effectiveness of actions on risks and opportunities | Risk register review |
| Opportunities for improvement | Suggestions from staff, customers and audits |
Required outputs (clause 9.3.3)
The results of the review must include decisions and actions on:
- Opportunities for improvement.
- Any need for changes to the QMS.
- Resource needs.
You must retain documented information as evidence of the results. Minutes with an action list are the usual format.
Management review agenda template
- Attendance and purpose of the meeting.
- Actions from the previous management review.
- Changes in context: internal and external issues, interested parties, climate change relevance.
- Quality objectives: results and whether targets remain right.
- Customer satisfaction, complaints and feedback.
- Process performance and product or service conformity.
- Nonconformities and corrective actions.
- Internal and external audit results.
- Supplier performance.
- Risks and opportunities: are actions working?
- Resources: people, training, equipment, infrastructure.
- Improvement opportunities and decisions.
- Action list: what, who, by when.
Tips for a management review that auditors respect
- Collect data first. Ask each process owner for a one-page summary a week before.
- Look at trends, not single figures. One month of complaints tells you little; twelve months shows direction.
- Record decisions with owners and dates. An output without an owner is hard to show as effective at the next audit.
- Link to strategy. Clause 9.3.1 asks for alignment with strategic direction, so discuss growth plans, new customers or new products.
- It does not have to be one meeting. You can cover inputs across several management meetings, as long as all inputs are covered and recorded.
ISO 9001:2026 note
ISO 9001:2026 puts more weight on top management promoting a quality culture and ethical behaviour. Expect auditors to look for this in management review discussions and decisions. Read the ISO 9001:2026 transition guide for the other changes.
Frequently asked questions
How often should an ISO 9001 management review be held?
ISO 9001 says "at planned intervals". Most organisations hold at least one full review a year, and many small companies prefer twice a year so issues are picked up sooner.
Who should attend the management review?
Top management, meaning the person or group who directs the organisation, plus the people who own the key processes. The certification body will expect top management to be personally involved.
Can the management review be combined with other meetings?
Yes, as long as every required input is covered, outputs are decided and the results are recorded. Many companies combine it with ISO 14001 or ISO 45001 reviews in an integrated management system.
Need help with your ISO 9001 system?
We prepare Malaysian companies for ISO 9001 certification by an accredited certification body. The first consultation is free.