Carrying Out Environmental Management Reviews Under ISO 14001

ISO 14001 Clause 9.3

Top management formally takes stock of the management system and decides what needs to change.

ISO 14001 Clause 9.3 - Management Review

ISO 14001:2026 Clause 9.3 requires top management to review the environmental management system at planned intervals to confirm its continuing suitability, adequacy and effectiveness. Management review is the highest-level check on the EMS - the point at which top management formally takes stock of how the system is performing and decides what needs to change.

Suitability, adequacy and effectiveness mean three different things. Suitability is whether the system still fits the organisation, given how the business has changed. Adequacy is whether the system is sufficient to meet the requirements - of the standard, of compliance obligations, of the organisation's own goals. Effectiveness is whether the system is actually achieving its intended outcomes. Reviews need to consider all three.

Required Inputs

The standard names a defined set of inputs that the review must consider:

  • the status of actions from previous management reviews;
  • changes in external and internal issues relevant to the EMS, including compliance obligations;
  • changes in the needs and expectations of interested parties;
  • significant environmental aspects;
  • risks and opportunities;
  • the extent to which environmental objectives have been achieved;
  • information on the EMS performance, including environmental performance trends, nonconformities and corrective actions, monitoring and measurement results, fulfilment of compliance obligations, and audit results;
  • adequacy of resources;
  • relevant communication from interested parties, including complaints;
  • opportunities for continual improvement.

The list covers a lot of ground but is not prescriptive about format. The organisation can structure the review document any way it likes, as long as each input is genuinely covered.

Required Outputs

The outputs of the review include decisions related to:

  • conclusions on the continuing suitability, adequacy and effectiveness of the EMS;
  • continual improvement opportunities;
  • any need for changes to the EMS, including resources;
  • actions if needed when environmental objectives have not been achieved;
  • opportunities to improve integration of the EMS with other business processes if needed;
  • any implications for the strategic direction of the organisation.

The decisions need to be documented and communicated to relevant people. Without follow-through the review is a wasted exercise.

Management Review Is Not a Meeting

A common misunderstanding is that management review is one annual meeting. The standard requires the review to happen at planned intervals - which can be one event a year, or several smaller reviews spread across the year covering different inputs each time, or a continuous process that completes the cycle annually. Many organisations find a continuous approach more effective, with quarterly reviews of performance trends and an annual sign-off by top management.

What matters is that all the inputs get covered, that top management is genuinely engaged in the conclusions, and that decisions are made and acted on. Calling something a management review meeting where top management did not actually review anything does not meet the requirement.

The strongest management reviews I have seen are the ones where top management ask difficult questions. Why has this objective been off track for two years. Why does the same nonconformity keep coming up. Why are we still seeing complaints about the same issue. Are our resources actually adequate or are we hoping they are.

Reviews that present a tidy picture and get a tidy nod from top management add no value. The point is to challenge the system, find the issues, and decide what to do about them.

For audit I will look at three things. Did all the inputs get covered. Was top management actually involved. Did decisions and actions come out of the review and were they followed through. If any of those three are missing, the review is not meeting the requirement of the clause regardless of how thick the documentation is.

Management review is top management taking proper stock of the management system. Did it work. What needs to change. What are we going to do about it. Done seriously, this is the most useful clause in the standard. Done as a paperwork exercise, it is the most wasteful.

Practical Compliance Guidance

The management review record is the documented information that captures the inputs considered, the discussion and the decisions taken. The IMS1 Manual sets out the management review approach in Section 9.3.

The following alphaZ documents support compliance with ISO 14001:2026 Clause 9.3.

alphaZ document How to use it
ISO 9001/14001/45001 IMS Toolkit The full set of integrated management system documents covering the requirements of all three standards, including the IMS1 Manual.
ER1 Issues Actions Register Tracks the actions and improvement opportunities arising from management review, with owners, target dates and verification of effectiveness.

Note - all the above files can be downloaded with an alphaZ subscription.

Frequently Asked Questions

The standard says at planned intervals without specifying a frequency. Most organisations conduct a formal management review at least annually. Many also have shorter reviews quarterly or six-monthly that cover specific aspects of EMS performance. The frequency should be sufficient for top management to maintain genuine oversight of how the system is working.
No. The standard does not require a single meeting. The review can be a continuous process completed over a period, with different inputs covered at different points and a final consolidation that confirms the overall conclusions. What matters is that all inputs are covered, top management engages with the outputs, and decisions are documented.
Top management is defined as the person or group of people who directs and controls the organisation at the highest level. In a small business this is typically the owner or the senior management team. In larger organisations it may be a board, a chief executive, or a defined senior leadership group. The key point is that the people accountable for the organisation are the people doing the review.
The input is still considered. If there have been no changes in interested parties needs, the review notes that. If no nonconformities have been raised in the period, that is recorded. The standard requires each input to be reviewed - not that each input must produce a substantive change. A review that has nothing to say about most inputs may indicate that the EMS is not generating useful information for review, which is itself worth examining.

Further Resources

payment logos