Carrying Out Management Reviews Under ISO 9001

ISO 9001 Clause 9.3

This clause requires the organisation to conduct and document management reviews which assess the quality management system and its required inputs/outputs.

What Does ISO 9001 Clause 9.3 Require?

Clause 9.3 of ISO 9001:2015 requires top management to review the quality management system at planned intervals, to ensure it remains suitable, adequate, effective and aligned with the strategic direction of the organisation.

It is worth being clear on what the management review is and is not. It is a documented review process - not a meeting. The standard requires top management to contribute to and be accountable for the review, but the format is flexible. The alphaZ F-Q3 Management Review form reflects this by listing contributors rather than attendees. What matters is that all required inputs are genuinely considered, that top management is engaged with the outputs, and that the results are documented.

Clause 9.3.2 - Management Review Inputs

The management review must consider a defined set of inputs. These are: the status of actions from previous management reviews; changes in internal and external issues relevant to the QMS; information on QMS performance and effectiveness, including trends in customer satisfaction and interested party feedback, the degree to which quality objectives have been met, process performance and product and service conformity, nonconformities and corrective actions, monitoring and measurement results, audit results, and performance of external providers; the adequacy of resources; the effectiveness of actions taken to address risks and opportunities; and opportunities for improvement.

These inputs are not optional - the standard requires all of them to be considered. The F-Q3 Management Review form is structured to cover each input systematically, providing both a prompt and a record.

Clause 9.3.3 - Management Review Outputs

The outputs of the management review must include decisions and actions related to opportunities for improvement, any need for changes to the QMS, and resource needs. Documented information must be retained as evidence of the review and its outputs.

The management review is one of the documents I always ask to see at an external audit. I'm checking that it has been completed at a planned interval, that all required inputs have been covered, and that there are meaningful outputs - decisions and actions, not just a record that the review took place. I'm particularly interested in whether the outputs link to what I can observe in the business - if the management review identified a need for additional resources or a change to the QMS, I'll look for evidence that this has been acted upon. A well-completed F-Q3 form with substantive entries against each input, and follow-up actions with owners and dates, tells me the management review is functioning as intended.

The F-Q3 Management Review form is designed to make the management review simple - it covers all required inputs in a logical sequence and provides space for the outputs and agreed actions. The key to a useful management review is populating the inputs with real data before the review takes place - current customer satisfaction data, objective progress, audit findings, nonconformance trends - so that top management can genuinely assess performance and make informed decisions about what needs to change. A management review completed with current data and meaningful actions is a genuine tool for continual improvement, not just a compliance exercise.

The management review does not need to be a formal meeting. What it needs to be is a documented process where top management genuinely engages with how the QMS is performing and decides what to do about it. Use the F-Q3 form, work through each input with current data, agree the actions that need to follow, and record who is responsible and when they need to be done. Review it at least annually. That is what Clause 9.3 requires - and done properly, it's one of the most useful things you'll do for the business.

Practical Compliance Guidance

To comply with Clause 9.3, the management review must be conducted at planned intervals with genuine top management contribution, must cover all required inputs, and must produce documented outputs including decisions, actions and resource needs.

alphaZ document	How it supports Clause 9.3
ISO 9001 Management System Toolkit	The complete toolkit including the F-Q3 Management Review form and all supporting documents.
F-Q3 Management Review	The primary document for conducting and recording the management review. Structured to cover all required Clause 9.3.2 inputs and capture the outputs required by Clause 9.3.3. Lists contributors rather than attendees, reflecting the documented process nature of the review.

Note - all the above files can be downloaded with an alphaZ subscription

Frequently Asked Questions

Does the management review need to be a formal meeting?

No. The standard requires top management to conduct a review of the QMS at planned intervals - it does not require a formal meeting. The management review is a documented process, and the format is flexible. Top management must contribute to and take accountability for the review and its outputs, but how that happens is not prescribed. The F-Q3 form lists contributors rather than attendees to reflect this. What matters is that all required inputs are genuinely considered, that top management is engaged, and that the outputs - decisions, actions, resource needs - are documented.

How often does the management review need to take place?

The standard requires the management review to be conducted at planned intervals - it does not specify a minimum frequency. In practice, most certification bodies expect at least one management review per year. Some organisations conduct the review more frequently - quarterly or biannually - particularly where the business is changing rapidly or where previous reviews have identified significant issues requiring closer monitoring. Whatever frequency is chosen should be documented in the QMS and adhered to consistently.

What happens if we miss a management review?

Missing a planned management review would typically be raised as a nonconformity at an external audit. If a review is missed, the most important thing is to conduct it as soon as possible and document it, along with a note of why the planned date was missed and what will be done to prevent recurrence. Auditors understand that businesses face operational pressures - what they look for is that the programme is generally maintained and that missed reviews are the exception rather than the pattern.

Do all of the required inputs need to have a substantive entry?

Yes - all required inputs must be considered and documented. Where a particular input has no significant findings - for example, where there have been no nonconformities in the period - this should be noted explicitly rather than left blank. A management review record where multiple inputs are blank or marked "N/A" without explanation gives an auditor reason to question whether the review has been completed thoroughly. Even where there is nothing significant to report, a brief note confirming this is sufficient.

Further Resources