How to conduct a management review
Based on Citation ISO Certification 's video on YouTube. If you like this content, support the original creators by watching, liking and subscribing to their content.
A management review is a structured, recurring meeting meant to evaluate the management system’s effectiveness and fitness for purpose, not just business performance.
Briefing
A management review is a structured, recurring meeting—at least annually, but often more frequently during early implementation—that keeps a management system effective, aligned with business strategy, and genuinely geared toward continual improvement. Rather than treating it as a compliance checkbox, the process is meant to evaluate whether the management system is working properly, identify non-conformities and missed objectives, and adjust actions based on real performance and changing risks.
The core purpose is to review the management system itself, not simply the business outcomes. Senior management involvement is essential, but input from across the organization makes the review more useful and improves communication. The review should check whether the system remains “fit for purpose,” follows the organization’s strategic direction, and includes SMART objectives—specific, measurable, agreeable, realistic, and time-bound—so goals can be managed in a controlled way. Changes to the system also need to be documented so the review can step back and assess what has shifted over the prior six or twelve months, and whether those changes are producing the intended results.
Preparation drives quality. Attendees should receive as much relevant data and evidence as possible before the meeting, along with discussion points and an agenda. Evidence typically includes prior management review minutes, outstanding issues, internal audit results, non-conformities, records of legal and other requirements, complaints analysis, corrective and preventative actions, and policy reviews. During the meeting, detailed minutes should capture responsibilities and deadlines for each action, ensuring items do not drift without closure.
The agenda items emphasized include evaluating compliance with applicable legislation and other requirements (often supported by a legal register), reviewing performance against management system objectives and targets from the previous period, and reassessing risks and opportunities—such as through SWOT analysis—so strengths, weaknesses, opportunities, and threats can feed directly into updated objectives. The meeting should also consider trends in performance, feedback from interested parties (customers, regulators like HMRC, insurance brokers, and neighboring businesses), and the effectiveness of actions taken to address risks and opportunities.
A template-driven approach helps standardize the process. The transcript describes management review templates aligned to ISO clauses (notably section 9 items), where the goal is to replace vague entries like “no change” with clear, readable narratives showing what was evaluated and what conclusions were reached. The templates also include space for actions arising from the review and any associated documents.
Questions from participants sharpen practical decisions: management review attendees should include senior management and, depending on business size and cadence, may include line management or representatives to broaden perspectives. Financial forecasts are not required in depth, but financial considerations can be discussed because costs and resource needs affect implementation and maintenance. Objectives and actions can span quality, environment, health and safety, and broader company objectives—as long as they remain SMART and align with strategic direction. The session also addresses integrated management systems, where 9 and 14 can be reviewed alongside 9 14 and 45 in a single meeting by covering the relevant agenda items.
Finally, consultancy and support are positioned as a pathway for organizations starting the journey: gap analysis leads to “Purple actions” due within six weeks and “Yellow actions” (including management review setup) due within about twelve months, with certification often achievable in roughly 45 days depending on complexity. Tools like Atlas are presented as a technology and template hub to streamline management review and internal audits, including customizable templates branded for the organization.
Cornell Notes
A management review is a structured meeting—at least once a year, and more often early in implementation—that evaluates whether the management system is effective, still fit for the business, and aligned with strategic direction. The review must focus on the management system (not just business performance), assess compliance with legal and other requirements, and check progress against SMART objectives and targets. Preparation is critical: attendees should receive evidence and discussion points in advance, and the meeting should produce detailed minutes with owners and deadlines for actions. During the meeting, organizations should review performance trends, feedback from interested parties, and the effectiveness of actions addressing risks and opportunities (e.g., via SWOT). This matters because it turns continual improvement into a managed, documented cycle rather than a compliance exercise.
How often should a management review happen, especially when a management system is new?
What’s the difference between reviewing the business and reviewing the management system?
What should be prepared before the management review meeting?
Which agenda elements were emphasized during the meeting itself?
How should objectives and targets be handled in the management review?
Do financial forecasts need to be part of the management review?
Review Questions
- What evidence should be gathered before a management review to ensure the meeting produces actionable decisions rather than vague statements?
- Why does the management review need to evaluate the management system’s effectiveness rather than only reviewing business performance?
- How do SMART objectives and SWOT-derived risks/opportunities connect to the management review agenda and the resulting action plan?
Key Points
- 1
A management review is a structured, recurring meeting meant to evaluate the management system’s effectiveness and fitness for purpose, not just business performance.
- 2
During early implementation, reviews may need to happen more frequently (e.g., every six months) before settling into an annual cadence.
- 3
Senior management should be involved, but input from across the organization improves communication, engagement, and the quality of decisions.
- 4
Preparation is mandatory for a strong review: distribute evidence, prior minutes, audit results, legal/other requirement records, complaints analysis, and action status ahead of time.
- 5
The agenda should include compliance evaluation, performance trends, feedback from interested parties, and the effectiveness of actions addressing risks and opportunities.
- 6
Objectives and targets must be SMART and aligned with strategic direction; they can span quality, environment, health and safety, and broader company goals.
- 7
Minutes must capture owners and deadlines for actions so continual improvement doesn’t stall after the meeting.