Get AI summaries of any video or article — Sign up free
How to conduct a management review thumbnail

How to conduct a management review

6 min read

Based on Citation ISO Certification 's video on YouTube. If you like this content, support the original creators by watching, liking and subscribing to their content.

TL;DR

A management review is a structured, recurring meeting meant to evaluate the management system’s effectiveness and fitness for purpose, not just business performance.

Briefing

A management review is a structured, recurring meeting—at least annually, but often more frequently during early implementation—that keeps a management system effective, aligned with business strategy, and genuinely geared toward continual improvement. Rather than treating it as a compliance checkbox, the process is meant to evaluate whether the management system is working properly, identify non-conformities and missed objectives, and adjust actions based on real performance and changing risks.

The core purpose is to review the management system itself, not simply the business outcomes. Senior management involvement is essential, but input from across the organization makes the review more useful and improves communication. The review should check whether the system remains “fit for purpose,” follows the organization’s strategic direction, and includes SMART objectives—specific, measurable, agreeable, realistic, and time-bound—so goals can be managed in a controlled way. Changes to the system also need to be documented so the review can step back and assess what has shifted over the prior six or twelve months, and whether those changes are producing the intended results.

Preparation drives quality. Attendees should receive as much relevant data and evidence as possible before the meeting, along with discussion points and an agenda. Evidence typically includes prior management review minutes, outstanding issues, internal audit results, non-conformities, records of legal and other requirements, complaints analysis, corrective and preventative actions, and policy reviews. During the meeting, detailed minutes should capture responsibilities and deadlines for each action, ensuring items do not drift without closure.

The agenda items emphasized include evaluating compliance with applicable legislation and other requirements (often supported by a legal register), reviewing performance against management system objectives and targets from the previous period, and reassessing risks and opportunities—such as through SWOT analysis—so strengths, weaknesses, opportunities, and threats can feed directly into updated objectives. The meeting should also consider trends in performance, feedback from interested parties (customers, regulators like HMRC, insurance brokers, and neighboring businesses), and the effectiveness of actions taken to address risks and opportunities.

A template-driven approach helps standardize the process. The transcript describes management review templates aligned to ISO clauses (notably section 9 items), where the goal is to replace vague entries like “no change” with clear, readable narratives showing what was evaluated and what conclusions were reached. The templates also include space for actions arising from the review and any associated documents.

Questions from participants sharpen practical decisions: management review attendees should include senior management and, depending on business size and cadence, may include line management or representatives to broaden perspectives. Financial forecasts are not required in depth, but financial considerations can be discussed because costs and resource needs affect implementation and maintenance. Objectives and actions can span quality, environment, health and safety, and broader company objectives—as long as they remain SMART and align with strategic direction. The session also addresses integrated management systems, where 9 and 14 can be reviewed alongside 9 14 and 45 in a single meeting by covering the relevant agenda items.

Finally, consultancy and support are positioned as a pathway for organizations starting the journey: gap analysis leads to “Purple actions” due within six weeks and “Yellow actions” (including management review setup) due within about twelve months, with certification often achievable in roughly 45 days depending on complexity. Tools like Atlas are presented as a technology and template hub to streamline management review and internal audits, including customizable templates branded for the organization.

Cornell Notes

A management review is a structured meeting—at least once a year, and more often early in implementation—that evaluates whether the management system is effective, still fit for the business, and aligned with strategic direction. The review must focus on the management system (not just business performance), assess compliance with legal and other requirements, and check progress against SMART objectives and targets. Preparation is critical: attendees should receive evidence and discussion points in advance, and the meeting should produce detailed minutes with owners and deadlines for actions. During the meeting, organizations should review performance trends, feedback from interested parties, and the effectiveness of actions addressing risks and opportunities (e.g., via SWOT). This matters because it turns continual improvement into a managed, documented cycle rather than a compliance exercise.

How often should a management review happen, especially when a management system is new?

The meeting is held at least once a year, but frequency can be higher. For a new management system, the guidance given is to review every six months at the start. After the organization has completed the first cycle(s) and “got the culture right,” it may shift to an annual basis. The rationale is that more frequent reviews help catch non-conformities, objective gaps, and other issues earlier while the system is still bedding in.

What’s the difference between reviewing the business and reviewing the management system?

The transcript draws a clear line: the management review evaluates the effectiveness of the management system within the business, not just the business results. It’s possible to see audits that review business performance without covering the management system requirements (including section 9-style inputs). The management review should specifically assess whether the system is working properly and remains fit for purpose.

What should be prepared before the management review meeting?

Before the meeting, attendees should receive as much data and information as possible, plus discussion points and an agenda. Evidence examples include prior management review minutes, outstanding issues, internal audit reports, non-conformities, a records register of legal and other requirements, complaints analysis, corrective and preventative actions, and policy reviews. The goal is to ensure participants arrive ready to discuss evidence, not just assumptions.

Which agenda elements were emphasized during the meeting itself?

Key items include: evaluation of compliance with applicable legislation and other requirements (often using a legal register); review of performance against management system objectives and targets; reassessment of risks and opportunities (for example, using SWOT analysis); assessment of trends in performance; feedback from interested parties (customers, HMRC, insurance brokers, neighboring businesses); and evaluation of the effectiveness of actions taken to address risks and opportunities. Minutes should record who is responsible for each action and the deadline.

How should objectives and targets be handled in the management review?

Objectives and targets should align with strategic direction and be SMART: specific, measurable, agreeable, realistic, and time-bound. The transcript stresses that objectives shouldn’t be vague (e.g., “increase the business by five percent” without a controlled plan). It also notes that objectives can cover more than one domain—quality, environment, health and safety, and broader company objectives—so long as they remain SMART and connect to the management system being reviewed.

Do financial forecasts need to be part of the management review?

The guidance given is that the standard doesn’t require deep financial forecasting as a core management review input. However, it’s still acceptable—and potentially useful—to discuss financial aspects at a high level because implementation and maintenance have costs, and interested parties and resource needs can be influenced by financial realities.

Review Questions

  1. What evidence should be gathered before a management review to ensure the meeting produces actionable decisions rather than vague statements?
  2. Why does the management review need to evaluate the management system’s effectiveness rather than only reviewing business performance?
  3. How do SMART objectives and SWOT-derived risks/opportunities connect to the management review agenda and the resulting action plan?

Key Points

  1. 1

    A management review is a structured, recurring meeting meant to evaluate the management system’s effectiveness and fitness for purpose, not just business performance.

  2. 2

    During early implementation, reviews may need to happen more frequently (e.g., every six months) before settling into an annual cadence.

  3. 3

    Senior management should be involved, but input from across the organization improves communication, engagement, and the quality of decisions.

  4. 4

    Preparation is mandatory for a strong review: distribute evidence, prior minutes, audit results, legal/other requirement records, complaints analysis, and action status ahead of time.

  5. 5

    The agenda should include compliance evaluation, performance trends, feedback from interested parties, and the effectiveness of actions addressing risks and opportunities.

  6. 6

    Objectives and targets must be SMART and aligned with strategic direction; they can span quality, environment, health and safety, and broader company goals.

  7. 7

    Minutes must capture owners and deadlines for actions so continual improvement doesn’t stall after the meeting.

Highlights

Management reviews should focus on the management system’s effectiveness—what’s working, what’s changed, and whether it remains fit for the business—not merely on business outcomes.
Early in the journey, reviewing every six months helps catch non-conformities and objective gaps sooner before moving to annual reviews.
A strong management review depends on pre-meeting evidence and clear minutes with responsible owners and deadlines for each action.
SWOT analysis and interested-party feedback are positioned as direct inputs into objectives and risk/opportunity actions.
Templates aligned to ISO clause inputs help prevent vague entries and force a readable, evidence-based narrative of what was evaluated and concluded.

Topics

  • Management Review
  • ISO 9001
  • ISO 14001
  • ISO 45001
  • Integrated Management Systems

Mentioned