Frequently asked questions
What is a management review in ISO 9001?
A management review in ISO 9001 is the regular meeting where a business's leaders look at how the quality management system is performing and decide what needs to change. They examine things like audit results, customer feedback, complaints, objectives and supplier performance, then agree actions to improve the system. In the standard it is required by clause 9.3. In plain terms, it is the sit-down where the people in charge keep the system honest and useful, rather than letting it drift.
What is clause 9.3 of ISO 9001?
Clause 9.3 of ISO 9001 is the part of the standard that requires top management to review the quality management system at planned intervals. It sets out what the review must consider, known as the inputs, and what must come out of it, known as the outputs, which are decisions on improvements, changes to the system, and resources needed. This management review procedure is written to satisfy clause 9.3 in a way a small or medium sized business can actually run.
How often should a management review be held?
A management review should be held at least once a year, which is the minimum most assessors expect. While your system is new, holding one every six months is worth doing, because it keeps things on track while habits are forming and gives you two chances a year to correct course. There is no rule that it must be a single long meeting; what matters is that the review genuinely happens and that its decisions are recorded and acted on.
What are the inputs to a management review?
The inputs to a management review are the pieces of information the meeting looks at before making decisions. Under ISO 9001 they include actions from the previous review, changes affecting the business, customer feedback and complaints, progress on quality objectives, process and product performance, nonconformities and corrective actions, audit results, supplier performance, whether resources are adequate, how well actions on risks and opportunities have worked, and opportunities for improvement. This procedure lists all of them as a ready-made agenda.
What are the outputs of a management review?
The outputs of a management review are the decisions and actions that come out of the meeting, each recorded with a person responsible and a date. They cover opportunities for improvement and what you will do about them, any changes needed to the system, policy or objectives, and any resources required. A review is only worth holding if it produces these outputs, which is why the procedure insists every action is written down with an owner and a deadline, and checked off at the next review.
Do you need a management review procedure for ISO 9001?
ISO 9001 does not demand a document called a management review procedure, but it does require the review itself under clause 9.3, and a short written procedure is the simplest way to run it consistently and show you meet the requirement. Without one, reviews tend to be irregular, forget key inputs, or fail to record their decisions, which are exactly the gaps an assessor looks for. Having the procedure means the review happens properly every time, rather than depending on someone remembering how it went last year.