In short
Management review is the requirement for top management to formally review the management system at planned intervals (clause 9.3 of the ISO management system standards). Equas assembles the information, facilitates the discussion and writes the record, so the meeting shapes where resource goes and the evidence stands up at audit.
What management review is for
Management review keeps your management system aligned with the direction of the business. Businesses move: new contracts, new sites, new technology, new people, new obligations. Systems do not move on their own. The review is the scheduled point at which top management looks at both together and decides what needs to change.
It does three things:
- It checks the system still fits the business, as it is now rather than as it was when the system was written.
- It puts the compliance position in front of the people accountable for it: audit results, non-conformities, incidents, legal and customer obligations, and objectives that are on or off track.
- It turns that position into decisions about where money, time and attention go over the coming period.
The third is the one most often lost. Compliance issues rarely arrive in order of importance, and a leadership team has finite resource. The review is the one occasion in the year when the whole picture is on one table and the people who control the budget can make a considered choice about what to fund and what to leave. Without it, resource tends to follow whoever raised their voice most recently.
Each standard sets out what has to be considered. In ISO 9001, for example, that means the status of previous actions, changes in internal and external issues, customer feedback, process performance and conformity, non-conformities and corrective actions, monitoring results, audit results, supplier performance, the adequacy of resources, the effectiveness of actions on risks and opportunities, and opportunities for improvement. Other standards add their own, such as compliance obligations in ISO 14001 and worker consultation in ISO 45001. Read as a business agenda rather than a checklist, it is close to what a sensible board would want to know anyway. The difficulty is assembling the information behind it, and that is the part we take on.
How Equas runs your management review
Our job is to make the meeting worth your senior managers' time and to make sure the record proves what the standard requires. Most organisations manage only one of the two. A good discussion that leaves a two-line minute is a finding waiting to happen. An immaculate record of a meeting nobody valued is an hour of senior time spent on paperwork. We do both in the same session.
We gather and analyse the inputs and circulate them in advance as a data pack, so what reaches the table is a picture of what is improving, what is not and what is about to become a problem, rather than a stack of reports. We facilitate or chair the meeting, so the person who looks after your system can contribute to the discussion instead of running it. And we produce the minute, the record and the action log, structured so that every required input and output is evidenced without the conversation having to be bent around a checklist.
There is a second reason clients ask for an outside facilitator, and it is not about compliance. Leadership teams tend to be more candid with someone from outside the organisation than with the colleague who owns the system, and the conversations that produce real improvement are usually the uncomfortable ones.
Think of it as the difference between doing your own tax return and sitting down with an accountant who has already pulled the figures together. The decisions remain yours. The assembly, and knowing what the inspector will ask for, does not have to be.
For organisations holding several standards, a single combined review can cover all of them, provided the record demonstrates coverage of each. It also makes for a better meeting: quality, environmental, security and safety issues compete for the same budget and the same people, so they are better weighed in one room than in four.
Who it is for
Working towards certification
You must hold and record a management review before certification. The first one sets the pattern: the agenda, data pack and record become the template for every review afterwards, so it is worth establishing something your leadership team will want to repeat rather than endure.
Already certified
The recurring requirement, and the one most likely to have quietly become a formality. Also the right service when the meeting happens but nothing changes as a result, or when the records do not stand up to audit scrutiny.
What is included
Every required input gathered, analysed and circulated in advance, so your leadership team arrives informed rather than searching.
Ordered around the decisions your leadership team needs to make, while still covering every input the standard requires.
The person who looks after your system contributes instead of administering, and an outsider can ask the question a colleague cannot.
Written to evidence the required outputs (improvement opportunities, system changes and resource needs) and the reasoning behind each decision.
Carried forward, so decisions are tracked to completion and next year's status of previous actions is already evidenced.
One meeting covering ISO 9001, 14001, 27001, 45001 and more, so competing priorities are weighed side by side.
At the interval that suits your size, your risk and how fast the business is changing, delivered on site or remotely.
How it works
- 1
Input gathering
We collect audit results, performance data, customer feedback, non-conformity status, risk actions and objectives progress, and ask what has changed in the business since the last review.
- 2
Data pack preparation
The inputs are analysed into trends, exceptions and the decisions they point to, and circulated in advance.
- 3
The meeting
Facilitated or chaired against an agenda that keeps the discussion on the decisions while covering every required input, on site or remotely, typically two to three hours.
- 4
Record production
Minutes and a formal record demonstrating the required inputs and outputs, and capturing the reasoning behind what was decided.
- 5
Action follow-up
An action log with owners and dates, reviewed before the next meeting so nothing arrives unresolved.
The most popular standards we support
Equas helps clients achieve UKAS-accredited certification across every ISO standard we cover.
The international standard for quality management systems
The international standard for environmental management systems
The international standard for IT service management
The international standard for business continuity management
The international standard for information security management
The international standard for AI management systems
The international standard for occupational health and safety
The international standard for energy management systems
Quality management for the built environment, built on ISO 9001
The Energy Savings Opportunity Scheme
Frequently asked questions
Related services
Integrated Management Systems
One system, multiple standards, a fraction of the duplication
Internal Auditing
Independent assurance that your system is working
Outsourced System Maintenance
Keep your certification valid without it landing on someone's desk