The auditor opens your management review folder and asks: "Can I see your most recent management review minutes?" You hand over a one-page document from 11 months ago. The auditor scans it: no customer feedback data, no audit results, no quality objectives review. Major nonconformance. Management review is a top-5 audit failure area, and the fix takes exactly 2 hours per year.
Management Review at a Glance
Clause 9.3
ISO 9001:2015 requires management review at planned intervals. No review = major nonconformance.
Frequency
Minimum annually. Many companies do quarterly. Must be BEFORE your certification audit.
Who Attends
Top management MUST attend. CEO/Owner, not just the quality manager. Auditors verify this.
Duration
Typically 1-3 hours for small manufacturers. Quality over quantity of time spent.
In This Guide:
- 1. What Is a Management Review? (And Why Auditors Care So Much)
- 2. Required Inputs: The 9 Things You Must Discuss
- 3. Required Outputs: Decisions and Action Items
- 4. Ready-to-Use Meeting Agenda Template
- 5. How to Write Management Review Minutes
- 6. Who Must Attend (And Who Can Skip)
- 7. How Often Should You Hold Reviews
- 8. Top 5 Management Review Audit Findings
- 9. Sample Data Dashboard for Your Review
- 10. How to Make Reviews Actually Useful
1. What Is a Management Review? (And Why Auditors Care)
A management review is a formal meeting where top management evaluates the quality management system to ensure it remains suitable, adequate, effective, and aligned with the company's strategic direction. It is NOT a quality department meeting. It is a LEADERSHIP meeting about quality.
Auditors care about management review more than almost any other requirement because it proves one critical thing: top management is actually engaged in quality, not just delegating it. A well-documented management review shows the QMS is being steered, not just maintained.
What It IS:
- • Strategic review of QMS performance
- • Top management evaluating data and trends
- • Decision-making about resources and changes
- • Formal meeting with documented minutes
- • Evidence of leadership commitment
What It's NOT:
- • A quick chat in the hallway
- • The quality manager presenting to themselves
- • A production meeting that mentions quality
- • An email summary with no discussion
- • A checkbox exercise done the day before the audit
2. Required Inputs: The 9 Things You Must Discuss
ISO 9001:2015 Clause 9.3.2 specifies exactly what must be considered during management review. Miss any of these and the auditor will issue a finding:
1. Status of actions from previous reviews
What did we decide last time? Were those actions completed? Show evidence.
2. Changes in external and internal issues
New regulations, customer requirements, market conditions, new equipment, staffing changes, supply chain disruptions.
3. Customer satisfaction and feedback
Customer complaint data, survey results, on-time delivery metrics, returns/warranty claims, lost customers and reasons.
4. Quality objectives and performance
Review each quality objective: target vs. actual. Identify which objectives were met and which were not, with root causes.
5. Process performance and product conformity
Scrap rates, rework hours, first-pass yield, production output vs. capacity, process capability data.
6. Nonconformities and corrective actions
Number of CARs opened/closed, recurring issues, effectiveness of corrective actions, systemic patterns.
7. Audit results
Internal audit findings (by clause), external audit findings, surveillance audit results, status of corrective actions.
8. Supplier performance
Supplier quality metrics, delivery performance, quality issues, changes to approved supplier list.
9. Resource adequacy
Staffing adequacy, equipment condition, training needs, budget for quality initiatives, infrastructure upgrades.
Pro Tip:
You do not need to discuss every input in exhaustive detail. For some items, "No significant changes since last review" is acceptable. The key is that every input is ADDRESSED, even if briefly. The auditor checks for completeness, not length.
3. Required Outputs: Decisions and Action Items
Clause 9.3.3 requires that management review outputs include decisions and actions related to:
- Opportunities for improvement: Specific initiatives approved by management.
- Need for changes to the QMS: Any modifications to policies, procedures, or processes.
- Resource needs: Budget, staffing, equipment, training approved by management.
Every output must be an action item with an owner and a target date. "We should look into that" is not an output. "John will evaluate CMM vendors and present options by June 30" is an output.
4. Ready-to-Use Meeting Agenda Template
Copy this agenda directly. It covers every required input and ensures your minutes will pass an audit:
Management Review Meeting Agenda
| Item | Topic | Presenter | Time |
|---|---|---|---|
| 1 | Opening and attendance record | Quality Manager | 5 min |
| 2 | Status of previous review actions | Quality Manager | 10 min |
| 3 | Changes in external/internal issues | CEO/Owner | 10 min |
| 4 | Customer satisfaction and feedback | Sales/Quality | 15 min |
| 5 | Quality objectives: target vs. actual | Quality Manager | 15 min |
| 6 | Process performance and conformity | Production Mgr | 15 min |
| 7 | Nonconformities and corrective actions | Quality Manager | 10 min |
| 8 | Internal and external audit results | Quality Manager | 10 min |
| 9 | Supplier performance | Purchasing | 10 min |
| 10 | Resource adequacy and needs | CEO/Owner | 10 min |
| 11 | Improvement opportunities and decisions | All | 15 min |
| 12 | Action items, owners, and deadlines | Quality Manager | 10 min |
Total estimated time: 2 hours 15 minutes
5. How to Write Management Review Minutes
Your minutes are the EVIDENCE that the review happened and that all required topics were addressed. They do not need to be a transcript. They need to show what was discussed, what data was reviewed, what decisions were made, and what actions were assigned.
Minutes Must Include:
- Date and location of the meeting
- Attendees (names and roles, proving top management attended)
- Each agenda item with summary of discussion and data reviewed
- Decisions made (approved, rejected, deferred, modified)
- Action items with owner name and target completion date
- Next review date (scheduled)
- Signatures or approval by the meeting chair
Pro Tip:
Include data summaries or charts directly in your minutes. When the auditor reads "Customer satisfaction was reviewed," they want to SEE the data. Attach the chart showing complaint trends or on-time delivery percentages. This eliminates follow-up questions during the audit.
6. Who Must Attend (And Who Can Skip)
ISO 9001 says "top management shall review" the QMS. The key phrase is top management - the people who direct and control the organization at the highest level.
| Role | Required? | Why |
|---|---|---|
| CEO / Owner / President | REQUIRED | Proves top management engagement |
| Quality Manager | REQUIRED | Presents data, writes minutes, tracks actions |
| Operations/Production Mgr | Recommended | Provides process performance data |
| Purchasing Manager | Recommended | Reports on supplier performance |
| Sales/Customer Service | Optional | Customer feedback data |
Audit Killer:
If your CEO/Owner did not attend the management review, the auditor will ask why. "They were busy" is not acceptable. If the owner truly cannot attend, they must formally delegate authority AND the minutes must show this delegation. Better to reschedule than hold it without top management.
7. How Often Should You Hold Reviews
The standard says "at planned intervals." It does not specify annually. Here is what works:
| Company Size | Frequency | Rationale |
|---|---|---|
| 10-50 employees | Annually (minimum) | Sufficient data, manageable scope |
| 50-200 employees | Semi-annually | More data, faster feedback loop |
| 200-500 employees | Quarterly | Complex operations need frequent steering |
Critical timing: Your management review must occur AFTER your internal audit and BEFORE your certification/surveillance audit. The auditor will check the date sequence.
8. Top 5 Management Review Audit Findings
These are the most common nonconformances. Fix all 5 and you are bulletproof:
Missing required inputs
Minutes do not address all 9 required inputs from Clause 9.3.2. Most commonly missing: supplier performance, resource adequacy, or status of previous actions.
No evidence of top management attendance
CEO/Owner name not on attendee list. Or the meeting clearly happened between quality manager and themselves.
No action items or outputs
Minutes record discussions but no decisions. No action items with owners and deadlines.
No data to support conclusions
Minutes say 'customer satisfaction is good' but no metrics or evidence are referenced.
Previous actions not followed up
Last review assigned 5 actions. This review does not mention their status. Proves the review is a paperwork exercise.
9. Sample Data Dashboard for Your Review
Present data visually. Here is what your one-page quality dashboard should include:
Quality Dashboard Metrics
| Metric | Target | Source | Frequency |
|---|---|---|---|
| Customer complaints | < 3/month | Complaint log | Monthly |
| On-time delivery | > 95% | Shipping records | Monthly |
| Internal defect rate | < 2% | QC inspection | Weekly |
| Scrap/rework cost | < 1.5% revenue | Production records | Monthly |
| Open CARs | < 5 at any time | CAR log | Monthly |
| Supplier quality | < 1% rejects | Receiving inspection | Monthly |
| Training completion | 100% in 30 days | Training matrix | Quarterly |
10. How to Make Reviews Actually Useful
Most manufacturers treat management review as an audit requirement. The smart ones treat it as a business tool:
Connect quality to money
Show the cost of poor quality: scrap cost, rework labor, warranty claims, lost customers. When the CEO sees "quality failures cost us $47,000 this quarter," they pay attention.
Track trends, not snapshots
Show 12-month trend lines. A defect rate of 2.5% means nothing alone. A defect rate declining from 4.1% to 2.5% over 6 months shows your QMS is working.
Make decisions in the meeting
Do not defer everything. The power of management review is that the decision-maker is in the room. Approve budgets, assign resources, authorize changes on the spot.
Keep it short and focused
If your review takes 4+ hours, you are over-reporting. Pre-distribute the data package 3 days before so attendees come prepared.
Get Your QMS Data Ready for Management Review
Struggling to pull together quality metrics for your management review? Our AI analyzes your documents and generates the data summaries, trend charts, and gap reports your CEO needs to see.
Email: info@auditsready.com
Phone: +1-403-404-4643 | Web: auditsready.com
No cost for initial assessment. 24-hour response time.
Related Reading
AuditsReady
AI-powered ISO 9001 gap analysis and SOP generation for manufacturers worldwide. We help small-medium manufacturers (10-500 employees) get audit-ready in weeks, not months.