- Clause 9.3 requires top management to review the management system at planned intervals, against a defined list of inputs.
- The outputs - decisions, actions, and resource needs - are the part auditors check, so capture them clearly.
- Keep minutes that show the required inputs were considered and that actions have owners and due dates.
The management review is where leadership looks at the management system as a whole and decides what to change. ISO 9001, 27001, 45001, 14001, and the rest all share clause 9.3, and all require it. Done as a real working meeting rather than a formality, it is genuinely useful. Here is how to run one.
What clause 9.3 requires
Clause 9.3 is common across the ISO management-system standards. It requires top management to review the system at planned intervals to ensure it stays suitable, adequate, and effective. The standard lists specific inputs that must be considered and outputs that must result.
The required inputs
1. Status of actions from previous management reviews.
2. Changes in internal and external issues relevant to the system.
3. Performance: audit results, objectives and KPIs, nonconformities and corrective actions, monitoring results.
4. Feedback from customers and other interested parties.
5. Risks and opportunities and the effectiveness of actions taken.
The free management review meeting checklist turns this list into an agenda.
The required outputs
A management review must produce decisions and actions related to improvement of the system, any changes needed, and the resources required. An action without an owner and a due date is not an output - it is a wish. Assign both before the meeting ends.
Run it as a real meeting
Schedule it on a defined interval (annually at minimum; many teams do it quarterly). Send the inputs in advance so the meeting is about decisions, not data-gathering. Keep it focused: the goal is a small number of clear, owned actions, not a long document nobody reads.
A management review recorded as "the system was reviewed and found effective" with no inputs and no actions tells an auditor it did not really happen. Show the inputs you considered and the decisions you made.
Turn the management review checklist into a recurring agenda in RakuOps, pull in your audit and corrective-action data, and track every decision as an owned action to closure.
Where RakuOps fits
RakuOps is a compliance and audit management platform that keeps audits, corrective actions, objectives, and the audit trail in one place. That makes management review inputs easy to assemble and the resulting actions easy to track to closure - so the review is a real decision-making meeting with a defensible record. See the ISO compliance hub.