Management Review

Required inputs and outputs

Every ISO management standard prescribes the agenda. Inputs include: status of actions from previous reviews; changes in internal and external issues; performance data — objectives, process results, nonconformities and corrective actions, audit results, monitoring outcomes; feedback from customers or workers or interested parties; adequacy of resources; and effectiveness of risk actions. Outputs must include decisions: improvement opportunities, changes needed to the system, and resources required.

The outputs are the part auditors read hardest: a review that produced no decisions, ever, isn't reviewing anything.

What good looks like

Frequency is yours to define — annual is the floor in practice; quarterly light reviews with an annual deep one is a common, healthy pattern. The meeting doesn't need to be standalone: management review items can ride an existing leadership meeting, provided the required inputs are covered and minuted.

The single most useful habit: track review outputs as actions with owners and dates, and open the next review with their status. That one loop demonstrates leadership engagement better than any signed policy.

Common audit findings

Reviews held but half the required inputs never discussed (no customer feedback, no audit results); reviews as data recitals with no decisions or resource allocations recorded; the same problems appearing in inputs year after year with no corresponding output; and top management absent from their own review — delegation to the quality manager defeats the clause's purpose, which is precisely to force leadership ownership.