Clause 9.3, management review: the input list changed, and the auditor will check yours
Written from the auditor's side of the table. Clause numbers are pointers; the wording is ours, not the standard's. Last checked against the published ISO 9001:2026 text: October 12, 2026.
If the last management review in your records used the 2015 input list, there is no management review on record under the 2026 edition. That is the single most common transition finding in this clause, and it is avoidable in one meeting.
What clause 9.3 requires
| Sub-clause | In plain words |
|---|---|
| 9.3.1 General | Top management, not the quality manager, reviews the system at planned intervals to confirm it is still suitable, adequate, effective, and lined up with where the business is going. |
| 9.3.2 Inputs | The review must cover: what happened to the actions from last time; changes in the outside and inside issues that bear on the system; changes in what interested parties need and expect; how the system is performing, as trends in nonconformities and corrective actions, monitoring results, audit results, customer satisfaction and interested-party feedback, whether objectives were met, process performance and product conformity, and how external providers performed; opportunities for improvement; whether resources are adequate; whether the actions taken on risks worked; and whether the actions taken on opportunities worked. |
| 9.3.3 Results | The review must produce decisions: on continual improvement opportunities, on any changes the system needs, and on resources. Records of the results must be available. |
Thirteen inputs, three kinds of decision. An auditor lays the minutes beside that list. Every input either has a place in the minutes or is a finding. Every meeting either produced a decision in the three areas or the results clause is not met.
What moved in 9.3 between 2015 and 2026
Three edits to the inputs. A new input on changes in what interested parties need and expect. The effectiveness of actions on risks and the effectiveness of actions on opportunities are now two separate inputs, matching the split of clause 6.1. Opportunities for improvement moved up the list, and the performance sub-list was reordered with nonconformities and corrective actions first. The results clause was retitled from outputs to results, and 10.1 now names management review results as one of the two sources continual improvement has to draw on; the clause 10 page explains that loop.
How an auditor reads the minutes
- Input by input. The auditor ticks the thirteen inputs against the minutes. "Reviewed KPIs" covers none of them. A data pack or agenda with the inputs as headings makes this a two-minute check instead of a finding.
- Trends, not snapshots. The performance inputs ask for trends. One quarter's number with no comparison is a snapshot. The question is whether the number moved and what management decided about it.
- Top management in the room. Attendance shows who reviewed the system. A review run by the quality manager with no one from the leadership team present is a 9.3.1 finding.
- Decisions, with owners. The results clause is about decisions. Minutes that record discussion and end with "continue to monitor" have no results. Each decision needs an owner and a date, and the next review's first input is what happened to it.
- The carry-over. Actions that appear in three consecutive reviews unchanged tell the auditor that review does not change anything.
The findings that come up most
- Missing inputs. Most often the adequacy of resources, external provider performance, and now the two effectiveness inputs and the interested-party changes.
- A report, not a review. Forty slides presented, no decision recorded.
- No trend. The same month's data every year with nothing to compare it to.
- The same actions every year. The carry-over count nobody tracks.
- Agenda written to 2015. One line for risks and opportunities where the 2026 edition wants two, and no line for interested-party changes.
The first and fifth findings have the same cure: an agenda that is the thirteen inputs in the standard's order, with an owner on each. The $5+ Management Review Agenda & Minutes is that agenda, updated for the 2026 inputs, with minutes laid out as showed, concluded, decided; the Management Review Pack adds the data pack with a Better/Worse reading on every measure, the action tracker that counts carry-overs, and the four-review trend that answers the "no trend" finding.
How to run a review that decides something
- Use the thirteen inputs as the agenda, in the standard's order. Give each an owner who brings the data. The meeting then cannot miss one.
- Read every measure as better or worse than last time, before the meeting. Spend the meeting on what moved.
- Structure the minutes as showed, concluded, decided. What the data showed, what management concluded, what was decided, by whom, by when.
- Count the carry-overs and put the count on the first page. It is the most honest measure of whether review works.
- Feed the results forward. Improvement decisions go to 10.1, resource decisions to the budget, system changes to 6.3 planning. The next review opens with their status.
The tool for this clause: the $5+ ISO 9001 Management Review Agenda & Minutes, every input with an owner, updated for 2026, with minutes that hold up. The Management Review Pack adds the data pack with a Better/Worse reading on every measure, the objectives register, the action tracker with the carry-over count, and a four-review trend.
Not sure where your system stands on the 2026 edition?
The free readout asks thirteen questions and gives you your readiness, your timeline to the deadline, and your first three actions. Nothing you enter leaves your browser unless you ask for the optional AI reading.
Run the free readoutSee every toolQuestions
What are the required inputs for an ISO 9001 management review?
Status of previous actions; changes in the outside and inside issues; changes in interested parties' needs and expectations; performance trends in nonconformities and corrective actions, monitoring results, audit results, customer satisfaction and feedback, objectives, process performance and product conformity, and external providers; opportunities for improvement; adequacy of resources; effectiveness of actions on risks; and effectiveness of actions on opportunities. Thirteen in the 2026 edition.
What must a management review produce?
Decisions on opportunities for continual improvement, on any need to change the quality management system, and on resources, with records kept of those results.
How often must management review be held?
At planned intervals set by the organization. Annual is the common minimum; many organizations split the inputs across quarterly reviews so the trends are current, which the clause allows as long as every input is covered in the cycle.
Who has to attend management review?
Top management, meaning the people who direct and control the organization at the highest level. The quality manager can run it, but the clause requires top management to do the reviewing, and attendance records are how an auditor checks that.
Is a management review template enough to comply?
A template that lists every input and forces a decision in the three result areas gets the structure right. Compliance is in what is written under each heading: trends with comparisons, decisions with owners and dates, and the previous actions closed or explained.
Can the 2015 management review count for the transition audit?
Ask your certification body in writing. Many want one review on record under the 2026 input list before the transition audit. The transition deadline page has the five questions to put to them.
What is the difference between management review outputs and results?
The 2026 edition uses "results" as the heading. Minutes templates still headed "outputs" date the template to 2015 and draw the question.