How often must a management review take place?

The standards require “planned intervals” but do not set a frequency. Once a year is common; more often when there are major changes.

Who takes part in the management review?

Top management is responsible and must be involved. The review is usually prepared by the management system coordinator, with process owners joining depending on the topic.

Does the management review have to be documented?

Yes. The results must be retained as documented information – usually minutes covering inputs, evaluation, decisions and actions.

Can one management review cover several standards?

Yes. In an integrated management system a joint review is common, as long as the specific inputs of each standard are covered.

What are the outputs of a management review?

Decisions on improvements, changes to the management system and resource needs – ideally recorded straight away as actions with owners and deadlines.

Deutsche Version

Management review – evaluating the system with top management

In the management review, top management checks at planned intervals whether the management system is suitable, adequate and effective – and decides what should change. With IMScheck, the inputs for every standard are at hand, and decisions turn into actions you can track.

Start the free maturity check Explore IMScheck PRO

BETALaunch phase: IMScheck PRO is free until Jan 1, 2027 – full version, full security.

How IMScheck supports your management review

The management review is a task in the catalogue – shared across all active standards, with sub-steps and the specific inputs per standard.
Assign an owner and an approver, for example the IMS coordinator and top management.
Inputs at hand: progress per standard on the dashboard, results in the audit collections, status and metrics of all actions in the improvement process.
Decisions become improvement actions with the source “management review” – tracked through to the effectiveness check.
Store the minutes as a controlled record, approve them and attach them to the task as evidence.

What is a management review?

All ISO management system standards with the Harmonized Structure require a management review in clause 9.3. Top management reviews the system at planned intervals for its continuing suitability, adequacy and effectiveness and its alignment with the organisation's strategic direction.

The outputs are decisions on improvement opportunities, any need for changes to the system and resource needs. The results must be retained as documented information.

Which inputs are needed?

Common to all standards: the status of actions from previous reviews, changes in internal and external issues, information on system performance – such as nonconformities and corrective actions, monitoring and measurement results and audit results –, the adequacy of resources, the effectiveness of actions on risks and opportunities, and opportunities for improvement.

Then there are standard-specific inputs: for ISO 9001, for example, customer satisfaction and the performance of external providers; for ISO 14001, significant environmental aspects and fulfilment of compliance obligations; for ISO 45001, incidents and results of consultation; for ISO 50001, the development of energy performance indicators; and for ISO 27001, risk assessment results and the status of the risk treatment plan.

One management review for all standards

In an integrated management system a single management review is enough: shared inputs are covered once, standard-specific ones are added. That saves management time and reveals connections – for example when a safety incident also affects quality or the environment.

In practice the management review usually takes place once a year, often before the surveillance or recertification audit. Shorter intervals make sense when a lot is changing.

Common mistakes

The review becomes a box-ticking exercise: inputs are gathered just before the audit, management signs off a report, and the decisions are never followed up. A management review only becomes effective when its outputs turn into actions with owners and deadlines – and their status is on the table at the next review.

Frequently asked questions

How often must a management review take place?: The standards require “planned intervals” but do not set a frequency. Once a year is common; more often when there are major changes.
Who takes part in the management review?: Top management is responsible and must be involved. The review is usually prepared by the management system coordinator, with process owners joining depending on the topic.
Does the management review have to be documented?: Yes. The results must be retained as documented information – usually minutes covering inputs, evaluation, decisions and actions.
Can one management review cover several standards?: Yes. In an integrated management system a joint review is common, as long as the specific inputs of each standard are covered.
What are the outputs of a management review?: Decisions on improvements, changes to the management system and resource needs – ideally recorded straight away as actions with owners and deadlines.