Management review should be more than an annual slide deck prepared for an auditor. Here is what leadership should actually evaluate, decide, and improve—and how the ISO 9001:2026 revision reinforces that role.
For many organizations, management review follows a familiar pattern. Quality schedules a meeting, builds a slide deck, and presents corrective actions, complaints, training percentages, audit findings, supplier metrics, and quality objectives. Leadership listens, someone asks a few questions, minutes are created, and the file is saved. Then everyone does it again next year. A lot of information may technically have been reviewed. But did management actually manage anything?
Management review should not exist primarily to prove to an auditor that a meeting occurred. It should give leadership enough information to answer one thing: is our quality management system still appropriate for the business, is it working, what is changing, and what decisions do we need to make? That distinction becomes more relevant as ISO 9001 moves into its 2026 revision.
As of September 9, 2026, the sixth edition of ISO 9001 has completed final approval and remains officially under publication, with publication scheduled for September 16, 2026.[1][2]
The revision does not rewrite management review. Certification-body transition guidance describes the changes to Clause 9 — Performance Evaluation — as relatively limited; monitoring and measurement, internal audit, and management review all remain.[4] The broader revision places greater emphasis on leadership, quality culture, accountability, clearer treatment of risks and opportunities, changing stakeholder expectations, and alignment between quality and business performance.[3]
One targeted change is especially relevant here: changes in the needs and expectations of relevant interested parties receive explicit consideration as a management-review input.[5] Leadership should be looking beyond historical QMS metrics and asking what has changed around the organization.
ISO 9001:2026 does not turn management review into an entirely new process. The opportunity is to use the process more effectively as a leadership and decision-making mechanism.
Sources: see References [1]–[5]. Final published ISO text controls if anything differs from prepublication guidance. Citing these sources does not imply that ISO, NQA, or BSI endorses Athyrion.
If management review ends with 50 slides reviewed and no meaningful decisions made, the organization may have reviewed data without actually reviewing the QMS.
Leadership does not need every quality record generated since the last meeting. It needs enough to see what is working, what is getting worse, what has changed, where risk is increasing, and what requires a decision. Quality organizes the information; leadership acts on it.
Start with accountability. Before creating new actions, determine what happened to the old ones: Were they completed, on time, and did they produce the intended result? Are any still open, and why? Are the same problems still occurring? Were promised resources actually provided? A management-review action that disappears into meeting minutes until the next review is not meaningful governance.
Management review should look outward as well as inward. Consider changes involving customers, regulations, standards, markets, suppliers, technology, products and services, business strategy, staffing, organizational structure, and relevant interested parties—an emphasis ISO 9001:2026 makes explicit.
A major customer adds a traceability requirement. A critical supplier moves production. The organization begins using AI-enabled software. These are business changes—and they may also be QMS changes. Leadership should ask: does our QMS still fit the environment in which our business operates today?
Do not reduce customer satisfaction to one annual survey number. Look at meaningful signals: complaints, escalations, returns, customer audits, delivery performance, service failures, scorecards, warranty trends, and repeat business. The question is not “what was our satisfaction percentage?” It is “what are customers consistently telling us?” A 96% score is not reassuring if the largest customer is escalating the same failure for the fourth time.
Leadership should evaluate whether objectives were achieved—and whether they still tell the organization anything meaningful. “Maintain 95% training compliance” is measurable, but leadership should still ask why the target matters, whether performance is improving or deteriorating, whether it correlates with actual quality performance, and whether it measures completion or effectiveness. Objectives should support decisions, not exist because the dashboard needs numbers.
Leadership does not need to review every corrective action or deviation individually. It should understand patterns: recurring deviations, repeat complaints, corrective-action aging, overdue investigations, ineffective corrective actions, repeat audit findings, and common failure modes—including trends by department, supplier, product, and location where applicable.
The leadership question is: what systemic issues are visible when we look across individual quality records? Seeing those patterns depends on effective root cause analysis at the record level in the first place.
Avoid presenting audit performance simply as “3 minor findings — all closed.” Instead ask: Are findings increasing? Are the same processes repeatedly weak? Are internal and external audits identifying similar problems? Are corrective actions effective? Are certain processes receiving insufficient audit attention? A closed finding tells leadership its administrative status, not whether the process improved—a question of genuine QMS audit readiness rather than finding-closure statistics.
Supplier performance belongs at the leadership level when external providers can materially affect quality. Consider critical supplier performance, nonconformances, recurring SCARs, delivery deterioration, supplier changes, certification changes, single-source dependency, and business-continuity concerns. Leadership does not need to discuss every office-supply vendor—focus on suppliers capable of materially affecting product, service, data, customer commitments, or quality-system effectiveness, the essence of risk-based supplier management.
This is where management review should result in real leadership decisions. Review needs involving staffing, competency, training, equipment, calibration, infrastructure, software, internal auditors, quality support, maintenance, and budget.
Consider one Quality Manager who owns document control, training, corrective actions, audits, supplier quality, complaints, and validation—and whose corrective actions are routinely overdue. The conclusion should not simply be “improve closure performance.” Leadership should ask: is the quality system adequately resourced to meet the expectation? Resource adequacy is a management decision.
Do not simply display the risk register. Ask what significant risks were identified, what was done about them, whether the actions were completed, whether they reduced the risk, and whether business changes have altered existing risks. Consider opportunities separately: which were identified, did we pursue them, what benefit resulted, and which require leadership support?
ISO 9001:2026 provides greater clarity around the treatment of risks and opportunities, and management review is a natural place to evaluate whether the organization’s responses are producing the intended result.
This is where management review becomes management. After reviewing performance, customers, problems, audits, suppliers, risks, opportunities, resources, and changes, leadership should decide what needs to happen next: process improvement, additional resources, technology investment, supplier changes, new training or qualification, changes to quality objectives, or added or removed controls. Management review should create priorities. Otherwise it becomes reporting without governance.
ISO describes the 2026 edition as having a stronger focus on leadership, quality culture, and accountability. The wrong response is to add “Agenda Item: Quality Culture” to the template and move on.
Instead, leadership can ask practical questions: Do employees raise quality issues when they find them? Are concerns appropriately escalated? Do managers bypass controls when schedules are under pressure? Are process workarounds becoming normal? Does leadership respond when quality data shows deterioration?
Quality culture is difficult to summarize with one KPI, but leadership behavior directly affects it. Management review is a natural forum to ask whether the organization is creating conditions that allow the QMS to function effectively—part of the broader ISO 9001:2026 leadership emphasis, not a confirmed new standalone Clause 9.3 management-review input.
| What the review identifies | Possible leadership decision |
|---|---|
| Corrective actions routinely overdue | Add resources or redesign workflow |
| Supplier performance deteriorating | Increase oversight or qualify an alternative |
| Customer complaints increasing | Launch targeted process improvement |
| Training weakness | Strengthen competency / qualification approach |
| Repeat audit findings | Initiate systemic corrective action |
| New customer requirement | Change process or QMS controls |
| Equipment capability problem | Approve capital investment |
| Risk control ineffective | Strengthen or replace the control |
| Strong improvement opportunity | Fund and prioritize improvement |
A management review should leave a decision trail—not simply a meeting trail.
Quality can coordinate the review, compile information, prepare the agenda, and maintain records. But management review should not become “Quality presenting Quality’s system to leadership.” The QMS belongs to the organization: process owners should understand their performance, leadership should understand the risks, and top management should make the decisions. If the Quality Manager is the only person who can explain the QMS, that itself may be something leadership needs to review.
No. ISO 9001 does not require a single annual management-review meeting; it expects reviews at planned intervals. Organizations may use quarterly or semiannual reviews, an annual comprehensive review, or multiple leadership meetings that collectively address the necessary information. NQA also notes that all management-review elements do not have to be covered during one single meeting.[4] The format matters less than ensuring that required information is actually evaluated, top management is involved, decisions are made, and appropriate evidence of review results is maintained.
At the end of the last management review, could leadership clearly answer:
If the answers require reopening the slide deck just to figure out what leadership concluded, the review may have been too focused on presenting data and not enough on making decisions.
This is a practical framework, not a requirement that every organization use this exact agenda.
Management review should not answer “did we cover every slide?”
It should answer “what does leadership now know about the QMS, and what are we going to do differently because of it?”
ISO 9001:2026 does not suddenly transform management review into an entirely new process. But the stronger focus on leadership, quality culture, accountability, risks, opportunities, and continual improvement reinforces something that should already have been true: management review belongs to management. Quality organizes the information, the QMS provides the evidence, and leadership makes the decisions.
