Management system guidance
9.0 Performance Evaluation
ISO Navigator Pro™ is a free tool that provides practical, expert guidance for businesses wishing to interpret and better implement the requirements of ISO 9001:2015, ISO 14001:2015 and ISO 45001:2018.
Our range of templates cover the requirements of ISO 9001:2015, ISO 14001:2015 and ISO 45001:2018, and offer an easy way to implement your next management system.
9.3 Management Review
9.3.1 Management Review - General
Top management must periodically review the management system to ensure its continuing suitability, adequacy, and effectiveness. The frequency or intervals of the Top management’s formal review must be defined. The management review must address the possible need for changes to policy, objectives, targets, and other elements of the management system.
The management review process must ensure that the necessary information is collected ahead of time to allow management to effectively carry out this evaluation. Information that must be reviewed includes:
- Minutes from previous management reviews;
- The policies, objectives and targets;
- Results of management system and process audits;
- The extent to which objectives and the numeric targets were met.
Suitability and effectiveness of the management system based possible changing circumstances that may include:
- New or proposed legislation or regulations;
- Changing expectations/requirements of relevant interested parties;
- New or modified activities, products, or services;
- Advances in technology and science;
- Changing market preferences of buyers.
All management reviews must be documented. Observations, conclusions, and recommendations for further necessary action from the review must be recorded. If any corrective action must be taken, Top management should follow up to ensure that the action was effectively implemented.
The purpose and final outcome of the management review should be the continual improvement of the management system. As your organization’s QMS increases in its effectiveness and efficiency, your environmental performance will likewise increase.
Here's what ISO 9001:2015 is really all about: defining a policy, creating a plan devising with relevant objectives. You then implement the system according to the plan. You then begin auditing, monitoring and measuring performance against the plan and reacting to your findings. Bi-annual management reviews are insufficient in frequency to be able react to any issues effectively.
Performance metrics should be monitored with varying frequencies, some hourly, some daily, some weekly and some monthly. Management cannot wait for six months to respond, if they do, it will be too late.
Every time management convenes to review and react to performance, it is considered as a management review. Whether they are reviewing an individual's performance, departmental programmes and projects, etc., this should be considered as valid management review.
Some companies have multiple review levels, whereby, each review may require multiple subjects and rely upon multiple metrics as inputs. Sometimes subjects are reviewed at more than one level, e.g. production numbers might be reviewed by the Production teams during daily production meetings and then by senior management, possibly weekly.
Top management might conduct weekly meetings in which they review metrics and objectives to determine if any corrective action is required. The process owner is then responsible for reporting close out progress in the meeting a week later. Undertake management reviews in order to:
- Determine and evaluate management system performance;
- Determine the need for change and improvement;
- Determine the suitability of the policies and the objectives.
9.3.2 Management Review - Inputs
This now includes additional requirements for your organization to have a structured management review process that includes discussion of internal and external issue changes, and its potential effect on the strategic direction of your organization.
Your organization’s management review process must also include discussion of external provider’s, and other supplier’s performance. It must also include an assessment of risk management actions.
Auditors should expect to evidence the same outputs from management reviews as at present. However, they should note that the results of management reviews can now be held in any format that the organization chooses. The management review process should focus on the following inputs:
- Risks and opportunities (Clause 6.1);
- Possible changes that might affect the system (Clause 6.3);
- External provider and supplier’s performance (Clause 8.4);
- Customer satisfaction and perception (Clause 9.1.2);
- Audit results (Clause 9.2);
- Non-conformity and corrective actions (Clause 10.2).
9.3.3 Management Review - Outputs
The management review process is comparable to ISO 9001:2008 Clause 5.6.3 – Management Review Outputs. You should seek and record evidence of outputs from the management review process, there should be evidence of decisions regarding:
- Process improvement actions;
- Management system improvement actions;
- Product and service improvement actions;
- Resource provision actions;
- Revised business plans and budgets;
- Revised objectives and KPIs;
- Amendments to policies;
- Management meeting minutes.
Management review meeting minutes should be retained as documented information.
More information on PDCA
Free internal audit checklists
Check out our free internal audit checklists. The audit checklist template is just one of the many tools which are available from the auditor’s toolbox that help ensure your audits address the necessary requirements.
Over 8,000 companies and globally recognized brands have relied on our templates to provide a path to improve, collaborate, and to enhance their operations to achieve certification, please see our client list for more information.