How to use this checklist
Use this checklist to prepare and run management review for your ISO management system (QMS, EMS, OH&S, ISMS, or integrated). The goal is leadership decisions and actions — not a stack of unread slides.
Beyond Carbon can facilitate reviews as consultancy. We do not certify. Completing this checklist does not replace requirements in your purchased standard.
Before the review
□ Review date set with required leaders available □ Agenda circulated with data packs attached □ Owners assigned for each input topic □ Prior management-review actions status updated □ Internal audit results summarized (not dumped raw) □ KPIs/objectives current through the review period □ Significant changes (scope, sites, products, threats) flagged □ Integrated-system topics merged without hiding discipline risks
Typical inputs to cover
| Input theme | Questions leadership should ask |
|---|---|
| Status of prior actions | Closed with evidence or still open — why? |
| Changes in context | New customers, regulations, sites, threats? |
| Performance vs objectives | Trends, not single-month spikes |
| Process / product performance | Escapes, rework, downtime themes |
| Customer / interested-party feedback | Complaints, surveys, client audits |
| Nonconformities & CAPA | Recurrence? Effectiveness? |
| Monitoring & measurement | Calibration/ISMS monitoring health |
| Internal / external audit results | Systemic themes across sites |
| Resource adequacy | People, tools, budget constraints |
| Risks & opportunities | Top risks moved — treatment working? |
| Improvement opportunities | What will we change this period? |
| OH&S / env / security extras | Incidents, aspects, security events as applicable |
During the review
□ Chair keeps focus on decisions, not slide reading □ Dissent and uncertainty recorded where material □ Actions assigned with owners and due dates □ Resource conflicts escalated explicitly □ Scope or policy changes considered if evidence warrants □ Communication needs identified (workforce, customers, contractors)
Required-style outputs (practical)
□ Decisions on improvement opportunities □ Decisions on any need for changes to the management system □ Resource decisions (hire, tools, training, CAPEX interfaces) □ Updated objectives or confirmation they remain valid □ Actions logged in a tracked system — not only in minutes prose □ Minutes/records controlled under documented information rules
| Output | Weak form | Strong form |
|---|---|---|
| Action | “Improve quality” | Named owner, metric, due date, success criteria |
| Resource | “Need more staff” | Approved headcount/tool decision or deferred with reason |
| System change | Silence | Explicit change to process/policy/scope when needed |
Frequency and triggers
Many organizations review at least annually and more often when risk or change is high. Trigger extra reviews after major incidents, significant CB findings, mergers, or scope expansion.
Justify frequency in your programme — do not copy a generic calendar blindly.
Need help applying this?
Use the guide, then discuss your requirements when ready — without sales pressure.
Need help applying this?Integrated QHSE / ISMS tips
Share the meeting when leaders overlap, but keep discipline-specific dashboards visible. An EMS aspect crisis should not be lost inside a quality complaint discussion.
For ISMS, ensure security events, risk treatment status, and supplier security themes appear even if the meeting is branded “QHSE.”
Link to audits and certification
CB auditors typically sample management review records for Stage 2 and surveillance. They look for real inputs, decisions, and followed-up actions.
Pair this checklist with internal audit results and the certification preparation checklist before inviting a CB.
Limits
Agenda themes here are practical paraphrases of common management-review expectations. Always align to your standard’s requirements and your documented procedure. This resource is not a certificate and not legal advice.
Consultancy vs certification
Beyond Carbon provides ISO consultancy, implementation support, documentation assistance, and audit preparation support. Independent certification bodies issue certificates after successful certification audits. Beyond Carbon does not present itself as a certification body or accreditation body.
FAQs
No. It is a planned review of MS suitability, adequacy, and effectiveness with defined inputs and outputs — though you may integrate data from ops meetings.
Top management and roles needed for decisions. Exact attendance follows your procedure and standard expectations.
Yes. Ownership of decisions remains with your leadership. Beyond Carbon facilitates; we do not certify.
Follow your documented information retention rules and any contractual needs.
Treat chronic open actions as a system issue — resource or priority failure — and escalate in the next review.
Not always. Integrated reviews work if each discipline’s inputs/outputs are covered.
Signatures without decisions and follow-up are weak evidence.
Internal audit results are a core input; unresolved audit themes should appear as actions.
Stale reviews and unclosed actions are frequent surveillance findings.
Do not present empty KPI slides — fix measurement or revise objectives.
Acceptable if participation and records quality remain high.
/glossary/management-review
Evaluate stage on the ISO implementation roadmap.
Run one review using this agenda, or ask Beyond Carbon to facilitate a reset session.
What happens after you submit?
We do not promise minute-level response times unless operationally guaranteed.
- We received your request
- Your requirements are reviewed
- A consultant contacts you
- Scope is clarified
- Next steps are recommended
Ready to strengthen your management system?
Tell us about your organization, scope, and requirements. We’ll help clarify the appropriate next step.

