Management review is one of those requirements that looks simple on paper. Leadership meets, reviews the system, makes decisions, moves on. But in practice, it is one of the most frequent sources of audit findings across ISO 9001, ISO 14001, ISO 45001, and IATF 16949.
The reason is straightforward: auditors can verify almost everything about your management review by reading the minutes and asking two or three follow-up questions. If something is missing, there is nowhere to hide.
Here are five mistakes we see again and again, and how to avoid them before your next audit.
1) Missing required inputs
Every management system standard specifies a list of inputs that must be reviewed. ISO 9001 clause 9.3.2, for example, requires review of customer feedback, audit results, supplier performance, process performance, corrective action status, and more. IATF 16949 adds cost of poor quality, warranty data, and customer scorecards.
The mistake most organizations make is reviewing some of these but not all of them. The fix is simple: build your management review agenda directly from the clause requirements. Use them as line items. If an input has nothing new to report, note that explicitly rather than skipping it.
2) No evidence of decisions or actions
A management review that concludes with "continue as-is" for every agenda item raises questions. Auditors want to see that leadership actually made decisions, assigned actions, and allocated resources where needed.
The fix: for every input reviewed, document at least one of the following: a decision made, an action assigned with a name and target date, or a resource commitment. Even if the system is performing well, you can document the decision to maintain current targets or approve the next audit schedule.
3) Reviewing the wrong time period
This is surprisingly common. The management review covers January through December, but the audit is in March and the auditor asks what happened in the last three months. If your management review does not cover recent data, there is a gap.
The fix: schedule management reviews so that the most recent one covers data close to your audit date. If your audit is in April, your management review should cover data through at least February. Some organizations run quarterly reviews to keep the data current, which also makes each meeting shorter and more practical.
4) Leadership is absent
If the management review minutes show that the plant manager or top management was not present, the auditor will ask why. The standard requires top management to conduct the review, not just receive a summary. Delegating the entire review to the quality manager does not satisfy the requirement.
The fix: schedule management reviews well in advance and make attendance by top management non-negotiable. If someone cannot attend, reschedule. Document who attended by name and role.
5) No connection to continual improvement
Auditors are looking for a management system that improves over time, not one that simply maintains the status quo. If your management review never identifies improvement opportunities, never revises objectives, and never changes anything, it raises the question of whether the review is actually driving value.
The fix: include at least one improvement action in every management review. This does not need to be a major overhaul. It could be revising a quality objective, updating a procedure based on lessons learned, or investing in a training program that addresses a recurring gap.
Management review is not a box to check. Done well, it is the one meeting that connects leadership decisions to system performance. Done poorly, it is the easiest finding an auditor will write all week.
If you are not sure whether your management review process will hold up under audit scrutiny, a pre-assessment review can identify the gaps while there is still time to close them.