Labs Support
EN SV
Management Review

Management review per ISO 9001 clause 9.3 – without the spreadsheet chaos

ISO 9001 clause 9.3 requires top management to regularly review the management system's suitability, adequacy and effectiveness. In AmpliFlow, the data is already there: deviations, audit results, goals, and risk assessments are collected continuously. You create an agenda, reference the data, and document decisions that become tracked actions.

Book a meeting See the agenda

Companies using AmpliFlow to run their management system

Management review checklist

ISO requires specific inputs for management review. With a checklist template in AmpliFlow, you ensure nothing is missed - and the data is already in the system.

Click an item to inspect the supporting detail without moving the agenda.

  1. Clause 9.3.2 a)

    Audit results

    Status of internal and external audits since last review.

    Relevant data available in

    • Audits Completed audits, findings and status
    • Deviations Audit-related deviations and their action status

    Sample data

    4 audits completed, 2 deviations open, 1 observation closed since Q2

    Decisions to make

    • Does the audit frequency need adjusting?
    • Are extra resources needed to close open deviations?

  2. Clause 9.3.2 b)

    Customer feedback

    Customer satisfaction, complaints, and feedback.

    Relevant data available in

    • Improvements Incoming customer complaints and status
    • Goals Customer satisfaction targets and outcomes

    Sample data

    3 complaints received, 2 closed. Customer satisfaction index: 4.2/5 (target: 4.0)

    Decisions to make

    • Are there patterns in customer complaints?
    • Does customer communication need improvement?

  3. Clause 9.3.2 c)

    Process performance

    How well processes deliver against established goals.

    Relevant data available in

    • Processes Process map with linked data
    • Goals Goal achievement per process
    • Reports KPIs and trend data

    Sample data

    Delivery precision: 94% (target: 95%). Production efficiency: 88% (target: 85%). 2 of 8 processes below target.

    Decisions to make

    • Which processes need resources or improvement efforts?
    • Do the goals need adjusting?

  4. Clause 9.3.2 d)

    Nonconformities and corrective actions

    Trends in nonconformities and the effectiveness of corrective actions.

    Relevant data available in

    • Deviations All deviations with category, cause and status
    • Actions Corrective actions and their effectiveness

    Sample data

    12 deviations reported, 9 closed. Most common cause: process gap. Average closure time: 18 days.

    Decisions to make

    • Is root cause analysis working? Are the same types of deviations recurring?
    • Are preventive actions needed?

  5. Clause 9.3.2 e)

    Risks and opportunities

    Changes in the risk landscape and new opportunities.

    Relevant data available in

    • Risks Risk register with current assessments
    • Stakeholders Changed stakeholder requirements

    Sample data

    2 new risks identified, 3 risks reassessed. 1 opportunity: new market via existing certification.

    Decisions to make

    • Are the risk treatments sufficient?
    • Should we act on identified opportunities?

  6. Clause 9.3.2 f)

    Resource needs

    Resource requirements to maintain and improve the management system.

    Relevant data available in

    • Competence Competence needs and training plan
    • Actions Resource-intensive actions

    Sample data

    2 employees need internal auditor training. Budget needed for new document management system identified.

    Decisions to make

    • What investments are needed for the coming period?
    • Is there sufficient competence for planned improvements?

AmpliFlow customers get access to ready-made management review checklist templates built by consultants with over 20 years of experience. Download the template, fill it in with data already in the system, and document decisions on the spot.

Data already there

The data exists - you just need the structure

In most organizations, management review preparation starts weeks in advance. The quality manager sends emails to departments: "Can you compile your deviations? How did the goals go? Have you updated the risk assessment?"

Answers arrive in different formats - Excel files, PowerPoint presentations, verbal reports. Someone then has to stitch it all into a presentation that management can act on.

In AmpliFlow, all that data already exists. Deviations are recorded continuously. Audit results are documented when audits are performed. Goals are measured on an ongoing basis. Risks are assessed and updated. You create a checklist template for the review and reference that data during the meeting.

The quality manager's role shifts from data collector to analysis support. Instead of chasing numbers, you can focus on interpreting trends and preparing input that actually leads to improvements.

Decisions

Decisions that don't stay in the minutes

The most common problem with management review isn't the meeting itself - it's that decisions are forgotten afterward. In AmpliFlow, every decision becomes an action with an owner, deadline, and follow-up.

1

Decision made

During the meeting, management identifies what needs to be done.

2

Action created

The decision becomes an action with an owner and deadline - directly in the meeting.

3

Follow-up

The action is tracked in the same system. Status is visible in the next review.

4

Verified

Complete traceability: decision → action → result. The auditor sees the chain.

Book a demo
ISO requirement

Every standard requires this

Management review is not optional. Every ISO management system standard requires top management to regularly review the system's suitability, adequacy, and effectiveness.

ISO 9001:2015

Clause 9.3

Quality management system performance, customer satisfaction, process results, and nonconformity trends shall be reviewed.

ISO 14001:2015

Clause 9.3

Environmental performance, compliance obligations, environmental objectives, and changes in external conditions shall be addressed.

ISO 27001:2022

Clause 9.3

Information security status, incidents, risk assessments, and improvement opportunities shall be reviewed.

ISO 45001:2018

Clause 9.3

OH&S performance, incidents, risks and opportunities, and worker participation shall be reviewed.

FAQ

Questions about management review in AmpliFlow

How do we structure management review in AmpliFlow?
You create a checklist template with agenda items matching ISO requirements. The data you need - deviations, audit results, goal achievement, risk assessments - is already recorded in AmpliFlow. During the meeting, you reference that data while completing the checklist.
Can we customize the agenda for our ISO requirements?
Yes. You create your own agenda template as checklists with agenda items matching your standards. ISO 9001, 14001, 27001, and 45001 have similar input requirements - you can cover all of them in the same review.
How do we follow up on decisions made during the meeting?
Decisions become actions directly during the meeting - with an owner, deadline, and link to the review. Actions are tracked in the same system and visible in the next review.
How often should we conduct management review?
ISO standards require review at planned intervals. Most organizations do it annually, but quarterly gives better governance. With AmpliFlow, preparation is minimal regardless of frequency, since data is collected continuously.
How is meeting documentation handled?
The review is documented in the AmpliFlow checklist. Certification auditors can see the documented checklist and the improvements reported during the meeting directly in the system.
Are there pre-built templates for management review?
You use the checklist system to build your own management review template. The advantage is that you get exactly the structure that fits your organization and standards - not a rigid form that doesn't match how you work.
Get started

Structure your review

Book a meeting and we'll show you how to run management review directly in AmpliFlow – with data from deviations, audits, goals and risks already in the platform.