ISO 9001 management review agenda: which inputs must it cover after the 2026 revision?

Practitioners on Reddit keep raising skipped management review inputs as a finding that certification auditors write up. We listen to these discussions to share what is being talked about and to add to the conversation. This piece gives UK quality teams a full agenda checklist that pairs each input with the evidence that proves it was considered and the output the review should record. It notes where the 2026 edition changes expectations and stays within what the published changes support.

A management review is the periodic review of the quality management system by top management. Its purpose, set out in clause 9.3.1, is to confirm the system's continuing suitability, adequacy and effectiveness and its alignment with the organisation's strategic direction.

Preparing the management review for the 2026 edition

ISO published ISO 9001:2026, the sixth edition, on 16 September 2026. Accredited ISO 9001:2015 certificates stay valid until 30 September 2029 at the latest under the transition rules published by Global ACI, the body that now covers the former IAF accreditation work. The date of a UK organisation's own transition audit is agreed with its certification body.

Three changes affect the management review at clause 9.3.2. The 2015 text said the review was planned and carried out taking the inputs into consideration. The 2026 text says the review shall include them. A new input covers changes in the needs and expectations of interested parties that are relevant to the system. Risks and opportunities are now separated, so the effectiveness of actions on each can be reviewed on its own.

To test the current review against the new edition before the next audit, use a gap analysis checklist for the ISO 9001:2026 transition. The agenda below follows the input list of the 2015 edition with the published 2026 changes added. Check the exact wording and lettering against the published standard before finalising a template.

The agenda checklist: each input, the evidence and the record

Each entry below gives the input, the evidence that shows it was considered and what the review should record.

Inputs on context and previous actions

Status of actions from earlier reviews. Evidence: the previous minutes with each action marked open, closed or overdue. Record: a decision to close, re-plan or escalate each one.

Changes in external and internal issues relevant to the system. Evidence: the updated context analysis, for example a new UK regulation, a change in supply chain or a restructure. Record: the issues that change planning and who owns the response.

Changes in the needs and expectations of interested parties (new in 2026). Evidence: customer requirement changes, regulator or certification body notices and feedback from employees or suppliers. Record: a decision on each relevant change, even where the decision is no action.

Inputs on performance and effectiveness

Customer satisfaction and feedback from relevant interested parties. Evidence: survey results, complaint trends and returns data by period. Record: what the trend means and any action raised.

Extent to which quality objectives have been met. Evidence: each objective with its target, result and trend. Record: objectives to keep, change or retire.

Process performance and conformity of products and services. Evidence: process measures such as first-time pass rate, on-time delivery and defect rates. Record: processes needing intervention.

Nonconformities and corrective actions. Evidence: counts, causes, ageing and the effectiveness of closed actions. Record: recurring causes that need system-level action.

Monitoring and measurement results. Evidence: calibration status and inspection data summaries. Record: any measurement concern and its owner.

Audit results. Evidence: internal audit findings and certification body reports. Record: themes across audits and the response to each.

Performance of external providers. Evidence: supplier scorecards, rejection rates and delivery data. Record: providers to keep, develop or replace.

Inputs on resources, risk and improvement

Adequacy of resources. Evidence: staffing against workload, equipment condition and training status. Record: the resource gaps and the decision on each.

Effectiveness of actions taken to address risks and opportunities. Evidence: the risk register and, from 2026, a visible record of actions on opportunities. Record: whether each action worked and what changes next.

Opportunities for improvement. Evidence: suggestions from audits, staff and customers with an assessment of each. Record: which are taken forward.

Where management reviews fall short and what fixes them

These five patterns can lead to a skipped-input finding. Each row pairs the pattern with the fix.

What practitioners run into	What to do	What you gain
Minutes list every input by title but show no data behind it	Attach or reference the evidence reviewed for each input, such as the objectives dashboard or the audit summary	Proof that each input was considered, not just named
The same slide deck is reused each year and some inputs quietly drop out	Build the agenda from a fixed input list and tick off each item before the meeting closes	No input can be skipped without it being visible
Changes in interested parties' needs never reach the agenda	Add a standing item with a recorded decision on each relevant change	Coverage of the new 2026 input
Risks and opportunities share one line in the review pack	Report the effectiveness of actions on risks and on opportunities separately	Clear evidence for both, in line with the 2026 separation
Outputs are discussed but not recorded as decisions	Record each decision with an owner and a due date, and carry open actions to the next review	A clean start for the next review and a trail an auditor can follow

The outputs and record a management review should leave

Clause 9.3.3 requires the outputs to include decisions and actions on three things: opportunities for improvement, any need for changes to the system and resource needs. Retained documented information must show the results of the review. Published summaries of the 2026 changes do not report a change to the outputs. The minutes should show:

• The date, the attendees and the role of top management in the meeting
• Each input, with the evidence reviewed
• Decisions on opportunities for improvement, system changes and resource needs
• Every action with an owner and a due date
• Open actions carried forward from the previous review
• Approval of the minutes and where they are stored

What to look for in quality management software for ISO 9001 certification in the UK

Quality management software should make the agenda repeatable and pull evidence from live records. Look for a fixed agenda template with every input listed, so none can be skipped. Look for dashboards that draw on nonconformities, audit findings, objectives and supplier performance, so the pack is not retyped each year. Risk and opportunity registers should be separate. Actions should carry from one review to the next with owners and due dates. Minutes should be stored with version control and exported for a certification audit.

Prove each input was considered and record what was decided

A management review satisfies an auditor when every input has evidence behind it and every output is a recorded decision. The 2026 edition makes the inputs firmer, adds interested parties and separates risks from opportunities. A fixed agenda, a standing evidence pack and a clear action trail cover all three.

Readers who want to continue the discussion can join practitioners in Ideagen's Reddit community.