Built from the clause, not from last year’s agenda
ISO 9001 has six inputs and only three outputs — the shortest list of any standard in this family. The brevity is deceptive. Four requirements account for most of the findings raised against clause 9.3, and all four are things the clause names that a habit-built agenda quietly omits.
Most management review agendas list the topics the last review covered, in the order it covered them. Ask which clause a section satisfies and there is often no answer, because the agenda was built from habit rather than from the standard. The requirements ISO 9001 names but the organization has never done are precisely the ones a habit-built agenda cannot surface.
The four requirements most often missing
- The performance of external providers, at 9.3.2 c) 7) — A named mandatory input in its own right — routinely folded into nonconformities or omitted. It is also separate from the evaluation and re-evaluation required by 8.4.1.
- The effectiveness of actions taken to address risks and opportunities, at 9.3.2 e) — The clause asks whether the actions worked, not what the risks are. Presenting the risk register answers a different question.
- Feedback from relevant interested parties, at 9.3.2 c) 1) — Named alongside customer satisfaction, not instead of it. A review reporting a satisfaction score and nothing else has answered half the input.
- Alignment with the strategic direction, at 9.3.1 — It appears in the purpose of the review rather than among the three outputs, which is exactly why most minutes never reach it.
- And one requirement that does not exist — ISO 9001, 9.2.2 b) asks for audit criteria and scope only. It does NOT require an audit objective. That obligation belongs to ISO 14001:2026 and ISO 7101:2023, and it sometimes gets imported and presented as an ISO 9001 requirement. This toolkit states the negative deliberately.
Built from the clause, not from last year’s agenda
Every requirement ISO 9001:2015 names in clause 9.3 has its own numbered section, with the clause reference printed under the title. Nothing can be omitted by not knowing it exists. Where a section is MSI practice rather than a clause requirement, it says so, so an auditor can tell the difference.
What you get
| PowerPoint deck 44 slides |
What you present from. Numbered badge, clause reference and preparation prompt on every section slide. |
| Word minutes form 15 pages, 21 sections |
The record. Every section anchored to the requirement it satisfies. |
| One shared spine | The deck and the form are generated from the same section list. Section 12 on the slide is Section 12 on the form. Presenter and recorder are never on different items. |
| Worked examples | Example slides showing completed data, each marked as example data to replace. Native PowerPoint charts you can edit, not images. Perennia Corp is a fictional organization created by MSI for illustration only. |
| Terms used | Plain-language explanations of every term that carries a specific meaning, with the clause where each is defined. The review does not depend on who has read the standard most recently. |
| Before you hold this review | Each section mapped to the record that feeds it, and what to do if you do not have it. This is the page that stops a review being held on data that does not exist. |
| Document control throughout | Company name placeholder, period covered, template revision date and the date the review was held, marked for internal use and proprietary — on every slide and every page. Once completed this is a permanent record a registrar will read. |
Who it is for
Quality managers, operations leaders and consultants at ISO 9001 certified or certifying organizations. Particularly useful where an inherited agenda has drifted from the clause, or where the review has become a slide review rather than a meeting where decisions get made.
What this does not do
It records what clause 9.3 requires, with every entry traceable to its clause. It does not make you compliant with ISO 9001 — compliance depends on the management system the review is reviewing.
It does not create the data it draws on. Customer satisfaction data, external provider performance and audit results all have to exist before the meeting. A page in the front matter names what has to exist, so you find that out while preparing rather than at audit.
Plan. Decide. Deploy.
Pairs with MSI’s QMS interviews course: member.msi-international.com/courses/qms-interviews/
Management Systems International is a veteran-owned, female-owned ISO consulting firm founded in 1998 — 28 years, 200+ audits attended, 80+ certifications supported, and 600+ professionals trained across manufacturing, technology, aerospace, medical device, government, and other regulated industries.
Questions before you buy? Call 760-434-9141 or visit msi-international.com.
Delivered as one .pptx and one .docx, fully editable, no protection and no macros. Worked examples use a fictional organization created by MSI for illustration only, marked as such throughout and intended to be replaced with your own data.
