Governance DocsGovernance Docs
Browse Toolkits

CART

No products in the cart.

ISO Compliance Insights & Best Practices

QHSE management review explained

QHSE Management Review: The 3-Standard Agenda in 10 Items (2026)

A QHSE management review is one meeting satisfying three clause 9.3s, and the reason it so often fails an audit is that the three are not the same list. ISO 9001, ISO 14001 and ISO 45001 all require top management to review the management system at planned intervals to ensure its continuing suitability, adequacy and effectiveness, and all three prescribe inputs and outputs; but ISO 14001 adds compliance obligations and the needs and expectations of interested parties, ISO 45001 adds consultation and participation of workers and the results of incidents, and ISO 9001 adds customer satisfaction, supplier performance and — in the 2026 edition — separate items on the effectiveness of actions on risks and on opportunities.

A review run from one standard’s agenda leaves the other two with missing inputs, and missing inputs are a finding whatever the minutes say. This guide sets out the combined input list clause by clause, the outputs the three standards require, a three-standard agenda that covers all of them in one sitting, how to run the review so top management decides rather than listens, the record that evidences it, and the errors that make a management review a presentation.

The QHSE management review: one meeting, three clause 9.3s
Shared inputs: previous actions · context changes · objectives · performance and trends · audit results · resources · improvement. Plus ISO 14001: compliance obligations, interested parties. ISO 45001: worker consultation, incidents. ISO 9001:2026: customer satisfaction, suppliers, risks and opportunities separately. Outputs: decisions on improvement, changes, resources, actions.

The inputs a QHSE management review must cover

Input ISO 9001:2026 ISO 14001:2026 ISO 45001:2018 Evidence to table
Status of actions from previous reviews Yes Yes Yes Action log with status
Changes in external and internal issues relevant to the system Yes Yes — including climate change as a context issue Yes Context register updates
Needs and expectations of interested parties, including compliance obligations Implied via requirements Yes — explicit Yes — explicit, including legal requirements and other requirements Interested-party and legal register changes
Significant environmental aspects; OH&S risks and opportunities; quality risks and opportunities Effectiveness of actions on risks and, separately, on opportunities (9.3.2) Significant aspects Risks and opportunities Register changes; treatment effectiveness
Extent to which objectives have been met Yes Yes Yes Objectives register with KPI results
Performance and effectiveness, including trends Customer satisfaction and feedback; process performance and conformity; nonconformities and corrective actions; monitoring results; audit results; external provider performance Nonconformities and corrective actions; monitoring results; fulfilment of compliance obligations; audit results Incidents, nonconformities and corrective actions; monitoring results; evaluation of compliance; audit results; consultation and participation of workers The KPI pack; the compliance evaluation; the incident and NC log; the audit programme results
Adequacy of resources Yes Yes Yes Resource requests and gaps
Communications from external interested parties, including complaints Customer feedback Yes — explicit Yes — relevant communications Complaints and regulator correspondence log
Opportunities for continual improvement Yes Yes Yes Improvement register
Consultation and participation of workers Yes — explicit Safety committee outputs

ISO 14001:2026 restructured its management review clause; the inputs above follow the concepts the 2026 edition carries rather than the 2015 sub-numbering. Our guide to the integrated management review covers the general method; this one adds the three-standard specifics.

The outputs a QHSE management review must produce

Output Required by What it looks like in the minutes
Conclusions on the continuing suitability, adequacy and effectiveness of the system All three (ISO 14001 and ISO 45001 state it; ISO 9001 implies it in the purpose) A recorded conclusion per system, or one per discipline within the integrated system
Decisions on continual improvement opportunities All three Named improvements with owners and dates
Decisions on any need for changes to the management system All three Changes to scope, policy, objectives, processes, resources
Resource needs All three Approved, deferred or declined, with reasons
Actions, if needed, when objectives have not been achieved ISO 14001 and ISO 45001 explicit Per unmet objective: action, owner, date
Opportunities to improve integration with other business processes ISO 14001 and ISO 45001 Recorded where relevant
Implications for the strategic direction ISO 14001 and ISO 45001 A sentence, minuted
Communication of relevant outputs to workers and their representatives ISO 45001 explicit The communication record

A three-standard QHSE management review agenda

# Item Covers Owner Minutes
1 Actions from the last review All QHSE manager Status per action
2 Context: internal and external issues; interested parties; compliance obligations and legal changes; climate and other context changes All; 14001 and 45001 explicit on obligations and parties QHSE manager Register changes accepted
3 Policy and objectives: is the policy still appropriate; objectives met or not, per discipline All Top management Policy confirmed or changed; unmet objectives → actions
4 Quality performance: customer satisfaction and complaints; process performance; product conformity; supplier performance; effectiveness of actions on risks and on opportunities 9001 Operations / quality Trends noted; decisions
5 Environmental performance: significant aspects; monitoring results; compliance evaluation; environmental incidents and complaints 14001 QHSE manager Trends; decisions
6 OH&S performance: incidents and investigations; hazard reporting; monitoring results; compliance evaluation; worker consultation and participation outcomes 45001 QHSE manager / worker representative Trends; decisions; communication to workers agreed
7 Nonconformities and corrective actions across all three; internal and external audit results All QHSE manager Closure status; systemic causes
8 Resources: adequacy, requests, competence gaps All Top management Approved / deferred
9 Improvement opportunities and changes to the system; integration with business processes; strategic implications All; 14001 and 45001 explicit on the last two Top management Decisions with owners and dates
10 Conclusion on suitability, adequacy and effectiveness All Top management Recorded per discipline

Two hours is realistic for a single-site organisation if the pack is circulated a week ahead and items 4 to 6 are presented as trends with a proposed decision rather than as raw data. Our guide to QHSE KPIs covers the pack that carries items 4 to 6.

Running the review so top management decides

  1. Top management chairs. Clause 9.3 assigns the review to top management; a review chaired by the QHSE manager with the managing director absent is a finding in three systems.
  2. Pre-read, not presentation. The pack goes out in advance; the meeting is for decisions. A slide deck read aloud consumes the time the outputs need.
  3. A decision per item. Each agenda item ends with a minuted decision — accept, act, defer, change — with an owner and a date. “Noted” is not an output.
  4. The worker representative attends for item 6 at least; ISO 45001 5.4 expects consultation on the review’s relevant outputs and 9.3 expects them communicated.
  5. Planned intervals, kept. Annual is the usual minimum, with quarterly performance reviews feeding it; the interval is stated in the manual and the dates evidence it.
  6. Close the loop. The action log opens the next review; an action that has been carried three times is a resource decision top management is avoiding.

The record

All three standards require documented information as evidence of the results of management reviews. The record that satisfies an auditor is not a set of slides: it is minutes that list attendees (with top management identified), the inputs considered against each standard’s list, the decisions and actions with owners and dates, and the conclusions on suitability, adequacy and effectiveness — plus the circulated pack as the evidence the inputs were real. A one-page decision record over a thirty-page pack is the right shape.

QHSE management review errors

  • One standard’s agenda. An ISO 9001 review with environment and safety “also discussed” misses compliance obligations, interested parties, incidents and worker consultation.
  • Inputs without trends. This quarter’s injury count with no comparison is not “performance and trends”.
  • No conclusion. Minutes that never say whether the system is suitable, adequate and effective have not recorded the review’s purpose.
  • Outputs without owners. Improvement “agreed” with nobody named is not a decision.
  • Top management absent. The single most common finding.
  • The 2026 items missing. ISO 9001:2026’s separate treatment of risks and opportunities, and ISO 14001:2026’s restructured review with climate in context, are on this year’s agenda or the transition audit will say so.

Frequently asked questions

What must a QHSE management review cover?
The union of the three clause 9.3 input lists: previous actions; context changes; interested parties and compliance obligations; aspects, hazards, risks and opportunities; objectives; performance and trends including customer satisfaction, incidents, nonconformities, monitoring, compliance evaluation and audits; supplier performance; resources; external communications; improvement opportunities; and, for ISO 45001, worker consultation and participation.

How often should it be held?
At planned intervals set by the organisation — annually as a minimum in practice, commonly with quarterly performance reviews feeding a full annual review. The interval is stated in the manual and evidenced by the dates.

Who must attend?
Top management — the review is theirs under clause 9.3. The QHSE manager prepares and records; process owners present their areas; a worker representative attends for the OH&S items and receives the communicated outputs.

Can one meeting satisfy all three standards?
Yes, if the agenda covers every input each standard lists and the minutes record the outputs each requires, including conclusions on suitability, adequacy and effectiveness, and communication to workers for ISO 45001.

What changed in 2026?
ISO 9001:2026 lists the effectiveness of actions on risks and on opportunities as separate inputs and names its outputs as ‘results’; ISO 14001:2026 restructured its management review clause and brought climate change into context. ISO 45001 is unchanged. The transition audits will look for the new items.

Where this leaves you

Run the QHSE management review from the union of the three input lists, on a ten-item agenda that gives each discipline its own performance item and every item a decision, chaired by top management with a worker representative present, recorded as minutes that conclude on suitability, adequacy and effectiveness. One meeting can satisfy three standards; one standard’s agenda cannot.

References

More on QHSE

The three-standard management review agenda, the input checklist by clause, the pre-read pack template, the minutes and decision record and the action log are in the QHSE Documentation Bundles, or start with the free templates.

When a standard changes, know first

One email a month: edition changes, new deadlines, and what they mean for documentation you already have. No sales sequence.

We don’t spam! Read our privacy policy for more info.