ISO AUDITOR Management Review Agenda & Output 2 — Questions and Answers
Question 1: Under ISO 9001:2015, which clause specifically requires top management to conduct management reviews?
- Clause 7.5 — Documented Information
- Clause 9.3 — Management Review (Correct answer)
- Clause 8.1 — Operational Planning
- Clause 10.2 — Nonconformity and Corrective Action
Correct answer: Clause 9.3 — Management Review
Clause 9.3 of ISO 9001:2015 establishes the requirements for management review, including inputs, outputs, and frequency.
Question 2: During an audit, you find no documented outputs from the last management review. Which requirement has most likely been violated?
- The organization must retain documented information as evidence of the results of management reviews. (Correct answer)
- Top management must send review minutes to all employees within 48 hours.
- Management reviews must be approved by an external certification body.
- The QMS manual must summarize all management review conclusions.
Correct answer: The organization must retain documented information as evidence of the results of management reviews.
ISO 9001:2015 Clause 9.3.3 requires retaining documented information as evidence of management review results.
Question 3: Which management review input relates to understanding whether QMS objectives are being achieved?
- Status of corrective actions from previous reviews
- Performance and effectiveness of the QMS including quality objectives (Correct answer)
- Changes in external and internal issues relevant to the QMS
- Adequacy of resources
Correct answer: Performance and effectiveness of the QMS including quality objectives
ISO 9001:2015 Clause 9.3.2(b) requires review of the performance and effectiveness of the QMS, specifically including quality objectives.
Question 4: An auditor notes that the organization reviews customer satisfaction data only annually during management review. Which question best probes this finding?
- Has the certification body approved this frequency?
- Does the organization's context and risk level justify annual-only monitoring of customer satisfaction? (Correct answer)
- Is annual review mandated by ISO 9001 as the minimum frequency?
- Do customers agree that annual reviews are sufficient?
Correct answer: Does the organization's context and risk level justify annual-only monitoring of customer satisfaction?
ISO 9001 does not prescribe frequency, but auditors must assess whether the chosen frequency is appropriate given the organization's context and risks.
Question 5: Which of the following is NOT listed as a required output of the management review under ISO 9001:2015?
- Opportunities for improvement
- Any need for changes to the QMS
- Resources needed
- Names and signatures of all attendees (Correct answer)
Correct answer: Names and signatures of all attendees
ISO 9001:2015 Clause 9.3.3 requires decisions on improvement, QMS changes, and resource needs — attendee signatures are not a specified output.
Question 6: Top management delegates the management review entirely to the Quality Manager and does not attend. What is the most significant concern for an auditor?
- The Quality Manager may not have access to financial data.
- ISO 9001 requires top management — not delegates — to conduct the review. (Correct answer)
- The review must include at least three members of senior leadership.
- Management reviews conducted by QMs are not eligible for certification.
Correct answer: ISO 9001 requires top management — not delegates — to conduct the review.
ISO 9001:2015 Clause 9.3.1 states that top management shall review the QMS; full delegation without top management involvement violates this requirement.
Question 7: A management review output states 'improve customer satisfaction.' An auditor flags this as inadequate. Why?
- ISO 9001 prohibits general improvement goals in outputs.
- Outputs must include specific decisions and actions with assigned responsibility and timelines. (Correct answer)
- Customer satisfaction improvements must be handled in corrective action reports, not management review outputs.
- The output should reference the relevant ISO 9001 clause number.
Correct answer: Outputs must include specific decisions and actions with assigned responsibility and timelines.
Effective management review outputs must include decisions on specific actions, not vague goals, and should include responsibilities and timelines to be actionable.
ISO AUDITOR Management Review Agenda & Output 2
Under ISO 9001:2015, which clause specifically requires top management to conduct management reviews?