Management reviews
Run the ISO 27001 / 9001 Clause 9.3 management review with the agenda pre-filled from your program (audit results, nonconformities, incidents, and readiness), plus minutes, decisions, and a branded PDF.
| Review | Date | Inputs | Actions | Status |
|---|---|---|---|---|
| Q2 ISMS review | Held | Audits, risks, KPIs | 3 open | Complete |
| Q1 ISMS review | Held | Incidents, NCs | 0 open | Complete |
| Quality review | Scheduled | Complaints, SCARs | Pending | Planned |
| Annual review | Overdue | Full program | 1 open | Overdue |
Clause 9.3 asks leadership to review the management system at planned intervals, against a specific list of inputs. Keel does the gathering for you: open the review and the agenda is already populated with your internal audit results, open nonconformities, security incidents, and per-framework readiness, pulled live from the rest of your program. You focus on the discussion, record the minutes and decisions, capture the action items, and export branded minutes.
The management review is a scramble to assemble
Someone spends the day before the meeting pulling numbers from five places into a slide deck: how many nonconformities are open, what the last audit found, which incidents happened, where readiness sits. It’s exactly the data your program already holds, and it’s stale by the time the meeting starts.
What management reviews does
An agenda pre-filled from your program
The Clause 9.3 required inputs (internal audit results, nonconformity status, security incidents, and per-framework readiness) are gathered live from the rest of Keel and shown on the review, so you walk in with the numbers already assembled.
Minutes & decisions
Record who attended, the discussion against each input, and the decisions and outputs, the improvements, resource needs, and ISMS changes the standard asks you to capture.
Action items tracked to done
Capture the actions agreed in the review with an owner and due date, and track each to completion, so the review drives change instead of producing a document nobody revisits.
Branded minutes PDF
Export auditor-ready management-review minutes with the agenda inputs, minutes, decisions, and actions, the record a certification auditor expects for Clause 9.3.
The capstone of your ISMS
Because Keel already runs your audits, nonconformities, incidents, and readiness, the management review ties them together automatically, the top of the run-and-prove-your-ISMS stack.
Why it matters
- Walk into the review with the Clause 9.3 inputs already gathered
- Stop rebuilding a management-review deck by hand every quarter
- Turn the review into tracked action items, not a filed document
- Hand your auditor branded management-review minutes on demand
Get audit-ready, and prove it
Management reviews is one module of a full GRC platform: controls crosswalked across every framework, so you collect evidence once and comply everywhere. Start free, no credit card, no sales call.
Start freeFrequently asked questions
What does Clause 9.3 require?
That top management reviews the management system at planned intervals against defined inputs (including audit results, nonconformities and corrective actions, monitoring results, and opportunities for improvement) and records the decisions that come out of it. Keel pre-fills those inputs and captures the outputs.
Where do the agenda numbers come from?
Live from the rest of your Keel program: internal audits, the nonconformity (CAPA) register, the security incident register, and your framework readiness. Nothing is typed in twice.
Can I produce minutes for the auditor?
Yes. Export a branded management-review minutes PDF with the agenda inputs, minutes, decisions, and action items. It’s the Clause 9.3 record a certification auditor asks to see.
Related features: Internal audits · Nonconformities & CAPA · Readiness reports
Works with: ISO/IEC 27001 · ISO 9001