Implementation

What does the executive review look like?

Implementation
Information Security
Privacy
AI
The executive review, also known as management review, is on the agenda at least annually for ISO certification. But what does an executive review actually mean? What should an executive review include? And why is it so important? In this article, we'll take you through the executive review and explain why it's such an important part of the management system. Download your free template at the bottom of the page!
This article was last updated on
03.06.2026
Written by
Kilian
Houthuijzen
Commercial Manager & Partner

What is an executive review?

The executive review is the time when the board of directors has management system, will assess relevant processes, procedures, policies and rules of the organization for effectiveness. During the management review, the management evaluates whether the management system contributes to achieving the intended objectives.

What does the executive review look like?

The main goal of the management review is to continuously improve the management system and the organization. This is achieved through concrete action points that come from the management review. With the help of deadlines and responsibilities, the organization ensures that improvement measures are actually implemented in the management system and the organization.

‍‍

During this scheduled meeting, the management will assess various aspects of the management system. The topics discussed vary by standard. This is how we stand ISO 9001 include “customer satisfaction” and “quality goals” on the agenda, while with ISO 27001 “information security performance” and “information security objectives” are discussed.

What should an executive review include?

The management review usually consists of eight fixed parts, which can be found in our free template.
‍

How many people participate?

Request now

Thanks!
Oops! The form could not be submitted. Please try again.

More resources

Implementation

ISO 27001 Recertification: What Changes After 3 Years?

by
Kilian
Kennisartikel
Implementation

Supplier Management within ISO 27001: How to Comply with the Annex A Requirement

by
Mathijs
Kennisartikel
Implementation

Classifying, Labeling, Transferring: 3 ISO 27001 Controls That Cannot Be Separated

by
Gijs
Kennisartikel