Twelve weeks to ISO 9001:2026, week twelve: management review, then choosing a certification body.
ISO Cloud Consulting editorial teamWeek twelve is where top management reviews the whole ISO 9001:2026 system and the company prepares for certification. The review should cover previous actions, context, performance and readiness, and end in recorded decisions. Then you choose a certification body, understand the stage one and stage two audits, and keep the system running afterward.
What does week twelve of the series cover?
This is the final episode of twelve weeks to ISO 9001:2026. In eleven weeks we have scoped the system, analyzed the gaps, mapped the processes, recorded the context, planned risks, opportunities and objectives, written and controlled documents, built the operational controls, managed suppliers, set up corrective action, gone live and audited ourselves.
This week top management reviews the whole system, and we prepare for certification.
What should the management review agenda include?
Start with the status of actions from any previous reviews, changes in context and interested parties, and the performance of the system. That means customer feedback, how well objectives are being met, process performance, nonconformities and corrective actions, audit results, supplier performance, and the adequacy of resources.
It also covers how well risks and opportunities are being addressed, and opportunities for improvement. For a company that has just finished building its system, add one more item: is the system ready for certification?
How do you make the review about decisions, not discussion?
The minutes of a management review should show what was decided: changes to objectives, resources approved, improvements commissioned, risks accepted. A review where top management listens to a presentation and nods is not a management review. It is a briefing.
For the 2026 edition, the review is also good evidence of leadership and quality culture, so make sure the sponsor leads it, not the quality manager.
How do you choose a certification body?
Look for one that is accredited for your industry sector, by an accreditation body that is recognized in your market. Ask for references from similar companies, the experience of the auditors they would send, how they handle the 2026 edition, and the full cost over a three-year cycle, not just the first audit.
Ask for availability too. Audit dates can be weeks or months away, so book early.
What happens in stage one and stage two?
Stage one is a readiness review, usually shorter, often partly remote. The auditor checks your documents, your scope, your internal audit and management review, and whether you are ready for stage two.
Stage two is the full certification audit, where the auditor samples records and interviews people across the system. Findings from stage one should be fixed before stage two.
What happens after the twelve weeks?
Certification is a three-year cycle, with surveillance audits in between. Keep the weekly rhythm going, monthly instead of weekly. Keep the records running, the corrective actions closing and the reviews happening.
The system you built is now a management tool, and it only stays useful if it is used. That is the series: twelve weeks, one step at a time, ending with a system that works and a certification audit booked.
Where can you get the management review templates?
The ISO 9001:2026 Management Review Pack has an agenda, minutes template and input sheets for this meeting. If you want every document from this series in one place, the Complete QMS Documentation Kit has them. You can also browse the ISO 9001:2026 templates collection or read about remote ISO consulting.
