R2v3 Management Review: What Leadership Must Do

One of the things I see trip up otherwise well-run facilities is the management review. Not because the requirement is obscure — it's right there in R2v3 clause 8.1 — but because a lot of leadership teams treat it as a documentation exercise rather than an actual decision-making meeting. They schedule something on the calendar, someone reads slides for 45 minutes, the GM signs the minutes, and they move on. Then an auditor asks a follow-up question about what changed as a result of the review, and the room goes quiet.

That silence is the finding.

Management review under R2v3 is one of the clearest windows an auditor has into whether your EMS and overall R2 system is genuinely led or just maintained. Getting it right matters, and in my experience working with 200+ facilities toward certification, the ones that do it well share a common trait: they treat the review as a tool their leadership actually uses, not a box they check.

What R2v3 Actually Requires

R2v3 integrates ISO 14001:2015 as its environmental management foundation, and the management review requirement draws directly from ISO 14001:2015 clause 9.3. This isn't a vague "leadership should stay involved" gesture — it's a structured requirement with specific inputs leadership must evaluate and specific outputs they must produce.

The standard requires that top management conduct the review at planned intervals. That phrase carries weight. "Planned" means documented. "Intervals" means more than once if your certification cycle demands it. Most facilities interpret this as annual, and in my view that's the minimum — for a high-volume ITAD or recycling operation, twice a year is worth considering.

The review must evaluate:

• The continued suitability, adequacy, and effectiveness of the environmental management system
• The degree to which the R2v3 environmental policy and objectives have been met
• Progress on corrective actions from previous reviews
• Any changes in external and internal context that could affect the EMS
• Information from monitoring, measurement, and audit results

That last point is where most facilities underperform. Leadership receives a summary slide deck rather than the actual data — nonconformity trends, legal compliance status, objective progress metrics — and so the review is operating one abstraction layer away from what it's supposed to evaluate.

The Required Inputs: What Has to Be on the Agenda

The standard is fairly explicit about inputs, and auditors will look for evidence that each was addressed. Here is what must be covered:

Status of Previous Actions

Did you do what you said you'd do in the last review? This isn't just "yes or no" — leadership needs to evaluate whether the actions taken actually resolved the issue, or whether the root cause is still present in a different form. I've seen facilities close corrective actions on paper while the underlying problem was still generating nonconformities six months later.

Changes in External and Internal Context

Under ISO 14001:2015 clause 4, your organization is required to understand its context — the external regulatory environment, market conditions, community expectations, and the internal factors that affect your ability to manage environmental performance. Management review is where you ask: has anything changed? New state regulations on cathode ray tube processing, a shift in downstream vendor relationships, a change in your facility's footprint — these all belong in this conversation.

Environmental Performance Information

This is the operational core of the review. Leadership needs to see actual trend data: air and water monitoring results if applicable, waste generation rates, spill incidents, objective attainment percentages, legal compliance status. The phrase from the standard is "information on the environmental performance," and that means data, not narrative summaries that have been pre-interpreted by an EHS coordinator.

Adequacy of Resources

Are you properly staffed and funded to maintain the EMS? This is where leadership has to be honest. A lot of organizations I work with have EHS functions that are understaffed relative to the scope of their R2 certification. Management review is one of the few formal moments where that gap can be surfaced and addressed at the right level.

Relevant Communications from Interested Parties, Including Complaints

Community complaints, regulatory inquiries, customer concerns about downstream accountability — all of it belongs here. Under R2v3, your stakeholder commitments are significant, and leadership needs to see whether those relationships are healthy or stressed.

Opportunities for Continual Improvement

This one is often treated as an afterthought, something added to the agenda so the minutes don't look incomplete. In practice, it deserves real time. What did you learn this year that could make the system better? What near-misses gave you information worth acting on?

The Required Outputs: What Leadership Must Decide

Inputs tell you what to discuss. Outputs are what you're required to produce — and "the meeting happened" is not an output.

R2v3 requires that management review outputs include:

• Conclusions on the continued suitability, adequacy, and effectiveness of the EMS
• Decisions related to continual improvement opportunities
• Any need for changes to the EMS, including resources, policy, or objectives

These outputs must be documented and retained as evidence. Auditors will ask to see management review records. They'll read the conclusions and then look at what actually changed in the operation afterward. If the conclusions are consistently positive with no resulting actions, that's a pattern worth examining.

The test I apply with my clients is simple: could you hand a new EHS manager these minutes and have them understand what the system's current health is, what decisions leadership made, and what's supposed to happen before the next review? If the answer is no, the minutes aren't doing their job.

Who Has to Be in the Room

"Top management" is the party responsible for conducting the review under ISO 14001:2015 clause 9.3. The standard defines top management as the person or group that directs and controls an organization at the highest level — practically speaking, that means whoever has authority over resources, policy, and strategic direction for the certified site.

For most R2-certified facilities, that's a VP or Director of Operations, a General Manager, or a C-suite executive. The EHS manager presenting data is appropriate and necessary. But the EHS manager running the meeting as the only leadership-level attendee, with an absent GM who later signs the minutes — that is a common audit gap, and it matters.

The reason it matters: the standard assigns top management specific responsibilities throughout R2v3 (leadership and commitment under ISO 14001:2015 clause 5.1, policy establishment, ensuring resources). Management review is the mechanism by which those responsibilities are exercised in a documented, evaluative way. Proxy attendance doesn't satisfy that.

Management Review vs. Internal Audit: A Common Confusion

These two requirements get conflated fairly often, especially in smaller operations where one or two people wear multiple hats. They serve different purposes.

The internal audit findings should be an input to management review — not the same event. I've seen facilities schedule a combined "internal audit and management review" day, which creates a documentation mess and usually means neither requirement is fully met.

The Four Most Common Audit Findings in Management Review

After working with hundreds of R2 clients, the management review findings I see most often follow a predictable pattern:

1. Missing required inputs. The agenda didn't address one or more of the required topics — often "adequacy of resources" or "communications from interested parties." The meeting happened; it just didn't cover everything it was required to.

2. No evidence of top management participation. Minutes were signed by the EHS manager. No attendee list, no documentation that a decision-maker with actual authority was present.

3. Vague or absent outputs. The minutes conclude "the EMS is performing well" with no supporting rationale, no identified opportunities for improvement, and no action items. An auditor will ask: what evidence led to that conclusion?

4. No linkage between review cycles. The management review exists as an isolated annual event with no visible connection to the previous year's actions or the next year's objectives. The continual improvement loop is broken.

Each of these is correctable before your audit. The key is recognizing them as structural gaps rather than documentation oversights.

What "Planned Intervals" Actually Means in Practice

R2v3 and ISO 14001:2015 don't specify a frequency beyond "planned intervals." In my view, annual is sufficient for most facilities, but there are conditions that warrant a mid-cycle review:

• Significant regulatory changes affecting your operations
• A major environmental incident or spill
• A significant change in scope — adding or removing a material stream
• Preparing for a surveillance or recertification audit

If any of these occur, holding a documented management review before your next scheduled cycle isn't just good practice — it demonstrates that your system is responsive, which is precisely what "suitability, adequacy, and effectiveness" is supposed to mean.

How to Build a Management Review That Actually Works

What I recommend to clients — and what the higher-performing facilities I've worked with tend to do naturally — is treating management review as the annual strategic conversation about the EMS, not as a compliance ritual.

That means:

Prepare data, not narratives. Bring the actual objective attainment scorecard, the nonconformity trend chart, the legal compliance log. Let leadership see the real picture.

Set a time limit on presentations. The review should spend more time on decisions than on briefings. If the data presentation takes 80% of the meeting, you've scheduled a report-out, not a review.

Assign action owners in the room. Any action that emerges from the review should be assigned to a specific person, with a deadline, before the meeting ends. "We'll follow up on this" is not an output.

Document the reasoning behind conclusions. If the conclusion is "EMS remains suitable and effective," the minutes should say why — what data supported that judgment. If it's "EMS requires adjustment in the area of objective setting," document what adjustment is needed and who owns it.

Close the loop from last time. The first agenda item should always be: what did we say we'd do last year, and did we do it?

Why This Matters Beyond the Audit

I'll be direct about something: if your facility is R2v3 certified, you've made a public commitment to responsible recycling and environmental performance. The downstream customers and clients you serve — many of them conducting due diligence on their electronics recycling partners — are relying on that commitment being real.

Management review is the moment in the calendar when leadership either validates that commitment or quietly acknowledges they're maintaining a certification without actually leading the system underneath it. Most leadership teams, when I frame it that way, want to do it right. They just sometimes need the structure to make it useful rather than burdensome.

The facilities I've worked with that have a 100% first-time audit pass rate — and there have been many — almost always have a management review process where leadership is genuinely engaged. That's not a coincidence.

Preparing for Your Next Management Review

A few practical things to have ready before the meeting:

• Environmental objectives and targets status — current attainment percentages against documented goals
• Legal compliance evaluation results — your most recent compliance assessment, including any open items
• Significant environmental aspect review — have your aspects and impacts changed since the last update?
• Audit results — internal audit findings, any third-party surveillance findings, status of corrective actions
• Stakeholder communications log — complaints, inquiries, regulatory correspondence
• Resource adequacy assessment — honest evaluation of staffing, training, and budget relative to EMS demands

If you walk into the management review with these six items prepared and a leadership team with authority to make decisions, you have what you need. The rest is conversation and documentation.

For more on how R2v3 leadership requirements connect to the broader certification framework, see our overview of R2v3 certification requirements and our guide on building an R2v3-ready EMS.

Last updated: 2026-05-08