Clause 9.3 requires top management to review system performance. This is not symbolic. Leadership must: • Review objectives • Analyse data • Evaluate risks • Decide on improvements Here’s the shift most organisations miss: High-performing organisations do not avoid uncomfortable data. They confront it. They don’t defend poor results. They diagnose them. They don’t sit through management review meetings to satisfy auditors. They use them to drive direction, allocate res