Nothing in the standard requires that all inputs be reviewed at once. Some organizations structure their management reviews to include some inputs more often than others - for example, monthly tactical reviews with charts of process performance and product conformity monthly, as well as charts and/or descriptive bullet points indicating progress and effectiveness of operational controls (don't we do those to address risk?). Less frequent reviews can include strategic-level subjects such as changes to internal and external issues - unless they change more frequently, of course.
If you make a plan showing structure of this nature or that which suits your business needs and can show you re following your plan, you are doing management reviews at planned intervals and 9.3.1 of ISO/TC 9002:2016 (Guidelines for application of ISO 9001:2015) states "...Some management review activities may be carried out by various levels of the organization, provided the results are made available to top management. It is not required that all the inputs to management review be addressed at one time, but instead they may be addressed during sequenced management reviews; the organization should address how it will ensure that all the ISO 9001 management review requirements are met. The organization may conduct management reviews as a standalone activity or in a combination of related activities (e.g. meetings, reports)." If an auditor writes a nonconformance against your practice, I suggest you dispute it because of 9002's guidance and the fact that we don't get to audit against what we think the standard says or what we wish it said. We audit to what it does say: planned intervals.
If you make a plan showing structure of this nature or that which suits your business needs and can show you re following your plan, you are doing management reviews at planned intervals and 9.3.1 of ISO/TC 9002:2016 (Guidelines for application of ISO 9001:2015) states "...Some management review activities may be carried out by various levels of the organization, provided the results are made available to top management. It is not required that all the inputs to management review be addressed at one time, but instead they may be addressed during sequenced management reviews; the organization should address how it will ensure that all the ISO 9001 management review requirements are met. The organization may conduct management reviews as a standalone activity or in a combination of related activities (e.g. meetings, reports)." If an auditor writes a nonconformance against your practice, I suggest you dispute it because of 9002's guidance and the fact that we don't get to audit against what we think the standard says or what we wish it said. We audit to what it does say: planned intervals.
