21st July 2026, Serdang – Centre for Quality Assurance (CQA), Universiti Putra Malaysia (UPM), conducted the Management Review Meeting (MRM) for the ISO 9001:2015 Quality Management System (QMS) and ISO/IEC 27001:2022 Information Security Management System (ISMS). The meeting took place at the Senate Hall, Putra Chancellery Building, UPM, and was simultaneously broadcast via Google Meet to include UPM Sarawak. The meeting was chaired by YBhg. Dato’ Professor Ir. Dr. Ahmad Farhan Mohd Sadullah, FASc, Vice-Chancellor of UPM. The session, which addressed eleven (11) agenda items, was led by YBrs. Associate Professor Dr. Noor Syamilah Zakaria, K.B., P.A., Director of CQA and UPM’s Management Representative, while Puan Rozi Tamin, Deputy Director of Service Quality Assurance at CQA, served as the Secretary for the UPM ISO MRM. By way of introduction, the Chairman emphasized that the implementation of the MKSP—comprising all key UPM officials, Heads of Responsibility Centres (PTJ), and senior PTJ administrators—is essential to ensuring the management system remains relevant and effective, while complying with ISO standards and the university's strategic direction. This meeting focused on a comprehensive evaluation of the effectiveness of UPM’s Quality Management System (QMS) and Information Security Management System (ISMS), covering follow-up actions from previous meetings, changes in internal and external issues, system performance, customer satisfaction, audits, resources, risks, and opportunities for improvement. The meeting reviewed the status and effectiveness of follow-up actions from the 15th Management Review Meeting (MKSP) for ISO QMS and ISMS (2025) to ensure that agreed-upon actions were effectively implemented and closed out. Changes in UPM’s internal and external environments relevant to the QMS and ISMS were identified and assessed to ensure the management systems remain relevant, responsive, and aligned with the organization's current needs. Customer satisfaction findings and stakeholder feedback regarding the QMS and ISMS were discussed as vital inputs for evaluating service delivery effectiveness and identifying areas for improvement. UPM’s 2025 Key Performance Indicator (KPI) achievements, the setting of 2026 KPIs, the progress of Functional and Level-specific Action Plans for each Responsibility Centre (PTJ), the Customer Charter, and ISMS objectives were evaluated to determine target achievement levels and system effectiveness. QMS and ISMS non-conformities and corrective actions were scrutinized to ensure root causes were identified, corrective actions were implemented, and their effectiveness was verified to prevent issue recurrence. Findings from the 2025 SIRIM Audit and 2026 Internal Audit for QMS and ISMS were discussed, including the status of audit findings, corrective actions, and improvement opportunities to be addressed by the respective leads and PTJs. The performance of external providers, as well as the adequacy of human and financial resources, was also assessed to ensure sufficient support for the effective implementation of the QMS and ISMS. The meeting also evaluated the effectiveness of actions taken to address UPM’s strategic risks, QMS risks and opportunities—encompassing service operational risks across all UPM Responsibility Centres (PTJ)—and the results of information security risk assessments, ensuring that identified risks are controlled at appropriate levels. Opportunities for improving the QMS and ISMS were also identified based on the meeting's overall input, including audit findings, system performance, customer feedback, risks, resources, and changes in organizational issues. Overall, the meeting concluded that Universiti Putra Malaysia (UPM) Quality Management Policy and Information Security Management Policy remain suitable and are to be maintained. The implementation of the ISO 9001:2015 Quality Management System (QMS) and the ISO/IEC 27001:2022 Information Security Management System (ISMS) is both adequate and effective. UPM is capable of maintaining its ISO 9001:2015 QMS and ISO/IEC 27001:2022 certifications and is prepared for the 2026 Surveillance Audit (Review 2) by the certification body—scheduled for 7–11 September 2026—backed by the commitment and accountability of university management and the management of Responsibility Centres (PTJ), in accordance with the requirements of ISO Standard Clause 5.
	News prepared by		:Siti Fatimah Hasim   |  Quality Culture Section   |  Centre for Quality Assurance

Date of Input: 02/08/2026 | Updated: 18/08/2026 | aidawati