Hi Susan - Review and Approval can be accomplished several ways. It would begin with deciding who that approval authority is, usually a department head or a process owner. Then some evidence of their review and approval, such as typing their name in an appropriate approval box on the document. ISO 9001 does not explicitly require a signature, but if you are in a regulated industry, there may be rules for having hard copies signed in black ink.