Maps to
QMSR / ISO 13485: §820.20
ISO 13485: §5.6
Requirement text
Top management shall review the organization's quality management system at planned intervals to ensure its continuing suitability, adequacy, and effectiveness. The review shall include assessing opportunities for improvement and the need for changes to the QMS, including the quality policy and quality objectives.
What changed
Part 820.20(c) required management with executive responsibility to review the suitability and effectiveness of the quality system at defined intervals and with sufficient frequency, but provided minimal structure for what the review must include. ISO 13485 clause 5.6 is substantially more prescriptive, defining specific required inputs (5.6.2) and required outputs (5.6.3) for every management review.
The required inputs under ISO 13485 clause 5.6.2 are explicitly enumerated: feedback, complaint handling results, reporting to regulatory authorities, audit results, monitoring and measurement of processes, monitoring and measurement of product, corrective action status, preventive action status, follow-up actions from previous management reviews, changes that could affect the QMS, recommendations for improvement, and applicable new or revised regulatory requirements. This is a significant expansion from Part 820.20(c), which required review of the quality system generally but did not enumerate specific data inputs.
The required outputs under clause 5.6.3 are also explicit: decisions and actions related to improvement needed to maintain QMS suitability, adequacy, and effectiveness; improvement of product related to customer requirements; changes needed to respond to applicable new or revised regulatory requirements; and resource needs. Part 820.20 required management review but did not specify output categories.
Perhaps most significantly, internal audit results and management review records are now subject to FDA inspection under the QMSR, with the removal of the 820.180(c) exemption. This means management review meeting minutes, attendance records, data packages, decisions, and action items will be directly reviewable by FDA investigators. Organizations must ensure management review records demonstrate that all required inputs were considered and that substantive decisions and resource commitments resulted from the review.
Atomic constraints
- •Management reviews must be conducted at planned intervals.
- •Review inputs must include audit results, customer feedback, process performance, CAPA status, and changes that could affect the QMS.
- •Review outputs must include decisions on QMS improvement, resource needs, and updated requirements.
- •Records of management reviews must be maintained.
Common gaps
Incomplete Management Review Inputs
majorISO 13485 clause 5.6.2 enumerates 12 specific categories of required inputs. Many Part 820-era management review procedures address quality system performance generally but do not systematically cover all required inputs, particularly feedback data (beyond complaints), regulatory reporting status, and new or revised regulatory requirements.
Management Review Records Not Inspection-Ready
majorWith the removal of 820.180(c) protections, management review records are now subject to FDA inspection. Many organizations have informal or incomplete management review minutes that do not demonstrate systematic coverage of required inputs or traceable action items with closure evidence.
No record of 'Resource Decisions'
majorMinutes show that a problem was discussed, but fail to record a 'decision' to provide resources (people/money/tools) to fix it. ISO 13485 §5.6.3 requires resource-related outputs.
No Structured Output Documentation
moderateISO 13485 clause 5.6.3 requires that management review outputs include specific categories of decisions and actions. Many organizations document meeting minutes in narrative form without mapping outputs to the required categories (QMS improvement, product improvement, regulatory response, resource needs).
Action Items Not Tracked to Closure
moderateISO 13485 requires follow-up actions from previous management reviews as a required input to subsequent reviews. Many organizations assign action items during management review but lack formal tracking to closure, meaning previous action items are not systematically reviewed at the next meeting.
Evidence signals
- •
FILE_EXISTS
(Management.*Review|MR.*Minutes|QMS.*Review)
- •
CONTENT_MATCH
Does this document record a management review of the QMS including audit results, CAPA trends, customer feedback, and resource decisions?
Audit defense
Management reviews for our QMS are documented in [your document ID]. Each review follows a structured agenda covering all ISO 13485 §5.6.2 inputs, with documented decisions on resource allocation and QMS improvements traceable to subsequent actions.