Learn what GMP regulations require from management reviews, why they so often fail in practice, and what a compliant, inspection-ready review record looks like.
One of the first questions we ask when we arrive at a regulated site is simple: when was your last management review, and can we see the minutes?
The answer tells us a great deal. But the reaction, the pause, the glance between colleagues, the slight shift in the room, tells us more. In over one decade of working across pharmaceutical manufacturing, medical devices, and food production, that moment has become one of our most reliable diagnostic tools. When there is hesitation, we already know there is work to do.
The GMP management review is not an administrative formality. It is a regulatory requirement, and its condition is one of the clearest windows into the health of a quality system. When it is missing, delayed, or hollow, the consequences reach further than most sites appreciate, until an inspector arrives.
What GMP Regulations Require from the Management Review
Under the major GMP frameworks, top management is required to review the quality management system at planned intervals. The purpose is explicit: to ensure its continuing suitability, adequacy, and effectiveness.
This requirement appears across:
- EU GMP and its associated annexes, including Annex 15 on qualification and validation
- ICH Q10, the pharmaceutical quality system guideline adopted globally, which places management review at the centre of continual improvement
- ISO 13485, the quality management standard for medical devices, which mandates documented review outputs and tracked actions
- FDA 21 CFR Part 820 for device manufacturers operating in the US market
The regulatory logic is consistent across all of them. Quality cannot be delegated entirely to the QA department. It requires visible, documented, and active leadership engagement. The management review is the mechanism through which that engagement is demonstrated, not just to inspectors, but to the organisation itself.
A well-structured GMP management review covers the full picture of site quality: batch release performance and product quality trends, deviation and out-of-specification results, CAPA programme effectiveness, customer complaints and adverse event data, internal and external audit findings, supplier performance, regulatory and process changes, resource adequacy, and progress against quality objectives.
When it functions as intended, it is the moment where that complete picture lands on the desk of the people with the authority and budget to act on it. When it does not function as intended, that moment never comes and the gap compounds quietly over time.
If you want to build confidence in running and structuring these reviews, our GMP Management Review training course covers the regulatory requirements and practical tools your team needs.
Why GMP Management Reviews Fail: Three Patterns We See Repeatedly
Across the sites Truex Consultancy supports, inadequate management reviews tend to follow one of three recognisable patterns. All of them create real regulatory exposure.
1. The review that was rescheduled and never recovered
A date is set. Production has a difficult quarter. A key member of senior management is unavailable. The review is moved by two weeks. Then another two. By the time anyone notices, six months have passed without a single documented record of top management quality oversight.
In a regulatory inspection, that gap is extremely difficult to explain. “We had operational pressures” is not a defence. It is a confirmation that quality deprioritisation is exactly the kind of systemic issue the inspector was looking for.
2. The review that happened on paper only
The minutes exist. The date is recorded. But when we probe the outputs, what actions were raised, who owned them, what was completed, the record is thin. The same issues appear in review after review without meaningful resolution. The CAPA programme has stalled. Resource requests raised at the last review have no documented response.
The management review has become a compliance ritual rather than a management tool. It satisfies the letter of the requirement while defeating its entire purpose.
3. The review where quality presents and management observes
This pattern is the most subtle and, in some ways, the most difficult to remediate. The QA Director runs through a slide deck. Senior management nods along. There is no challenge, no resource discussion, no strategic decision-making visible in the record.
Technically, the review occurred. Functionally, it was useless. The disconnect between quality data and business decisions remains intact, and the record, if scrutinised by an experienced inspector, will show it.
Why This Keeps Happening
We are frequently asked why such a foundational GMP requirement is so consistently poorly executed. The reasons, in our experience, are structural rather than exceptional.
Senior leadership in manufacturing environments operates under constant operational pressure. Production targets, customer commitments, and financial reporting are tangible and urgent. Quality reviews feel less so, particularly when quality appears to be running well. When quality is struggling, the management review can feel actively uncomfortable, which is another reason to postpone.
The second and more correctable problem is one of ownership. In the majority of sites we work with, the management review is owned and driven entirely by QA. No one at the executive level feels personally accountable for whether it happens or what it produces. That creates a single fragile point of accountability. When the Quality Director is stretched, and Quality Directors are almost always stretched, the review is the first thing to slip.
This is not a QA failing. It is a governance failing. The management review, by regulatory intent, belongs to top management. The QA function provides the data. Leadership provides the engagement, the decisions, and the actions. When that division of responsibility is unclear or absent, the review becomes what so many of them are: a QA event that senior management attends rather than leads.
Our GMP Management Review training course is designed specifically to address this, helping both QA teams and senior leaders understand their respective roles and how to make the review work as a genuine management tool.
What the Consequences Look Like in Practice
The regulatory exposure from a weak management review history is significant. In an inspection, an inadequate review record signals to the inspector that quality culture at the top of the organisation is not what it should be. That finding colours every subsequent observation they make.
Beyond regulatory risk, the operational damage accumulates steadily. Quality trends go unaddressed for longer than they should. Resource gaps raised at site level never reach the people with the authority to close them. CAPA programmes lose momentum because no one senior is tracking their effectiveness. And the organisation loses its clearest mechanism for connecting quality data to business decisions.
Truex Consultancy has supported sites through regulatory responses where gaps in the management review record were identified as contributing factors in warning letters and critical observations. The remediation cost, in consultant time, regulatory submissions, leadership bandwidth, and reputational damage, is consistently and significantly greater than the cost of simply running the review properly.
What an Effective GMP Management Review Looks Like
The sites that execute this well share a consistent approach.
The review is scheduled at the start of the year, typically quarterly for higher-risk or more complex operations, and treated as a fixed executive commitment. It appears in the leadership calendar the same way a board meeting or financial review does. It is not subject to operational rescheduling.
The agenda is circulated in advance with supporting data. Senior leaders arrive prepared. The first item is always the status of actions from the previous review: what was committed to, who owned it, and whether it was done. Accountability is visible and documented from the start.
Outputs are tracked with the same rigour applied to any other business commitment. Actions have owners, deadlines, and where relevant, resource allocations. By the time the next review arrives, the team can demonstrate not just that the review happened, but that it produced real outcomes.
The best sites use the management review as the formal connection point between quality performance and business strategy. Capital investments, headcount decisions, and infrastructure upgrades are justified and approved through the review process. Quality data drives business decisions, and that linkage is documented and visible.
That is what a review record that withstands regulatory scrutiny looks like, and it is also what a genuinely well-managed site looks like. If you want a structured framework for getting there, our GMP Management Review training course walks through agenda design, output requirements, and how to build a review process that holds up under inspection.
How Truex Consultancy Supports Management Review Improvement
At Truex Consultancy, we work with QA leaders and site management teams to build management review processes that are both inspection-ready and genuinely useful to the business.
For sites building a stronger process from the ground up, that means designing agendas that surface the right information at the right level of detail, coaching leadership teams on their regulatory responsibilities and how to engage meaningfully with quality data, and establishing the governance structures, meeting cadence, action tracking, escalation paths, that keep the review on track through operational pressure.
For sites that have fallen behind, whether through a gap in the review calendar, a history of weak outputs, or an impending inspection that has made the issue urgent, we support structured remediation. That includes helping rebuild a review record that demonstrates credible top management engagement going forward and preparing the narrative for regulatory dialogue where needed.
If your site’s management review record would not withstand scrutiny tomorrow, that is worth addressing today. Neem contact met ons op to discuss where you are and what needs to change.
Frequently Asked Questions: GMP Management Review
How often is a GMP management review required?
GMP regulations require management reviews to be conducted at “planned intervals” and do not prescribe a fixed frequency. In practice, most regulators and frameworks expect at minimum an annual review, with quarterly reviews recommended for complex or higher-risk operations. ICH Q10 and ISO 13485 both emphasise that the frequency should reflect the needs of the quality system. A site with significant quality challenges or recent regulatory attention would be expected to review more frequently than one with a consistently strong performance record.
What must GMP management review minutes include?
The outputs of a management review must be documented. At minimum, the record should capture the date and attendees, the topics covered, the data reviewed, any decisions made, and all actions arising with named owners and target completion dates. For ISO 13485 compliance, the standard is explicit that outputs must include decisions and actions related to improvement of the quality management system, improvement of product and processes, and resource needs. A management review record with no actions, or with the same unresolved actions carried forward repeatedly, will attract scrutiny in any inspection.
What is the difference between a management review and an internal audit?
These are related but distinct activities. An internal audit is a systematic, independent examination of specific processes or systems against defined requirements. It produces findings and observations that feed into the CAPA programme. The management review is a higher-level strategic activity led by top management, which draws on audit results among many other inputs to assess the overall performance of the quality system and make decisions about resource allocation, objectives, and direction. In simple terms: audits investigate; management reviews decide.
Can the management review be conducted remotely or in sections?
Yes, provided the approach is defined and documented in the quality system. Remote management reviews became common during the COVID-19 period and have remained in place at many sites. Regulators generally accept this provided the meeting is properly minuted, attendees are documented, and the review covers all required agenda items. Splitting the review across multiple shorter sessions can also work, but the cumulative record must clearly demonstrate that all required topics were addressed within the defined review period.
What happens if an inspector finds no management review records?
An absence of management review records, or records so incomplete as to be meaningless, is typically classified as a major finding under GMP frameworks. It indicates a systemic failure of top management oversight, which raises questions about the reliability of the entire quality system. In severe cases, particularly where the gap is significant or where other quality issues are present, it can contribute to regulatory action including warning letters. Inspectors will also use the management review record as a lens through which to interpret everything else they find: a site with strong, credible reviews starts from a position of trust; a site with absent or hollow reviews does not.
How can we make our management review more than a compliance exercise?
The most effective management reviews are designed around decisions, not presentations. That means the agenda is structured around questions that require answers: are our quality objectives being met, and if not, what are we doing about it? Are our CAPA programmes working? Do we have the resources we need? Circulating data in advance so that senior leaders arrive informed rather than passive is a significant first step. Building in genuine discussion time, assigning clear action ownership, and tracking those actions publicly in subsequent reviews transforms the format from a compliance event into a management tool. Our GMP Management Review training course gives QA teams and leadership the practical frameworks to make that shift, and Truex Consultancy regularly supports sites through the implementation.
Truex Consultancy works with pharmaceutical, medical device, and food manufacturing sites across the UK and Europe on GMP compliance, quality system development, and inspection readiness. If you would like to discuss your management review process or any other aspect of your quality system, we would be glad to hear from you.