Management Review
Management review is the organisation's ability to put an honest picture of quality-system performance in front of the people with authority to change it — and to convert what they see into decisions, resources, and follow-through. ICH Q10 assigns senior management the review of the pharmaceutical quality system itself and of process performance and product quality; ISO 9001 and ISO 13485 prescribe the parallel discipline with defined inputs and outputs; and FDA's device quality system regulation makes management responsibility a named, inspectable obligation. The capability is the difference between a quality system that reports upward and one that is actually governed.
What this page does not claim
A capability is something an organization must be able to do; it is not a maturity score and not an assessment domain. The scored domains measure how consistently capabilities are performed, they do not map one-to-one, and nothing on this page rates your organization.
What this capability is
Management review is the organisation's ability to put an honest picture of quality-system performance in front of the people with authority to change it — and to convert what they see into decisions, resources, and follow-through. ICH Q10 assigns senior management the review of the pharmaceutical quality system itself and of process performance and product quality; ISO 9001 and ISO 13485 prescribe the parallel discipline with defined inputs and outputs; and FDA's device quality system regulation makes management responsibility a named, inspectable obligation. The capability is the difference between a quality system that reports upward and one that is actually governed.
What makes the capability real is the quality of the inputs and the fate of the outputs. Inputs must carry the bad news at full strength — adverse trends, aged CAPAs, audit themes, supplier failures, resource gaps — because a review fed curated comfort governs a fictional company. Outputs must be decisions with owners, dates, and resources, tracked to completion and revisited at the next review. A minute that records "noted" against every item is the signature of a review that took place without occurring — and it reads that way to an inspector, too.
WHY IT MATTERS
- Management review is where accountability for quality becomes demonstrable. Regulators increasingly assess whether senior management actually knows and governs the state of the system — and the review record is the primary evidence either way.
- It is the quality system's resource-allocation mechanism. Chronic under-resourcing is invisible deviation by deviation; it becomes visible, and decidable, only where trends, backlogs, and capacity meet the people who own budgets.
- Filtered inputs are the capability's characteristic failure. Every organisational layer softens bad news slightly; by the boardroom, red has become amber. A review process that does not deliberately protect signal strength ends up governing the filter, not the factory.
- Decisions without tracked completion train the organisation that review outputs are commentary. The follow-through loop is what distinguishes governance from ceremony.
[ POSITION IN THE FRAMEWORK ]
7 DIMENSIONS · 22 LINKSManagement review is where the framework is governed: the true state of the quality system — trends, backlogs, risks — put before senior management at defined intervals and converted into resourced decisions tracked to completion.
06 · QUALITY MATURITY — MANAGEMENT REVIEW, REACTIVE TO ADAPTIVE
Reviews happen when an audit or a certification cycle demands one; slides are assembled for the occasion, metrics are chosen to reassure, and outputs are notes without owners. Senior management's picture of the quality system is materially better than the quality system.
Reviews run on a defined cadence with a defined input set and recorded outputs. The inputs skew lagging and the discussion skews reporting; decisions are made but tracked loosely, and the connection between review findings and budget or headcount is occasional.
Inputs are standardised, trended, and unfiltered — worst news first. Decisions carry owners, dates, and resources; completion is tracked and revisited; and escalation criteria between reviews exist, so a signal that cannot wait for the next meeting does not.
The review runs on leading indicators as well as lagging ones, and its own performance is measured: decision cycle time, completion rate, and whether earlier decisions achieved what they intended. Management asks for analyses rather than reports — and changes course when the data disagrees with the plan.
Governance is continuous: management consumes near-real-time quality intelligence, formal reviews concentrate on direction and investment rather than discovery, and the organisation can show a chain from review decisions to measurable quality outcomes — the system demonstrably steered from the top.
SPEQ’s shared five-stage progression, labelled synthesis — not the FDA QMM rating scale. Where does your organization sit? Score your quality system →
07 · REGULATORY & EVIDENCE
GOVERNING STANDARDS · 4
Derived from the 4 standards SPEQ maps to this subject, across 3 regulatory bodies: FDA, ICH, ISO.
RECORDS & OBJECTIVE EVIDENCE
- A defined review cadence with a required, standardised input set
- Review records showing trended inputs, including the adverse ones
- Decisions recorded with owners, dates, and committed resources
- Action tracking across successive reviews to verified completion
- A defined escalation path for signals that cannot wait for the cycle
COMMON INSPECTION FINDINGS
- Management reviews not held at the planned intervals
- Required inputs absent — no CAPA ageing, audit themes, or trend data
- Outputs recorded as "noted", with no owners or follow-through
- Adverse trends known below never reaching the review pack
- Review records too thin to evidence that governance occurred
HOW YOU’D SEE WHERE YOU SIT
- Read the last review pack and count the items that carry genuinely bad news — then check whether the worst known issues of that quarter appear in it at all.
- Pick three decisions from reviews a year ago and trace them to completed, resourced actions — or to re-appearance in a later pack under a new heading.
- Whether the review has ever changed a budget, a headcount, or a priority — the test of whether outputs reach the mechanisms that actually steer the company.
- How long a critical signal takes to reach senior management outside the review cycle, and whether the escalation path has ever actually been used.
- Who presents: the people who own the problems, or a function that curates on their behalf.
Observable behaviours, not a self-rating — what a capability looks like from the outside, the same way SPEQ’s Quality Culture assessment reads behaviour rather than felt safety.
FREQUENTLY ASKED
How is management review different from routine quality reporting?
Reporting informs; review decides. A metrics pack circulated monthly is an input, however good it is — management review is the governance forum where senior management, with the authority to commit resources, examines the state of the quality system against defined inputs and produces decisions as outputs. The formal apparatus exists to make that difference enforceable: required inputs so the picture is complete, required outputs so "noted" is not an acceptable verdict, and records so the follow-through can be verified. An organisation can drown in reporting and still have no functioning review, because the discriminating feature is not information flow but decision and resourcing.
How often should management review occur?
The standards require planned intervals and leave the number to you — which makes frequency a design decision, not a compliance question. The honest test is latency: how long may a systemic signal wait before the people who can resource a response see it? An annual review means an average wait of six months, which is governance at a pace most quality problems will not respect. Mature arrangements typically pair a regular cadence — often quarterly for the full discipline — with defined escalation criteria that bring urgent signals forward immediately, so the interval governs routine steering while the escalation path guarantees the exceptional never queues behind it.
How is management review measured in the maturity assessment?
Through the Regulatory Intelligence domain, which observes how the organisation absorbs signals — internal and external — and converts them into governed, resourced responses. The mapping illustrates why capabilities and assessment domains are deliberately different cuts: management review is a real capability with no dedicated scored domain of its own, so the assessment observes it through the domain whose questions best expose its behaviour — how signals reach decision-makers and what happens next. This page defines the function and its maturity ladder; the assessment locates how consistently your organisation's review actually governs.
MEASURED THROUGH THE MATURITY ASSESSMENT
This capability is about what you must be able to do. How consistently you do it is what the maturity assessment scores — through the domain below.
Contributes to the FDA QMM practice area Management Commitment to Quality (a SPEQ mapping).
Score your quality system →