The requirement is easy to meet on paper. Book a meeting, invite senior management, present the inputs, keep the minutes. The requirement is hard to meet in substance because the meeting has to produce decisions, and most management meetings are designed to produce alignment instead. This guide is about the design choices that make the difference.
Frequency and the interim mechanism
EU GMP 1.6 says periodic. The interval is yours to set and justify in the procedure. The full review, covering every input on the register, should happen at least annually. The problem with annual is that quality issues do not wait. A site that discovers a serious problem in month two needs a way to bring it to senior management before month twelve.
The defensible pattern is three-tiered. A full annual review of the whole system. A quarterly review of metrics, open actions and anything escalated. And a written trigger list for an unscheduled review: a recall, a critical or repeated major inspection finding, a regulatory warning, a serious supplier failure, a data integrity event, a change in product ownership or site strategy. The trigger list is what turns EU GMP's expectation of timely escalation into a mechanism, and it is what lets you answer the inspector who asks how senior management learned about the recall.
Roles
- The chair is the site head or equivalent, in person. Not the head of quality. If the head of quality chairs, the review is a quality meeting, and the finding is that senior management was not involved.
- The quality unit compiles the input pack, checks it against the register, presents the quality system inputs, keeps the minutes and the action log, and challenges. The quality unit does not present everything, does not own every action and does not decide alone.
- Functional heads present their own inputs: production presents the production deviation trend, engineering the validation status, supply chain the supplier performance, HR the training status. They come with a question for the review and a proposal.
- The QP attends and has a standing item to raise anything they consider a risk to product or to their own ability to certify.
- A minute-taker who is not presenting. A presenter cannot record a debate they are in.
The agenda that forces a decision
The agenda should follow the input register, because the register is what the inspector checks against. But the order matters. Start with the status of actions from the last review, because that sets the tone: were the decisions carried out, and did they work? Then take the inputs in an order that builds a picture, usually external first (inspections, audits, regulatory changes, complaints and recalls), then internal (deviations, CAPA, change, validation, suppliers, training), then resources and objectives, then the decisions.
For each input, the presenter has a fixed structure: what the data shows, what it means, what they propose, what they need. The chair then asks one question: what do we decide? The answer is minuted as a decision, an action with an owner and date, or an explicit decision to take no action with the reason. Silence and 'noted' are not permitted outcomes. This is the single change that most improves a review, and it is the one that most reviews resist because it makes the meeting longer and the debate harder.
Time the agenda honestly. Fourteen inputs at fifteen minutes each is three and a half hours before the decisions. A full review is a half day. A review that fits in ninety minutes has not reviewed anything.
Pre-reads and the slide problem
Send the pack a week ahead and expect it to be read. In the meeting, do not present the pack. Present the exceptions, the questions and the proposals. A review where QA reads ninety slides to a room is not a review, and its minutes cannot show debate because there was none. If a slide deck is used, it should be a summary that points at the pack, not a substitute for it.
Escalation: from the floor to the review and back
Management review sits at the top of an escalation chain, and it only works if the chain below it works. A deviation that is classified major should reach the quality management review within the month. A repeated failure mode should reach the quarterly review. A critical finding should trigger the unscheduled review. Each level needs a defined route and a defined time, written into the deviation, complaint, CAPA and audit procedures so that escalation does not depend on someone deciding to mention it.
The chain also runs downwards. Decisions from the review have to reach the people who will carry them out, and ICH Q10 4.3(d) expects documentation and timely communication of the results. A decision that lives in the minutes and never reaches the department it concerns is not a decision. Publish a summary of decisions and actions to the site within a week, and have each functional head brief their team.
Quality culture
The review is the most visible statement of what senior management cares about. If the chair spends the deviations item asking why there are so many, people will report fewer. If the chair asks what the deviations are telling us and what we are going to change, people will report more and investigate better. Inspectors read culture from the minutes as much as from the shop floor: whether bad news is presented plainly, whether the chair asks hard questions, whether resource requests are answered with decisions rather than deferred.
Module 4 of the course provides the procedure, the agenda template and the trigger list, then runs a simulated review from a real input pack so participants practise chairing, presenting and minuting to the decision standard.