# ISO 13485 Audit Plan Template and Management Review Template

> Source: https://netray.co/tools/iso-13485-internal-audit-plan-and-management-review-template
> Publisher: Netray (netray.co), AI and integration engineering for ERP and manufacturing systems.
> Section: Free Tools

## Short answer

Fill-in ISO 13485 internal audit plan and management review minutes covering required inputs and outputs, with guidance on clause 7.5.

## Category

quality

## Industry

Medical Devices

## Audience

- Quality manager
- Internal auditor
- Top management

## Tool

**Kind:** template

**Output:** document

**Fields:**

#### Company name

**Key:** company

**Type:** text

**Default:** Acme Medical Devices Inc

#### QMS scope

**Key:** scope

**Type:** textarea

**Default:** Design, manufacture and distribution of Class II single-use surgical instruments at the Wichita site.

#### Audit date

**Key:** audit_date

**Type:** date

**Default:** 2026-11-10

#### Lead auditor

**Key:** lead

**Type:** text

**Default:** S. Wong

#### Process or area audited

**Key:** auditee

**Type:** text

**Default:** Production and service provision (clause 7.5)

#### Audit criteria

**Key:** criteria

**Type:** text

**Default:** ISO 13485:2016, company QMS procedures, 21 CFR Part 820 (QMSR), customer and regulatory requirements

#### Management review date

**Key:** mr_date

**Type:** date

**Default:** 2026-12-05

#### Review chair

**Key:** chair

**Type:** text

**Default:** J. Doe, President

#### Review period

**Key:** period

**Type:** text

**Default:** 1 Dec 2025 to 30 Nov 2026

**Blocks:**

#### Internal Audit Plan: {{company}}

**Body:** Scope of QMS: {{scope}}
Process audited: {{auditee}}
Date: {{audit_date}}
Lead auditor: {{lead}} (independent of the area audited)
Criteria: {{criteria}}

#### Objectives

**Body:** Determine whether the process conforms to planned arrangements, to ISO 13485 and to applicable regulatory requirements, and whether it is implemented and maintained effectively. Consider previous audit results, complaints, CAPA and process performance when deciding the depth of audit.

#### Audit schedule

**Table:**

**Columns:**

- Time
- Activity
- Clause focus
- Contact

**Rows:**

**0:** 08:30

**1:** Opening meeting

**2:** Scope and plan

**0:** 09:00

**1:** Production control and work instructions

**2:** 7.5.1

**0:** 10:30

**1:** Process validation and equipment records

**2:** 7.5.6, 7.6

**0:** 13:00

**1:** Identification and traceability sampling

**2:** 7.5.8, 7.5.9

**0:** 14:30

**1:** Cleanliness, environment and records

**2:** 6.4, 4.2.5

**0:** 15:30

**1:** Auditor review

**0:** 16:00

**1:** Closing meeting

**2:** Findings summary

#### Process checklist prompts

**Table:**

**Columns:**

- Prompt
- Evidence to sample
- Result

**Rows:**

**0:** Are work instructions current and available at point of use?

**1:** Controlled copies

**0:** Do batch records show every step completed, signed and dated?

**1:** 3 recent device history records

**0:** Are validated processes within their validated parameters?

**1:** Validation reports and run data

**0:** Can a finished lot be traced to materials and equipment?

**1:** Mock trace

**0:** Were corrections to records made per good documentation practice?

**1:** Record sample

#### Management Review Minutes

**Body:** Date: {{mr_date}}
Chair: {{chair}}
Period reviewed: {{period}}
Attendees: 

#### Review inputs (clause 5.6.2)

**Table:**

**Columns:**

- Input
- Summary and data
- Trend

**Rows:**

**0:** Feedback

**0:** Complaint handling

**0:** Reporting to regulatory authorities

**0:** Audits (internal, external, supplier)

**0:** Monitoring of processes

**0:** Monitoring of product

**0:** Corrective and preventive action

**0:** Follow-up from earlier reviews

**0:** Changes that could affect the QMS

**0:** Recommendations for improvement

**0:** New or revised regulatory requirements

#### Review outputs (clause 5.6.3)

**Table:**

**Columns:**

- Output
- Decision
- Owner
- Due

**Rows:**

**0:** Improvements needed to keep QMS suitable, adequate and effective

**0:** Improvement of product related to customer and regulatory requirements

**0:** Changes needed to the QMS

**0:** Resource needs

#### Approvals

**Signatures:**

- Lead auditor
- Quality manager
- Top management

**Notes:** Keep the audit plan, report and review minutes as quality records under clause 4.2.5. Auditors must not audit their own work. Adapt prompts to your process and regulatory markets.

## Content

**Intro:** This ISO 13485 audit plan template and management review template give you both documents in one fill-in file. Edit the fields, export to Word or PDF, and use the notes below on clause 7.5, good documentation practices and post-market surveillance.

**Sections:**

#### Using the audit plan and review templates

**Body:** Clause 8.2.4 requires internal audits at planned intervals to check conformity and effective implementation. Plan the program by risk and importance of each process, then use one plan per audit like the first half of this template. Management review under clause 5.6 happens at planned intervals and must consider the inputs listed, with outputs recorded as decisions with owners and dates. Both documents are records, so keep signed copies.

**Bullets:**

- Audit independence: auditors do not audit their own work
- Use results of the last audit, complaints and CAPA to set depth
- Review the QMS at least annually, more often if risk requires

#### What is ISO 13485 clause 7.5

**Body:** Clause 7.5 covers production and service provision. It requires controlled conditions: documented procedures and work instructions, suitable equipment, monitoring and measurement, labeling and packaging operations, and the use of validated processes where output cannot be verified. Sub-clauses address cleanliness, installation, servicing, sterile devices, process validation, identification, traceability, customer property and preservation of product. Traceability for implantable devices must include component and work environment records.

#### Good documentation practices and post-market surveillance

**Body:** Good documentation practice means records are attributable, legible, contemporaneous, original and accurate: one line strike-through for corrections with date, initials and reason, no white-out, no pre-dated entries, and electronic records protected by access controls and validated software. Post-market surveillance is the proactive collection and review of experience from devices in the field, including complaints, service data and literature, and it feeds management review, risk management and CAPA. Regulators in several markets require a documented plan and periodic reports.

#### Common mistakes

**Body:** Treating management review as a slide deck without decisions, auditing only against procedures instead of the standard and regulations, allowing the quality manager to audit their own function, and keeping handwritten corrections that obscure the original entry. Make sure every review output has an owner and due date and that actions are tracked to closure.

**Cta:** Netray can build a private AI assistant over your ERP and quality records so audit and review inputs such as complaint trends are produced from live data on-prem.

**Faq:**

#### How often are ISO 13485 internal audits required?

**Answer:** The standard says at planned intervals. Most companies cover the whole QMS at least once a year, with higher risk or poorly performing processes audited more often, based on a documented audit program.

#### What must be in ISO 13485 management review?

**Answer:** Inputs include feedback, complaints, regulatory reporting, audits, process and product monitoring, CAPA, follow-up actions, changes, recommendations and new regulatory requirements. Outputs cover improvements, changes and resources.

#### What is post-market surveillance under ISO 13485?

**Answer:** It is the ongoing collection and analysis of data on devices in the market, such as complaints and service records. ISO 13485 links it to feedback, complaint handling and regulatory reporting, and many markets add formal plan and report requirements.

#### What are good documentation practices?

**Answer:** Records must be attributable, legible, contemporaneous, original and accurate. Correct errors with a single line, initials, date and reason, never obscure the original, and protect electronic records with validated systems and access control.

## Search terms

iso 13485 audit plan template, iso 13485 management review template, iso 13485 process checklist, iso 13485 good documentation practices, iso 13485 post market surveillance, what is iso 13485 clause 7.5, iso 13485 internal audit program

---
Talk to an engineer: https://netray.co/contact?intent=erp_ai | Machine catalog: https://netray.co/agent/catalog.json