Somewhere, right now, an auditor is sitting across a conference table asking a perfectly reasonable question: “Who is your management representative?” And somewhere, right now, three people in that room are looking at each other with the expression of commuters realizing the train is going in the wrong direction.
This is not the moment you want to improvise.
Section 5.5.2 of ISO 13485:2016 is short. It fits on roughly half a page. It requires one specific action — appoint a person — with three specific duties attached. And yet, more organizations fumble this one than you’d expect, because it looks so easy that nobody gives it the attention it deserves.
What §5.5.2 Actually Says
Top management shall appoint a member of management who, irrespective of other responsibilities, has the responsibility and authority that includes:
- Ensuring that the processes needed for the QMS are documented.
- Reporting to top management on the effectiveness of the QMS and any need for improvement.
- Ensuring the promotion of awareness of applicable regulatory requirements and QMS requirements throughout the organization.
That’s it. Three bullets. One appointment. And every single word of it matters.
Let’s Break That Down
“A member of management”
Not an outside consultant. Not an intern with a knack for SharePoint. Not the nice person at the front desk who also keeps the ISO binder organized. A member of management — someone with the authority to actually manage things. If the person you appoint has to get three approvals to update a procedure, they are not managing anything. They are filing paperwork.
“Irrespective of other responsibilities”
This phrase is the standard quietly acknowledging that in real companies — especially small ones — nobody is going to be a full-time Management Representative and nothing else. Your MR can also be your QA Director, your VP of Operations, your COO, or your founder wearing their fourth hat of the morning. What the phrase means is: the MR’s quality duties do not get back-burnered when their other job gets busy. Quality doesn’t step aside because the shipping crisis looks more urgent.
The three duties
These are not vague aspirations. They are job functions. Let’s translate:
- Make sure the QMS processes are documented. Not “vaguely known to exist.” Documented. The MR doesn’t have to write every SOP personally — but if there’s a process running your QMS that no one can point to in writing, that is the MR’s fire to put out.
- Report to top management. Not “occasionally mention.” Not “shoot them an email when something breaks.” Actually report — with data, trends, and recommendations — on whether the QMS is working and what needs to change. This feeds directly into Management Review (§5.6), which we’ll get to soon enough.
- Promote awareness of regulatory and QMS requirements throughout the organization. The people on your production floor don’t need to memorize ISO 13485. They do need to know why the procedures exist, which regulations apply to what they’re doing, and that “just this once” is never the right answer. That culture doesn’t build itself. Someone has to carry the torch.
What This Looks Like in Real Life
Auditors will look for three things, and you should too:
- A written appointment. A one-page letter, a signed org chart note, a line in the Quality Manual — whatever works, as long as it is specific and current. “Dave has sort of been the MR since he started” is not an appointment. A document that says “Dave Smith is hereby appointed as the Management Representative effective [date], with the duties described in §5.5.2 of ISO 13485:2016,” signed by the CEO, is an appointment.
- Evidence the MR is actually doing the job. Meeting notes. Management Review reports. Emails about audits. Training plans that reference regulatory context. If you say someone is the MR and nothing in your records shows them functioning as one, auditors will notice.
- A current MR. If the MR left the company eighteen months ago and nobody updated the appointment, congratulations — you now have no management representative. This is an extremely common finding. Update your appointments when people change roles, the same way you’d update a signature card at the bank.
Common Traps
Appointing someone too junior to push back on management. If the MR can’t walk into the CEO’s office and say “we have a problem,” they cannot do the job. The MR must have authority, not just responsibility.
Treating the MR as the sole owner of quality. The MR is the conduit between the QMS and top management. Quality is still owned by everyone who touches a product or process. The MR’s job is to make sure leadership knows what’s happening and regulatory awareness is traveling downstream. It is not to single-handedly hold the entire QMS together while everyone else carries on blissfully.
Forgetting to name a backup. When your MR goes on vacation, parental leave, or — heaven forbid — leaves the company, who steps in? If the answer is “we’ll figure it out then,” you are one resignation letter away from a nonconformity.
The Bottom Line
Section 5.5.2 is not about naming a scapegoat for when things go sideways. It’s about making sure someone in your management ranks wakes up each morning knowing the QMS is part of their job — really, truly part of it, not a thing that lives in a binder on someone else’s desk.
Name the person. Put it in writing. Give them the authority to do the job. And the next time an auditor asks “who is your management representative?” — don’t look around. Answer.