FDA Quality Management System Regulation (QMSR)
QMSR: Quality Management System Requirements (§820.10 incorporating ISO 13485:2016 Sec. 4-8)

FDA Quality Management System Regulation (QMSR) QMSR-ISO13485-Sec7_DesignControls: Product realization - Design and Development controls (ISO 13485:2016 Section 7.3)

ISO 13485:2016 Section 7.3 (Design and Development) - the medical-device DESIGN CONTROLS framework. (7.3.1) PLANNING - design + development planning at the start of each design project; (7.3.2) INPUTS - functional + performance + usability + safety requirements + applicable regulatory requirements + applicable standards + risk-management outputs + previous similar designs + other essential requirements; (7.3.3) OUTPUTS - in a form that enables verification against inputs + approved prior to release + provide appropriate information for purchasing + production + service + acceptance criteria; (7.3.4) REVIEW - systematic + planned + multi-disciplinary + records; (7.3.5) VERIFICATION - confirming that outputs meet input requirements; (7.3.6) VALIDATION - confirming that the design meets user needs + intended use - performed under defined operating conditions on initial production units or equivalents; (7.3.7) DESIGN TRANSFER to production - procedures + records; (7.3.8) DESIGN CHANGES - identified + documented + reviewed + verified + validated as appropriate + approved before implementation; (7.3.9) RECORDS - design and development file (DDF) including design history. (7.3.10) DESIGN AND DEVELOPMENT FILE - maintained for each medical device type or family that includes records demonstrating compliance with the requirements + records of changes. The DESIGN HISTORY FILE (DHF) is the FDA-specific terminology for the ISO 13485 design and development file.

Maintained by Gerard BlokdykVerified against the published standard Control text last updated

What else in your programme already covers this

This control maps to 23 controls across 11 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

HITECH Act · 3 controls

  • EHDSREG-1 Mandatory Requirements for EHR Systems (Articles 14-29)
  • EHDSREG-3 Secondary Use - Health Data for Research and Innovation
  • EHDSREG-5 Cross-Border Health Data Flows
  • CA-10 Selects and Develops Control Activities
  • CA-12 Deploys Through Policies and Procedures
  • FDBR-704 Exemptions (§501.704)
  • FDBR-Scope-Defs Scope, Applicability Thresholds and Definitions (Fla. Stat. 501.701, 501.702, 501.703, 501.704)
  • TEFCAREC-1 Common Agreement Conformance and Onboarding
  • TEFCAREC-2 Privacy, Security, Minimum Necessary
  • IVDR-Art.56_57_58 Performance evaluation, performance studies and additional requirements (Articles 56-58)
  • MDR-Art.61_62 Clinical evaluation and clinical investigations general requirements (Articles 61-62)

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in QMSR: Quality Management System Requirements (§820.10 incorporating ISO 13485:2016 Sec. 4-8)

Query this from an agent

The graph holds this control, the 23 it maps to, and the evidence behind each claim, over MCP and REST.