Skip to content

Medical Devices · QMSR Transition

Medical Device QMSR Transition Consulting

The short answer

The Quality Management System Regulation incorporates ISO 13485 into FDA's device quality system requirements. For most manufacturers the transition is less about new obligations and more about terminology, risk integration, record definitions and demonstrating that the existing system already satisfies the incorporated standard.

01

Why this matters

  • Manufacturers certified to ISO 13485 often assume no work is required, but FDA-specific provisions and records still need explicit treatment.
  • Manufacturers operating only to Part 820 have real gaps, usually around risk management integration and management responsibility.
  • A transition executed as a documentation exercise leaves the quality system describing a practice the site does not follow.
02

Applicable regulations and standards

21 CFR Part 820 (QMSR)
FDA quality system requirements incorporating ISO 13485 by reference.
ISO 13485:2016
Quality management systems for medical devices, as incorporated.
ISO 14971
Risk management, which QMSR expects to be integrated throughout the QMS.
21 CFR Part 803 / 806
Reporting and corrections and removals, which remain separate FDA requirements.
03

What our consultants actually do

  • Perform a QMSR gap assessment against your current system, whether it is Part 820-based, ISO 13485-certified or both
  • Reconcile terminology and record definitions so a single quality system satisfies both audiences
  • Integrate risk management into design, purchasing, production and post-market processes rather than isolating it in a risk file
  • Update management responsibility, planning and quality objective processes to the incorporated standard
  • Build the implementation plan: procedure revision sequence, training, records transition and internal audit against the new baseline
  • Verify effectiveness through internal audit and readiness review before the system is examined externally
04

Across the product lifecycle

  1. 01 / DEVELOP

    Design controls and design history file aligned with the incorporated standard.

  2. 02 / SCALE

    Purchasing and supplier controls sized for production volume.

  3. 03 / TRANSFER

    Design transfer records demonstrating production readiness.

  4. 04 / VALIDATE

    Process, software and sterilization validation records updated to the new structure.

  5. 05 / MANUFACTURE

    Production and process controls, DMR and DHR practice.

  6. 06 / MAINTAIN

    Post-market surveillance, complaints, CAPA and management review.

05

Problems we are usually called about

  • ISO 13485 certification treated as automatic QMSR compliance
  • Risk management file maintained by regulatory with no link to production controls
  • Two parallel quality manuals after certification, with procedures that disagree
  • Terminology changes made in documents but not in training or forms
  • Internal audit program still scoped to the superseded structure
06

Typical deliverables

  • QMSR gap assessment with risk-ranked findings
  • Harmonized quality manual and procedure map
  • Risk management integration plan across QMS processes
  • Implementation schedule with training and records transition
  • Internal audit checklist and readiness review against the new baseline
07

Frequently asked

Do ISO 13485-certified manufacturers need to do anything for QMSR?
Usually yes, but less. Certification covers the incorporated standard; FDA-specific provisions, record requirements and reporting obligations still need to be explicitly addressed in the quality system.
Does QMSR change complaint handling and MDR?
Medical device reporting under Part 803 and corrections and removals under Part 806 remain separate FDA requirements. What changes is how complaint handling is described and connected within the quality system.
What does a QMSR transition project usually involve?
A gap assessment, a procedure revision sequence, risk management integration, training, and an internal audit against the new baseline. Scope depends heavily on whether the site is already operating to ISO 13485.
08

References

Start a project

Tell us what you're working on.

Describe the product, the process or the problem. We will tell you honestly whether we are the right people to help, and who should be on the team if we are.

CallStart a Project