Goal of the analysis:
Evaluate a medical device company’s adherence to applicable regulations and standards (for example, ISO 13485, 21 CFR Part 820, EU MDR) and assess the effectiveness of its Quality Management System (QMS). Identify potential compliance risks, gaps, and opportunities to strengthen the QMS.
Data required:
- Current QMS documentation (policies, procedures, work instructions)
- Audit reports (internal, external, and third-party)
- Records of nonconformities, corrective and preventive actions (CAPAs)
- Management review records
- Personnel training records
- Regulatory inspection findings and certification status
Detailed step-by-step instruction on how to conduct the analysis:
- Identify all relevant regulatory and standard requirements. Determine which regulations, standards, and guidance documents apply based on geography, device classification, and business scope.
- Map the current QMS processes against required standards. Compare company QMS documentation (for example, procedures for design control, manufacturing, CAPA) with regulatory requirements to pinpoint any gaps.
- Examine documented procedures and work instructions. Review the depth, clarity, and consistency of quality documents to ensure they align with actual processes and regulatory expectations.
- Review CAPA and nonconformity records. Assess how effectively the company identifies, investigates, and resolves nonconformities and whether corrective actions are preventing reoccurrence.
- Evaluate management review activities. Check frequency, scope, and outcomes of management reviews to confirm executive leadership is actively overseeing quality objectives.
- Interview key personnel. Confirm that teams understand quality policies and procedures, and observe how day-to-day operations align with documented processes.
- Analyze internal and external audit findings. Identify trends in nonconformities, track follow-up actions, and evaluate whether continuous improvement processes are in place.
- Assess training programs. Verify that employees working on regulated activities receive appropriate, ongoing training and have documented competencies.
- Summarize compliance gaps and define mitigation steps. Consolidate all findings, highlight risk areas, and recommend corrective measures or process improvements.
Format of the output of analysis:
- A comprehensive written report or presentation summarizing compliance status
- A gap analysis table aligning regulatory requirements with current practices and noting deficiencies
- An action plan outlining corrective and preventive measures, with timelines and responsible parties
- A high-level summary of QMS strengths, weaknesses, and recommended priorities
How to interpret results:
- A QMS that meets or exceeds regulatory requirements is evidenced by minimal nonconformities, timely CAPA closures, and positive audit outcomes.
- Significant gaps in documentation, lack of training, or repeated nonconformities could signal underlying process issues or insufficient management oversight.
- Trends in corrective actions or audit findings may point to systemic issues requiring strategic process changes rather than isolated fixes.
Steps a company can take to improve on this measure:
- Establish a strong quality culture by ensuring management commitment and employee ownership of QMS processes.
- Perform regular internal audits and address findings promptly to foster continuous improvement.
- Invest in robust training and competency programs for staff at all levels.
- Streamline documentation and ensure that procedures match actual practices on the production floor or in service delivery.
- Conduct periodic gap assessments to stay current with evolving regulations and standards (for example, EU MDR, MDSAP).
