ISO 13485 Quality Management Systems
The international standard for quality management systems in medical device design, manufacture, and supply.
What it is
About ISO 13485 Quality Management Systems
ISO 13485:2016 is the international standard specifying requirements for a quality management system (QMS) applicable to organisations involved in the design, production, installation, and servicing of medical devices and related services. It is aligned with ISO 9001 but has additional requirements specific to medical devices — particularly around risk management (ISO 14971), traceability, sterile device handling, and complaint handling — reflecting the heightened regulatory expectations of the medical device sector. Certification to ISO 13485 is a prerequisite for CE marking under EU MDR and is the QMS standard referenced in FDA 21 CFR Part 820 (Quality System Regulation). In practice, the standard shapes every document, process, and record in a medical device company. For biomedical engineers and quality assurance professionals in medical device companies, ISO 13485 defines the operational reality of the job. Design and development must follow a documented design control process (design inputs, outputs, verification, validation, and design transfer). Change control requires documented risk assessment. Every complaint must be evaluated for potential field safety issue. Suppliers must be qualified. Internal audits must be conducted. The entire system must be reviewed by management at defined intervals. Non-conformances must be recorded, root-caused, and corrective-action-planned. This is not bureaucracy for its own sake — each requirement maps to a category of historical device failure that resulted in patient harm.
What you can do with it
Capabilities
Draft a design history file (DHF) structure for a new medical device project, mapping required documents to ISO 13485 Clause 7.3 design control requirements.
Conduct an internal audit of the purchasing control process against ISO 13485 Clause 7.4, documenting findings and raising non-conformances where applicable.
Manage a CAPA (Corrective and Preventive Action) from a customer complaint — investigating root cause, defining corrective action, and verifying effectiveness.
Complete a supplier qualification assessment, documenting the evaluation criteria and audit findings in the approved supplier list.
Prepare a management review pack presenting quality KPIs (complaint rates, audit findings, CAPA status) against the requirements of ISO 13485 Clause 5.6.
How to learn it
Learning Resources
BSI Training (bsigroup.com) — ISO 13485 Foundation and Lead Auditor courses; recognised industry qualification
Greenlight Guru Academy (greenlight.guru/academy) — free practical QMS training specifically for medical device companies
Regulatory Compliance Associates and Emergo (EU MDR consulting) — white papers and guidance documents on 13485 implementation
ISO 13485:2016 (the standard itself) — purchase from BSI; read alongside ISO 14971 (risk management) for complete context
LinkedIn Learning — ISO 13485 overview courses; useful for orientation before deeper study
Pro Tip
The standard requires what you do to be documented, and that you do what you document. Auditors look for the gap between the two. The most common finding is a procedure that says one thing and practice that does another — keep your QMS documentation current with how work is actually done.
Skills that use this tool
Roles that use this tool
Alternatives