Medical Device Quality: Could Gaps in Your System Delay Your Next Opportunity?

Medical Device Quality: Could Gaps in Your System Delay Your Next Opportunity?

Your next opportunity could stall because you cannot show how your work is controlled.

A buyer is interested. Your team has explained what it can deliver. Then the buyer asks for a record that is missing, a change that was never clearly approved or evidence that your checks match the work.

The discussion slows while people search through emails and folders. Questions lead to more questions, and a promising project begins to feel harder to move forward.

These gaps can cost time and put pressure on your plans. In the medical device sector, they can also raise concerns about how quality and risk are managed.

Medical device quality management gives your business a way to agree how work is planned, checked and recorded. The system needs to make sense to the people using it and to those reviewing your business.

ISO 13485 provides requirements for a quality management system specific to medical devices. The current edition is ISO 13485:2016. It supports meeting customer needs and the rules that apply across activities such as design, production, installation and servicing.

The useful starting point is your role. Your business might make a finished device, supply a component or provide a service that affects the device.

Those roles carry different responsibilities. Your review should reflect the work you actually do and the requirements that apply to it.

ISO’s practical guide includes organisations such as manufacturers, importers, distributors and service providers within the medical device supply chain. It describes a quality system as the people, plans, processes and records used to achieve the intended results.

That helps make the subject practical. Look at where decisions are made, how instructions reach staff and what evidence shows that the agreed checks happened.

Before looking for a new certificate or changing documents, define which activities your system covers. Make sure that description matches your business and the opportunity you are pursuing.

A buyer asking about manufacturing may need different evidence from a buyer reviewing a storage or servicing arrangement. Explain your role clearly so that the right work is being reviewed.

Keep quality system certification and the requirements for an individual device clear in your planning. ISO 13485 certification concerns the quality management system.

Placing a device on a market also involves the requirements that apply to that product and market. Guidance from the MHRA, the UK’s medical device regulator, explains that the assessment route in Great Britain depends on the type of device.

Confirm those needs with the people responsible for checking the medical device rules that apply to you. Give them a place in the discussion before making a promise to a customer.

This can help you plan the right support. A system review, a buyer’s supplier check and a device-specific assessment may involve different questions and evidence.

Start your review with one real activity. Choose a recent order, a completed service or a product change relevant to your role.

Follow it through the business. Find the agreed requirements, the instructions used, the checks completed and the records showing who made the key decisions.

You are looking for a clear connection between the work and its evidence. A reader should be able to understand what happened without depending on one person’s memory.

Imagine a component supplier being considered for a medical device project. The buyer asks how the firm controls drawing changes.

The supplier has a recent drawing and a completed inspection record. An older instruction is also saved in the folder, and the records do not make clear which version staff used.

Someone remembers an email approving the change, but the email has not been linked to the job. The buyer now needs an explanation before continuing its review.

The issue reaches across several teams. The person handling the customer request, the production team and the person approving the checks all hold part of the story.

A useful review would establish what can be confirmed, identify what remains unclear and assess the effect of the gap. The business could then agree action with the right people.

This example shows how a small record problem can become a wider question about control. It also gives the business a specific place to improve.

Look at your document arrangements. Staff need to identify the current approved instructions for the work they are doing.

Check how a new version is reviewed, approved and made available. Find out what happens to older versions and how you prevent their unintended use while keeping the records you need.

Ask someone who uses the instructions to find the current version. Their experience can reveal a problem that is easy to miss when you are looking only at a document list.

Perhaps two folders appear current. A customer change may have reached the office but not the work area. A person covering another role may be unsure which instructions apply.

Give each problem a clear next step. Record who will act, what needs changing and how you will check the result.

Your records should describe work that actually happened. If information is missing, make the gap clear and investigate it using accurate evidence.

Keep confirmed facts separate from assumptions. This gives the people reviewing the issue a sound basis for deciding what action is needed.

Being able to link products, materials and their records is another important part of the review. The links needed depend on your work, the device and the applicable requirements.

Where these links are required, check whether you can connect the relevant material or component with its checks and the product or order it became part of. Medical device audit guidance includes reviewing these traceability arrangements against relevant ISO 13485 requirements.

For your own review, choose a suitable record and try following those links. Ask the people responsible to explain any step that is unclear.

You might find that records exist but use different reference numbers. The information could be held in separate systems with no agreed way to connect it.

That finding gives you a practical question to resolve. Decide how the links should work, who maintains them and how changes will be checked.

Also check what happens when the person who usually handles a record is away. A buyer’s question can arrive during leave, a busy shift or a change of staff.

Choose a suitable example and ask an agreed colleague to find the information. Give them the same access and instructions they would normally have.

If they need help, note where the difficulty begins. The record may be saved under an unexpected name, or the person may be unsure who can answer a question about it.

Use the findings to agree a clearer handover. Make the record location, responsible role and route for questions easy to follow.

Check the new arrangement with the people who will use it. They should understand how to find approved information and when to ask for help.

This gives you another practical way to review whether the system can support an opportunity when the usual team member is unavailable.

Keep the review relevant to your activities. A component supplier and a finished-device manufacturer may need different records and levels of detail.

Supplier control deserves attention too. Buying teams need clear requirements for the parts and services that affect quality.

A review can consider how suppliers are selected, what is specified in orders and how supplied work is checked. The level of control should reflect the effect on the finished device.

Look at how supplier information reaches your quality team. A change in a material, service or work method may need review before you agree to use it.

Give suppliers a clear route for raising relevant changes. Within your business, decide who reviews the information and who can approve the response.

Suppose the component supplier in our example receives notice that a supplied material will change. The message reaches purchasing while another team is preparing the next order.

The business needs a clear way to bring that information to the people who understand its effect on the work. They can then decide what review and evidence are needed.

Record the decision and make the agreed outcome available to those who need it. This helps the next order follow the right requirements.

The purpose is to make an important decision visible and controlled. It should be possible to explain why the change was accepted, rejected or held for further work.

Some processes need evidence that they can consistently produce the intended result. This matters where later checks cannot fully confirm the result of the process.

Where this applies, ask the people responsible what evidence is needed and how it is maintained. Include the review of changes in that discussion.

Plan the work with people who have the right technical knowledge. Give any required testing or specialist input time in the project plan.

A buyer’s deadline can make this urgent, but the evidence still needs to support the claim you are making. Confirm what must be completed before committing to a date.

People and training form part of the same picture. Staff need to understand the work they perform and the effect it can have on quality.

Review whether their skills and training fit their current tasks. When a task changes, consider what further instruction or checks are needed.

Ask staff to explain how they use a work instruction and where they raise a concern. This can help you see whether the written process matches normal activity.

A training record gives you a starting point for that discussion. Link it with the person’s role and the work they are expected to carry out.

The same care helps with temporary cover or a person moving into a new role. Agree what support they need before treating the change as complete.

Give staff a clear way to report a problem with a product, instruction or record. The people receiving that information need to know what happens next.

For your review, follow one genuine example of a problem being raised. Look at who received it, how it was assessed and what action followed.

Check whether the records explain the outcome. If a change was made, find out how the business checked that it addressed the cause.

Customer feedback can also point to a gap. A repeated concern may deserve a wider review of the process behind it.

Imagine that the component supplier receives questions about unclear inspection reports on several orders. Each question has been answered separately by email.

Looking at them together could reveal a common issue with the report format or instructions. The business can then review the cause and agree a more consistent response.

After making the change, check whether the next suitable records are clearer and whether staff understand the new approach. Keep the result with the action record.

This gives your business a useful account of how it responds to problems. A buyer can follow the connection between the concern, the decision and the evidence of the result.

Bring this information to managers who can approve the time and resources needed. Quality work can stall if actions are agreed without a practical plan for completing them.

Be clear about which actions need attention first. Consider the effect on product quality, the relevant requirements and the work already planned.

An unclear approval may need urgent review. A better folder layout may be useful but call for a different level of attention.

Give each action a responsible person, a realistic completion date and a way to confirm it is finished. Raise any obstacle early enough for a decision.

If you plan to grow, review whether the system can support the change. A larger order, a new service or another site may affect how work is managed.

Use the planned change to guide your questions. Check whether responsibilities, instructions and records still fit the work you expect to do.

Bring the people arranging the new work into the review. Sales, operations and quality teams need the same understanding of what can be promised.

The AI and Digital Regulations Service for health and social care advises planning quality system development and assessment early, because the expertise, work involved and assessment capacity can affect timing and cost.

That advice supports a useful business habit. Include quality requirements in the opportunity plan while there is still time to act.

For a buyer review, gather the evidence that answers the questions asked. Check the dates, activities covered and relevance of the examples you choose.

Explain the current position accurately. If a change is planned or an assessment is being arranged, describe its status clearly.

Choose someone to check the response alongside the people responsible for the work. They should be able to connect each important statement with suitable evidence.

If you already hold ISO 13485 certification, review the activities and locations it covers before relying on it for a new opportunity. Discuss relevant changes with your certification body.

If you are preparing for certification, allow time to implement the system and gather evidence of its use. Agree the assessment arrangements with the certification body.

Certification body BSI’s assessment guidance explains that the process reviews readiness and then how the system operates against the standard. Certification decisions follow assessment of the findings.

That makes day-to-day use important. Staff should be able to explain the work, find the right instructions and show the records that support it.

Internal reviews can help you identify gaps before an external assessment or buyer visit. Choose reviewers with suitable knowledge of the work and the relevant requirements.

Give them access to records and the people who use the system. Ask them to follow how the work is carried out and raise findings clearly.

When an issue is found, agree action and check the outcome. Keep that review connected to the people responsible for the affected process.

You can begin with a manageable review of one recent job. Bring together the agreed requirements, the instructions used and the records of checks and decisions.

Ask the relevant team to explain the journey. Record any gap, its possible effect and the next action needed.

The findings can help you plan the detailed review against ISO 13485 and identify where more work is needed.

The aim is a system that your business can use and explain. It should help people make clear decisions and produce reliable records as part of normal work.

Compliant provides ISO 13485 support, including reviewing existing systems, helping develop the required arrangements, preparing for assessment and providing ongoing support.

The conversation can start with your role in the medical device sector and the opportunities you are preparing for.

You may need to review an existing system, understand what a buyer expects or plan certification for the activities you carry out.

Support focused on medical device quality can help you connect those needs with practical actions. Compliant can work with your team on the system and preparation, while the certification body makes its own assessment and certification decision.

Speak to Compliant about your certification plans. Learn how ISO 13485 support could help you find gaps, improve your evidence and prepare for your next medical device opportunity.