The transition to updated regulatory standards presents a significant operational and technical challenge for medical device manufacturers. ISO13485 establishes the internationally recognised framework for quality management systems used in the design, manufacture, and lifecycle management of medical devices. The implementation of this standard is essential for demonstrating regulatory compliance, ensuring product safety, and maintaining effective quality management across manufacturing and development activities.

Quality Systems Now (QSN) provides regulatory compliance, GxP consulting, and quality system development services for therapeutic goods manufacturers, testing laboratories, and biotechnology companies. One recent engagement involved supporting an in vitro diagnostic (IVD) and software as a medical device (SaMD) manufacturer in Victoria that required structured assistance to transition its quality management system to the updated ISO13485 standard.

The organisation’s product consisted of a diagnostic kit supported by software used to interpret and present results. Because the company was accredited through the Therapeutic Goods Administration rather than through a notified body, the regulatory inspection process required extensive preparation and documentation. QSN was engaged to provide technical and regulatory support across multiple areas including quality system development, design control implementation, validation activities, and audit readiness.

Project Background

The medical device manufacturer had previously established a quality management system aligned with earlier regulatory expectations. However, the updated ISO13485 standard introduced expanded requirements in several areas including risk management integration, supplier qualification, design control, documentation practices, and lifecycle management.

The company also faced additional complexity due to the dual nature of its product. The IVD component consisted of a physical diagnostic kit used in laboratory environments, while the software component performed interpretation and analysis of test results. This required the integration of both device manufacturing controls and software lifecycle management practices within the quality management framework.

Because regulatory oversight was conducted directly by the Therapeutic Goods Administration, the organisation anticipated a comprehensive regulatory inspection. The company therefore sought external expertise to support the transition process, ensure regulatory expectations were met, and prepare internal personnel for inspection.

Gap Analysis and Transition Planning

The first stage of the engagement involved a detailed gap analysis comparing the organisation’s existing quality management system against the updated ISO13485 requirements. This systematic review examined documented procedures, quality records, risk management activities, and operational practices.

The gap analysis identified several areas requiring enhancement, particularly in design and development processes, supplier qualification activities, software configuration management, and risk management integration. Documentation practices also required improvement to ensure alignment with current expectations for controlled records and technical documentation.

Following completion of the gap analysis, QSN developed a structured transition plan. This plan prioritised activities based on regulatory risk and operational impact. High priority tasks included strengthening design control processes, ensuring technical documentation compliance, and implementing improved change control procedures for software development.

The transition plan provided a clear roadmap for the organisation, allowing internal teams to address gaps systematically while maintaining ongoing manufacturing and development activities.

Development of Design and Development Processes

One of the most significant gaps identified during the analysis was the absence of a fully structured design and development framework. ISO13485 requires documented processes governing design planning, design inputs, verification, validation, and design transfer.

QSN worked closely with subject matter experts within the organisation to establish a compliant design and development lifecycle. The process included formalised design reviews, traceability of requirements, and structured documentation of verification and validation activities.

These procedures were particularly important due to the hybrid nature of the company’s product. Both the diagnostic kit and the software used for result interpretation required design control and validation to demonstrate safety and performance.

Through collaboration with internal technical experts, QSN established a design control framework that integrated device engineering activities with software development practices.

Technical File and Documentation Updates

Regulatory compliance for medical devices requires comprehensive technical documentation. For this organisation, the technical file and Summary Technical Documentation (STED) required revision to ensure alignment with the updated ISO13485 framework.

QSN reviewed the existing documentation and supported updates to ensure that product design, manufacturing processes, and validation activities were clearly documented. The updated technical documentation included detailed descriptions of device functionality, design verification data, and evidence supporting safety and performance.

These updates ensured that the documentation package would support regulatory review during inspection by the Therapeutic Goods Administration.

Software Version Control and Change Management

Because the product included software used for interpreting diagnostic results, effective software lifecycle management was critical. QSN developed and implemented a structured version control and change control process to govern software updates.

The new system ensured that all software changes were documented, assessed for regulatory impact, and approved through a controlled process before release. Version tracking and release documentation were implemented to ensure traceability across development cycles.

These controls supported both regulatory compliance and product reliability by ensuring that software modifications were properly assessed and validated before deployment.

Quality Management System Development

To close the gaps identified during the analysis, QSN reviewed and developed multiple quality management system procedures. These included documentation control processes, change management procedures, supplier management frameworks, and training documentation systems.

QSN also performed quality assurance activities in the capacity of a QA Representative, providing practical support to the internal quality team. This role included reviewing documentation, assisting with quality record development, and supporting the implementation of compliant procedures across departments.

Supplier and Material Qualification

Supplier qualification is a critical requirement of ISO13485 because external suppliers may influence the safety and performance of medical devices. QSN led the development of supplier qualification procedures and material criticality assessments.

The process included evaluating suppliers based on the risk associated with the materials or components they provided. Materials used in diagnostic kits were assessed for quality impact, and vendor qualification processes were established to ensure consistent supply of compliant materials.

Material qualification procedures ensured that incoming materials were properly assessed and controlled before use in manufacturing.

Risk Management and ISO14971 Training

Risk management forms an integral part of medical device regulation. ISO14971 provides the framework for identifying hazards, assessing risk, and implementing risk control measures across the product lifecycle.

QSN supported the organisation in conducting end-to-end risk assessments covering manufacturing processes, distribution activities, and product usage scenarios. These assessments helped ensure that risks associated with the diagnostic kit and software components were systematically identified and mitigated.

Training sessions were delivered to internal staff covering ISO14971 principles and the practical implementation of risk management processes.

Audit Preparation and Regulatory Inspection

Preparing for regulatory inspection was a major focus of the engagement. QSN worked with quality assurance personnel and subject matter experts to conduct audit readiness assessments and prepare documentation required for inspection.

Mock audits and documentation reviews were conducted to ensure that employees were familiar with procedures and could demonstrate compliance during interviews with regulators.

During the Therapeutic Goods Administration inspection, QSN acted as the QA Representative alongside the company’s QA Manager. This role involved supporting discussions with inspectors, clarifying quality system processes, and providing documentation when requested.

Following the inspection, QSN assisted the organisation in addressing and closing minor deficiencies identified by the regulator.

Training and Capability Development

A critical aspect of the transition project involved building internal capability. QSN delivered structured training programs covering ISO13485 requirements, clause-by-clause design and development controls, and principles of data integrity and Good Documentation Practice.

These training sessions ensured that staff across the organisation understood the requirements of the quality management system and were capable of maintaining compliance after completion of the transition project.

Conclusion

The transition to updated ISO13485 requirements represents a complex undertaking for medical device manufacturers, particularly when products involve both physical diagnostic components and software systems. Through structured gap analysis, process development, documentation improvements, and targeted training, Quality Systems Now supported the organisation in achieving regulatory readiness.

The project demonstrated the importance of integrating quality management, risk management, and software lifecycle controls within a unified compliance framework. With these systems in place, the company successfully strengthened its quality infrastructure and was prepared for regulatory inspection by the Therapeutic Goods Administration.