Quality Management Systems
Build, implement, and maintain a quality management system that satisfies ISO 13485, FDA QSR, and multi-market regulatory requirements — designed for your organization, not a template.
Overview
A robust quality management system is the foundation upon which every other regulatory activity depends. Without a compliant, well-implemented QMS, technical documentation falls apart, design controls lack governance, post-market surveillance has no structure, and audit outcomes become unpredictable. For medical device manufacturers, the QMS is not merely an administrative framework — it is the operational backbone that ensures devices are consistently designed, manufactured, and maintained to meet safety and performance requirements throughout their lifecycle.
Swiss MPC specializes in designing and implementing ISO 13485:2016-compliant quality management systems that are tailored to the size, complexity, and regulatory scope of each client organization. We do not apply a one-size-fits-all template approach. Instead, we assess your existing processes, identify what works, and build a QMS that integrates naturally into your operations while satisfying the requirements of all target regulatory frameworks — including EU MDR, FDA 21 CFR Part 820, and the Medical Device Single Audit Program (MDSAP) for multi-market coverage.
Our QMS consulting covers the full spectrum of quality system activities: gap analysis and remediation planning, SOP development and documentation, process validation, supplier quality management, internal audit programs, CAPA (Corrective and Preventive Action) systems, management review processes, and preparation for certification and regulatory audits. We bring particular expertise in helping organizations transition from informal or partially documented quality systems to fully audit-ready QMS implementations that withstand notified body and FDA scrutiny.
Beyond initial implementation, Swiss MPC provides ongoing support for QMS maintenance and continuous improvement. We help organizations conduct effective internal audits, prepare for surveillance and re-certification audits, respond to audit findings and observations, and evolve their quality systems as regulatory expectations change. Our goal is a QMS that is not just compliant on paper, but genuinely effective in driving product quality and regulatory performance across your device portfolio.
Common QMS Challenges for Medical Device Manufacturers
QMS That Exists on Paper but Not in Practice
Many organizations have quality systems that look comprehensive on the shelf but are not followed in daily operations. SOPs are outdated, records are incomplete, and employees are unclear on their quality responsibilities. This disconnect between documented and actual practice is a major audit finding source and creates real quality risks. An effective QMS must be practical, understandable, and embedded in the organization culture — not a collection of documents created solely to satisfy auditors.
Bridging ISO 13485 and FDA QSR Differences
While ISO 13485:2016 and FDA 21 CFR Part 820 share the same foundational principles, they differ in specific requirements — particularly around management responsibility, design controls, purchasing controls, and CAPA expectations. Organizations selling in both EU and US markets must maintain a QMS that satisfies both frameworks simultaneously, which requires careful mapping, gap identification, and procedures that address the most stringent requirements from each standard without creating unnecessary complexity.
CAPA System Ineffectiveness
Corrective and preventive action is one of the most frequently cited areas in FDA warning letters and notified body audit findings. Common problems include failure to properly investigate root causes, inadequate verification of corrective action effectiveness, conflation of corrections with corrective actions, and lack of trending and analysis to identify systemic issues. An effective CAPA system requires clear procedures, trained investigators, appropriate tools, and management commitment to addressing quality issues rather than just closing CAPA records.
Supplier Quality Management Gaps
Medical device manufacturers rely on suppliers for critical components, materials, sterilization services, and manufacturing processes. ISO 13485 and FDA QSR require documented supplier evaluation, selection, and monitoring procedures, yet many organizations perform only superficial supplier assessments and lack effective incoming inspection programs. As supply chains become more global and complex, supplier quality failures increasingly contribute to device quality issues, field actions, and regulatory non-conformities.
Audit Readiness and Sustainability
Preparing for audits should not be a frantic, last-minute effort. Organizations that only focus on their QMS when an audit is imminent face a cycle of reactive preparation, audit findings, and hasty remediation — only to repeat the cycle at the next audit. Sustainable audit readiness requires ongoing QMS maintenance, regular internal audits, timely management reviews, and a culture where quality system compliance is part of daily operations rather than a periodic event.
Our QMS Implementation Approach
Current State Assessment and Gap Analysis
We conduct a thorough assessment of your existing quality system — or lack thereof — against ISO 13485:2016, FDA 21 CFR Part 820, and any additional applicable frameworks such as MDSAP or market-specific requirements. The gap analysis identifies not only documentation deficiencies but also process gaps, competency needs, and infrastructure requirements. The output is a prioritized remediation plan with realistic timelines that accounts for your available resources and regulatory deadlines.
QMS Architecture and Documentation Development
We design the QMS architecture including process maps, document hierarchy, and record management structure tailored to your organization. Then we develop the core documentation set: quality manual, quality policy, standard operating procedures (SOPs), work instructions, and forms/templates for all required processes. Every document is written in clear, practical language appropriate for the users who will follow it — not in generic regulatory jargon that discourages compliance.
Process Implementation and Training
Documentation alone does not create a quality system. We work with your teams to implement each QMS process, ensuring that employees understand their roles, responsibilities, and the practical steps required. This includes hands-on training sessions, competency assessments, and supervised process execution for critical activities. We pay particular attention to processes that are frequently problematic — CAPA, design controls, document control, and complaint handling — to establish good practices from the outset.
CAPA and Post-Market Quality Processes
We establish robust CAPA procedures that ensure effective root cause investigation, appropriate corrective and preventive action selection, timely implementation, and verification of effectiveness. We also implement complaint handling processes, nonconforming product management, field safety corrective action (FSCA) procedures, and trending and analysis methodologies. These post-market quality processes are critical for EU MDR compliance and FDA inspection readiness.
Internal Audit Program and Management Review
We establish your internal audit program including audit schedules, trained auditor pool, audit procedures, and reporting frameworks that comply with ISO 19011 principles. We also structure management review meetings to ensure they cover all required inputs (audit results, complaint trends, CAPA status, process performance, regulatory changes) and produce meaningful outputs (resource decisions, improvement actions, quality objectives). We conduct initial audits and management reviews alongside your team to build internal capability.
Certification Preparation and Audit Support
We prepare your organization for certification audits (Stage 1 and Stage 2 for ISO 13485), FDA establishment inspections, or MDSAP audits. This includes conducting comprehensive mock audits that simulate the actual audit experience, identifying and resolving potential findings before the real audit, preparing staff for auditor interactions, and organizing documentation for efficient auditor access. During actual audits, we provide on-site support to facilitate the process and address any questions or observations in real time.
QMS Deliverables
- Gap analysis report with prioritized remediation plan and timeline
- Quality manual and quality policy aligned with organizational objectives
- Complete SOP set covering all ISO 13485 and FDA QSR-required processes
- Work instructions and forms/templates for operational quality activities
- CAPA procedure with root cause investigation methodology and effectiveness verification framework
- Complaint handling and vigilance reporting procedures
- Supplier evaluation, selection, and monitoring procedures with approved supplier list template
- Internal audit program including procedure, schedule, checklist suite, and auditor training
- Management review procedure with standardized agenda and meeting record templates
- Document control and record management system implementation
- Training program framework with competency assessment matrices
- Mock audit report with findings, observations, and remediation recommendations
Applicable Standards & Regulations
ISO 13485:2016
Medical devices — quality management systems — requirements for regulatory purposes. The primary international standard for medical device QMS, specifying requirements for organizations involved in the lifecycle of medical devices including design, production, storage, distribution, installation, and servicing. Recognized by regulatory authorities worldwide and forms the basis for conformity assessment under the EU MDR.
FDA 21 CFR Part 820 — Quality System Regulation (QSR)
The US federal regulation establishing current good manufacturing practice (cGMP) requirements for medical device manufacturers. Covers management responsibility, design controls, document controls, purchasing controls, production and process controls, CAPA, labeling, and records requirements. The FDA is in the process of harmonizing the QSR with ISO 13485 through the QMSR final rule.
ISO 19011:2018
Guidelines for auditing management systems. Provides guidance on managing an audit program, planning and conducting audits, and evaluating auditor competence. Essential for establishing effective internal audit programs that meet ISO 13485 requirements and prepare organizations for external certification and regulatory audits.
ISO 9001:2015
Quality management systems — requirements. While medical device manufacturers typically certify to ISO 13485 rather than ISO 9001, the latter provides the foundational QMS concepts including process approach, risk-based thinking, and continuous improvement. ISO 13485 is aligned with but distinct from ISO 9001, with medical device-specific requirements that take precedence.
MDSAP (Medical Device Single Audit Program)
A program that allows a single regulatory audit of a medical device manufacturer QMS to satisfy the requirements of multiple regulatory authorities — currently the US (FDA), Canada (Health Canada), Australia (TGA), Japan (MHLW/PMDA), and Brazil (ANVISA). MDSAP audits assess compliance with each participating authority requirements simultaneously, significantly reducing audit burden for manufacturers operating in multiple markets.
EU MDR 2017/745 — Article 10 (Manufacturer Obligations)
Article 10 of the EU MDR establishes the obligations of manufacturers including maintaining a QMS per Article 10(9), establishing post-market surveillance systems, complying with vigilance requirements, and ensuring technical documentation is maintained and up to date. The QMS requirements under Article 10(9) go beyond ISO 13485 in certain areas, particularly post-market surveillance and risk management integration.
FDA QMSR Final Rule (Quality Management System Regulation)
The FDA final rule harmonizing 21 CFR Part 820 with ISO 13485:2016. This rulemaking incorporates ISO 13485 by reference as the foundation of the US medical device QMS requirements while retaining certain FDA-specific requirements. Manufacturers will need to ensure their QMS satisfies both the incorporated ISO 13485 requirements and the additional FDA-specific provisions.
ICH Q10 — Pharmaceutical Quality System
While primarily applicable to pharmaceutical products, ICH Q10 provides a valuable reference for combination product manufacturers and organizations whose medical device QMS must interface with pharmaceutical quality systems. Understanding ICH Q10 is relevant for manufacturers of drug-device combinations that fall under both medical device and pharmaceutical regulatory frameworks.
Frequently Asked Questions
Related Services
Regulatory Strategy & Compliance
Regulatory roadmaps, pathway identification, MDR/IVDR transition, and notified body interaction
Learn moreTechnical Documentation & CE Marking
Technical files, Design History Files, EU MDR/IVDR submissions, and FDA 510(k)/PMA
Learn moreM&A Due Diligence
Regulatory compliance audits, documentation reviews, and risk assessment for acquisitions
Learn moreReady to Accelerate Your Regulatory Compliance?
Schedule a free consultation with our senior regulatory experts