What is ISO 13485? An easy-to-understand guide to preparing for the medical device standard.

What are the benefits of obtaining ISO 13485 Certificate?

• Expand Access to Global Medical Device Markets

  Organizations can enter the global medical device market and meet the regulatory requirements of various countries; it also serves as a crucial stepping for medical device registration in key regions and markets such as Europe (EU MDR), the United States (FDA QMSR), Canada, Brazil, Australia, and Japan (MDSAP)

• Increase Export Opportunities and Business Growth

  It increases export opportunities, as most domestic and international business partners and distributors require manufacturers to obtained ISO 13485 certificate as a condition for doing business.

• Enhance Credibility and Competitive Advantage

  It builds organizational credibility and a positive image while assuring the safety of medical devices for physicians, hospitals, clinics, and patients. There can be confident in the consistent safety and quality of the products and maintain standards. This creates a competitive advantage and differentiates the organization from competitors without obtaining ISO 13485 certificate, while also increasing opportunities to win tenders from government agencies or large hospitals.

• Improve Risk Management and Product Safety

  Enhance risk management efficiency such as risk reduction and control for medical devices by implementing the ISO 14971 standard. This risk management system covers the entire product lifecycle, helping to minimize the occurrence of non-compliant products, reduce costs associated with errors, lower production waste, and decrease the likelihood of product recalls, while also facilitating the preparation of adverse event (vigilance) reports. It enables the organization to maintain a systematic document storage and production history record-keeping system (Medical Device Record). Furthermore, the organization is always prepared for inspections by government agencies regulating medical devices, such as the Thai FDA.

• Build a More Reliable and Resilient Supply Chain

  Strengthening the supply chain through systematic partner screening provides the organization with clear criteria for selecting and evaluating raw material suppliers and managing contract manufacturing agreements. Furthermore, for organizations acting as contract manufacturers for leading global medical device companies, obtaining ISO 13485 certificate serves to attract more major global brands to engage their manufacturing services.

Steps to Implement the ISO 13485 Standard and Obtain ISO 13485 Certificate

1. Step 1: Preparation and Planning

   Organizational management must demonstrate commitment to implementing the ISO 13485 standard by appointing a Quality Management Representative (QMR) and establishing a core team with representatives from all departments. This involves conducting training on ISO 13485 requirements for employees, preparing and maintaining documentation for the medical device risk management system (ISO 14971), and assessing the organization's current status and existing management systems against ISO 13485 requirements to identify areas for improvement or supplementation.

2. Step 2: Defining and Establishing the Documentation System

   The organization must establish quality system documentation including a Quality Manual, Standard Operating Procedures (SOPs), and Work Instructions (WIs) which in compliance with applicable regulations and laws governing medical devices. Additionally, the organization must conduct a risk analysis for medical devices, considering their product lifecycle of medical device, by applying a risk management system to the assessment of both the products and the manufacturing processes.

3. Step 3: Implementation of the established system and document retention.

   The organization carries out operations according to established procedures and maintains records of production or service delivery data, including quality inspection results, and verifies the consistency of the production or service process (process validation).

4. Step 4: Internal Audit Evaluation and Continuous Improvement

   The organization conducts internal audits by appointing an internal audit team to audit every department, identifying non-conformities and corrective measures. Additionally, a management review is held at a meeting which top management attend to evaluate the overall readiness and effectiveness of the management system.

5. Step 5: Certification Audit

   The assessment process conducted by an external Certification Body (CB) consists of two stages: the Stage 1 Audit, which evaluates the readiness of the management system and documentation prior to certification; and the Stage 2 Audit, an on-site assessment to verify that the organization’s management system aligns with its documentation and meets the relevant certification standards. Upon successful certification, the organization is obtained an ISO 13485 certificate valid for three years, subject to mandatory annual surveillance audits.