Advancing quality management in the medical devices industry: strategies for effective ISO 13485 implementation

Abstract

The medical devices industry faces inherent complexities in ensuring quality excellence due to stringent specifications and perceived customer value [1]. One of the reasons for this is that implementing and maintaining an effective quality management system (QMS) under ISO 13485:2016 demands significant organizational efforts and structured processes [2]. The majority of the efforts are related to the distinct aspects of this standard. ISO 13485 differentiates itself through key themes that are central to the medical device industry. Safety and risk management are at the forefront, with a focus on minimizing risks associated with the use of medical devices. This includes a formalized approach to identifying, assessing, and mitigating risks throughout the device lifecycle. The standard also has a strong regulatory emphasis, ensuring compliance with global medical device regulations, such as U.S. Food and Drug Administration (FDA)’ Quality System Regulation (QSR) (21 CFR Part 820) and the Medical Device Regulations (MDR) in the European Union (EU), which are not covered in general QMS. Finally, ISO 13485 places a patient focus at the heart of its requirements, ensuring that the health and safety of the end-user—the patient—are prioritized in the design, manufacturing, and post-market processes of medical devices. Illustratively, ISO 13485 differs from ISO 9001 by being specifically tailored to the medical device industry, with a strong focus on safety, regulatory compliance, and risk management. Unlike ISO 9001, which is applicable to general industries, ISO 13485 mandates formal risk management processes that are tied directly to device safety, and it requires strict adherence to external regulations such as FDA QSR or EU MDR. It emphasizes traceability for medical devices, including components and distribution, to ensure swift recall if needed. Additionally, ISO 13485 includes post-market surveillance and feedback mechanisms to monitor device performance after release, prioritizing patient safety and health, which is not explicitly addressed in ISO 9001. The standard also requires more detailed documentation and validation for processes like design and manufacturing, making it a more stringent framework for ensuring the safety and effectiveness of medical devices. More centrally, there are still significant knowledge gaps in empirical research and practical guidelines for healthcare managers implementing international standards in this context [3–5]. By examining the specialized literature, we argue that the main knowledge gaps and challenges to improving the maturity of ISO 13485 implementation in the medical devices industry are discussed in the next subsection. The inherent complexities that characterize the medical devices industry make it challenging to ensure quality excellence, necessitating the integration of diverse business processes in healthcare systems such as hospitals [1, 6]. There is a salient gap in understanding how an operational excellence (OE) culture specifically enhances the value through QMS realization in the medical devices industry [1, 4, 5, 7]. We recognize that cultivating a culture of OE could enhance the successful implementation of ISO 13485 by fostering continuous improvement, operational waste reduction, and a focus on quality across production, design, and post-market surveillance. This aligns with ISO 13485’s requirements for strict controls, traceability, and documentation throughout the device lifecycle. A commitment to OE ensures employees are not only compliant with QMS but actively engaged in improving quality, from supplier management to patient safety, optimizing both safety and quality to meet regulatory and customer expectations. While ISO 13485:2016 implementation can contribute to improving business performance, its practical implementation involves long-term efforts and structured processes, which are still not well understood in the literature [2]. The gap in evidence occurs for several reasons. First, most existing instruments have methodological weaknesses, making them unsuitable for large-scale comparative analysis [5]. Also, there is limited empirical evidence and practical guidelines for implementing international standards in the medical devices industry, with existing studies often being isolated case studies [3]. Lastly, limited practical evidence exists on the implementation of ISO 13485:2016, with most studies being isolated case studies rather than comprehensive research [6, 8, 9]. There is a lack of explicit guidelines and empirical research to assist medical device manufacturers in planning and implementing ISO 13485:2016 despite its importance for regulatory certifications [10]. We argue that the following strategies are required to improve the maturity of ISO 13485 execution and its QMS in modern medical devices industries. Incorporating maturity levels as an element for assessing QMS requirements in the context of ISO 13485 is an underexplored approach in the sector. Maturity models are structured frameworks used to assess and guide the development of processes, practices, or systems within an organization. They evaluate the progression of an entity’s capabilities, usually starting from an initial, ad hoc level and advancing to a highly optimized, continuously improving state. They typically consist of several stages or levels, with each representing a higher degree of process maturity, often categorized from ‘initial’ to ‘optimized’. To make the intended impact of measuring and understanding the current maturity level of ISO 13485, key aspects could include (i) measuring certifiable requirements from ISO 13485:2016 and excluding noncertifiable clauses or items of the maturity model; (ii) designing the maturity model following the PDCA cycle aiming to obtain a path for continuous improvement and reach higher levels of maturity over time. Therefore, we argue that assessing the maturity of the current levels from the relevant ISO 13485 requirements can provide valuable information and organizational learning. The further improvement of the requirements presenting a low maturity level will contribute to the company’s subsequent acquisition of compulsory national and international quality certifications in the healthcare industry (e.g. Conformité Européenne, FDA, among others). The literature lacks robust diagnostic instruments tailored explicitly to ISO 13485:2016. However, a few exist, and therefore, we infer that managers are required to be appropriate and adopt maturity assessment instruments in their business process. These instruments must be adaptable and close to the well-known ISO 9000 guidelines. Admittedly, the engagement of top managers is crucial in projects involving the improvement of the maturity of ISO 13485 implementation [4]. They must lead organizational initiatives that ensure accurate maturity evaluations and foster commitment to the implementation process. We argue that solid leadership commitment is also vital for achieving effective QMS implementation, as it influences strategic planning, operational alignment, continuous improvement, and documentation practices. Organizational resources, including experts in quality management methods and digital tools, become key assets to facilitate ISO 13485 implementation and maintenance over time. An internal structure of quality will also contribute to solidifying an organizational culture of OE. We claim that to improve the competitiveness of the medical devices industry, it is necessary to encourage partnerships with academia and focus on innovation as a core pillar that can enhance the application of advanced concepts in QMS implementation. Compared with other traditional industries (automotive, electronics, technology industry, etc.), there are vast opportunities to improve the culture of partnerships and collaboration with external actors. Aligning strategic planning with operational activities towards ISO 13485 ensures that the organization’s goals and processes are coherent and support QMS maturity. Robust documentation practices in the healthcare business process are essential for tracking progress, ensuring compliance, and providing evidence of quality management efforts. They will contribute to supporting and maintaining the ISO 13485 operating system. Emphasizing continuous improvement of organizational culture through the business process will help healthcare organizations maintain and enhance their QMS, ensuring sustained compliance with ISO 13485:2016 standards and OE. The relationship between OE and the implementation of ISO 13485 is rooted in the shared goal of enhancing efficiency, ensuring product quality, and meeting safety and regulatory standards. OE challenges, such as minimizing risks, reducing variability, and achieving consistent product quality, align closely with the structured framework provided by ISO 13485. By emphasizing continuous improvement and corrective actions, ISO 13485 can address OE’s need for ongoing performance enhancement. To conclude, we hope that this article serves as a roadmap for helping practitioners in the medical device industry identify relevant challenges and develop effective strategies regarding ISO 13485 accreditation and the pivotal role of QMS. We expect that this article can offer valuable insights towards advancing quality and safety in the healthcare industry. None declared.

Topics & Concepts