Published on 05/12/2025
How to Harmonize Design Controls, Risk Management Across Global Sites in the US, UK and EU
Step 1: Understanding Design Controls and Risk Management
The first step in harmonizing design controls and risk management across global sites is to establish a clear understanding of these concepts. Design controls are systematic measures that ensure the design process of a medical device meets user needs and intended uses. Risk management, as outlined in ISO 14971, involves identifying, evaluating, and mitigating risks associated with medical devices throughout their lifecycle.
Objectives: The primary objective is to create a framework that integrates design controls and risk management, ensuring compliance with regulatory requirements in the US (FDA), UK (MHRA), and EU (MDR).
Documentation: Key documents include the
Roles: Quality managers and regulatory affairs professionals play critical roles in this phase. They must ensure that all documentation is accurate, complete, and compliant with applicable regulations.
Inspection Expectations: During inspections, regulatory bodies will expect to see evidence of a robust design control process and comprehensive risk management documentation. This includes records of design reviews, risk analyses, and any changes made throughout the design process.
Step 2: Establishing a Quality Management System (QMS)
The next step is to establish a Quality Management System (QMS) that complies with ISO 13485 standards. A QMS provides a structured approach to managing quality throughout the product lifecycle, from design to post-market surveillance.
Objectives: The objective is to ensure that the QMS is aligned with both regulatory requirements and organizational goals, facilitating efficient design controls and risk management processes.
Documentation: Essential documents include the Quality Manual, Standard Operating Procedures (SOPs), and records of training and competence assessments. These documents should be regularly reviewed and updated to reflect changes in regulations or company practices.
Roles: The QMS team, including quality managers, compliance officers, and department heads, must collaborate to ensure that the QMS is effectively implemented and maintained.
Inspection Expectations: Inspectors will evaluate the QMS for compliance with ISO 13485 and other relevant standards. They will look for evidence of continuous improvement, including corrective and preventive actions (CAPA) and internal audits.
Step 3: Integrating Design Controls with Risk Management
Integrating design controls with risk management is crucial for ensuring that potential risks are identified and mitigated throughout the design process. This integration should be evident in all documentation and processes.
Objectives: The goal is to create a seamless process where design controls and risk management inform and enhance each other, leading to safer and more effective medical devices.
Documentation: The integration should be documented in the Design Control Plan and the Risk Management Plan. These documents should outline how risk management activities will be incorporated into each phase of the design process.
Roles: Cross-functional teams, including design engineers, regulatory affairs, and quality assurance personnel, should collaborate to ensure that both design controls and risk management are considered at every stage of product development.
Inspection Expectations: Inspectors will assess the integration of design controls and risk management during audits. They will expect to see clear links between risk assessments and design decisions, as well as evidence of how risks were mitigated in the final product.
Step 4: Conducting Design Reviews and Risk Assessments
Regular design reviews and risk assessments are essential for maintaining compliance and ensuring that the design meets user needs and safety requirements. These activities should be planned and documented as part of the design control process.
Objectives: The objective is to identify any potential issues early in the design process and to ensure that all design outputs meet the specified requirements.
Documentation: Design review records and risk assessment reports should be maintained as part of the DHF and RMF. These documents should include the date of the review, participants, findings, and any actions taken as a result.
Roles: Design engineers, quality managers, and regulatory affairs professionals should participate in design reviews. Their collective expertise will help identify potential risks and ensure compliance with regulatory requirements.
Inspection Expectations: During inspections, regulatory bodies will review design review and risk assessment documentation to ensure that they are conducted regularly and that findings are addressed promptly.
Step 5: Implementing Verification and Validation Activities
Verification and validation (V&V) are critical components of the design control process. Verification ensures that the design outputs meet the design inputs, while validation confirms that the device meets user needs and intended uses.
Objectives: The objective is to provide evidence that the device is designed correctly and functions as intended, thereby ensuring compliance with regulatory standards.
Documentation: V&V activities should be documented in the V&V Plan and included in the DHF. This documentation should detail the methods used, results obtained, and any corrective actions taken.
Roles: Quality assurance professionals and design engineers should collaborate on V&V activities. Their combined efforts will help ensure that the device meets all requirements and is safe for use.
Inspection Expectations: Inspectors will expect to see comprehensive V&V documentation that demonstrates compliance with both FDA and ISO requirements. They will look for evidence of thorough testing and analysis.
Step 6: Managing Changes and Continuous Improvement
Change management is a critical aspect of maintaining compliance in regulated industries. Any changes to the design or manufacturing process must be carefully evaluated and documented to ensure that they do not negatively impact the device’s safety or effectiveness.
Objectives: The goal is to establish a robust change management process that allows for continuous improvement while maintaining compliance with regulatory requirements.
Documentation: Change control records should be maintained, detailing the nature of the change, the rationale, and any impact assessments performed. These records should be part of the QMS documentation.
Roles: Quality managers, regulatory affairs professionals, and department heads must work together to evaluate and implement changes effectively.
Inspection Expectations: Inspectors will review change control documentation to ensure that changes are managed systematically and that any potential impacts on product quality are assessed and addressed.
Step 7: Preparing for Regulatory Inspections
Finally, preparing for regulatory inspections is essential for ensuring compliance and demonstrating the effectiveness of the QMS, design controls, and risk management processes.
Objectives: The objective is to ensure that all documentation is complete, accurate, and readily available for review during inspections.
Documentation: Inspectors will expect to see the QMS documentation, design control records, risk management files, and evidence of training and competence assessments. All documents should be organized and easily accessible.
Roles: Quality managers and regulatory affairs professionals should lead the preparation efforts, ensuring that all team members are aware of their roles during the inspection process.
Inspection Expectations: Inspectors will evaluate the overall effectiveness of the QMS and the integration of design controls and risk management. They will look for evidence of compliance with FDA, ISO, and other relevant regulations.