ISO 13485 is the internationally recognized quality management system (QMS) standard for medical devices. It is a structured framework of policies, processes, and responsibilities that ensures an organization consistently delivers products or services that meet customer and regulatory requirements. It is widely used in Malaysia and globally to demonstrate system compliance, streamline processes, and gain market access through regulatory compliance.
In Malaysia, medical device manufacturers intending to market their products must first obtain ISO 13485 certification from a Conformity Assessment Body (CAB) recognized by the Medical Device Authority (MDA). This certification serves as a mandatory prerequisite for securing the manufacturer’s license issued by the MDA and is subsequently required for product registration with the Authority.
Manufacturers of Class A and Class B medical devices may exclude the design and development process from their Quality Management System (QMS). Conversely, manufacturers of Class C and Class D devices are required to incorporate the design and development process within their QMS. In all cases, manufacturers may declare the inapplicability of specific requirements, provided that such exclusions are duly justified.
What is ISO 13485 Certification?
ISO 13485 certification is the international standard specifying Quality Management System (QMS) requirements for organizations involved in the design, development, production, storage, distribution, installation, or servicing of medical devices and related services.
Certification confirms that an organization’s QMS has been independently assessed against the ISO 13485 standard. It demonstrates that the organization has established processes to consistently meet customer and applicable regulatory requirements, manage risks, and maintain quality throughout its medical device activities.
15 High-Frequency Keywords in ISO 13485:2016
The following analysis provides a bird’s‑eye view of the ISO 13485 standard and highlights its key aspects. It focuses on the high‑frequency keywords found across Clauses 4, 5, 6, 7, and 8, which illustrate the primary emphasis of the standard.
| List | Keywords | Frequency | Primary Clauses | Focus Areas |
|---|---|---|---|---|
| 1 | Requirements | 127 | 4, 7 | Compliance obligations |
| 2 | Records | 73 | 4, 5, 6, 7, 8 | Compliance evidence |
| 3 | Quality | 72 | 4, 5, 6, 7, 8 | Central theme of QMS |
| 4 | Process | 69 | 7, 8 | Operational consistency |
| 5 | Action | 54 | 4, 5, 6, 7, 8 | Implementation |
| 6 | Regulatory | 43 | 4, 5, 7, 8 | Compliance obligations |
| 7 | Plan | 41 | 4, 5, 7, 8 | Principle of planned quality management |
| 8 | Design and Development | 38 | 7.3 | Mandatory for Class C & D devices |
| 9 | Validation | 33 | 4, 7 | Process & software validation |
| 10 | Documented | 24 | 4, 5, 7, 8 | System requirements |
| 11 | Customer | 23 | 7, 8 | Requirements, communication, feedback, complaints |
| 12 | Nonconform | 21 | 8 | Handling, correction, corrective action |
| 13 | Risk | 14 | 4, 7 | Risk management in process, design & production |
| 14 | Improvement | 12 | 8 | CAPA, continual improvement |
| 15 | Top Management | 11 | 5 | Leadership responsibility |
|
List
|
Keywords
|
Frequency
|
Primary Clauses
|
Focus Areas
|
||
|---|---|---|---|---|---|---|
|
1
|
Requirements
|
127
|
4, 7
|
Compliance obligations
|
||
|
2
|
Records
|
73
|
4, 5, 6, 7, 8
|
Compliance evidence
|
||
|
3
|
Quality
|
72
|
4, 5, 6, 7, 8
|
Central theme of QMS
|
||
|
4
|
Process
|
69
|
7, 8
|
Operational consistency
|
||
|
5
|
Action
|
54
|
4, 5, 6, 7, 8
|
Implementation
|
||
|
6
|
Regulatory
|
43
|
4, 5, 7, 8
|
Compliance obligations
|
||
|
7
|
Plan
|
41
|
4, 5, 7, 8
|
Principle of planned quality management
|
||
|
8
|
Design and Development
|
38
|
7.3
|
Mandatory for Class C & D devices
|
||
|
9
|
Validation
|
33
|
4, 7
|
Process & software validation
|
||
|
10
|
Documented
|
24
|
4, 5, 7, 8
|
System requirements
|
||
|
11
|
Customer
|
23
|
7, 8
|
Requirements, communication, feedback, complaints
|
||
|
12
|
Nonconform
|
21
|
8
|
Handling, correction, corrective action
|
||
|
13
|
Risk
|
14
|
4, 7
|
Risk management in process, design & production
|
||
|
14
|
Improvement
|
12
|
8
|
CAPA, continual improvement
|
||
|
15
|
Top Management
|
11
|
5
|
Leadership responsibility
|
||
For more insight about ISO 13485 QMS requirements and certification process, please refer to our blog on the Foundations of Medical Device Compliance for the ISO 13485 QMS certification.
How to Get ISO 13485 Certified?
1. Define Your Certification Scope
Identify the sites, products, services and activities that the QMS will cover. Check which requirements apply to those activities and document the justification for any permitted exclusions or non-applicable requirements.
2. Review Your Current Processes
Carry out a gap analysis to compare existing practices with the ISO 13485 standard. This helps identify missing procedures, incomplete records, unclear responsibilities and processes that need stronger controls.
3. Develop the QMS Documentation
Prepare or update the quality manual, procedures, work instructions and supporting forms. Documents should describe how the organisation actually works and give employees instructions they can follow.
4. Train Staff and Implement the System
Explain each employee’s responsibilities and put the documented processes into use. Collect records from real operations so the organisation can demonstrate implementation.
5. Conduct an Internal Audit and Management Review
Use the internal audit to check whether the system meets requirements and operates effectively. Management should then review performance, unresolved issues and resource needs. Address identified problems before proceeding to certification.
6. Complete the Certification Audits
The ISO 13485 certification body conducts Stage 1 and Stage 2 audits. Where nonconformities are identified, the organisation must address them and provide the required evidence. Certification follows a satisfactory assessment and certification decision.
Global Rep’s system and regulatory compliance services can support organisations with QMS development and implementation.
