ISO 13485 is the internationally recognized quality management system (QMS) standard for medical devices. It is a structured framework of policies, processes, and responsibilities that ensures an organization consistently delivers products or services that meet customer and regulatory requirements. It is widely used in Malaysia and globally to demonstrate system compliance, streamline processes, and gain market access through regulatory compliance.
In Malaysia, medical device manufacturers intending to market their products must first obtain ISO 13485 certification from a Conformity Assessment Body (CAB) recognized by the Medical Device Authority (MDA). This certification serves as a mandatory prerequisite for securing the manufacturer’s license issued by the MDA and is subsequently required for product registration with the Authority.
Manufacturers of Class A and Class B medical devices may exclude the design and development process from their Quality Management System (QMS). Conversely, manufacturers of Class C and Class D devices are required to incorporate the design and development process within their QMS. In all cases, manufacturers may declare the inapplicability of specific requirements, provided that such exclusions are duly justified.
15 High-Frequency Keywords in ISO 13485:2016
The following analysis provides a bird’s‑eye view of the ISO 13485 standard and highlights its key aspects. It focuses on the high‑frequency keywords found across Clauses 4, 5, 6, 7, and 8, which illustrate the primary emphasis of the standard.
| List | Keywords | Frequency | Primary Clauses | Focus Areas |
|---|---|---|---|---|
| 1 | Requirements | 127 | 4, 7 | Compliance obligations |
| 2 | Records | 73 | 4, 5, 6, 7, 8 | Compliance evidence |
| 3 | Quality | 72 | 4, 5, 6, 7, 8 | Central theme of QMS |
| 4 | Process | 69 | 7, 8 | Operational consistency |
| 5 | Action | 54 | 4, 5, 6, 7, 8 | Implementation |
| 6 | Regulatory | 43 | 4, 5, 7, 8 | Compliance obligations |
| 7 | Plan | 41 | 4, 5, 7, 8 | Principle of planned quality management |
| 8 | Design and Development | 38 | 7.3 | Mandatory for Class C & D devices |
| 9 | Validation | 33 | 4, 7 | Process & software validation |
| 10 | Documented | 24 | 4, 5, 7, 8 | System requirements |
| 11 | Customer | 23 | 7, 8 | Requirements, communication, feedback, complaints |
| 12 | Nonconform | 21 | 8 | Handling, correction, corrective action |
| 13 | Risk | 14 | 4, 7 | Risk management in process, design & production |
| 14 | Improvement | 12 | 8 | CAPA, continual improvement |
| 15 | Top Management | 11 | 5 | Leadership responsibility |
|
List
|
Keywords
|
Frequency
|
Primary Clauses
|
Focus Areas
|
||
|---|---|---|---|---|---|---|
|
1
|
Requirements
|
127
|
4, 7
|
Compliance obligations
|
||
|
2
|
Records
|
73
|
4, 5, 6, 7, 8
|
Compliance evidence
|
||
|
3
|
Quality
|
72
|
4, 5, 6, 7, 8
|
Central theme of QMS
|
||
|
4
|
Process
|
69
|
7, 8
|
Operational consistency
|
||
|
5
|
Action
|
54
|
4, 5, 6, 7, 8
|
Implementation
|
||
|
6
|
Regulatory
|
43
|
4, 5, 7, 8
|
Compliance obligations
|
||
|
7
|
Plan
|
41
|
4, 5, 7, 8
|
Principle of planned quality management
|
||
|
8
|
Design and Development
|
38
|
7.3
|
Mandatory for Class C & D devices
|
||
|
9
|
Validation
|
33
|
4, 7
|
Process & software validation
|
||
|
10
|
Documented
|
24
|
4, 5, 7, 8
|
System requirements
|
||
|
11
|
Customer
|
23
|
7, 8
|
Requirements, communication, feedback, complaints
|
||
|
12
|
Nonconform
|
21
|
8
|
Handling, correction, corrective action
|
||
|
13
|
Risk
|
14
|
4, 7
|
Risk management in process, design & production
|
||
|
14
|
Improvement
|
12
|
8
|
CAPA, continual improvement
|
||
|
15
|
Top Management
|
11
|
5
|
Leadership responsibility
|
||
For more insight about ISO 13485 QMS requirements and certification process, please refer to our blog on the Foundations of Medical Device Compliance for the ISO 13485 QMS certification.
