Regulatory Open Forum

 View Only
  • 1.  Derivation of product requirements from regulatory information/standards - Best practice?

    This message was posted by a user wishing to remain anonymous
    Posted 9 days ago
    This message was posted by a user wishing to remain anonymous

    Hello dear colleagues, 
    We are currently developing a process for transferring regulatory requirements from standards, regulations and guidelines into product-related requirements. I would be interested in your experience in this regard and which "best practice" approaches you would recommend.
    We are currently actively monitoring global databases for updated regulations and standards. This list of applicable standards is maintained by our RA department for each product group. However, we are now faced with the challenge of interpreting these standards and translating them into stakeholder requirements and system requirements.  Unfortunately, our RA department is not in a position to do this due to the large number of requirements and sometimes a lack of detailed specific expertise.
    However, our development department demands "hard requirements" for development and possible change assessment and not just a list of applicable standards. What is your experience with this? Can you share best practices on how normative and regulatory requirements are translated into products in your company? 
     
    Looking forward to an exciting discussion!
    Cheers - Chris  


  • 2.  RE: Derivation of product requirements from regulatory information/standards - Best practice?

    Posted 8 days ago

    Best practice includes early communication and negotiation about requirements at a high level.

    First the Marketing function may say where are the target markets and the Design function may suggest the product concept. Then the Regulatory function can evaluate relevant regulations and extract some hard requirements.

    Standards compliance comes next. The Regulatory function can say which standards are required or recommended, in full or in part, for the product type in those jurisdictions, and whether third-party verification of compliance is required vs in-house verifications. Of course the process can be iterative... If the cost of compliance is too high, the design could be changed or the list of target markets could be shortened.

    Once the standards list is agreed, the Design and Design Quality functions convert the applicable sections of the standards into verifiable requirements that are applicable to the design concept.

    As you say, you can't expect any one person in any one functional area to have all the expertise. It often takes some discussion, with each party sharing what they know and don't know about the relevant topics, and some trial-and-error to find effective ways of working together. It also takes some recognition that requirements development is a valuable process that needs resourcing with people and time.



    ------------------------------
    Anne LeBlanc
    United States
    ------------------------------



  • 3.  RE: Derivation of product requirements from regulatory information/standards - Best practice?

    Posted 7 days ago

    This is one area that is confusing.  The use of standards in setting product requirements also involves risk management.  Most often standards identify hazards and provide methods for addressing those hazards in the form of risk control measures which become safety requirements at Design-Development Inputs (ISO 13485 7.3.3 c)).  The standards often also provide tests to assure the effectiveness of the risk control measures.  ISO TR 24971:2020 Annex E identifies a method for the use of standards for risk management, which creates the Design Safety Requirements or Risk Control measures.  It is important that these Safety Requirements be captured in your Risk Management File to assure this information becomes part of your Overall Residual Risk Evaluation for the product, and that any design changes do not inadvertently remove these Risk Controls when they were not properly captured as part of the safety requirements of the product.

    I recommend that you include the methods of Annex E in the process you are developing.  You might actually save some time and effort in your risk management process because any hazard identified in a standard is automatically an Unacceptable Risk and there is no need to spend time evaluating it.  Additionally if you follow the process of the standard to implement the required Risk Control measure and follow the test method in the standard is used to provide acceptable results, the Residual Risk is automatically an Acceptable Residual Risk by virtue of use of the standard, as long as it is the current "state of the art" version.



    ------------------------------
    Edwin Bills
    Edwin Bills Consultant
    ASQ Fellow CQE, CQA, CQM/OE, RAPS RAC
    elb@edwinbillsconsultant.com
    Member, ISO TC 210 JWG1
    ------------------------------



  • 4.  RE: Derivation of product requirements from regulatory information/standards - Best practice?

    Posted 6 days ago

    To add an extra dimension on to the great responses from Anne and Ed; your teams need to know what they are looking for. Requirements from regulations are more likely to be very high level in terms of performance etc, apart from those that stipulate the labelling/IFU content etc. Requirements from standards will be a mixed bag of design requirements, design specifications (maybe), test methods, acceptance criteria and maybe even some performance criteria for the intended use (e.g. some standards for implants have lifetime performance criteria). The markets and the applicable standards (even if only partially applicable) need to be decided upon (as Anne said) and then the team need to review, identify, extract and translate into your internal method for documenting requirements etc. For those with large product portfolios with similar intended uses, then there will be lots of requirements etc. that can be applied across multiple product families. For those with small and developing product portfolios, then it is a chance to clearly identify your product requirements and then strategically iterate on how you fulfil those requirements and/or add new requirements to develop your product and/or portfolio.



    ------------------------------
    Ed Ball
    Manager, Intelligence & Innovation
    United Kingdom
    ------------------------------



  • 5.  RE: Derivation of product requirements from regulatory information/standards - Best practice?

    This message was posted by a user wishing to remain anonymous
    Posted 5 days ago
    This message was posted by a user wishing to remain anonymous

    Thank you all for your feedback and your recommendations! 
    We have the applicable norms, regulations and standards available. However, we face major challenges in translating the relevant requirements into truly verifiable product requirements. I would be interested in your experience and assessment of this. Do you have something like a "standards committee" in your company that deals with the analysis of standards or what approach would you recommend? 



  • 6.  RE: Derivation of product requirements from regulatory information/standards - Best practice?

    This message was posted by a user wishing to remain anonymous
    Posted 5 days ago
    This message was posted by a user wishing to remain anonymous

    For ease of maintenance when things change, it helps to trace which product requirements were derived from which standards.




  • 7.  RE: Derivation of product requirements from regulatory information/standards - Best practice?

    This message was posted by a user wishing to remain anonymous
    Posted 4 days ago
    This message was posted by a user wishing to remain anonymous

    We have a small systems engineering group that prides themselves on excellence in requirements development. They need help in finding the right set of standards for a product, but they have learned how to read them.

    https://www.incose.org/communities/working-groups-initiatives/requirements




  • 8.  RE: Derivation of product requirements from regulatory information/standards - Best practice?

    Posted 4 days ago

    One way for US products to determine standards that might apply to products is to use FDA's Product Code database. By entering the product of interest, a page pops up the standards that may apply from FDA's Recognized Standards Database among other information including premarket filing, and the Total Product Lifecycle database link which gives more valuable information, like competitors in the product line and experience in product problems which can help with risk management. All this from entering a generic product description. 



    ------------------------------
    Edwin Bills
    Edwin Bills Consultant
    ASQ Fellow CQE, CQA, CQM/OE, RAPS RAC
    elb@edwinbillsconsultant.com
    ------------------------------