Regulatory Open Forum

 View Only
Expand all | Collapse all

ISO 14971:2007 and ISO 14971:2019 gap analysis

  • 1.  ISO 14971:2007 and ISO 14971:2019 gap analysis

    This message was posted by a user wishing to remain anonymous
    Posted 06-Jan-2020 13:39
    This message was posted by a user wishing to remain anonymous

    Hi everyone, 

    Does anyone have a gap analysis between the two versions of the standard?  Thanks.


  • 2.  RE: ISO 14971:2007 and ISO 14971:2019 gap analysis

    Posted 07-Jan-2020 03:11
    ​Dear anonymous,
    the 2019 version is also very new to me and I am still studying the contents and changes. The foreword in the standard at least reveals to me that nothing drastic or structural has changed compared with the previous version. Annex B provides the correspondence between both versions and seems to suggest a great resemblance between both versions. That's my starting point. But as always, the devil is in the detail...…
    I hope your question starts a discussion on the impacts of the gaps in this forum.

    ------------------------------
    Peter Reijntjes
    Principal Consultant Regulatory & Quality Affairs
    Arnhem
    Netherlands
    ------------------------------



  • 3.  RE: ISO 14971:2007 and ISO 14971:2019 gap analysis

    Posted 07-Jan-2020 05:48
    Dear Anonymous,

    This website provides an analysis of changes in ISO 14971:2019 version. Hope this helps. But as Peter said, the devil is in the detail:)

    https://www.meddeviceonline.com/doc/analyzing-the-changes-to-risk-management-standard-iso-0001

    Regards,

    ------------------------------
    Soumya Rajesh
    Quality and Regulatory Affairs Manager
    Den Haag
    Netherlands
    ------------------------------



  • 4.  RE: ISO 14971:2007 and ISO 14971:2019 gap analysis

    Posted 07-Jan-2020 07:55
    Just a recommendation, I would not complete just a gap assessment against the 2007/2012 versions to 2019 version.  Also make sure you include ISO TR 24971 in the analysis because there are lots of implications using the technical report that helps support application of ISO 14971.

    ------------------------------
    Richard Vincins RAC
    Vice President Global Regulatory Affairs
    ------------------------------



  • 5.  RE: ISO 14971:2007 and ISO 14971:2019 gap analysis

    Posted 07-Jan-2020 08:47
    Unfortunately ISO has yet to publish the new version of ISO TR 24971 which was submitted to them several weeks ago. This version, which will be the 2nd edition and carry the 2020 year designator would be the correct version to use to respond to Richard's suggestion due to the dramatic reorganization and expansion of the technical report. The new document will be nearly 100 pages of information.

    ------------------------------
    Edwin Bills MEd, CQA, RAC, BSc, CQE, ASQ
    Principal Consultant
    Overland Park KS
    United States
    elb@edwinbillsconsultant.com
    ------------------------------



  • 6.  RE: ISO 14971:2007 and ISO 14971:2019 gap analysis

    Posted 07-Jan-2020 09:59

    My recommendation is not to do a gap analysis.

    This is a golden opportunity to start with fresh and create an efficient and effective risk management system.

    I work with a lot of companies on risk management and I have never seen a simple or correct implementation following the standard. The propensity is to make the implementation overly complicated. The standard is a simple and straight forward process.

    One company put their estimates for the market size and market share in the risk management plan.

    One company believed the frequency of occurrence of harm depends on sales volume and included complicated tables to implement it.

    Many companies try to calculate P1 and P2, which is impossible.

    Another frequent problem is the risk management report. One company recently gave me a 150-page Risk Management Report when two pages would have been sufficient. They had not implemented the change from ISO 14971:2000 to ISO 14971:2007.

    EN ISO 14971:2019 supersedes EN ISO 14971:2012, so this is the opportunity to fix all the incorrect things your NB required as they misunderstood the content deviations.

    Note however, that EN ISO 14971:2019 does not fully align with the EU-MDR Annex I.



    ------------------------------
    Dan O'Leary CQA, CQE
    Swanzey NH
    United States
    ------------------------------



  • 7.  RE: ISO 14971:2007 and ISO 14971:2019 gap analysis

    Posted 07-Jan-2020 10:26
    I agree with Dan.  I see so many cases where a do over would be better than a patch.  This is true for audit/inspection responses on the entire quality system, not just a risk management system.

    And though the EN ISO 14971:2019 does not include Z Annxes, if you have a copy of ISO FDIS 14971:2019, you will find purposed Z Annexes that were discarded due to the lack of a Harmonization Request for the new standard.  They are useful as a starting point to find the differences between the entire MDR (and not just Annex I).  The forthcoming ISO TR 24971:2020 will give you a lot of help in your quest on improving risk management in your company. Until this comes out, I refer you to Annex A of ISO 14971:2019 which is the rationale for the requirements in the standard, and provides necessary background for a deeper understanding of the requirements in the standard and will help you develop a risk management system that meets regulatory requirements and helps in taking safer medical devices to the market.  

    I like to start product development with the idea that I am going to be the first patient to use the device.  This perspective produces better results than just meeting a schedule. You also need to start risk management activities at clinical trials or marketing research and not at design input, that is too late. You should also be sure to incorporate. The use of standards in risk management as outlined in ISO TR 24971:2013 or more importantly ISO TR 24971:2020 when it is released. It will save you time and effort, still providing a state of the art product with excellent risk management.

    ------------------------------
    Edwin Bills MEd, CQA, RAC, BSc, CQE, ASQ
    Principal Consultant
    Overland Park KS
    United States
    elb@edwinbillsconsultant.com
    ------------------------------



  • 8.  RE: ISO 14971:2007 and ISO 14971:2019 gap analysis

    Posted 08-Jan-2020 01:11
    I totally agree with Dan & Edwin's comments from a NB product reviewer and NB auditor's perspective and from a consultant that have reviewed many risk management files from a 60601 perspective as well as from a design perspective.

    Lastly, there are many articles out there on the change up to ISO 14971:2019 such as https://www.meddeviceonline.com/doc/analyzing-the-changes-to-risk-management-standard-iso-0001 and https://www.meddeviceonline.com/doc/a-look-at-the-iso-and-iso-tr-updates-0001

    ------------------------------
    Leonard (Leo) Eisner, P.E.
    The "IEC 60601 Guy"
    Principal Consultant, Eisner Safety Consultants
    Phone: (503) 244-6151
    Mobile: (503) 709-8328
    Email: Leo@EisnerSafety.com
    Website: www.EisnerSafety.com
    ------------------------------



  • 9.  RE: ISO 14971:2007 and ISO 14971:2019 gap analysis

    Posted 08-Jan-2020 17:22
    Edited by Julie Omohundro 08-Jan-2020 17:23
    Me Four.  I think gap analyses can be helpful as a first pass, to get a sense of what you're up against.  But I think letting them be your guide leads to bandaiding and piecemeal understanding.

    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 10.  RE: ISO 14971:2007 and ISO 14971:2019 gap analysis

    Posted 08-Jan-2020 14:55
    "... I like to start product development with the idea that I am going to be the first patient to use the device. This perspective produces better results than just meeting a schedule. You also need to start risk management activities at clinical trials or marketing research and not at design input, that is too late. You should also be sure to incorporate..."

    Ed, I am confused. How would one have clinical trials before you had design inputs? In order to do a clinical trial, products I've worked with generally have to have a nearly final design to test clinically? Maybe we are dealing with completely different device types? Otherwise, I admit I don't get it....

    Ginger

    ps - not disagreeing that risk management needs to start early, early in the process...

    ------------------------------
    Ginger Glaser RAC
    Chief Technology Officer
    MN
    ------------------------------



  • 11.  RE: ISO 14971:2007 and ISO 14971:2019 gap analysis

    Posted 08-Jan-2020 16:11
    Clinical trials can be held during Research, before Design Controls are implemented, and therefore before Design Input.  Some of the Design Inputs may come out of the Clinical Trials.  That is the basis for ISO 14155.  However, you may be thinking of the requirements of  the US FDA IDE regs requiring Design Controls be part of Clinical Trials.  Not all countries have this requirement.

    ------------------------------
    Edwin Bills MEd, CQA, RAC, BSc, CQE, ASQ
    Principal Consultant
    Overland Park KS
    United States
    elb@edwinbillsconsultant.com
    ------------------------------



  • 12.  RE: ISO 14971:2007 and ISO 14971:2019 gap analysis

    Posted 08-Jan-2020 17:31
    Edited by Julie Omohundro 08-Jan-2020 17:32
    I won't get fussy about where you draw a line between R&D, but to my mind, clinical trials done during research are usually not investigations of the device, because there is no device at the Research stage, but of issues surrounding it.  Clinical trials done during development are early feasibility studies, NOT done (no matter how many times CDRH clicks its heels and says otherwise) to evaluate safety or effectiveness, but to answer more pragmatic questions that arise during development. The device is not "finished," because you can't really finish it without answering these questions.Both types of trials can generate design inputs, but they can also generate data or information used to address those inputs.  Clinical trials done with the finished device are design validation, because once the device is actually "finished," so is the design.  Unless it fails validation...

    IMO.

    ------------------------------
    Julie Omohundro, ex-RAC (US, GS), still an MBA
    Principal Consultant
    Class Three, LLC
    Mebane, North Carolina, USA
    919-544-3366 (T)
    434-964-1614 (C)
    julie@class3devices.com
    ------------------------------



  • 13.  RE: ISO 14971:2007 and ISO 14971:2019 gap analysis

    Posted 08-Jan-2020 08:16
    I'm going to line up with Leo & Ed to agree with Dan's post here. It always has been amazing to me that people just seek to bridge gaps when given this opportunity to reassess and start fresh with the requirements. Many of the changes are to give new clarity, so while there aren't any significant changes, we as quality and regulatory professionals (and risk managers) should look at the risk based approach of implementing this updated standard and seek a cleaner, clearer path. Good luck!

    ------------------------------
    Regards,
    Mark Swanson, ASQ CBA, CMQ/OE, CQE ASQ, MBA
    Becker MN
    United States
    ------------------------------



  • 14.  RE: ISO 14971:2007 and ISO 14971:2019 gap analysis

    Posted 09-Jan-2020 10:31
    I did a side by side comparison the day the ISO 14971 came out. Here are notable, not all, changes. You can see this in my LI too.

    ISO 14971:2019 Medical devices - Application of risk management to medical devices is finally here.

    Here are the notable changes:

    * In general, many areas have been elaborated, helping with clarity
    * Three new definitions - Benefit, Reasonably foreseeable misuse, and state of the art
    * Risk management plan adds the requirement for the manufacturer to develop a method for evaluating overall residual risk and acceptance criteria
    * Under risk analysis, intended use to include the items normally seen in a use specification (ref IEC 62366)
    * Production and Post production activities adds requirements for information collection, review, and actions.
    * Most annexes moved to 24971 (published later). Only Requirements rationale, Grid showing 2007 and 2015 sections side by side, and Fundamental risk concepts remain (was Annex E in 2007).

    Hope it helps.

    Adam

    ------------------------------
    Adam Atherton
    Farragut TN
    United States
    ------------------------------