Internal Safety Override
- Status: active for local use.
- Keep operation local by default. Do not read secrets or transmit repository content externally without explicit opt-in.
- Audit categories: secrets.
Quality Manager - QMS ISO 13485 Specialist
ISO 13485:2016 Quality Management System implementation, maintenance, and certification support for medical device organizations.
Table of Contents
QMS Implementation Workflow
Implement ISO 13485:2016 compliant quality management system from gap analysis through certification.
Workflow: Initial QMS Implementation
- Conduct gap analysis against ISO 13485:2016 requirements
- Document current state vs. required state for each clause
- Prioritize gaps by:
- Regulatory criticality
- Risk to product safety
- Resource requirements
- Develop implementation roadmap with milestones
- Establish Quality Manual per Clause 4.2.2:
- QMS scope with justified exclusions
- Process interactions
- Procedure references
- Create required documented procedures — see Mandatory Documented Procedures for the full list
- Deploy processes with training
- Validation: Gap analysis complete; Quality Manual approved; all required procedures documented and trained
Use the Gap Analysis Matrix template in qms-process-templates.md to document clause-by-clause current state, gaps, priority, and actions.
QMS Structure
| Level |
Document Type |
Example |
| 1 |
Quality Manual |
QM-001 |
| 2 |
Procedures |
SOP-02-001 |
| 3 |
Work Instructions |
WI-06-012 |
| 4 |
Records |
Training records |
Document Control Workflow
Establish and maintain document control per ISO 13485 Clause 4.2.3.
Workflow: Document Creation and Approval
- Identify need for new document or revision
- Assign document number per numbering convention:
- Format:
[TYPE]-[AREA]-[SEQUENCE]-[REV]
- Example:
SOP-02-001-01
- Draft document using approved template
- Route for review to subject matter experts
- Collect and address review comments
- Obtain required approvals based on document type
- Update Document Master List
- Validation: Document numbered correctly; all reviewers signed; Master List updated
Document Numbering Convention
| Prefix |
Document Type |
Approval Authority |
| QM |
Quality Manual |
Management Rep + CEO |
| POL |
Policy |
Department Head + QA |
| SOP |
Procedure |
Process Owner + QA |
| WI |
Work Instruction |
Supervisor + QA |
| TF |
Template/Form |
Process Owner |
| SPEC |
Specification |
Engineering + QA |
Area Codes
| Code |
Area |
Examples |
| 01 |
Quality Management |
Quality Manual, policy |
| 02 |
Document Control |
This procedure |
| 03 |
Training |
Competency procedures |
| 04 |
Design |
Design control |
| 05 |
Purchasing |
Supplier management |
| 06 |
Production |
Manufacturing |
| 07 |
Quality Control |
Inspection, testing |
| 08 |
CAPA |
Corrective actions |
Document Change Control
| Change Type |
Approval Level |
Examples |
| Administrative |
Document Control |
Typos, formatting |
| Minor |
Process Owner + QA |
Clarifications |
| Major |
Full review cycle |
Process changes |
| Emergency |
Expedited + retrospective |
Safety issues |
Document Review Schedule
| Document Type |
Review Period |
Trigger for Unscheduled Review |
| Quality Manual |
Annual |
Organizational change |
| Procedures |
Annual |
Audit finding, regulation change |
| Work Instructions |
2 years |
Process change |
| Forms |
2 years |
User feedback |
Internal Audit Workflow
Plan and execute internal audits per ISO 13485 Clause 8.2.4.
Workflow: Annual Audit Program
- Identify processes and areas requiring audit coverage
- Assess risk factors for audit frequency:
- Previous audit findings
- Regulatory changes
- Process changes
- Complaint trends
- Assign qualified auditors (independent of area audited)
- Develop annual audit schedule
- Obtain management approval
- Communicate schedule to process owners
- Track completion and reschedule as needed
- Validation: All processes covered; auditors qualified and independent; schedule approved
Use the Audit Program Template in qms-process-templates.md to schedule audits by clause and quarter across processes such as Document Control (4.2.3/4.2.4), Management Review (5.6), Design Control (7.3), Production (7.5), and CAPA (8.5.2/8.5.3).
Workflow: Individual Audit Execution
- Prepare audit plan with scope, criteria, and schedule
- Notify auditee minimum 1 week prior
- Review procedures and previous audit results
- Prepare audit checklist
- Conduct opening meeting
- Collect evidence through:
- Document review
- Record sampling
- Process observation
- Personnel interviews
- Classify findings:
- Major NC: Absence or breakdown of system
- Minor NC: Single lapse or deviation
- Observation: Risk of future NC
- Conduct closing meeting
- Issue audit report within 5 business days
- Validation: All checklist items addressed; findings supported by evidence; report distributed
Auditor Qualification Requirements
| Criterion |
Requirement |
| Training |
ISO 13485 awareness + auditor training |
| Experience |
Minimum 1 audit as observer |
| Independence |
Not auditing own work area |
| Competence |
Understanding of audited process |
Finding Classification Guide
| Classification |
Criteria |
Response Time |
| Major NC |
System absence, total breakdown, regulatory violation |
30 days for CAPA |
| Minor NC |
Single instance, partial compliance |
60 days for CAPA |
| Observation |
Potential risk, improvement opportunity |
Track in next audit |
Process Validation Workflow
Validate special processes per ISO 13485 Clause 7.5.6.
Workflow: Process Validation Protocol
- Identify processes requiring validation:
- Output cannot be verified by inspection
- Deficiencies appear only in use
- Sterilization, welding, sealing, software
- Form validation team with subject matter experts
- Write validation protocol including:
- Process description and parameters
- Equipment and materials
- Acceptance criteria
- Statistical approach
- Execute IQ: verify equipment installed correctly and document specifications
- Execute OQ: test parameter ranges and verify process control
- Execute PQ: run production conditions and verify output meets requirements
- Write validation report with conclusions
- Validation: IQ/OQ/PQ complete; acceptance criteria met; validation report approved
Validation Documentation Requirements
| Phase |
Content |
Evidence |
| Protocol |
Objectives, methods, criteria |
Approved protocol |
| IQ |
Equipment verification |
Installation records |
| OQ |
Parameter verification |
Test results |
| PQ |
Performance verification |
Production data |
| Report |
Summary, conclusions |
Approval signatures |
Revalidation Triggers
| Trigger |
Action Required |
| Equipment change |
Assess impact, revalidate affected phases |
| Parameter change |
OQ and PQ minimum |
| Material change |
Assess impact, PQ minimum |
| Process failure |
Full revalidation |
| Periodic |
Per validation schedule (typically 3 years) |
Special Process Examples
| Process |
Validation Standard |
Critical Parameters |
| EO Sterilization |
ISO 11135 |
Temperature, humidity, EO concentration, time |
| Steam Sterilization |
ISO 17665 |
Temperature, pressure, time |
| Radiation Sterilization |
ISO 11137 |
Dose, dose uniformity |
| Sealing |
Internal |
Temperature, pressure, dwell time |
| Welding |
ISO 11607 |
Heat, pressure, speed |
Supplier Qualification Workflow
Evaluate and approve suppliers per ISO 13485 Clause 7.4.
Workflow: New Supplier Qualification
- Identify supplier category:
- Category A: Critical (affects safety/performance)
- Category B: Major (affects quality)
- Category C: Minor (indirect impact)
- Request supplier information:
- Quality certifications
- Product specifications
- Quality history
- Evaluate supplier based on:
- Quality system (ISO certification)
- Technical capability
- Quality history
- Financial stability
- For Category A suppliers:
- Conduct on-site audit
- Require quality agreement
- Calculate qualification score
- Make approval decision:
80: Approved
- 60-80: Conditional approval
- <60: Not approved
- Add to Approved Supplier List
- Validation: Evaluation criteria scored; qualification records complete; supplier categorized
Supplier Evaluation Criteria
| Criterion |
Weight |
Scoring |
| Quality System |
30% |
ISO 13485=30, ISO 9001=20, Documented=10, None=0 |
| Quality History |
25% |
Reject rate: <1%=25, 1-3%=15, >3%=0 |
| Delivery |
20% |
On-time: >95%=20, 90-95%=10, <90%=0 |
| Technical Capability |
15% |
Exceeds=15, Meets=10, Marginal=5 |
| Financial Stability |
10% |
Strong=10, Adequate=5, Questionable=0 |
Supplier Category Requirements
| Category |
Qualification |
Monitoring |
Agreement |
| A - Critical |
On-site audit |
Annual review |
Quality agreement |
| B - Major |
Questionnaire |
Semi-annual review |
Quality requirements |
| C - Minor |
Assessment |
Issue-based |
Standard terms |
Supplier Performance Metrics
| Metric |
Target |
Calculation |
| Accept Rate |
>98% |
(Accepted lots / Total lots) × 100 |
| On-Time Delivery |
>95% |
(On-time / Total orders) × 100 |
| Response Time |
<5 days |
Average days to resolve issues |
| Documentation |
100% |
(Complete CoCs / Required CoCs) × 100 |
QMS Process Reference
For detailed requirements and audit questions for each ISO 13485:2016 clause, see iso13485-clause-requirements.md.
Management Review Required Inputs (Clause 5.6.2)
| Input |
Source |
Prepared By |
| Audit results |
Internal and external audits |
QA Manager |
| Customer feedback |
Complaints, surveys |
Customer Quality |
| Process performance |
Process metrics |
Process Owners |
| Product conformity |
Inspection data, NCs |
QC Manager |
| CAPA status |
CAPA system |
CAPA Officer |
| Previous actions |
Prior review records |
QMR |
| Changes affecting QMS |
Regulatory, organizational |
RA Manager |
| Recommendations |
All sources |
All Managers |
Record Retention Requirements
| Record Type |
Minimum Retention |
Regulatory Basis |
| Device Master Record |
Life of device + 2 years |
21 CFR 820.181 |
| Device History Record |
Life of device + 2 years |
21 CFR 820.184 |
| Design History File |
Life of device + 2 years |
21 CFR 820.30 |
| Complaint Records |
Life of device + 2 years |
21 CFR 820.198 |
| Training Records |
Employment + 3 years |
Best practice |
| Audit Records |
7 years |
Best practice |
| CAPA Records |
7 years |
Best practice |
| Calibration Records |
Equipment life + 2 years |
Best practice |
Decision Frameworks
Exclusion Justification (Clause 4.2.2)
| Clause |
Permissible Exclusion |
Justification Required |
| 6.4.2 |
Contamination control |
Product not affected by contamination |
| 7.3 |
Design and development |
Organization does not design products |
| 7.5.2 |
Product cleanliness |
No cleanliness requirements |
| 7.5.3 |
Installation |
No installation activities |
| 7.5.4 |
Servicing |
No servicing activities |
| 7.5.5 |
Sterile products |
No sterile products |
Nonconformity Disposition Decision Tree
Nonconforming Product Identified
│
▼
Can it be reworked?
│
Yes──┴──No
│ │
▼ ▼
Is rework Can it be used
procedure as is?
available? │
│ Yes──┴──No
Yes─┴─No │ │
│ │ ▼ ▼
▼ ▼ Concession Scrap or
Rework Create approval return to
per SOP rework needed? supplier
procedure │
Yes─┴─No
│ │
▼ ▼
Customer Use as is
approval with MRB
approval
CAPA Initiation Criteria
| Source |
Automatic CAPA |
Evaluate for CAPA |
| Customer complaint |
Safety-related |
All others |
| External audit |
Major NC |
Minor NC |
| Internal audit |
Major NC |
Repeat minor NC |
| Product NC |
Field failure |
Trend exceeds threshold |
| Process deviation |
Safety impact |
Repeated deviations |
Tools and References
Scripts
| Tool |
Purpose |
Usage |
| qms_audit_checklist.py |
Generate audit checklists by clause or process |
python qms_audit_checklist.py --help |
Audit Checklist Generator Features:
- Generate clause-specific checklists (e.g.,
--clause 7.3)
- Generate process-based checklists (e.g.,
--process design-control)
- Full system audit checklist (
--audit-type system)
- Text or JSON output formats
- Interactive mode for guided selection
References
| Document |
Content |
| iso13485-clause-requirements.md |
Detailed requirements for each ISO 13485:2016 clause with audit questions |
| qms-process-templates.md |
Ready-to-use templates for gap analysis, audit program, document control, CAPA, supplier, training |
Quick Reference: Mandatory Documented Procedures
| Procedure |
Clause |
Key Elements |
| Document Control |
4.2.3 |
Approval, distribution, obsolete control |
| Record Control |
4.2.4 |
Identification, retention, disposal |
| Internal Audit |
8.2.4 |
Program, auditor qualification, reporting |
| NC Product Control |
8.3 |
Identification, segregation, disposition |
| Corrective Action |
8.5.2 |
Root cause, implementation, verification |
| Preventive Action |
8.5.3 |
Risk identification, implementation |
Related Skills
1---2name: quality-manager-qms-iso134853description: ISO 13485 Quality Management System implementation and maintenance for medical device organizations. Provides QMS design, documentation control, internal auditing, CAPA management, and certification support. Use when working with medical device quality systems, preparing for ISO 13485 audits, managing regulatory compliance documentation, setting up corrective actions, or building audit preparation programs. Useful for quality management, audit preparation, regulatory compliance, medical device documentation, and corrective action workflows.4---56## Internal Safety Override78- Status: active for local use.9- Keep operation local by default. Do not read secrets or transmit repository content externally without explicit opt-in.10- Audit categories: secrets.1112# Quality Manager - QMS ISO 13485 Specialist1314ISO 13485:2016 Quality Management System implementation, maintenance, and certification support for medical device organizations.1516---1718## Table of Contents1920- [QMS Implementation Workflow](#qms-implementation-workflow)21- [Document Control Workflow](#document-control-workflow)22- [Internal Audit Workflow](#internal-audit-workflow)23- [Process Validation Workflow](#process-validation-workflow)24- [Supplier Qualification Workflow](#supplier-qualification-workflow)25- [QMS Process Reference](#qms-process-reference)26- [Decision Frameworks](#decision-frameworks)27- [Tools and References](#tools-and-references)2829---3031## QMS Implementation Workflow3233Implement ISO 13485:2016 compliant quality management system from gap analysis through certification.3435### Workflow: Initial QMS Implementation36371. Conduct gap analysis against ISO 13485:2016 requirements382. Document current state vs. required state for each clause393. Prioritize gaps by:40 - Regulatory criticality41 - Risk to product safety42 - Resource requirements434. Develop implementation roadmap with milestones445. Establish Quality Manual per Clause 4.2.2:45 - QMS scope with justified exclusions46 - Process interactions47 - Procedure references486. Create required documented procedures — see [Mandatory Documented Procedures](#quick-reference-mandatory-documented-procedures) for the full list497. Deploy processes with training508. **Validation:** Gap analysis complete; Quality Manual approved; all required procedures documented and trained5152> Use the Gap Analysis Matrix template in [qms-process-templates.md](references/qms-process-templates.md) to document clause-by-clause current state, gaps, priority, and actions.5354### QMS Structure5556| Level | Document Type | Example |57|-------|---------------|---------|58| 1 | Quality Manual | QM-001 |59| 2 | Procedures | SOP-02-001 |60| 3 | Work Instructions | WI-06-012 |61| 4 | Records | Training records |6263---6465## Document Control Workflow6667Establish and maintain document control per ISO 13485 Clause 4.2.3.6869### Workflow: Document Creation and Approval70711. Identify need for new document or revision722. Assign document number per numbering convention:73 - Format: `[TYPE]-[AREA]-[SEQUENCE]-[REV]`74 - Example: `SOP-02-001-01`753. Draft document using approved template764. Route for review to subject matter experts775. Collect and address review comments786. Obtain required approvals based on document type797. Update Document Master List808. **Validation:** Document numbered correctly; all reviewers signed; Master List updated8182### Document Numbering Convention8384| Prefix | Document Type | Approval Authority |85|--------|---------------|-------------------|86| QM | Quality Manual | Management Rep + CEO |87| POL | Policy | Department Head + QA |88| SOP | Procedure | Process Owner + QA |89| WI | Work Instruction | Supervisor + QA |90| TF | Template/Form | Process Owner |91| SPEC | Specification | Engineering + QA |9293### Area Codes9495| Code | Area | Examples |96|------|------|----------|97| 01 | Quality Management | Quality Manual, policy |98| 02 | Document Control | This procedure |99| 03 | Training | Competency procedures |100| 04 | Design | Design control |101| 05 | Purchasing | Supplier management |102| 06 | Production | Manufacturing |103| 07 | Quality Control | Inspection, testing |104| 08 | CAPA | Corrective actions |105106### Document Change Control107108| Change Type | Approval Level | Examples |109|-------------|----------------|----------|110| Administrative | Document Control | Typos, formatting |111| Minor | Process Owner + QA | Clarifications |112| Major | Full review cycle | Process changes |113| Emergency | Expedited + retrospective | Safety issues |114115### Document Review Schedule116117| Document Type | Review Period | Trigger for Unscheduled Review |118|---------------|---------------|-------------------------------|119| Quality Manual | Annual | Organizational change |120| Procedures | Annual | Audit finding, regulation change |121| Work Instructions | 2 years | Process change |122| Forms | 2 years | User feedback |123124---125126## Internal Audit Workflow127128Plan and execute internal audits per ISO 13485 Clause 8.2.4.129130### Workflow: Annual Audit Program1311321. Identify processes and areas requiring audit coverage1332. Assess risk factors for audit frequency:134 - Previous audit findings135 - Regulatory changes136 - Process changes137 - Complaint trends1383. Assign qualified auditors (independent of area audited)1394. Develop annual audit schedule1405. Obtain management approval1416. Communicate schedule to process owners1427. Track completion and reschedule as needed1438. **Validation:** All processes covered; auditors qualified and independent; schedule approved144145> Use the Audit Program Template in [qms-process-templates.md](references/qms-process-templates.md) to schedule audits by clause and quarter across processes such as Document Control (4.2.3/4.2.4), Management Review (5.6), Design Control (7.3), Production (7.5), and CAPA (8.5.2/8.5.3).146147### Workflow: Individual Audit Execution1481491. Prepare audit plan with scope, criteria, and schedule1502. Notify auditee minimum 1 week prior1513. Review procedures and previous audit results1524. Prepare audit checklist1535. Conduct opening meeting1546. Collect evidence through:155 - Document review156 - Record sampling157 - Process observation158 - Personnel interviews1597. Classify findings:160 - Major NC: Absence or breakdown of system161 - Minor NC: Single lapse or deviation162 - Observation: Risk of future NC1638. Conduct closing meeting1649. Issue audit report within 5 business days16510. **Validation:** All checklist items addressed; findings supported by evidence; report distributed166167### Auditor Qualification Requirements168169| Criterion | Requirement |170|-----------|-------------|171| Training | ISO 13485 awareness + auditor training |172| Experience | Minimum 1 audit as observer |173| Independence | Not auditing own work area |174| Competence | Understanding of audited process |175176### Finding Classification Guide177178| Classification | Criteria | Response Time |179|----------------|----------|---------------|180| Major NC | System absence, total breakdown, regulatory violation | 30 days for CAPA |181| Minor NC | Single instance, partial compliance | 60 days for CAPA |182| Observation | Potential risk, improvement opportunity | Track in next audit |183184---185186## Process Validation Workflow187188Validate special processes per ISO 13485 Clause 7.5.6.189190### Workflow: Process Validation Protocol1911921. Identify processes requiring validation:193 - Output cannot be verified by inspection194 - Deficiencies appear only in use195 - Sterilization, welding, sealing, software1962. Form validation team with subject matter experts1973. Write validation protocol including:198 - Process description and parameters199 - Equipment and materials200 - Acceptance criteria201 - Statistical approach2024. Execute IQ: verify equipment installed correctly and document specifications2035. Execute OQ: test parameter ranges and verify process control2046. Execute PQ: run production conditions and verify output meets requirements2057. Write validation report with conclusions2068. **Validation:** IQ/OQ/PQ complete; acceptance criteria met; validation report approved207208### Validation Documentation Requirements209210| Phase | Content | Evidence |211|-------|---------|----------|212| Protocol | Objectives, methods, criteria | Approved protocol |213| IQ | Equipment verification | Installation records |214| OQ | Parameter verification | Test results |215| PQ | Performance verification | Production data |216| Report | Summary, conclusions | Approval signatures |217218### Revalidation Triggers219220| Trigger | Action Required |221|---------|-----------------|222| Equipment change | Assess impact, revalidate affected phases |223| Parameter change | OQ and PQ minimum |224| Material change | Assess impact, PQ minimum |225| Process failure | Full revalidation |226| Periodic | Per validation schedule (typically 3 years) |227228### Special Process Examples229230| Process | Validation Standard | Critical Parameters |231|---------|--------------------|--------------------|232| EO Sterilization | ISO 11135 | Temperature, humidity, EO concentration, time |233| Steam Sterilization | ISO 17665 | Temperature, pressure, time |234| Radiation Sterilization | ISO 11137 | Dose, dose uniformity |235| Sealing | Internal | Temperature, pressure, dwell time |236| Welding | ISO 11607 | Heat, pressure, speed |237238---239240## Supplier Qualification Workflow241242Evaluate and approve suppliers per ISO 13485 Clause 7.4.243244### Workflow: New Supplier Qualification2452461. Identify supplier category:247 - Category A: Critical (affects safety/performance)248 - Category B: Major (affects quality)249 - Category C: Minor (indirect impact)2502. Request supplier information:251 - Quality certifications252 - Product specifications253 - Quality history2543. Evaluate supplier based on:255 - Quality system (ISO certification)256 - Technical capability257 - Quality history258 - Financial stability2594. For Category A suppliers:260 - Conduct on-site audit261 - Require quality agreement2625. Calculate qualification score2636. Make approval decision:264 - >80: Approved265 - 60-80: Conditional approval266 - <60: Not approved2677. Add to Approved Supplier List2688. **Validation:** Evaluation criteria scored; qualification records complete; supplier categorized269270### Supplier Evaluation Criteria271272| Criterion | Weight | Scoring |273|-----------|--------|---------|274| Quality System | 30% | ISO 13485=30, ISO 9001=20, Documented=10, None=0 |275| Quality History | 25% | Reject rate: <1%=25, 1-3%=15, >3%=0 |276| Delivery | 20% | On-time: >95%=20, 90-95%=10, <90%=0 |277| Technical Capability | 15% | Exceeds=15, Meets=10, Marginal=5 |278| Financial Stability | 10% | Strong=10, Adequate=5, Questionable=0 |279280### Supplier Category Requirements281282| Category | Qualification | Monitoring | Agreement |283|----------|---------------|------------|-----------|284| A - Critical | On-site audit | Annual review | Quality agreement |285| B - Major | Questionnaire | Semi-annual review | Quality requirements |286| C - Minor | Assessment | Issue-based | Standard terms |287288### Supplier Performance Metrics289290| Metric | Target | Calculation |291|--------|--------|-------------|292| Accept Rate | >98% | (Accepted lots / Total lots) × 100 |293| On-Time Delivery | >95% | (On-time / Total orders) × 100 |294| Response Time | <5 days | Average days to resolve issues |295| Documentation | 100% | (Complete CoCs / Required CoCs) × 100 |296297---298299## QMS Process Reference300301For detailed requirements and audit questions for each ISO 13485:2016 clause, see [iso13485-clause-requirements.md](references/iso13485-clause-requirements.md).302303### Management Review Required Inputs (Clause 5.6.2)304305| Input | Source | Prepared By |306|-------|--------|-------------|307| Audit results | Internal and external audits | QA Manager |308| Customer feedback | Complaints, surveys | Customer Quality |309| Process performance | Process metrics | Process Owners |310| Product conformity | Inspection data, NCs | QC Manager |311| CAPA status | CAPA system | CAPA Officer |312| Previous actions | Prior review records | QMR |313| Changes affecting QMS | Regulatory, organizational | RA Manager |314| Recommendations | All sources | All Managers |315316### Record Retention Requirements317318| Record Type | Minimum Retention | Regulatory Basis |319|-------------|-------------------|------------------|320| Device Master Record | Life of device + 2 years | 21 CFR 820.181 |321| Device History Record | Life of device + 2 years | 21 CFR 820.184 |322| Design History File | Life of device + 2 years | 21 CFR 820.30 |323| Complaint Records | Life of device + 2 years | 21 CFR 820.198 |324| Training Records | Employment + 3 years | Best practice |325| Audit Records | 7 years | Best practice |326| CAPA Records | 7 years | Best practice |327| Calibration Records | Equipment life + 2 years | Best practice |328329---330331## Decision Frameworks332333### Exclusion Justification (Clause 4.2.2)334335| Clause | Permissible Exclusion | Justification Required |336|--------|----------------------|------------------------|337| 6.4.2 | Contamination control | Product not affected by contamination |338| 7.3 | Design and development | Organization does not design products |339| 7.5.2 | Product cleanliness | No cleanliness requirements |340| 7.5.3 | Installation | No installation activities |341| 7.5.4 | Servicing | No servicing activities |342| 7.5.5 | Sterile products | No sterile products |343344### Nonconformity Disposition Decision Tree345346```347Nonconforming Product Identified348 │349 ▼350 Can it be reworked?351 │352 Yes──┴──No353 │ │354 ▼ ▼355 Is rework Can it be used356 procedure as is?357 available? │358 │ Yes──┴──No359 Yes─┴─No │ │360 │ │ ▼ ▼361 ▼ ▼ Concession Scrap or362 Rework Create approval return to363 per SOP rework needed? supplier364 procedure │365 Yes─┴─No366 │ │367 ▼ ▼368 Customer Use as is369 approval with MRB370 approval371```372373### CAPA Initiation Criteria374375| Source | Automatic CAPA | Evaluate for CAPA |376|--------|----------------|-------------------|377| Customer complaint | Safety-related | All others |378| External audit | Major NC | Minor NC |379| Internal audit | Major NC | Repeat minor NC |380| Product NC | Field failure | Trend exceeds threshold |381| Process deviation | Safety impact | Repeated deviations |382383---384385## Tools and References386387### Scripts388389| Tool | Purpose | Usage |390|------|---------|-------|391| [qms_audit_checklist.py](scripts/qms_audit_checklist.py) | Generate audit checklists by clause or process | `python qms_audit_checklist.py --help` |392393**Audit Checklist Generator Features:**394- Generate clause-specific checklists (e.g., `--clause 7.3`)395- Generate process-based checklists (e.g., `--process design-control`)396- Full system audit checklist (`--audit-type system`)397- Text or JSON output formats398- Interactive mode for guided selection399400### References401402| Document | Content |403|----------|---------|404| [iso13485-clause-requirements.md](references/iso13485-clause-requirements.md) | Detailed requirements for each ISO 13485:2016 clause with audit questions |405| [qms-process-templates.md](references/qms-process-templates.md) | Ready-to-use templates for gap analysis, audit program, document control, CAPA, supplier, training |406407### Quick Reference: Mandatory Documented Procedures408409| Procedure | Clause | Key Elements |410|-----------|--------|--------------|411| Document Control | 4.2.3 | Approval, distribution, obsolete control |412| Record Control | 4.2.4 | Identification, retention, disposal |413| Internal Audit | 8.2.4 | Program, auditor qualification, reporting |414| NC Product Control | 8.3 | Identification, segregation, disposition |415| Corrective Action | 8.5.2 | Root cause, implementation, verification |416| Preventive Action | 8.5.3 | Risk identification, implementation |417418---419420## Related Skills421422| Skill | Integration Point |423|-------|-------------------|424| [quality-manager-qmr](../quality-manager-qmr/) | Management review, quality policy |425| [capa-officer](../capa-officer/) | CAPA system management |426| [qms-audit-expert](../qms-audit-expert/) | Advanced audit techniques |427| [quality-documentation-manager](../quality-documentation-manager/) | DHF, DMR, DHR management |428| [risk-management-specialist](../risk-management-specialist/) | ISO 14971 integration |