Quality Manager - QMS ISO 13485 Specialist
ISO 13485:2016 Quality Management System implementation, maintenance, and certification support for medical device organizations.
Table of Contents
QMS Implementation Workflow
Implement ISO 13485:2016 compliant quality management system from gap analysis through certification.
Workflow: Initial QMS Implementation
- Conduct gap analysis against ISO 13485:2016 requirements
- Document current state vs. required state for each clause
- Prioritize gaps by:
- Regulatory criticality
- Risk to product safety
- Resource requirements
- Develop implementation roadmap with milestones
- Establish Quality Manual per Clause 4.2.2:
- QMS scope with justified exclusions
- Process interactions
- Procedure references
- Create required documented procedures — see Mandatory Documented Procedures for the full list
- Deploy processes with training
- Validation: Gap analysis complete; Quality Manual approved; all required procedures documented and trained
Use the Gap Analysis Matrix template in qms-process-templates.md to document clause-by-clause current state, gaps, priority, and actions.
QMS Structure
| Level |
Document Type |
Example |
| 1 |
Quality Manual |
QM-001 |
| 2 |
Procedures |
SOP-02-001 |
| 3 |
Work Instructions |
WI-06-012 |
| 4 |
Records |
Training records |
Document Control Workflow
Establish and maintain document control per ISO 13485 Clause 4.2.3.
Workflow: Document Creation and Approval
- Identify need for new document or revision
- Assign document number per numbering convention:
- Format:
[TYPE]-[AREA]-[SEQUENCE]-[REV]
- Example:
SOP-02-001-01
- Draft document using approved template
- Route for review to subject matter experts
- Collect and address review comments
- Obtain required approvals based on document type
- Update Document Master List
- Validation: Document numbered correctly; all reviewers signed; Master List updated
Document Numbering Convention
| Prefix |
Document Type |
Approval Authority |
| QM |
Quality Manual |
Management Rep + CEO |
| POL |
Policy |
Department Head + QA |
| SOP |
Procedure |
Process Owner + QA |
| WI |
Work Instruction |
Supervisor + QA |
| TF |
Template/Form |
Process Owner |
| SPEC |
Specification |
Engineering + QA |
Area Codes
| Code |
Area |
Examples |
| 01 |
Quality Management |
Quality Manual, policy |
| 02 |
Document Control |
This procedure |
| 03 |
Training |
Competency procedures |
| 04 |
Design |
Design control |
| 05 |
Purchasing |
Supplier management |
| 06 |
Production |
Manufacturing |
| 07 |
Quality Control |
Inspection, testing |
| 08 |
CAPA |
Corrective actions |
Document Change Control
| Change Type |
Approval Level |
Examples |
| Administrative |
Document Control |
Typos, formatting |
| Minor |
Process Owner + QA |
Clarifications |
| Major |
Full review cycle |
Process changes |
| Emergency |
Expedited + retrospective |
Safety issues |
Document Review Schedule
| Document Type |
Review Period |
Trigger for Unscheduled Review |
| Quality Manual |
Annual |
Organizational change |
| Procedures |
Annual |
Audit finding, regulation change |
| Work Instructions |
2 years |
Process change |
| Forms |
2 years |
User feedback |
Internal Audit Workflow
Plan and execute internal audits per ISO 13485 Clause 8.2.4.
Workflow: Annual Audit Program
- Identify processes and areas requiring audit coverage
- Assess risk factors for audit frequency:
- Previous audit findings
- Regulatory changes
- Process changes
- Complaint trends
- Assign qualified auditors (independent of area audited)
- Develop annual audit schedule
- Obtain management approval
- Communicate schedule to process owners
- Track completion and reschedule as needed
- Validation: All processes covered; auditors qualified and independent; schedule approved
Use the Audit Program Template in qms-process-templates.md to schedule audits by clause and quarter across processes such as Document Control (4.2.3/4.2.4), Management Review (5.6), Design Control (7.3), Production (7.5), and CAPA (8.5.2/8.5.3).
Workflow: Individual Audit Execution
- Prepare audit plan with scope, criteria, and schedule
- Notify auditee minimum 1 week prior
- Review procedures and previous audit results
- Prepare audit checklist
- Conduct opening meeting
- Collect evidence through:
- Document review
- Record sampling
- Process observation
- Personnel interviews
- Classify findings:
- Major NC: Absence or breakdown of system
- Minor NC: Single lapse or deviation
- Observation: Risk of future NC
- Conduct closing meeting
- Issue audit report within 5 business days
- Validation: All checklist items addressed; findings supported by evidence; report distributed
Auditor Qualification Requirements
| Criterion |
Requirement |
| Training |
ISO 13485 awareness + auditor training |
| Experience |
Minimum 1 audit as observer |
| Independence |
Not auditing own work area |
| Competence |
Understanding of audited process |
Finding Classification Guide
| Classification |
Criteria |
Response Time |
| Major NC |
System absence, total breakdown, regulatory violation |
30 days for CAPA |
| Minor NC |
Single instance, partial compliance |
60 days for CAPA |
| Observation |
Potential risk, improvement opportunity |
Track in next audit |
Process Validation Workflow
Validate special processes per ISO 13485 Clause 7.5.6.
Workflow: Process Validation Protocol
- Identify processes requiring validation:
- Output cannot be verified by inspection
- Deficiencies appear only in use
- Sterilization, welding, sealing, software
- Form validation team with subject matter experts
- Write validation protocol including:
- Process description and parameters
- Equipment and materials
- Acceptance criteria
- Statistical approach
- Execute IQ: verify equipment installed correctly and document specifications
- Execute OQ: test parameter ranges and verify process control
- Execute PQ: run production conditions and verify output meets requirements
- Write validation report with conclusions
- Validation: IQ/OQ/PQ complete; acceptance criteria met; validation report approved
Validation Documentation Requirements
| Phase |
Content |
Evidence |
| Protocol |
Objectives, methods, criteria |
Approved protocol |
| IQ |
Equipment verification |
Installation records |
| OQ |
Parameter verification |
Test results |
| PQ |
Performance verification |
Production data |
| Report |
Summary, conclusions |
Approval signatures |
Revalidation Triggers
| Trigger |
Action Required |
| Equipment change |
Assess impact, revalidate affected phases |
| Parameter change |
OQ and PQ minimum |
| Material change |
Assess impact, PQ minimum |
| Process failure |
Full revalidation |
| Periodic |
Per validation schedule (typically 3 years) |
Special Process Examples
| Process |
Validation Standard |
Critical Parameters |
| EO Sterilization |
ISO 11135 |
Temperature, humidity, EO concentration, time |
| Steam Sterilization |
ISO 17665 |
Temperature, pressure, time |
| Radiation Sterilization |
ISO 11137 |
Dose, dose uniformity |
| Sealing |
Internal |
Temperature, pressure, dwell time |
| Welding |
ISO 11607 |
Heat, pressure, speed |
Supplier Qualification Workflow
Evaluate and approve suppliers per ISO 13485 Clause 7.4.
Workflow: New Supplier Qualification
- Identify supplier category:
- Category A: Critical (affects safety/performance)
- Category B: Major (affects quality)
- Category C: Minor (indirect impact)
- Request supplier information:
- Quality certifications
- Product specifications
- Quality history
- Evaluate supplier based on:
- Quality system (ISO certification)
- Technical capability
- Quality history
- Financial stability
- For Category A suppliers:
- Conduct on-site audit
- Require quality agreement
- Calculate qualification score
- Make approval decision:
80: Approved
- 60-80: Conditional approval
- <60: Not approved
- Add to Approved Supplier List
- Validation: Evaluation criteria scored; qualification records complete; supplier categorized
Supplier Evaluation Criteria
| Criterion |
Weight |
Scoring |
| Quality System |
30% |
ISO 13485=30, ISO 9001=20, Documented=10, None=0 |
| Quality History |
25% |
Reject rate: <1%=25, 1-3%=15, >3%=0 |
| Delivery |
20% |
On-time: >95%=20, 90-95%=10, <90%=0 |
| Technical Capability |
15% |
Exceeds=15, Meets=10, Marginal=5 |
| Financial Stability |
10% |
Strong=10, Adequate=5, Questionable=0 |
Supplier Category Requirements
| Category |
Qualification |
Monitoring |
Agreement |
| A - Critical |
On-site audit |
Annual review |
Quality agreement |
| B - Major |
Questionnaire |
Semi-annual review |
Quality requirements |
| C - Minor |
Assessment |
Issue-based |
Standard terms |
Supplier Performance Metrics
| Metric |
Target |
Calculation |
| Accept Rate |
>98% |
(Accepted lots / Total lots) × 100 |
| On-Time Delivery |
>95% |
(On-time / Total orders) × 100 |
| Response Time |
<5 days |
Average days to resolve issues |
| Documentation |
100% |
(Complete CoCs / Required CoCs) × 100 |
QMS Process Reference
For detailed requirements and audit questions for each ISO 13485:2016 clause, see iso13485-clause-requirements.md.
Management Review Required Inputs (Clause 5.6.2)
| Input |
Source |
Prepared By |
| Audit results |
Internal and external audits |
QA Manager |
| Customer feedback |
Complaints, surveys |
Customer Quality |
| Process performance |
Process metrics |
Process Owners |
| Product conformity |
Inspection data, NCs |
QC Manager |
| CAPA status |
CAPA system |
CAPA Officer |
| Previous actions |
Prior review records |
QMR |
| Changes affecting QMS |
Regulatory, organizational |
RA Manager |
| Recommendations |
All sources |
All Managers |
Record Retention Requirements
| Record Type |
Minimum Retention |
Regulatory Basis |
| Device Master Record |
Life of device + 2 years |
21 CFR 820.181 |
| Device History Record |
Life of device + 2 years |
21 CFR 820.184 |
| Design History File |
Life of device + 2 years |
21 CFR 820.30 |
| Complaint Records |
Life of device + 2 years |
21 CFR 820.198 |
| Training Records |
Employment + 3 years |
Best practice |
| Audit Records |
7 years |
Best practice |
| CAPA Records |
7 years |
Best practice |
| Calibration Records |
Equipment life + 2 years |
Best practice |
Decision Frameworks
Exclusion Justification (Clause 4.2.2)
| Clause |
Permissible Exclusion |
Justification Required |
| 6.4.2 |
Contamination control |
Product not affected by contamination |
| 7.3 |
Design and development |
Organization does not design products |
| 7.5.2 |
Product cleanliness |
No cleanliness requirements |
| 7.5.3 |
Installation |
No installation activities |
| 7.5.4 |
Servicing |
No servicing activities |
| 7.5.5 |
Sterile products |
No sterile products |
Nonconformity Disposition Decision Tree
Nonconforming Product Identified
│
▼
Can it be reworked?
│
Yes──┴──No
│ │
▼ ▼
Is rework Can it be used
procedure as is?
available? │
│ Yes──┴──No
Yes─┴─No │ │
│ │ ▼ ▼
▼ ▼ Concession Scrap or
Rework Create approval return to
per SOP rework needed? supplier
procedure │
Yes─┴─No
│ │
▼ ▼
Customer Use as is
approval with MRB
approval
CAPA Initiation Criteria
| Source |
Automatic CAPA |
Evaluate for CAPA |
| Customer complaint |
Safety-related |
All others |
| External audit |
Major NC |
Minor NC |
| Internal audit |
Major NC |
Repeat minor NC |
| Product NC |
Field failure |
Trend exceeds threshold |
| Process deviation |
Safety impact |
Repeated deviations |
Tools and References
Scripts
| Tool |
Purpose |
Usage |
| qms_audit_checklist.py |
Generate audit checklists by clause or process |
python qms_audit_checklist.py --help |
Note: Bundled scripts ship as Markdown reference (.md) — copy the code out of the .md file to run it.
Audit Checklist Generator Features:
- Generate clause-specific checklists (e.g.,
--clause 7.3)
- Generate process-based checklists (e.g.,
--process design-control)
- Full system audit checklist (
--audit-type system)
- Text or JSON output formats
- Interactive mode for guided selection
References
| Document |
Content |
| iso13485-clause-requirements.md |
Detailed requirements for each ISO 13485:2016 clause with audit questions |
| qms-process-templates.md |
Ready-to-use templates for gap analysis, audit program, document control, CAPA, supplier, training |
Quick Reference: Mandatory Documented Procedures
| Procedure |
Clause |
Key Elements |
| Document Control |
4.2.3 |
Approval, distribution, obsolete control |
| Record Control |
4.2.4 |
Identification, retention, disposal |
| Internal Audit |
8.2.4 |
Program, auditor qualification, reporting |
| NC Product Control |
8.3 |
Identification, segregation, disposition |
| Corrective Action |
8.5.2 |
Root cause, implementation, verification |
| Preventive Action |
8.5.3 |
Risk identification, implementation |
Related Skills
1---2name: quality-manager-qms-iso134853description: ISO 13485 Quality Management System implementation and maintenance for medical device organizations. Provides QMS design, documentation control, internal auditing, CAPA management, and certification support. Use when working with medical device quality systems, preparing for ISO 13485 audits, managing regulatory compliance documentation, setting up corrective actions, or building audit preparation programs. Useful for quality management, audit preparation, regulatory compliance, medical device documentation, and corrective action workflows.4---56# Quality Manager - QMS ISO 13485 Specialist78ISO 13485:2016 Quality Management System implementation, maintenance, and certification support for medical device organizations.910---1112## Table of Contents1314- [QMS Implementation Workflow](#qms-implementation-workflow)15- [Document Control Workflow](#document-control-workflow)16- [Internal Audit Workflow](#internal-audit-workflow)17- [Process Validation Workflow](#process-validation-workflow)18- [Supplier Qualification Workflow](#supplier-qualification-workflow)19- [QMS Process Reference](#qms-process-reference)20- [Decision Frameworks](#decision-frameworks)21- [Tools and References](#tools-and-references)2223---2425## QMS Implementation Workflow2627Implement ISO 13485:2016 compliant quality management system from gap analysis through certification.2829### Workflow: Initial QMS Implementation30311. Conduct gap analysis against ISO 13485:2016 requirements322. Document current state vs. required state for each clause333. Prioritize gaps by:34 - Regulatory criticality35 - Risk to product safety36 - Resource requirements374. Develop implementation roadmap with milestones385. Establish Quality Manual per Clause 4.2.2:39 - QMS scope with justified exclusions40 - Process interactions41 - Procedure references426. Create required documented procedures — see [Mandatory Documented Procedures](#quick-reference-mandatory-documented-procedures) for the full list437. Deploy processes with training448. **Validation:** Gap analysis complete; Quality Manual approved; all required procedures documented and trained4546> Use the Gap Analysis Matrix template in [qms-process-templates.md](references/qms-process-templates.md) to document clause-by-clause current state, gaps, priority, and actions.4748### QMS Structure4950| Level | Document Type | Example |51| ----- | ----------------- | ---------------- |52| 1 | Quality Manual | QM-001 |53| 2 | Procedures | SOP-02-001 |54| 3 | Work Instructions | WI-06-012 |55| 4 | Records | Training records |5657---5859## Document Control Workflow6061Establish and maintain document control per ISO 13485 Clause 4.2.3.6263### Workflow: Document Creation and Approval64651. Identify need for new document or revision662. Assign document number per numbering convention:67 - Format: `[TYPE]-[AREA]-[SEQUENCE]-[REV]`68 - Example: `SOP-02-001-01`693. Draft document using approved template704. Route for review to subject matter experts715. Collect and address review comments726. Obtain required approvals based on document type737. Update Document Master List748. **Validation:** Document numbered correctly; all reviewers signed; Master List updated7576### Document Numbering Convention7778| Prefix | Document Type | Approval Authority |79| ------ | ---------------- | -------------------- |80| QM | Quality Manual | Management Rep + CEO |81| POL | Policy | Department Head + QA |82| SOP | Procedure | Process Owner + QA |83| WI | Work Instruction | Supervisor + QA |84| TF | Template/Form | Process Owner |85| SPEC | Specification | Engineering + QA |8687### Area Codes8889| Code | Area | Examples |90| ---- | ------------------ | ---------------------- |91| 01 | Quality Management | Quality Manual, policy |92| 02 | Document Control | This procedure |93| 03 | Training | Competency procedures |94| 04 | Design | Design control |95| 05 | Purchasing | Supplier management |96| 06 | Production | Manufacturing |97| 07 | Quality Control | Inspection, testing |98| 08 | CAPA | Corrective actions |99100### Document Change Control101102| Change Type | Approval Level | Examples |103| -------------- | ------------------------- | ----------------- |104| Administrative | Document Control | Typos, formatting |105| Minor | Process Owner + QA | Clarifications |106| Major | Full review cycle | Process changes |107| Emergency | Expedited + retrospective | Safety issues |108109### Document Review Schedule110111| Document Type | Review Period | Trigger for Unscheduled Review |112| ----------------- | ------------- | -------------------------------- |113| Quality Manual | Annual | Organizational change |114| Procedures | Annual | Audit finding, regulation change |115| Work Instructions | 2 years | Process change |116| Forms | 2 years | User feedback |117118---119120## Internal Audit Workflow121122Plan and execute internal audits per ISO 13485 Clause 8.2.4.123124### Workflow: Annual Audit Program1251261. Identify processes and areas requiring audit coverage1272. Assess risk factors for audit frequency:128 - Previous audit findings129 - Regulatory changes130 - Process changes131 - Complaint trends1323. Assign qualified auditors (independent of area audited)1334. Develop annual audit schedule1345. Obtain management approval1356. Communicate schedule to process owners1367. Track completion and reschedule as needed1378. **Validation:** All processes covered; auditors qualified and independent; schedule approved138139> Use the Audit Program Template in [qms-process-templates.md](references/qms-process-templates.md) to schedule audits by clause and quarter across processes such as Document Control (4.2.3/4.2.4), Management Review (5.6), Design Control (7.3), Production (7.5), and CAPA (8.5.2/8.5.3).140141### Workflow: Individual Audit Execution1421431. Prepare audit plan with scope, criteria, and schedule1442. Notify auditee minimum 1 week prior1453. Review procedures and previous audit results1464. Prepare audit checklist1475. Conduct opening meeting1486. Collect evidence through:149 - Document review150 - Record sampling151 - Process observation152 - Personnel interviews1537. Classify findings:154 - Major NC: Absence or breakdown of system155 - Minor NC: Single lapse or deviation156 - Observation: Risk of future NC1578. Conduct closing meeting1589. Issue audit report within 5 business days15910. **Validation:** All checklist items addressed; findings supported by evidence; report distributed160161### Auditor Qualification Requirements162163| Criterion | Requirement |164| ------------ | -------------------------------------- |165| Training | ISO 13485 awareness + auditor training |166| Experience | Minimum 1 audit as observer |167| Independence | Not auditing own work area |168| Competence | Understanding of audited process |169170### Finding Classification Guide171172| Classification | Criteria | Response Time |173| -------------- | ----------------------------------------------------- | ------------------- |174| Major NC | System absence, total breakdown, regulatory violation | 30 days for CAPA |175| Minor NC | Single instance, partial compliance | 60 days for CAPA |176| Observation | Potential risk, improvement opportunity | Track in next audit |177178---179180## Process Validation Workflow181182Validate special processes per ISO 13485 Clause 7.5.6.183184### Workflow: Process Validation Protocol1851861. Identify processes requiring validation:187 - Output cannot be verified by inspection188 - Deficiencies appear only in use189 - Sterilization, welding, sealing, software1902. Form validation team with subject matter experts1913. Write validation protocol including:192 - Process description and parameters193 - Equipment and materials194 - Acceptance criteria195 - Statistical approach1964. Execute IQ: verify equipment installed correctly and document specifications1975. Execute OQ: test parameter ranges and verify process control1986. Execute PQ: run production conditions and verify output meets requirements1997. Write validation report with conclusions2008. **Validation:** IQ/OQ/PQ complete; acceptance criteria met; validation report approved201202### Validation Documentation Requirements203204| Phase | Content | Evidence |205| -------- | ----------------------------- | -------------------- |206| Protocol | Objectives, methods, criteria | Approved protocol |207| IQ | Equipment verification | Installation records |208| OQ | Parameter verification | Test results |209| PQ | Performance verification | Production data |210| Report | Summary, conclusions | Approval signatures |211212### Revalidation Triggers213214| Trigger | Action Required |215| ---------------- | ------------------------------------------- |216| Equipment change | Assess impact, revalidate affected phases |217| Parameter change | OQ and PQ minimum |218| Material change | Assess impact, PQ minimum |219| Process failure | Full revalidation |220| Periodic | Per validation schedule (typically 3 years) |221222### Special Process Examples223224| Process | Validation Standard | Critical Parameters |225| ----------------------- | ------------------- | --------------------------------------------- |226| EO Sterilization | ISO 11135 | Temperature, humidity, EO concentration, time |227| Steam Sterilization | ISO 17665 | Temperature, pressure, time |228| Radiation Sterilization | ISO 11137 | Dose, dose uniformity |229| Sealing | Internal | Temperature, pressure, dwell time |230| Welding | ISO 11607 | Heat, pressure, speed |231232---233234## Supplier Qualification Workflow235236Evaluate and approve suppliers per ISO 13485 Clause 7.4.237238### Workflow: New Supplier Qualification2392401. Identify supplier category:241 - Category A: Critical (affects safety/performance)242 - Category B: Major (affects quality)243 - Category C: Minor (indirect impact)2442. Request supplier information:245 - Quality certifications246 - Product specifications247 - Quality history2483. Evaluate supplier based on:249 - Quality system (ISO certification)250 - Technical capability251 - Quality history252 - Financial stability2534. For Category A suppliers:254 - Conduct on-site audit255 - Require quality agreement2565. Calculate qualification score2576. Make approval decision:258 - > 80: Approved259 - 60-80: Conditional approval260 - <60: Not approved2617. Add to Approved Supplier List2628. **Validation:** Evaluation criteria scored; qualification records complete; supplier categorized263264### Supplier Evaluation Criteria265266| Criterion | Weight | Scoring |267| -------------------- | ------ | ------------------------------------------------ |268| Quality System | 30% | ISO 13485=30, ISO 9001=20, Documented=10, None=0 |269| Quality History | 25% | Reject rate: <1%=25, 1-3%=15, >3%=0 |270| Delivery | 20% | On-time: >95%=20, 90-95%=10, <90%=0 |271| Technical Capability | 15% | Exceeds=15, Meets=10, Marginal=5 |272| Financial Stability | 10% | Strong=10, Adequate=5, Questionable=0 |273274### Supplier Category Requirements275276| Category | Qualification | Monitoring | Agreement |277| ------------ | ------------- | ------------------ | -------------------- |278| A - Critical | On-site audit | Annual review | Quality agreement |279| B - Major | Questionnaire | Semi-annual review | Quality requirements |280| C - Minor | Assessment | Issue-based | Standard terms |281282### Supplier Performance Metrics283284| Metric | Target | Calculation |285| ---------------- | ------- | ------------------------------------- |286| Accept Rate | >98% | (Accepted lots / Total lots) × 100 |287| On-Time Delivery | >95% | (On-time / Total orders) × 100 |288| Response Time | <5 days | Average days to resolve issues |289| Documentation | 100% | (Complete CoCs / Required CoCs) × 100 |290291---292293## QMS Process Reference294295For detailed requirements and audit questions for each ISO 13485:2016 clause, see [iso13485-clause-requirements.md](references/iso13485-clause-requirements.md).296297### Management Review Required Inputs (Clause 5.6.2)298299| Input | Source | Prepared By |300| --------------------- | ---------------------------- | ---------------- |301| Audit results | Internal and external audits | QA Manager |302| Customer feedback | Complaints, surveys | Customer Quality |303| Process performance | Process metrics | Process Owners |304| Product conformity | Inspection data, NCs | QC Manager |305| CAPA status | CAPA system | CAPA Officer |306| Previous actions | Prior review records | QMR |307| Changes affecting QMS | Regulatory, organizational | RA Manager |308| Recommendations | All sources | All Managers |309310### Record Retention Requirements311312| Record Type | Minimum Retention | Regulatory Basis |313| --------------------- | ------------------------ | ---------------- |314| Device Master Record | Life of device + 2 years | 21 CFR 820.181 |315| Device History Record | Life of device + 2 years | 21 CFR 820.184 |316| Design History File | Life of device + 2 years | 21 CFR 820.30 |317| Complaint Records | Life of device + 2 years | 21 CFR 820.198 |318| Training Records | Employment + 3 years | Best practice |319| Audit Records | 7 years | Best practice |320| CAPA Records | 7 years | Best practice |321| Calibration Records | Equipment life + 2 years | Best practice |322323---324325## Decision Frameworks326327### Exclusion Justification (Clause 4.2.2)328329| Clause | Permissible Exclusion | Justification Required |330| ------ | ---------------------- | ------------------------------------- |331| 6.4.2 | Contamination control | Product not affected by contamination |332| 7.3 | Design and development | Organization does not design products |333| 7.5.2 | Product cleanliness | No cleanliness requirements |334| 7.5.3 | Installation | No installation activities |335| 7.5.4 | Servicing | No servicing activities |336| 7.5.5 | Sterile products | No sterile products |337338### Nonconformity Disposition Decision Tree339340```341Nonconforming Product Identified342 │343 ▼344 Can it be reworked?345 │346 Yes──┴──No347 │ │348 ▼ ▼349 Is rework Can it be used350 procedure as is?351 available? │352 │ Yes──┴──No353 Yes─┴─No │ │354 │ │ ▼ ▼355 ▼ ▼ Concession Scrap or356 Rework Create approval return to357 per SOP rework needed? supplier358 procedure │359 Yes─┴─No360 │ │361 ▼ ▼362 Customer Use as is363 approval with MRB364 approval365```366367### CAPA Initiation Criteria368369| Source | Automatic CAPA | Evaluate for CAPA |370| ------------------ | -------------- | ----------------------- |371| Customer complaint | Safety-related | All others |372| External audit | Major NC | Minor NC |373| Internal audit | Major NC | Repeat minor NC |374| Product NC | Field failure | Trend exceeds threshold |375| Process deviation | Safety impact | Repeated deviations |376377---378379## Tools and References380381### Scripts382383| Tool | Purpose | Usage |384| -------------------------------------------------------- | ---------------------------------------------- | -------------------------------------- |385| [qms_audit_checklist.py](scripts/qms_audit_checklist.py) | Generate audit checklists by clause or process | `python qms_audit_checklist.py --help` |386387> **Note:** Bundled scripts ship as Markdown reference (`.md`) — copy the code out of the `.md` file to run it.388389**Audit Checklist Generator Features:**390391- Generate clause-specific checklists (e.g., `--clause 7.3`)392- Generate process-based checklists (e.g., `--process design-control`)393- Full system audit checklist (`--audit-type system`)394- Text or JSON output formats395- Interactive mode for guided selection396397### References398399| Document | Content |400| ----------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------- |401| [iso13485-clause-requirements.md](references/iso13485-clause-requirements.md) | Detailed requirements for each ISO 13485:2016 clause with audit questions |402| [qms-process-templates.md](references/qms-process-templates.md) | Ready-to-use templates for gap analysis, audit program, document control, CAPA, supplier, training |403404### Quick Reference: Mandatory Documented Procedures405406| Procedure | Clause | Key Elements |407| ------------------ | ------ | ----------------------------------------- |408| Document Control | 4.2.3 | Approval, distribution, obsolete control |409| Record Control | 4.2.4 | Identification, retention, disposal |410| Internal Audit | 8.2.4 | Program, auditor qualification, reporting |411| NC Product Control | 8.3 | Identification, segregation, disposition |412| Corrective Action | 8.5.2 | Root cause, implementation, verification |413| Preventive Action | 8.5.3 | Risk identification, implementation |414415---416417## Related Skills418419| Skill | Integration Point |420| ------------------------------------------------------------------ | --------------------------------- |421| [quality-manager-qmr](../quality-manager-qmr/) | Management review, quality policy |422| [capa-officer](../capa-officer/) | CAPA system management |423| [qms-audit-expert](../qms-audit-expert/) | Advanced audit techniques |424| [quality-documentation-manager](../quality-documentation-manager/) | DHF, DMR, DHR management |425| [risk-management-specialist](../risk-management-specialist/) | ISO 14971 integration |