Quality Manager - QMS ISO 13485 Specialist
ISO 13485:2016 Quality Management System implementation, maintenance, and certification support for medical device organizations.
Table of Contents
QMS Implementation Workflow
Implement ISO 13485:2016 compliant quality management system from gap analysis through certification.
Workflow: Initial QMS Implementation
- Conduct gap analysis against ISO 13485:2016 requirements
- Document current state vs. required state for each clause
- Prioritize gaps by:
- Regulatory criticality
- Risk to product safety
- Resource requirements
- Develop implementation roadmap with milestones
- Establish Quality Manual per Clause 4.2.2:
- QMS scope with justified exclusions
- Process interactions
- Procedure references
- Create required documented procedures — see Mandatory Documented Procedures for the full list
- Deploy processes with training
- Validation: Gap analysis complete; Quality Manual approved; all required procedures documented and trained
Use the Gap Analysis Matrix template in qms-process-templates.md to document clause-by-clause current state, gaps, priority, and actions.
QMS Structure
| Level |
Document Type |
Example |
| 1 |
Quality Manual |
QM-001 |
| 2 |
Procedures |
SOP-02-001 |
| 3 |
Work Instructions |
WI-06-012 |
| 4 |
Records |
Training records |
Document Control Workflow
Establish and maintain document control per ISO 13485 Clause 4.2.3.
Workflow: Document Creation and Approval
- Identify need for new document or revision
- Assign document number per numbering convention:
- Format:
[TYPE]-[AREA]-[SEQUENCE]-[REV]
- Example:
SOP-02-001-01
- Draft document using approved template
- Route for review to subject matter experts
- Collect and address review comments
- Obtain required approvals based on document type
- Update Document Master List
- Validation: Document numbered correctly; all reviewers signed; Master List updated
Document Numbering Convention
| Prefix |
Document Type |
Approval Authority |
| QM |
Quality Manual |
Management Rep + CEO |
| POL |
Policy |
Department Head + QA |
| SOP |
Procedure |
Process Owner + QA |
| WI |
Work Instruction |
Supervisor + QA |
| TF |
Template/Form |
Process Owner |
| SPEC |
Specification |
Engineering + QA |
Area Codes
| Code |
Area |
Examples |
| 01 |
Quality Management |
Quality Manual, policy |
| 02 |
Document Control |
This procedure |
| 03 |
Training |
Competency procedures |
| 04 |
Design |
Design control |
| 05 |
Purchasing |
Supplier management |
| 06 |
Production |
Manufacturing |
| 07 |
Quality Control |
Inspection, testing |
| 08 |
CAPA |
Corrective actions |
Document Change Control
| Change Type |
Approval Level |
Examples |
| Administrative |
Document Control |
Typos, formatting |
| Minor |
Process Owner + QA |
Clarifications |
| Major |
Full review cycle |
Process changes |
| Emergency |
Expedited + retrospective |
Safety issues |
Document Review Schedule
| Document Type |
Review Period |
Trigger for Unscheduled Review |
| Quality Manual |
Annual |
Organizational change |
| Procedures |
Annual |
Audit finding, regulation change |
| Work Instructions |
2 years |
Process change |
| Forms |
2 years |
User feedback |
Internal Audit Workflow
Plan and execute internal audits per ISO 13485 Clause 8.2.4.
Workflow: Annual Audit Program
- Identify processes and areas requiring audit coverage
- Assess risk factors for audit frequency:
- Previous audit findings
- Regulatory changes
- Process changes
- Complaint trends
- Assign qualified auditors (independent of area audited)
- Develop annual audit schedule
- Obtain management approval
- Communicate schedule to process owners
- Track completion and reschedule as needed
- Validation: All processes covered; auditors qualified and independent; schedule approved
Use the Audit Program Template in qms-process-templates.md to schedule audits by clause and quarter across processes such as Document Control (4.2.3/4.2.4), Management Review (5.6), Design Control (7.3), Production (7.5), and CAPA (8.5.2/8.5.3).
Workflow: Individual Audit Execution
- Prepare audit plan with scope, criteria, and schedule
- Notify auditee minimum 1 week prior
- Review procedures and previous audit results
- Prepare audit checklist
- Conduct opening meeting
- Collect evidence through:
- Document review
- Record sampling
- Process observation
- Personnel interviews
- Classify findings:
- Major NC: Absence or breakdown of system
- Minor NC: Single lapse or deviation
- Observation: Risk of future NC
- Conduct closing meeting
- Issue audit report within 5 business days
- Validation: All checklist items addressed; findings supported by evidence; report distributed
Auditor Qualification Requirements
| Criterion |
Requirement |
| Training |
ISO 13485 awareness + auditor training |
| Experience |
Minimum 1 audit as observer |
| Independence |
Not auditing own work area |
| Competence |
Understanding of audited process |
Finding Classification Guide
| Classification |
Criteria |
Response Time |
| Major NC |
System absence, total breakdown, regulatory violation |
30 days for CAPA |
| Minor NC |
Single instance, partial compliance |
60 days for CAPA |
| Observation |
Potential risk, improvement opportunity |
Track in next audit |
Process Validation Workflow
Validate special processes per ISO 13485 Clause 7.5.6.
Workflow: Process Validation Protocol
- Identify processes requiring validation:
- Output cannot be verified by inspection
- Deficiencies appear only in use
- Sterilization, welding, sealing, software
- Form validation team with subject matter experts
- Write validation protocol including:
- Process description and parameters
- Equipment and materials
- Acceptance criteria
- Statistical approach
- Execute IQ: verify equipment installed correctly and document specifications
- Execute OQ: test parameter ranges and verify process control
- Execute PQ: run production conditions and verify output meets requirements
- Write validation report with conclusions
- Validation: IQ/OQ/PQ complete; acceptance criteria met; validation report approved
Validation Documentation Requirements
| Phase |
Content |
Evidence |
| Protocol |
Objectives, methods, criteria |
Approved protocol |
| IQ |
Equipment verification |
Installation records |
| OQ |
Parameter verification |
Test results |
| PQ |
Performance verification |
Production data |
| Report |
Summary, conclusions |
Approval signatures |
Revalidation Triggers
| Trigger |
Action Required |
| Equipment change |
Assess impact, revalidate affected phases |
| Parameter change |
OQ and PQ minimum |
| Material change |
Assess impact, PQ minimum |
| Process failure |
Full revalidation |
| Periodic |
Per validation schedule (typically 3 years) |
Special Process Examples
| Process |
Validation Standard |
Critical Parameters |
| EO Sterilization |
ISO 11135 |
Temperature, humidity, EO concentration, time |
| Steam Sterilization |
ISO 17665 |
Temperature, pressure, time |
| Radiation Sterilization |
ISO 11137 |
Dose, dose uniformity |
| Sealing |
Internal |
Temperature, pressure, dwell time |
| Welding |
ISO 11607 |
Heat, pressure, speed |
Supplier Qualification Workflow
Evaluate and approve suppliers per ISO 13485 Clause 7.4.
Workflow: New Supplier Qualification
- Identify supplier category:
- Category A: Critical (affects safety/performance)
- Category B: Major (affects quality)
- Category C: Minor (indirect impact)
- Request supplier information:
- Quality certifications
- Product specifications
- Quality history
- Evaluate supplier based on:
- Quality system (ISO certification)
- Technical capability
- Quality history
- Financial stability
- For Category A suppliers:
- Conduct on-site audit
- Require quality agreement
- Calculate qualification score
- Make approval decision:
80: Approved
- 60-80: Conditional approval
- <60: Not approved
- Add to Approved Supplier List
- Validation: Evaluation criteria scored; qualification records complete; supplier categorized
Supplier Evaluation Criteria
| Criterion |
Weight |
Scoring |
| Quality System |
30% |
ISO 13485=30, ISO 9001=20, Documented=10, None=0 |
| Quality History |
25% |
Reject rate: <1%=25, 1-3%=15, >3%=0 |
| Delivery |
20% |
On-time: >95%=20, 90-95%=10, <90%=0 |
| Technical Capability |
15% |
Exceeds=15, Meets=10, Marginal=5 |
| Financial Stability |
10% |
Strong=10, Adequate=5, Questionable=0 |
Supplier Category Requirements
| Category |
Qualification |
Monitoring |
Agreement |
| A - Critical |
On-site audit |
Annual review |
Quality agreement |
| B - Major |
Questionnaire |
Semi-annual review |
Quality requirements |
| C - Minor |
Assessment |
Issue-based |
Standard terms |
Supplier Performance Metrics
| Metric |
Target |
Calculation |
| Accept Rate |
>98% |
(Accepted lots / Total lots) × 100 |
| On-Time Delivery |
>95% |
(On-time / Total orders) × 100 |
| Response Time |
<5 days |
Average days to resolve issues |
| Documentation |
100% |
(Complete CoCs / Required CoCs) × 100 |
QMS Process Reference
For detailed requirements and audit questions for each ISO 13485:2016 clause, see iso13485-clause-requirements.md.
Management Review Required Inputs (Clause 5.6.2)
| Input |
Source |
Prepared By |
| Audit results |
Internal and external audits |
QA Manager |
| Customer feedback |
Complaints, surveys |
Customer Quality |
| Process performance |
Process metrics |
Process Owners |
| Product conformity |
Inspection data, NCs |
QC Manager |
| CAPA status |
CAPA system |
CAPA Officer |
| Previous actions |
Prior review records |
QMR |
| Changes affecting QMS |
Regulatory, organizational |
RA Manager |
| Recommendations |
All sources |
All Managers |
Record Retention Requirements
| Record Type |
Minimum Retention |
Regulatory Basis |
| Device Master Record |
Life of device + 2 years |
21 CFR 820.181 |
| Device History Record |
Life of device + 2 years |
21 CFR 820.184 |
| Design History File |
Life of device + 2 years |
21 CFR 820.30 |
| Complaint Records |
Life of device + 2 years |
21 CFR 820.198 |
| Training Records |
Employment + 3 years |
Best practice |
| Audit Records |
7 years |
Best practice |
| CAPA Records |
7 years |
Best practice |
| Calibration Records |
Equipment life + 2 years |
Best practice |
Decision Frameworks
Exclusion Justification (Clause 4.2.2)
| Clause |
Permissible Exclusion |
Justification Required |
| 6.4.2 |
Contamination control |
Product not affected by contamination |
| 7.3 |
Design and development |
Organization does not design products |
| 7.5.2 |
Product cleanliness |
No cleanliness requirements |
| 7.5.3 |
Installation |
No installation activities |
| 7.5.4 |
Servicing |
No servicing activities |
| 7.5.5 |
Sterile products |
No sterile products |
Nonconformity Disposition Decision Tree
Nonconforming Product Identified
│
▼
Can it be reworked?
│
Yes──┴──No
│ │
▼ ▼
Is rework Can it be used
procedure as is?
available? │
│ Yes──┴──No
Yes─┴─No │ │
│ │ ▼ ▼
▼ ▼ Concession Scrap or
Rework Create approval return to
per SOP rework needed? supplier
procedure │
Yes─┴─No
│ │
▼ ▼
Customer Use as is
approval with MRB
approval
CAPA Initiation Criteria
| Source |
Automatic CAPA |
Evaluate for CAPA |
| Customer complaint |
Safety-related |
All others |
| External audit |
Major NC |
Minor NC |
| Internal audit |
Major NC |
Repeat minor NC |
| Product NC |
Field failure |
Trend exceeds threshold |
| Process deviation |
Safety impact |
Repeated deviations |
Tools and References
Scripts
| Tool |
Purpose |
Usage |
| qms_audit_checklist.py |
Generate audit checklists by clause or process |
python qms_audit_checklist.py --help |
Note: Bundled scripts ship as Markdown reference (.md) — copy the code out of the .md file to run it.
Audit Checklist Generator Features:
- Generate clause-specific checklists (e.g.,
--clause 7.3)
- Generate process-based checklists (e.g.,
--process design-control)
- Full system audit checklist (
--audit-type system)
- Text or JSON output formats
- Interactive mode for guided selection
References
| Document |
Content |
| iso13485-clause-requirements.md |
Detailed requirements for each ISO 13485:2016 clause with audit questions |
| qms-process-templates.md |
Ready-to-use templates for gap analysis, audit program, document control, CAPA, supplier, training |
Quick Reference: Mandatory Documented Procedures
| Procedure |
Clause |
Key Elements |
| Document Control |
4.2.3 |
Approval, distribution, obsolete control |
| Record Control |
4.2.4 |
Identification, retention, disposal |
| Internal Audit |
8.2.4 |
Program, auditor qualification, reporting |
| NC Product Control |
8.3 |
Identification, segregation, disposition |
| Corrective Action |
8.5.2 |
Root cause, implementation, verification |
| Preventive Action |
8.5.3 |
Risk identification, implementation |
Related Skills
Creator: Ra Qm Team
License: MIT
Source Repo: neekware/dojo-skills
Source Bucket: ra-qm-team
Original Path: ra-qm-team/quality-manager-qms-iso13485
1---2name: quality-manager-qms-iso13485-23description: Quality Manager - QMS ISO 13485 Specialist4---5# Quality Manager - QMS ISO 13485 Specialist67ISO 13485:2016 Quality Management System implementation, maintenance, and certification support for medical device organizations.89---1011## Table of Contents1213- [QMS Implementation Workflow](#qms-implementation-workflow)14- [Document Control Workflow](#document-control-workflow)15- [Internal Audit Workflow](#internal-audit-workflow)16- [Process Validation Workflow](#process-validation-workflow)17- [Supplier Qualification Workflow](#supplier-qualification-workflow)18- [QMS Process Reference](#qms-process-reference)19- [Decision Frameworks](#decision-frameworks)20- [Tools and References](#tools-and-references)2122---2324## QMS Implementation Workflow2526Implement ISO 13485:2016 compliant quality management system from gap analysis through certification.2728### Workflow: Initial QMS Implementation29301. Conduct gap analysis against ISO 13485:2016 requirements312. Document current state vs. required state for each clause323. Prioritize gaps by:33 - Regulatory criticality34 - Risk to product safety35 - Resource requirements364. Develop implementation roadmap with milestones375. Establish Quality Manual per Clause 4.2.2:38 - QMS scope with justified exclusions39 - Process interactions40 - Procedure references416. Create required documented procedures — see [Mandatory Documented Procedures](#quick-reference-mandatory-documented-procedures) for the full list427. Deploy processes with training438. **Validation:** Gap analysis complete; Quality Manual approved; all required procedures documented and trained4445> Use the Gap Analysis Matrix template in [qms-process-templates.md](references/qms-process-templates.md) to document clause-by-clause current state, gaps, priority, and actions.4647### QMS Structure4849| Level | Document Type | Example |50| ----- | ----------------- | ---------------- |51| 1 | Quality Manual | QM-001 |52| 2 | Procedures | SOP-02-001 |53| 3 | Work Instructions | WI-06-012 |54| 4 | Records | Training records |5556---5758## Document Control Workflow5960Establish and maintain document control per ISO 13485 Clause 4.2.3.6162### Workflow: Document Creation and Approval63641. Identify need for new document or revision652. Assign document number per numbering convention:66 - Format: `[TYPE]-[AREA]-[SEQUENCE]-[REV]`67 - Example: `SOP-02-001-01`683. Draft document using approved template694. Route for review to subject matter experts705. Collect and address review comments716. Obtain required approvals based on document type727. Update Document Master List738. **Validation:** Document numbered correctly; all reviewers signed; Master List updated7475### Document Numbering Convention7677| Prefix | Document Type | Approval Authority |78| ------ | ---------------- | -------------------- |79| QM | Quality Manual | Management Rep + CEO |80| POL | Policy | Department Head + QA |81| SOP | Procedure | Process Owner + QA |82| WI | Work Instruction | Supervisor + QA |83| TF | Template/Form | Process Owner |84| SPEC | Specification | Engineering + QA |8586### Area Codes8788| Code | Area | Examples |89| ---- | ------------------ | ---------------------- |90| 01 | Quality Management | Quality Manual, policy |91| 02 | Document Control | This procedure |92| 03 | Training | Competency procedures |93| 04 | Design | Design control |94| 05 | Purchasing | Supplier management |95| 06 | Production | Manufacturing |96| 07 | Quality Control | Inspection, testing |97| 08 | CAPA | Corrective actions |9899### Document Change Control100101| Change Type | Approval Level | Examples |102| -------------- | ------------------------- | ----------------- |103| Administrative | Document Control | Typos, formatting |104| Minor | Process Owner + QA | Clarifications |105| Major | Full review cycle | Process changes |106| Emergency | Expedited + retrospective | Safety issues |107108### Document Review Schedule109110| Document Type | Review Period | Trigger for Unscheduled Review |111| ----------------- | ------------- | -------------------------------- |112| Quality Manual | Annual | Organizational change |113| Procedures | Annual | Audit finding, regulation change |114| Work Instructions | 2 years | Process change |115| Forms | 2 years | User feedback |116117---118119## Internal Audit Workflow120121Plan and execute internal audits per ISO 13485 Clause 8.2.4.122123### Workflow: Annual Audit Program1241251. Identify processes and areas requiring audit coverage1262. Assess risk factors for audit frequency:127 - Previous audit findings128 - Regulatory changes129 - Process changes130 - Complaint trends1313. Assign qualified auditors (independent of area audited)1324. Develop annual audit schedule1335. Obtain management approval1346. Communicate schedule to process owners1357. Track completion and reschedule as needed1368. **Validation:** All processes covered; auditors qualified and independent; schedule approved137138> Use the Audit Program Template in [qms-process-templates.md](references/qms-process-templates.md) to schedule audits by clause and quarter across processes such as Document Control (4.2.3/4.2.4), Management Review (5.6), Design Control (7.3), Production (7.5), and CAPA (8.5.2/8.5.3).139140### Workflow: Individual Audit Execution1411421. Prepare audit plan with scope, criteria, and schedule1432. Notify auditee minimum 1 week prior1443. Review procedures and previous audit results1454. Prepare audit checklist1465. Conduct opening meeting1476. Collect evidence through:148 - Document review149 - Record sampling150 - Process observation151 - Personnel interviews1527. Classify findings:153 - Major NC: Absence or breakdown of system154 - Minor NC: Single lapse or deviation155 - Observation: Risk of future NC1568. Conduct closing meeting1579. Issue audit report within 5 business days15810. **Validation:** All checklist items addressed; findings supported by evidence; report distributed159160### Auditor Qualification Requirements161162| Criterion | Requirement |163| ------------ | -------------------------------------- |164| Training | ISO 13485 awareness + auditor training |165| Experience | Minimum 1 audit as observer |166| Independence | Not auditing own work area |167| Competence | Understanding of audited process |168169### Finding Classification Guide170171| Classification | Criteria | Response Time |172| -------------- | ----------------------------------------------------- | ------------------- |173| Major NC | System absence, total breakdown, regulatory violation | 30 days for CAPA |174| Minor NC | Single instance, partial compliance | 60 days for CAPA |175| Observation | Potential risk, improvement opportunity | Track in next audit |176177---178179## Process Validation Workflow180181Validate special processes per ISO 13485 Clause 7.5.6.182183### Workflow: Process Validation Protocol1841851. Identify processes requiring validation:186 - Output cannot be verified by inspection187 - Deficiencies appear only in use188 - Sterilization, welding, sealing, software1892. Form validation team with subject matter experts1903. Write validation protocol including:191 - Process description and parameters192 - Equipment and materials193 - Acceptance criteria194 - Statistical approach1954. Execute IQ: verify equipment installed correctly and document specifications1965. Execute OQ: test parameter ranges and verify process control1976. Execute PQ: run production conditions and verify output meets requirements1987. Write validation report with conclusions1998. **Validation:** IQ/OQ/PQ complete; acceptance criteria met; validation report approved200201### Validation Documentation Requirements202203| Phase | Content | Evidence |204| -------- | ----------------------------- | -------------------- |205| Protocol | Objectives, methods, criteria | Approved protocol |206| IQ | Equipment verification | Installation records |207| OQ | Parameter verification | Test results |208| PQ | Performance verification | Production data |209| Report | Summary, conclusions | Approval signatures |210211### Revalidation Triggers212213| Trigger | Action Required |214| ---------------- | ------------------------------------------- |215| Equipment change | Assess impact, revalidate affected phases |216| Parameter change | OQ and PQ minimum |217| Material change | Assess impact, PQ minimum |218| Process failure | Full revalidation |219| Periodic | Per validation schedule (typically 3 years) |220221### Special Process Examples222223| Process | Validation Standard | Critical Parameters |224| ----------------------- | ------------------- | --------------------------------------------- |225| EO Sterilization | ISO 11135 | Temperature, humidity, EO concentration, time |226| Steam Sterilization | ISO 17665 | Temperature, pressure, time |227| Radiation Sterilization | ISO 11137 | Dose, dose uniformity |228| Sealing | Internal | Temperature, pressure, dwell time |229| Welding | ISO 11607 | Heat, pressure, speed |230231---232233## Supplier Qualification Workflow234235Evaluate and approve suppliers per ISO 13485 Clause 7.4.236237### Workflow: New Supplier Qualification2382391. Identify supplier category:240 - Category A: Critical (affects safety/performance)241 - Category B: Major (affects quality)242 - Category C: Minor (indirect impact)2432. Request supplier information:244 - Quality certifications245 - Product specifications246 - Quality history2473. Evaluate supplier based on:248 - Quality system (ISO certification)249 - Technical capability250 - Quality history251 - Financial stability2524. For Category A suppliers:253 - Conduct on-site audit254 - Require quality agreement2555. Calculate qualification score2566. Make approval decision:257 - > 80: Approved258 - 60-80: Conditional approval259 - <60: Not approved2607. Add to Approved Supplier List2618. **Validation:** Evaluation criteria scored; qualification records complete; supplier categorized262263### Supplier Evaluation Criteria264265| Criterion | Weight | Scoring |266| -------------------- | ------ | ------------------------------------------------ |267| Quality System | 30% | ISO 13485=30, ISO 9001=20, Documented=10, None=0 |268| Quality History | 25% | Reject rate: <1%=25, 1-3%=15, >3%=0 |269| Delivery | 20% | On-time: >95%=20, 90-95%=10, <90%=0 |270| Technical Capability | 15% | Exceeds=15, Meets=10, Marginal=5 |271| Financial Stability | 10% | Strong=10, Adequate=5, Questionable=0 |272273### Supplier Category Requirements274275| Category | Qualification | Monitoring | Agreement |276| ------------ | ------------- | ------------------ | -------------------- |277| A - Critical | On-site audit | Annual review | Quality agreement |278| B - Major | Questionnaire | Semi-annual review | Quality requirements |279| C - Minor | Assessment | Issue-based | Standard terms |280281### Supplier Performance Metrics282283| Metric | Target | Calculation |284| ---------------- | ------- | ------------------------------------- |285| Accept Rate | >98% | (Accepted lots / Total lots) × 100 |286| On-Time Delivery | >95% | (On-time / Total orders) × 100 |287| Response Time | <5 days | Average days to resolve issues |288| Documentation | 100% | (Complete CoCs / Required CoCs) × 100 |289290---291292## QMS Process Reference293294For detailed requirements and audit questions for each ISO 13485:2016 clause, see [iso13485-clause-requirements.md](references/iso13485-clause-requirements.md).295296### Management Review Required Inputs (Clause 5.6.2)297298| Input | Source | Prepared By |299| --------------------- | ---------------------------- | ---------------- |300| Audit results | Internal and external audits | QA Manager |301| Customer feedback | Complaints, surveys | Customer Quality |302| Process performance | Process metrics | Process Owners |303| Product conformity | Inspection data, NCs | QC Manager |304| CAPA status | CAPA system | CAPA Officer |305| Previous actions | Prior review records | QMR |306| Changes affecting QMS | Regulatory, organizational | RA Manager |307| Recommendations | All sources | All Managers |308309### Record Retention Requirements310311| Record Type | Minimum Retention | Regulatory Basis |312| --------------------- | ------------------------ | ---------------- |313| Device Master Record | Life of device + 2 years | 21 CFR 820.181 |314| Device History Record | Life of device + 2 years | 21 CFR 820.184 |315| Design History File | Life of device + 2 years | 21 CFR 820.30 |316| Complaint Records | Life of device + 2 years | 21 CFR 820.198 |317| Training Records | Employment + 3 years | Best practice |318| Audit Records | 7 years | Best practice |319| CAPA Records | 7 years | Best practice |320| Calibration Records | Equipment life + 2 years | Best practice |321322---323324## Decision Frameworks325326### Exclusion Justification (Clause 4.2.2)327328| Clause | Permissible Exclusion | Justification Required |329| ------ | ---------------------- | ------------------------------------- |330| 6.4.2 | Contamination control | Product not affected by contamination |331| 7.3 | Design and development | Organization does not design products |332| 7.5.2 | Product cleanliness | No cleanliness requirements |333| 7.5.3 | Installation | No installation activities |334| 7.5.4 | Servicing | No servicing activities |335| 7.5.5 | Sterile products | No sterile products |336337### Nonconformity Disposition Decision Tree338339```340Nonconforming Product Identified341 │342 ▼343 Can it be reworked?344 │345 Yes──┴──No346 │ │347 ▼ ▼348 Is rework Can it be used349 procedure as is?350 available? │351 │ Yes──┴──No352 Yes─┴─No │ │353 │ │ ▼ ▼354 ▼ ▼ Concession Scrap or355 Rework Create approval return to356 per SOP rework needed? supplier357 procedure │358 Yes─┴─No359 │ │360 ▼ ▼361 Customer Use as is362 approval with MRB363 approval364```365366### CAPA Initiation Criteria367368| Source | Automatic CAPA | Evaluate for CAPA |369| ------------------ | -------------- | ----------------------- |370| Customer complaint | Safety-related | All others |371| External audit | Major NC | Minor NC |372| Internal audit | Major NC | Repeat minor NC |373| Product NC | Field failure | Trend exceeds threshold |374| Process deviation | Safety impact | Repeated deviations |375376---377378## Tools and References379380### Scripts381382| Tool | Purpose | Usage |383| -------------------------------------------------------- | ---------------------------------------------- | -------------------------------------- |384| [qms_audit_checklist.py](scripts/qms_audit_checklist.py) | Generate audit checklists by clause or process | `python qms_audit_checklist.py --help` |385386> **Note:** Bundled scripts ship as Markdown reference (`.md`) — copy the code out of the `.md` file to run it.387388**Audit Checklist Generator Features:**389390- Generate clause-specific checklists (e.g., `--clause 7.3`)391- Generate process-based checklists (e.g., `--process design-control`)392- Full system audit checklist (`--audit-type system`)393- Text or JSON output formats394- Interactive mode for guided selection395396### References397398| Document | Content |399| ----------------------------------------------------------------------------- | -------------------------------------------------------------------------------------------------- |400| [iso13485-clause-requirements.md](references/iso13485-clause-requirements.md) | Detailed requirements for each ISO 13485:2016 clause with audit questions |401| [qms-process-templates.md](references/qms-process-templates.md) | Ready-to-use templates for gap analysis, audit program, document control, CAPA, supplier, training |402403### Quick Reference: Mandatory Documented Procedures404405| Procedure | Clause | Key Elements |406| ------------------ | ------ | ----------------------------------------- |407| Document Control | 4.2.3 | Approval, distribution, obsolete control |408| Record Control | 4.2.4 | Identification, retention, disposal |409| Internal Audit | 8.2.4 | Program, auditor qualification, reporting |410| NC Product Control | 8.3 | Identification, segregation, disposition |411| Corrective Action | 8.5.2 | Root cause, implementation, verification |412| Preventive Action | 8.5.3 | Risk identification, implementation |413414---415416## Related Skills417418| Skill | Integration Point |419| ------------------------------------------------------------------ | --------------------------------- |420| [quality-manager-qmr](../quality-manager-qmr/) | Management review, quality policy |421| [capa-officer](../capa-officer/) | CAPA system management |422| [qms-audit-expert](../qms-audit-expert/) | Advanced audit techniques |423| [quality-documentation-manager](../quality-documentation-manager/) | DHF, DMR, DHR management |424| [risk-management-specialist](../risk-management-specialist/) | ISO 14971 integration |425426> **Creator:** Ra Qm Team427> **License:** MIT428> **Source Repo:** `neekware/dojo-skills`429> **Source Bucket:** `ra-qm-team`430> **Original Path:** `ra-qm-team/quality-manager-qms-iso13485`