INSTITUTE FOR STANDARD AND QUALITY DEVELOPMENT STUDIES
ISO 13485 specifies requirements for a quality management system where an organization needs to demonstrate its ability to consistently provide medical devices and related services that meet customer requirements and applicable regulatory requirements.
These organizations may be involved in one or more stages of the medical device life cycle, including design and development, production, storage and distribution, installation, servicing, and the design or provision of related activities (e.g., technical support).
ISO 13485 is a standard that specifies quality management system requirements for organizations involved in the manufacture and supply of medical devices.
The standard helps ensure the capability to provide products that meet customer requirements and relevant legal regulations.
ISO stands for the International Organization for Standardization.
The first version of ISO 13485 was published in 2003.
ISO 13485 is a standard for quality management systems specific to medical devices issued by ISO.
In simple terms, ISO 13485 is a set of requirements defined by ISO that medical device manufacturers use to implement their quality management systems.
ISO 13485 is the most widely recognized international standard in the medical device industry.
Essentially, ISO 13485 is similar to ISO 9001 as a quality management system, but it includes additional requirements tailored to organizations involved in the design, manufacture, installation, and servicing of medical devices.
This was the first version published in July 2003 by ISO.
(In Vietnam, it corresponds to the national standard TCVN ISO 13485:2004.)
In 2011, the European Commission raised concerns regarding regulatory assumptions supporting compliance with the Medical Device Directives (Annexes ZA, ZB, ZC) in EN ISO 13485:2003.
As a result, CEN published a revised edition (EN ISO 13485:2012) with an updated foreword and revised annexes, while the core text remained unchanged.
On 1 March 2016, ISO 13485:2016 was published, replacing ISO 13485:2003.
A three-year transition period was given to manufacturers and organizations.
ISO 13485:2003 expired on 28 February 2019, meaning that organizations needed to upgrade to ISO 13485:2016 (and EN ISO 13485:2012) by this date.
In the medical device industry, quality management and safety are inseparable requirements.
ISO 13485 requirements apply throughout all stages of the medical device life cycle, including post-production activities such as delivery, servicing, and maintenance.
The standard can be applied to organizations of any size or type involved in any stage of the medical device life cycle — from design and development to production, distribution, servicing, and support activities.
Increasingly, ISO 13485 has become essential for medical device companies to compete and gain customer trust.
When properly implemented, ISO 13485 can help organizations improve profitability and operational efficiency.
Customers consider ISO 13485 certification as evidence of effective quality control and assurance.
It demonstrates a commitment to delivering higher-quality products and services.
In many cases, ISO 13485 implementation is required by regulations governing medical device manufacturing and trading.
For example, Vietnamese Government Decree No. 36/2016/ND-CP requires medical device manufacturers to implement ISO 13485 quality management systems by 1 January 2020.
ISO 13485 adopts a process-based (BPM) approach, focusing on how processes interact rather than viewing them individually.
It helps organizations streamline workflows, eliminate redundant activities, and improve efficiency through automation and process improvement.
The standard requires documented information and records that provide evidence of process performance, enabling organizations to identify nonconformities and allocate resources effectively.
Implementation clarifies responsibilities and encourages staff to take initiative in improving their work processes.
ISO management system standards typically follow a High-Level Structure (HLS).
However, ISO 13485:2016 does not fully adopt the HLS, although it is based on quality management principles similar to ISO 9001.
ISO 13485:2016 consists of 8 clauses, of which Clauses 4–8 contain the core requirements:
Clause 4: Quality Management System
Clause 5: Management Responsibility
Clause 6: Resource Management
Clause 7: Product Realization
Clause 8: Measurement, Analysis, and Improvement
Certification is not a mandatory requirement of ISO 13485 itself, but it serves as proof that an organization has effectively implemented the standard.
Certification can only be granted by independent third-party certification bodies.
Third-party certification audit: conducted by an accredited certification body that issues the certificate.
Internal audits: conducted by trained internal auditors within the organization (no certificate issued but required for certification readiness).
Organizations can refer to our detailed article on ISO 13485:2016 certification to better understand procedures and requirements.
ISSQ Institute for Quality Development Studies is always ready to accompany your company in integration and development.
