General Principles of Software Validation

General Principles of Software Validation

One of the most important references in creating a software development lifecycle process to assure software quality is the FDA guidance document, “General Principles of Software Validation.”  This guidance document has been around for many years.  The current version, 2.0, was released in 2002.  To many in the industry, this guidance is simply referred to as the “GPSV.”

The guidance has a self-stated purpose to provide “validation principles that the FDA considers to be applicable to:

  1. the validation of medical device software or
  2. the validation of software used to design, develop, or manufacture medical devices.”

Of course the agency has quite a challenge in providing these principles.  One challenge is that medical device software can range widely in complexity and safety risk.  Consider what validation principles might be applicable to software controlling hemodialysis sub-systems compared to software displaying a patient’s weight in a scale.  A second challenge is how software technology and methods can change rapidly – so principles must stand the test of time.  Our opinion is that the GPSV meets these challenges well.  It remains a solid text for orienting, on-boarding, and referencing for software validation.

You can download a copy here: 2002-01-General Principles of Software Validation-Final Guidance

Of course, IEC 62304 is the more current, state-of-the-art thinking in the area of medical device software process.  One should use IEC 62304 as the basis for software process but we would recommend exploring how the GPSV can give greater insight into greater software quality.  Just a quick example is “test types.”  This is not found in IEC 62304 but is an essential technique in test case design for developing high quality software.

If you are interested in learning more, consider our 62304-FDA Compliance Training and other courses.

About the author

Brian is a biomedical software engineer - whatever that is! Started writing machine code for the Intel 8080 in 1983. Still enjoys designing and developing code. But probably enjoys his garden more now and watching plants grow ... and grandkids grow!

SoftwareCPR Training Courses:

IEC 62304 and other Emerging Standards Impacting Medical Device Software

Being Agile & Yet Compliant

ISO 14971 SaMD Risk Management

Software Risk Management

Medical Device Cybersecurity

Software Verification

IEC 62366 Usability Process and Documentation

Or just email training@softwarecpr.com for more info.

Corporate Office

15148 Springview St.
Tampa, FL 33624
USA
+1-781-721-2921
Partners located in the US (CA, FL, MA, MN, TX) and Canada.