Transition from Research

When developing medical devices, a manufacturer may have difficulty knowing when (or what) the transition from research phase activities to design controls has begun.  Often this is due to the nature of research itself – one is exploring a concept or design approach that may or may not pan out in the end.  The US FDA has traditionally applied low scrutiny of medical device research phase activities in an effort to minimize the regulatory burden on the research process.  However the manufacturer is obligated to clearly define when research activities have come to a close and design controls (21 CFR 820.30) would apply.  In some cases, a manufacturer may not even be aware that software “lifecycle” documentation is required to demonstrate software quality and formulate a software validation argument.

A common mistake in this area is to treat this transition from research to design controls as a “binary” – that is, attempting to declare “research is done – now start design controls.”  While this may seem to be a proper approach from a regulatory standpoint, this binary type approach can be counterproductive.  An alternative approach that is more efficient and sustainable would be to define “maturity” levels for the research activities – where these maturity levels would represent progress toward “design input.”  Design input, by definition, starts the Design Controls activities.  Research phase activities should have as a goal to clearly define Design Input and correspondingly define how Design Validation will be accomplished.  This will involve multiple disciplines including regulatory.

This approach might be illustrated as below:

 

While this illustration is SaMD focused, one could adapt to SiMD as well.

Final thoughts:

  1. Ensure that the research activities, if continued, will result in clear “design input” to the design process and clarity as to how “design validation” will be performed and executed.
  2. Design input cannot be complete without the device level risk analysis.
  3. Recognize when an activity will require documentation necessary to show software lifecycle quality assurance processes.  Likewise, don’t unnecessarily burden the research process when an activity is clearly research – and that later design control activities will “re-develop” the designs.
About the author

Partner and General Manager, Brian Pate is ISO 1385:2016 Lead Auditor certified for Medical Device Quality Management Systems (MD), and ISO 19011:2018 Management Systems Auditing (AU) and Leading Management Systems Audit Teams (TL). Brian started his medical device career in anesthesia clinical research in 1985 and has since worked both academia and industry including many years with Johnson & Johnson, Baxter Healthcare, and GE Medical. Brian’s roles have included software engineering, systems engineering, quality assurance, and regulatory affairs. Brian has served on multiple AAMI TIR working groups, including TIR32-2008 (Application of ISO 14971 Risk Management to Software; now IEC 80002-1) and TIR45-2012 (Guidance on the use of Agile practices in the development of medical device software) and served as a reviewer for the 2nd edition of TIR45. Brian serves on the AAMI Software Committee and as an AAMI instructor for the software, design controls, and agile methods courses. Brian also is a member of the Underwriters’ Laboratories (UL) Standards Technical Panel for UL1998 (Software in Programmable Components) and or UL5500 (Remote Software Updates).

SoftwareCPR Training Courses

ISO13485:2016 ISO 13485 Internal Audit(or) Training Course (Live, 3-day)

IEC 62304 and other Emerging Standards Impacting Medical Device Software (Live, 3-day)

Being Agile & Yet CompliantISO 14971 SaMD Risk Management

Software Risk Management

Medical Device Cybersecurity

Software Verification

IEC 62366 Usability Process and Documentation

Or just email training@softwarecpr.com for more info.

Corporate Office

15148 Springview St.
Tampa, FL 33624
USA
+1-781-721-2921
Partners located in the US (CA, FL, MA, MN, TX) and Canada.