Blog

Timely, insightful, and relevant thoughts, opinions, and discussion on FDA software validation, 62304 compliance, medical device software standards, updates impacting medical device and HealthIT software development, and sundry subjects from our Partners and staff.

An excellent tool in your arsenal for ensuring software quality is to establish software design patterns. Software design patterns can help reduce the insertion of software defects and also facilitates finding software defects during development. One to consider is GRASP software design guidelines that help to create consistency with software class responsibility. GRASP is acronym...
Read More
Struggling with cybersecurity planning, execution, and postmarket surveillance? Asking yourself, “what does FDA expect?  If it is any consolation, most medical device manufacturers are right there with you! But we have noticed that many struggles likely could have been avoided. The good news is that cybersecurity is on your radar – likely that is why...
Read More
… declares the table of contents for an article, subtitled Software problems are responsible for 20 recalls a month in IEEE’s Spectrum magazine December 2025 issue (the article is available without an IEEE account: https://spectrum.ieee.org/medical-device-recalls) The article includes several summary charts about U.S. Food and Drug Administration (FDA) medical device recall data back to 2005,...
Read More
Why Software Keeps Failing is the title of the editor’s page for IEEE’s Spectrum December 2025 issue. The answer to “why software keeps failing”? Lessons are learned but not applied. From the editor: In 2005’s “Why Software Fails,” in IEEE Spectrum, a seminal article documenting the causes behind large-scale software failures, Charette noted, “The biggest...
Read More
You may have experienced the concept of diffusion of responsibility – when members of a group feel less personal obligation to perform an activity or task, assuming “someone else will handle it,” leading to inaction, delays, or reduced accountability. This can occur when the quality management system either poorly defines responsibility or defines responsibility to...
Read More
We understand the tension. You get it … we all want to be process focused. Create and maintain a good process, and good outputs will come forth. But you may be the one that faces the auditor or faces the inspector. They ask for evidence that the process was performed. You think, “life would be...
Read More
The international standard, ISO 13485:2016, Medical devices — Quality management systems — Requirements for regulatory purposes, provides the framework of the set of interrelated processes that work to ensure product quality.  This international standard is based on a process approach to quality management. Any activity that receives input and converts it to output can be...
Read More
Design Approval Requirements and Signatures: Navigating 21 CFR 820 and ISO 13485 Medical device manufacturers often struggle with a fundamental question: What signature requirements apply to design input and design output approvals? Understanding how 21 CFR 820 Design Controls and ISO 13485 address design approvals is essential for achieving both compliance and operational efficiency. This...
Read More
FDA released a draft guidance document, “Artificial Intelligence-Enabled Device Software Functions: Lifecycle Management and Marketing Submission Recommendations” on January 7, 2025. The document provides recommendations on the contents of submissions (be it a 510(k), De Novo, PMA, HDE, or BLA) to FDA for devices that include AI-enabled device software functions and provides recommendations for the...
Read More
Refreshing to see such a clearly articulated discussion of #software #design. A good reminder that #softwarequality is “designed-in,” not “tested-in.” Kudos @flightaware https://t.co/CmxySpg6VH — @softwarecpr (@softwarecpr) March 7, 2025 Can #medicaldevice companies rediscover the inherent #quality benefit one gains from well thought out, peer-reviewed software design? This is just one of the topics we will...
Read More

SoftwareCPR Training Courses

ISO13485:2016 ISO 13485 Internal Audit(or) Training Course (Live, 3-day)

IEC 62304 and other Emerging Standards Impacting Medical Device Software (Live, 3-day)

Being Agile & Yet CompliantISO 14971 SaMD Risk Management

Software Risk Management

Medical Device Cybersecurity

Software Verification

IEC 62366 Usability Process and Documentation

Or just email training@softwarecpr.com for more info.

Corporate Office

15148 Springview St.
Tampa, FL 33624
USA
+1-781-721-2921
Partners located in the US (CA, FL, MA, MN, TX) and Canada.