CMDA study plan
CMDA · Give each week a clear focus.
8 weeks · About 6 hours per week
Medical device regulatory and quality system requirements (e.g., QMS requirements, ISO 13485, regional regulations)
Map the clause structure of ISO 13485:2016 by outlining all main clauses and listing at least two subclauses under each
Differentiate the scope and structure of FDA 21 CFR Part 820, EU MDR 2017/745, and ISO 13485 by building a three-column comparison table
Identify which quality system requirements attach to device classification and jurisdictional registration pathways
Explain the audit implications of key QMS elements (document control, management review, purchasing controls, CAPA linkage) in writing
Your checkpoint
A one-page regulatory cross-reference map covering ISO 13485 clauses vs. 21 CFR 820 vs. EU MDR, with at least 15 mapped requirement pairs, scored against an answer key or verified independently.
Medical device regulatory and quality system requirements (e.g., QMS requirements, ISO 13485, regional regulations) & Risk management, design controls, and process validation concepts
Trace the ISO 14971 risk management process end to end (hazard identification, risk estimation, evaluation, control, residual risk, production/post-production monitoring) and list the audit evidence each step should produce
Distinguish design controls (design inputs, outputs, review, verification, validation, transfer, changes) and state the objective evidence an auditor would sample for each
Compare process validation approaches (prospective, concurrent, retrospective, revalidation) and match each to a device manufacturing scenario
Relate risk management outputs to QMS requirements such as design controls, CAPA, and supplier controls
Your checkpoint
A risk-to-audit-evidence matrix listing at least 8 ISO 14971 activities, the corresponding QMS clause, and one concrete document or record an auditor would request.
Risk management, design controls, and process validation concepts
Sequence a full design control audit trail from design input through design transfer, naming the record type expected at each stage
Evaluate risk acceptability criteria and risk control measure verification against ISO 14971 expectations
Differentiate verification from validation and identify common audit findings associated with each
Assess process validation documentation (protocol, IQ/OQ/PQ, acceptance criteria, deviation handling) for completeness
Explain software and sterilization validation considerations and their audit evidence
Your checkpoint
A written 10-question self-test on risk, design controls, and process validation completed closed-book with a score of at least 80%, with missed items re-studied.
Audit execution, interviewing, and objective evidence gathering
Construct opening and closing meeting agendas that satisfy audit protocol expectations
Formulate at least 20 open-ended interview questions mapped to QMS clauses, avoiding leading phrasing
Differentiate objective evidence types (records, observation, interview corroboration) and classify ten sample evidence items correctly
Apply sampling logic (random, judgmental, stratified) to a mock audit scenario and justify the chosen approach in writing
Demonstrate note-taking that links each observation to criterion, evidence, and record identifier
Your checkpoint
A mock audit interview script plus 10 captured objective-evidence entries, each with source, record ID, criterion, and observation, self-checked against an evidence-quality checklist.
Audit planning and preparation (scope, criteria, checklists, sampling) & Auditing fundamentals, principles, and types of audits
Draft an audit plan (scope, criteria, objectives, schedule, team roles, sampling strategy) for a mock device manufacturer
Build an audit checklist of at least 25 items traceable to specific clauses and to identified process risks
Contrast audit types (internal, supplier, certification, surveillance, for-cause, product, process) and their defining characteristics
Define scope, criteria, and objective evidence in audit terms and distinguish audits from inspections and assessments
Explain audit principles (independence, integrity, evidence-based approach, due professional care)
Your checkpoint
A complete mock audit plan package containing scope, criteria, schedule, 25-item checklist, and sampling rationale, reviewed against a self-generated adequacy rubric.
Findings classification, reporting, and corrective/preventive action follow-up
Classify at least 15 written observations into major nonconformity, minor nonconformity, observation, and opportunity for improvement with justification
Write nonconformity statements in the criterion-evidence-conclusion format
Outline corrective action expectations: root cause analysis, correction vs. corrective action vs. preventive action, effectiveness verification
Design a CAPA follow-up tracker that records due dates, verification method, and closure evidence
Draft a findings report structure including distribution, grading definitions, and response timelines
Your checkpoint
A findings report for a mock audit containing five nonconformities written in criterion-evidence-conclusion form, each correctly classified, plus a CAPA follow-up tracker with effectiveness verification fields.
Auditing fundamentals, principles, and types of audits & Audit program management and auditor competence/ethics
Design an audit program covering risk-based scheduling, resource allocation, and program performance monitoring
Define auditor competence criteria (education, training, experience, technical knowledge, personal attributes) and evaluate a mock auditor profile against them
Apply auditor ethics principles to three ethical-dilemma scenarios and justify the correct course of action
Distinguish the roles of lead auditor, auditor, technical expert, and auditee in a written role chart
Explain audit program records and the use of audit results in management review
Your checkpoint
An audit program charter plus a competence matrix for four mock auditors, with written resolutions for three ethics scenarios.
Auditing fundamentals, principles, and types of audits & Medical device regulatory and quality system requirements (e.g., QMS requirements, ISO 13485, regional regulations) & Risk management, design controls, and process validation concepts & Audit program management and auditor competence/ethics & Audit planning and preparation (scope, criteria, checklists, sampling) & Audit execution, interviewing, and objective evidence gathering & Findings classification, reporting, and corrective/preventive action follow-up
Synthesize all domains by completing a timed 100-question mock exam
Analyze every missed item by domain and root cause (knowledge gap vs. misreading)
Revisit the two lowest-scoring domains with targeted re-study
Recite core definitions, clause numbers, and classification rules from memory
Your checkpoint
A timed 100-question mock exam completed under test conditions with a score of at least 80%, accompanied by a written remediation log of all missed items.
Milestones
Week 2: Regulatory cross-reference map complete with at least 15 mapped requirement pairs, and risk-to-audit-evidence matrix finished with at least 8 entries.
Week 4: Closed-book self-test on risk, design controls, and process validation scored at least 80%, and mock interview script with 10 evidence entries completed.
Week 6: Mock audit plan package completed in week 5 and a mock findings report with five correctly classified nonconformities produced.
Week 8: Timed 100-question mock exam scored at least 80%, with a remediation log covering all missed items and no domain below 70%.