ISO 13485 LA study plan
ISO 13485 LA · Give each week a clear focus.
8 weeks · About 7 hours per week
Fundamental principles and concepts of a Medical Devices Quality Management System (MDQMS) & Medical Devices Quality Management System (MDQMS)
Map the clause structure of ISO 13485:2016 (clauses 4 through 8) and explain in writing how each clause links to the process approach and the MDQMS model
Distinguish the terms device, medical device, implantable, sterile barrier system, and customer from the standard's definitions and write your own one-line definition for each without looking
Explain the role of the organization's quality policy, quality objectives, and quality manual in establishing the MDQMS and identify which clause requires each
Trace the documentation hierarchy from quality manual to work instructions to records and state the control each level requires under clause 4.2
Compare ISO 13485 with ISO 9001 on three points: risk, regulatory requirements, and continual improvement, and note where ISO 13485 is more prescriptive
Your checkpoint
A one-page MDQMS architecture map showing clauses 4-8, the documentation hierarchy, and five key definitions written from memory
Medical Devices Quality Management System (MDQMS)
Walk through clause 5 (management responsibility) and list the specific responsibilities of top management, including management review inputs and outputs
Break down clause 6 (resource management) into competence, training, infrastructure, and work environment requirements, and identify the records each generates
Diagram the product realization flow from clause 7.1 to 7.6 and locate design controls, purchasing, production, and monitoring and measurement in that flow
Explain clause 8 (measurement, analysis, and improvement) requirements for feedback, complaint handling, CAPA, and internal audit, and distinguish corrective from preventive action
Identify the regulatory reporting and advisory notice requirements in clause 8.2.1 and 8.2.3 and describe what triggers them
Your checkpoint
A clause-by-clause requirements summary for clauses 5-8 with at least two required records listed per sub-clause
Fundamental audit concepts and principles
Define audit, audit criteria, audit evidence, and audit findings using ISO 19011 terminology and apply them to a short scenario
Differentiate first-party, second-party, and third-party audits and explain the purpose and confidentiality obligations of each
Explain the six audit principles (integrity, fair presentation, due professional care, confidentiality, independence, evidence-based approach) and give one realistic violation example for each
Distinguish a nonconformity, an observation, and an opportunity for improvement, and classify five sample findings correctly
Describe the auditor competence requirements of ISO 19011 and self-assess your own gaps against them
Your checkpoint
A finding-classification worksheet with ten sample findings classified as major nonconformity, minor nonconformity, observation, or OFI, with a one-sentence justification each
Preparation of an ISO 13485 audit
Draft an audit plan for a simulated medical device manufacturer covering scope, criteria, objectives, schedule, and audit team roles
Build a process-based audit trail that follows product from design input through servicing, identifying the clauses to sample at each stop
Write checklist questions that probe evidence rather than ask yes/no, and map each question to a specific ISO 13485 clause
Assess auditor independence and identify any conflict of interest in a given audit team assignment
Prepare an opening meeting agenda that states purpose, scope, method, and the escalation path for safety-critical findings
Your checkpoint
A complete audit plan package for a fictional device manufacturer, including a 25-question clause-mapped checklist and an opening meeting agenda
Conducting an ISO 13485 audit
Practice evidence collection by writing five interview questions for a process owner and stating what objective evidence would satisfy each
Explain sampling strategy: how to select records, how many to sample, and how to justify the sample size in the audit report
Describe how to handle a finding of an unapproved supplier or a missing design verification record, including how to trace it to the clause and record the evidence
Role-play an opening and closing interview and note where you drifted into consulting rather than auditing
Explain how to audit risk management (ISO 14971) as embedded in clause 7.1 and what evidence demonstrates a link between risk files and design or production records
Your checkpoint
A mock audit evidence log with at least eight findings, each citing the clause, the objective evidence, and the classification
Closing an ISO 13485 audit
Draft a nonconformity report that states the requirement, the evidence, and the gap in three sentences without prescribing a fix
Prepare a closing meeting agenda that covers findings summary, report distribution, corrective action timelines, and appeal or dispute process
Explain the corrective action review cycle: how the auditee's root cause analysis and action plan are assessed for adequacy and how effectiveness is verified
Describe the requirements for audit report content, approval, and distribution, and identify who must receive the report
Outline the audit follow-up process when a corrective action is overdue or ineffective
Your checkpoint
A full audit report for the simulated audit, including three well-formed nonconformity reports, a closing meeting agenda, and a corrective action tracking table
Managing an ISO 13485 audit program
Explain the Plan-Do-Check-Act cycle as applied to an audit program and list the inputs and outputs of each phase
Design an annual audit program schedule that covers all MDQMS processes, weights by risk, and accounts for internal audit frequency requirements in clause 8.2.2
Identify the resources, competence records, and auditor evaluation methods needed to sustain an audit program
Describe how to monitor and measure audit program performance, including indicators such as finding closure rate and audit coverage
Explain how to handle an audit program when a process changes significantly mid-cycle, and how to adjust scope and frequency
Your checkpoint
A 12-month risk-weighted internal audit program schedule with a one-page performance dashboard defining at least four program metrics
Fundamental principles and concepts of a Medical Devices Quality Management System (MDQMS) & Medical Devices Quality Management System (MDQMS) & Fundamental audit concepts and principles & Preparation of an ISO 13485 audit & Conducting an ISO 13485 audit & Closing an ISO 13485 audit & Managing an ISO 13485 audit program
Complete a timed 100-question practice set across all seven domains and score each domain separately
Review every missed question and write the underlying clause or principle it tested
Re-explain from memory the audit lifecycle from program planning to follow-up, in under five minutes
Recite the clause structure of ISO 13485 and the six audit principles without notes
Identify your two weakest domains and build a targeted 48-hour review plan for each
Your checkpoint
A scored practice exam with a domain-by-domain gap analysis and a written remediation plan for the two lowest-scoring domains
Milestones
Week 2: Can explain clauses 4-8 and the documentation hierarchy from memory in a 10-minute recorded summary, scoring at least 80% on a self-made 20-question clause-mapping quiz
Week 4: Audit plan package is complete and every checklist question maps to a clause; a peer or mentor confirms the plan is process-based and free of yes/no questions
Week 6: Mock audit produces at least eight classified findings and three nonconformity reports that state requirement, evidence, and gap without prescribing corrective action
Week 8: Practice exam score of at least 75% overall with no domain below 60%, and a written remediation plan completed for the two weakest domains