{"id":5195,"date":"2022-08-20T06:17:10","date_gmt":"2022-08-20T06:17:10","guid":{"rendered":"https:\/\/stendard.com\/?p=5195"},"modified":"2023-09-27T03:21:56","modified_gmt":"2023-09-27T03:21:56","slug":"iso-14971","status":"publish","type":"post","link":"https:\/\/stendard.com\/en-id\/blog\/iso-14971\/","title":{"rendered":"ISO 14971 Explained."},"content":{"rendered":"\n<p>Before diving into ISO 14971 Medical device &#8211; Application of risk management to medical devices, we must first understand risk management. Unlike business risk management, ISO 14971 risk management is a process of identifying, analysing, controlling, and preventing failures that can have dangerous consequences in the usage of medical devices.<\/p>\n\n\n\n<p>Organisations must conduct risk management for medical devices as associated risks related to a failure in medical devices can result in dire consequences not only to the patients who went for a medical procedure but also to the organisations themselves.<\/p>\n\n\n\n<p>Suppose your medical device companies plan to sell medical devices in the United States or Europe. In that case, your organisations need to have a risk management system implemented as part of the regulatory requirements by Quality System Regulation (QSR) and Medical Device Regulation (MDR), respectively. ISO 14971 risk management is an international standard adopted by regulatory agencies that the medical devices company establishes in their risk management activities throughout the product life cycle.<\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">What Is ISO 14971?<\/h2>\n\n\n\n<p>ISO 14791 document specifies terminology and principles and provides a risk management framework for medical devices, including in vitro diagnostic medical devices, which help organisations identify hazards, perform risk estimation, examine risk analysis and exert control measures to reduce risk.<\/p>\n\n\n\n<p>The intended usage of the risk management process from ISO 14791 is catered to the entire product lifecycle from the initial conception to final decommissioning and disposal. Your organisation may apply ISO 14971 while implementing your organisation&#8217;s quality management systems, such as ISO 13485.<\/p>\n\n\n\n<p>According to ISO 14971, the standard does not apply to:<\/p>\n\n\n\n<ul>\n<li>decision making on the use of a medical device for any particular clinical procedure<\/li>\n\n\n\n<li>business risk management<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<p>ISO 14971 document requires manufacturers to establish objective criteria for risk acceptability; however, acceptable risk levels are not specified. This risk management system&#8217;s requirements are integral to ISO 13485 &#8211; Quality Management Systems.<\/p>\n\n\n\n<p>ISO 14971 risk management for medical devices is a comprehensive process whereby your risk management team must consider every part of the medical devices life cycle for risk evaluation, not necessarily medical devices. This includes external and internal processes such as suppliers, procurement, sales, business development, quality system procedures and consumers should be an integral part of the risk management for the medical device industry.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/images.surferseo.art\/dc52a525-b9aa-4291-9c27-e829f0302fe3.jpeg\" alt=\"ISO 14971 risk management for medical devices\"\/><\/figure>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">What are the components of ISO 14971?<\/h2>\n\n\n\n<p>The ISO 14971 risk management process includes eight components which should be documented in a risk management file:<\/p>\n\n\n\n<ul>\n<li>Risk management plan<\/li>\n\n\n\n<li>Risk Analysis<\/li>\n\n\n\n<li>Risk Evaluation<\/li>\n\n\n\n<li>Risk Control<\/li>\n\n\n\n<li>Evaluation Of Overall <a href=\"https:\/\/stendard.com\/en-sg\/blog\/residual-risk\/\">Residual Risks<\/a><\/li>\n\n\n\n<li>Risk Management Review<\/li>\n\n\n\n<li>Production and Post Production Information<\/li>\n<\/ul>\n\n\n\n<p><\/p>\n\n\n\n<p>Your company may establish each component of the ISO 14971 risk management system by providing adequate and appropriate resources as evidence of the company&#8217;s commitment to risk controls.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/images.surferseo.art\/ba41a1ce-ca8e-4a70-a0a1-fbe63e56714e.jpeg\" alt=\"components of ISO 14971\"\/><\/figure>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Risk Management Plan<\/h3>\n\n\n\n<p>Your organisation shall plan foreseeable medical device risk management activities throughout its life cycle. The plan shall identify risks, define roles and responsibilities, and the product&#8217;s risk acceptability, including methods to verify the implementation of risk control measures and define ways to review post-production information. A single risk management plan could change during the medical device life cycle and should be updated accordingly to remain compliant.<\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Risk Analysis<\/strong><\/h3>\n\n\n\n<p>Your organisation must identify your medical devices&#8217; inherent safety characteristics during risk analysis. After that, your organisation will need to define the hazardous situation and foreseeable sequences of events. The last step would be to estimate the risk based on the severity and occurrence of the harm before and after implementing safety characteristics.<\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Risk Evaluation<\/h3>\n\n\n\n<p>After identifying the hazardous situation, your organisation shall evaluate the risks related to the medical device using the risk acceptability matrix to understand if these risks are within the acceptable risk levels or if there is a need to reduce risk.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/images.surferseo.art\/ca46f74b-3628-4905-99bb-07882a9e4eb4.jpeg\" alt=\"Risk Evaluation\"\/><\/figure>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">Risk Control<\/h3>\n\n\n\n<p>Your organisation shall determine appropriate risk control measures to mitigate the identified risks associated with your medical device to acceptable risk levels. Your organisation will verify risk controls after implementation, and you will need to evaluate the residual risk to judge its effectiveness and if the team shall implement further risk controls. You shall consider risk controls in this ranking of priority order:<\/p>\n\n\n\n<ul>\n<li>Inherent safety by design<\/li>\n\n\n\n<li>Protective measures in the medical device and\/or production process<\/li>\n\n\n\n<li>Information for safety such as warnings and instructions for usage<\/li>\n<\/ul>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Evaluation of overall Residual Risks<\/strong><\/h3>\n\n\n\n<p>After implementing risk controls, your organisation shall conduct a risk evaluation on your medical device&#8217;s overall residual risk acceptability.<\/p>\n\n\n\n<p>If the overall residual risk is acceptable, your organisation shall document the necessary information in the risk management report and include it in the risk management file. Suppose the overall residual risk is not acceptable upon conducting the benefit-risk analysis for all residual risks related to the medical device. In that case, your organisation might need to implement additional measures to manage risk or modify the medical device&#8217;s intended use.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/images.surferseo.art\/a0b0b162-ac15-4673-85dc-3b85a436fb2d.jpeg\" alt=\"Evaluation of overall Residual Risks\"\/><\/figure>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Risk Management Review<\/strong><\/h3>\n\n\n\n<p>Before commercialising your medical device, your organisation shall ensure all the steps in the risk management plan are completed, the overall residual risk is acceptable, and risk management systems are implemented to account for risks from the production and post-production phases. These results will be noted under the risk management report and included in the risk management file.<\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Production and Post Production Information<\/strong><\/h3>\n\n\n\n<p>Your organisation must establish a risk management system to collect and document production-related risk events. Also, your organisation needs to ensure that post-production processes are included in the <a href=\"https:\/\/stendard.com\/en-sg\/blog\/quality-management-system\/\">quality management system<\/a> feeding into the risk management process.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/images.surferseo.art\/637dcc09-d0a8-4f3b-976d-1510ba076275.jpeg\" alt=\"Production and Post Production Information\"\/><\/figure>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">What is the purpose of ISO 14971?<\/h2>\n\n\n\n<p>The purpose of ISO 14971 is to identify hazards and implement risk-based processes throughout the life cycle of the medical device product. It guides the application of risk management systems as part of the regulatory requirements recognised by the medical device regulatory agency.<\/p>\n\n\n\n<p>Compliance is vital so that consumers undergoing a particular clinical procedure are confident that the medical devices or in vitro diagnostic medical devices are safe and verified, stabilising the company&#8217;s reputation.<\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Is ISO 14971 required?<\/h2>\n\n\n\n<p>In the medical device industry, compliance with ISO 14791 risk management is not mandatory, and no certificates will be issued. More specifically, ISO 13485 requires a documented risk management process with reference to ISO 14971.<\/p>\n\n\n\n<p>Since ISO 14971 risk management is an integral part of ISO 13485, ISO 13485 refers to ISO 14971 for detailed guidance on implementing risk management. Medical device regulators will only audit ISO 13485 quality management system. Still, compliance with ISO 14971 is essential for good manufacturing practice, and it suggests that your organisation is committed to providing safe and quality medical devices.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/images.surferseo.art\/e8dc63a4-214d-416b-8cd8-aae118a05d9c.jpeg\" alt=\"Is ISO 14971 required\"\/><\/figure>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">What is the current ISO 14971 standard?<\/h3>\n\n\n\n<p>ISO 14971: 2019 &#8211; Medical devices &#8211; Application of risk management to medical devices is the current revision of this international standard published in 2019.<\/p>\n\n\n\n<p>This ISO 14971 risk management scope applies to medical devices, including <a href=\"https:\/\/stendard.com\/en-sg\/blog\/samd\/\">software as a medical device<\/a> and in vitro diagnostic medical devices. The latest version of the ISO 14971 document requires manufacturers to consider software systems&#8217; security risks.<\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">What is a hazard in ISO 14971?<\/h3>\n\n\n\n<p>The hazards in ISO 14971 are defined as potential sources of harm. Your organisation needs to identify all the possible hazards of your product which requires you to understand the medical device&#8217;s intended use. Annex C.2 of ISO 14971 provides some examples of hazards which can be classified into the following:<\/p>\n\n\n\n<ul>\n<li>Energy hazards &#8211; leakage current, high-pressure fluid injection, ionising radiation and cryogenic effects etc.<\/li>\n\n\n\n<li>Biological and chemical hazards &#8211; bacteria, viruses, corrosive, flammable, toxic etc.<\/li>\n\n\n\n<li>Performance-related hazards &#8211; data systems security, diagnostic information and functionality etc.<\/li>\n<\/ul>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/images.surferseo.art\/32bb79d1-4f1c-421a-a6c5-293552ca0891.jpeg\" alt=\"safety checklist\"\/><\/figure>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\">What is the difference between ISO 14971 and EN ISO 14971?<\/h3>\n\n\n\n<p>The ISO 14971 document is an international standard, and it is intended to be applicable worldwide. However, the EN ISO 14971 document is more of a regional standard designed to be adopted in the European Union. Therefore, if you are planning on commercialising your medical device in the European Union, you must adhere to EN ISO 14971 and the additional risk management requirements required by the EU Medical Device Regulations.<\/p>\n\n\n\n<div style=\"height:40px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Conclusion<\/h2>\n\n\n\n<p>In conclusion, the risk management process for the medical device life cycle is comprehensive. It requires your organisation&#8217;s effort in defining risk acceptability, identifying hazards, performing risk analysis and implementing risk mitigation measures.<\/p>\n\n\n\n<p>Your organisation shall document all risk management processes in a risk management file. A quality management system will allow easier tracking and implementation the ISO 14971 risk management process. Feel free to contact us if you require our consultancy services to help kickstart your risk management system.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Before diving into ISO 14971 Medical device &#8211; Application of risk management to medical devices, we must first understand risk management. Unlike business risk management, ISO 14971 risk management is a process of identifying, analysing, controlling, and preventing failures that can have dangerous consequences in the usage of medical devices. Organisations must conduct risk management [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":3921,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[105],"tags":[],"lang":"en-id","translations":{"en-id":5195,"en-sg":3919},"pll_sync_post":[],"_links":{"self":[{"href":"https:\/\/stendard.com\/wp-json\/wp\/v2\/posts\/5195"}],"collection":[{"href":"https:\/\/stendard.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/stendard.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/stendard.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/stendard.com\/wp-json\/wp\/v2\/comments?post=5195"}],"version-history":[{"count":1,"href":"https:\/\/stendard.com\/wp-json\/wp\/v2\/posts\/5195\/revisions"}],"predecessor-version":[{"id":5198,"href":"https:\/\/stendard.com\/wp-json\/wp\/v2\/posts\/5195\/revisions\/5198"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/stendard.com\/wp-json\/wp\/v2\/media\/3921"}],"wp:attachment":[{"href":"https:\/\/stendard.com\/wp-json\/wp\/v2\/media?parent=5195"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/stendard.com\/wp-json\/wp\/v2\/categories?post=5195"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/stendard.com\/wp-json\/wp\/v2\/tags?post=5195"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}