How To Structure Quality Management System Documentation According To ISO 13485
How To Structure Quality Management System Documentation According To ISO 13485
Of course, being the international standard for Quality Management Systems in the medical device
industry, ISO 13485 does require certain documentation (see this article: List of Mandatory
Documents required by ISO 13485:2016). But, that documentation serves a number of purposes –
and not one of them involves making your company simply appear to be compliant.
So, when you set out to create your QMS documentation, your focus should be on efficiency, and
on creating only those processes and documents that will benefit your organization.
Quality Policy
Quality Manual
Procedures and Work Instructions
Quality Plans and Records
Quality Manual. Clause 4.2.2 of ISO 13485:2016 states that the Quality Manual should include
those clauses that are applicable to the organization, with a reason given for any clauses omitted.
The contents of the manual, as well as the overall structure, are going to be dependent on the
characteristics of the organization itself, such as size, operational complexity, and staff
competencies. While a small company can probably document their entire Quality Management
System in a single manual, a large multi-national company may need several Quality Manuals, plus
all the other required documents.
You can learn more about how to write an effective Quality Manual in this article: ISO 13485: How
to write a short quality manual.
Quality Policy. The Quality Policy is a statement of the company’s commitment to quality, to
continual improvement, and to fulfilling its legal and regulatory obligations. Basically, it outlines
your organization’s quality goals, which are defined by quantifying its quality objectives. Some
companies choose to use the Quality Policy for promotional purposes; you’ll want to display it on
the premises and on the company website, so keep it simple and concise.
Quality procedures. The quality procedures are the very backbone of an organization’s QMS.
Their purpose is to establish processes that will ensure the company’s activities conform to ISO
13485 requirements. Quality procedures come in all shapes and sizes. They can be descriptive,
such as in narrative form; they can be in a more structured format, like tables; they can be more
illustrative, such as a flow chart; or they can be a combination of any or all of the above.
identification of changes, date of review and approval, and version of the document, in
accordance with the established practice for document control
a description of the activities in the procedure (this is the main body of the procedure) –
describing what should be done, how, when, where, and by whom. In some cases, the
“why” should be clarified as well, plus the inputs and the outputs of the activities,
including the necessary resources.
appendices, if needed
Work instructions. You can include work instructions as a part of a procedure, or simply reference
them in the procedure. Work instructions are typically structured in the same way as the
procedures, and cover the same elements; but, the work instructions provide greater detail about the
activities that need to be performed, with an emphasis on the sequence of steps to be taken, the
tools and methods to be used, and the accuracy requirements. They can also include provisions for
any risk related to the activity, how to mitigate it, and its potential impact on safety, performance,
and compliance with regulatory requirements if not managed properly.
The use of competent personnel, and adequate staff training, will eliminate the need for highly
detailed work instructions. You can learn more on this topic in the article Using Competence,
Training and Awareness to Replace Documentation in your QMS.
Records. These are the low-level documents that provide evidence that a process is in place and
performed according to the procedure or work instruction. For example, inspection records show
that an inspection was performed, along with some specific findings.
Click here to download a free white paper Checklist of Mandatory Documentation Required by
ISO 13485:2016.