ISO 13485 from zero, episode six: production controls and process validation.

ISO Cloud Consulting editorial team

Making the device the same way every time needs controlled production conditions, cleanliness requirements, a batch record that supports traceability, and validation of any process whose output cannot be fully verified. Validation runs through installation, operational and performance qualification, and production software needs validating too.

Watch on YouTube

What does episode six cover?

This is episode six of ISO 13485 from zero. Design is done, suppliers are controlled, and now the device has to be made, the same way, every time. This episode covers production controls, traceability and the validation of processes that cannot be fully verified.

What are controlled production conditions?

Production must be planned and carried out so that product conforms to specification. In practice that means documented procedures and work instructions where needed, qualified infrastructure, monitoring and measurement at the right points, defined release, and labeling and packaging operations under control.

Template for this step: the batch record, DHR index and product release workbook are in the ISO 13485 Production & Traceability Kit ($99).

How do you control cleanliness and contamination?

Where it matters for the device, ISO 13485 expects documented requirements for product cleanliness, and control of the work environment and of contamination. That might mean cleanroom classifications and monitoring for some products, or simply defined cleaning and handling for others. Decide what your devices need, write it down, and keep the monitoring records.

What is a device history record?

Often called the batch record. For each batch or unit, it shows the quantity manufactured and approved for distribution, and allows traceability. It should identify the materials and component lots used, the equipment, the key process parameters, the inspection results, any nonconformances, and the release by an authorized person.

How much traceability do you need?

Define the extent of traceability for each device, based on its risk and the regulations. For implantable devices, ISO 13485 expects traceability of components, materials and, where relevant, environmental conditions. Make sure you can follow a device forwards to the customer and backwards to its inputs.

Which processes need validation, and how?

Any process whose output cannot be, or is not, verified by later monitoring or measurement must be validated. Typical examples are sterilization, sealing of sterile barrier packaging, molding, welding and bonding.

Validation usually runs in three steps. Installation qualification confirms the equipment is installed correctly. Operational qualification establishes the process window that produces good product. Performance qualification shows the process consistently produces good product under normal conditions.

Does software used in production need validation?

Yes. Software used in production and service, such as automated test equipment, label printing software or machine control software, must be validated for its intended use before first use, and after changes, in proportion to the risk.

By the end of this episode's work you should have work instructions where needed, environment and cleanliness requirements, a batch record design, defined traceability, a list of processes needing validation with a plan, and an inventory of production software. Next episode: complaints, vigilance and post-market surveillance.

Where can you get production and validation templates?

The ISO 13485 Production and Traceability Kit and the Process Validation IQ/OQ/PQ Pack cover these areas. For software, see the ISO 13485 Software Validation Kit, or read the process validation guide.

Free sample

Get free sample pages from the ISO 13485 Starter Kit

Quality manual pages, the gap assessment workbook and the Document Control SOP. Real, unedited pages so you can judge the files before you buy.

You will also get occasional template updates and guidance. Unsubscribe any time. See our privacy policy.

Back to blog

Leave a comment

Frequently asked questions

Which processes must be validated under ISO 13485?

Any process whose output cannot be, or is not, verified by later monitoring or measurement, such as sterilization, sealing sterile barrier packaging, molding, welding and bonding.

What are IQ, OQ and PQ?

Installation qualification confirms correct installation; operational qualification establishes the process window; performance qualification shows consistent good product under normal conditions.

What goes in a device history record?

Quantity manufactured and approved, material and component lots, equipment, key process parameters, inspection results, nonconformances and release by an authorized person.

Does production software need validation?

Yes, for its intended use before first use and after changes, in proportion to risk.

Online course

ISO 13485:2016 Lead Implementer Course (Online, Certificate of Completion)

Learn this topic properly: short lessons, worksheets with model answers, a 100% pass mark on every lesson quiz and a certificate of completion. Unlimited access for $399.

ISO 13485 templates for this topic

Editable Word and Excel files. Instant download. Licensed for one organization.