H
HeatherC-S
Hi all
I'm in a bit of a pickle and need your help. We made software which is classed as an IVD and are currently undergoing registration for ISO 13485 (2016), we also work to IEC 62304. For risk management we are working to ISO 14971, however there are clashes with the IVDD and by default need to comply with the IVDD. I just want to clarify a few points.
1. Identified risks cover pretty much everything from design of the software, finished software, QMS processes involved with its design and development.
2. Although there is an assigned RPN score this is meaningless as from what I understand no risks can be accepted? Or can risks be accepted once there are suitable controls put in place?
3. All risks (regardless of score) must have a risk-benefit analysis applied to them. Is that correct?
Many thanks
I'm in a bit of a pickle and need your help. We made software which is classed as an IVD and are currently undergoing registration for ISO 13485 (2016), we also work to IEC 62304. For risk management we are working to ISO 14971, however there are clashes with the IVDD and by default need to comply with the IVDD. I just want to clarify a few points.
1. Identified risks cover pretty much everything from design of the software, finished software, QMS processes involved with its design and development.
2. Although there is an assigned RPN score this is meaningless as from what I understand no risks can be accepted? Or can risks be accepted once there are suitable controls put in place?
3. All risks (regardless of score) must have a risk-benefit analysis applied to them. Is that correct?
Many thanks