Problems while documenting the SOUPs used for the software we are developing

#1
Hello everyone

I am having problems while documenting the SOUPs used for the software we are developing,

Do you recommend it to dedicate an special document for the SOUP's and just do references in the other documents?

On the moment I have documented it, in the Software Architecture, since some of the SOUPS are some open source libraries, but what about the Operating System, or the database server?

Until now I have been reading th "Off-The-Shelf Software Use in Medical Devices" to have a better idea what are the suggestions from the FDA

Best regards
 
Elsmar Forum Sponsor

yodon

Staff member
Super Moderator
#2
If you look at 62304, you see an expectation to address SOUP in:
* Software Development Plan (CM and integration / test)
* Risk Management Planning
* Software Requirements
* Architecture (in terms of functional and performance requirements & hw / sw support)
* Verification of the architecture
* Maintenance
* Risk Management
* Change Management
* Configuration Management (including identification)

So having a single, dedicated SOUP doc is probably not possible. We typically do have a single document dedicated to a specific SOUP item that covers the known issues part of risk management, the identification part of configuration management, and the functional requirements and interoperability requirements of the architecture (we also include a level of concern analysis to support a risk-based approach to management and control).

Other aspects are scattered throughout.

The maintenance part is, IMO, rather important and probably doesn't get the attention it deserves. This plays into all the surveillance activities, cybersecurity aspects, and, well, maintenance aspects. This is generally a sizeable section of our Maintenance Plan.
 

normzone

Trusted Information Resource
#3
As a tyro, I had to go look that one up.

Wow, that SOUP sure covers a can of worms.

Wait .... does that sound like a recipe?

" SOUP stands for software of unknown (or uncertain) pedigree (or provenance), and is a term often used in the context of safety-critical and safety-involved systems such as medical software."
 

yodon

Staff member
Super Moderator
#4
Mmm... worm SOUP.

Yes, it's a bit messy.

By the way, since SOUP can be an entry point for hackers, all SOUP in the application should be considered, not just that in safety-critical applications. Of course, greater risk --> higher levels of controls.
 
Thread starter Similar threads Forum Replies Date
K Problems with process equipment ISO 13485:2016 - Medical Device Quality Management Systems 4
A Feedback of typical maintenance problems with LMI digital probes Inspection, Prints (Drawings), Testing, Sampling and Related Topics 0
S New problems exporting to Germany - February 2019 ISO 13485:2016 - Medical Device Quality Management Systems 7
C Resource allocation problems in Software DFMEA FMEA and Control Plans 4
R Tapping problems - 3/8" hot roll pickled & oiled steel - seeking expertise Manufacturing and Related Processes 15
Marc Problems - Contacting Us about Problems (How To - Etc.) Elsmar Xenforo Forum Software Instructions and Help 0
Marc Youtube - Viewing problems Elsmar Xenforo Forum Software Instructions and Help 4
O How do reduce the risk of suppliers having similar problems? Supplier Quality Assurance and other Supplier Issues 4
W Problems with our new Auditor (a Ph.D. with four months experience) ISO 13485:2016 - Medical Device Quality Management Systems 25
L Relying on Suppliers - Most Quality and Warranty problems are caused by Suppliers Supply Chain Security Management Systems 5
M The biggest gaps and problems in QMS or Quality in Automotive Misc. Quality Assurance and Business Systems Related Topics 3
I Request an FDA GUDID Account - Problems Other US Medical Device Regulations 3
S Document Review Problems ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 9
L How to avoid Nonconformance Reoccurrence problems IATF 16949 - Automotive Quality Systems Standard 20
C Software Process Implementation Problems ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 8
K Bottle Labeling Machine Problems - Non conformance in FCMG industry Nonconformance and Corrective Action 8
T Contacting the Supplier's CB vs a Supplier Audit - Nonconformance Problems AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 4
Peter Fraser Problems and Deficiencies with the ISO 9001:2015 Draft ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 12
B Quality problems that cost Millions of dollars (or euros, or pounds, etc.) Quality Manager and Management Related Issues 7
AnaMariaVR2 How Open Innovation is Solving Some of NASA?s Trickiest Problems World News 0
T A survey on problems during ISMS implementation - need help IEC 27001 - Information Security Management Systems (ISMS) 2
S Common Electric Fan Motor Problems Reliability Analysis - Predictions, Testing and Standards 3
M Problems with Competence/Skills Matrix (6.2 Human Resources) AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 5
ScottK Is anyone else having problems uploading Proprietary Names into the DRLM? 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 9
M FDA Warning Letter - Product Association with Search Engine Results - Problems Ahead? US Food and Drug Administration (FDA) 10
M Problems with Unrealistic Customer Expectations Customer Complaints 12
AnaMariaVR2 Chronic Regulatory Compliance Issues Causing Drug Shortages & Safety Problems Pharmaceuticals (21 CFR Part 210, 21 CFR Part 211 and related Regulations) 1
Q Method on how to cause people to solve problems Benchmarking 5
Oldrice Aerospace Registrar Problems - Starting Over? AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 13
M 8.2.4 Problems with Monitoring and Measurement of Product AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 3
R Problems with Supplier - Always with 100% Sorting - No Corrective Actions Supplier Quality Assurance and other Supplier Issues 22
G Product Returns are above average for Labeling Problems Quality Manager and Management Related Issues 4
V Supplier's First Run had Plating Problems - Can they Strip, Re-Plate and PPAP them? APQP and PPAP 14
1 A New Job - Replaced a QM who passed away - BIG Problems Quality Manager and Management Related Issues 25
N English as a Second Language - English problems with Legal Terms Contract Review Process 2
Uriel Alejandro Problems with the Employee Skills Matrix - Document Control System Quality Manager and Management Related Issues 8
L Avoiding Recurrence of the Supplier?s Quality Problems Supplier Quality Assurance and other Supplier Issues 5
M Problems implementing ISO 13485 for Software-Only Medical Device Manufacturers? ISO 13485:2016 - Medical Device Quality Management Systems 4
B How can I resolve Chronic Nonconformance Problems? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 8
S Problems with the application of EN 62366:2008 IEC 62366 - Medical Device Usability Engineering 13
F Can you tell me if this table is correct? Gage R&R Problems Gage R&R (GR&R) and MSA (Measurement Systems Analysis) 12
D Quality Metrics to use to solve Problems Quality Tools, Improvement and Analysis 5
P Self Motivation - How to keep it when overwhelmed with problems? Career and Occupation Discussions 13
S Systemic Problems Identified in Audit and How to Fix Them IATF 16949 - Automotive Quality Systems Standard 10
T Lollipop Production Line Problems - Defectives and Root Cause Analysis Reliability Analysis - Predictions, Testing and Standards 6
T Big problems with Inspection - Manual Operation - Needs experts Inspection, Prints (Drawings), Testing, Sampling and Related Topics 27
C Efficient Supplier Development and Problems with Buyers Supplier Quality Assurance and other Supplier Issues 5
V Common Coating Problems in Refinery Manufacturing and Related Processes 1
S What are the common Problems preventing (Gaps) Implementation of ISO 14001? ISO 14001:2015 Specific Discussions 7
A Problems in Implementation of ISO 9001 - How to React? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 5

Similar threads

Top Bottom