Risk Management File for Extra Oral RX Equipment

M

mmojica

#1
Hello to everyone:
I offer my apologies because my english language is so bad.
My name is Marcelo Mojica and I work for a Mexican company that manufacture Extra oral X ray equipments.
I observe this is a great forum, and your attitude is always positive and always looking to help others.
For that reason I would like to request your help because I need to make a risk management file to my device, I buyed the ISO 14971 but believe me, that is not easy to me because I never done this before.
Do you have a guide or example that can help me in this issue?
I'll appreciate your generosity.
Thanks in advance for your help.
Best regards.

Marcelo.
 
Elsmar Forum Sponsor

Marcelo

Inactive Registered Visitor
#2
Hello Marcelo and welcome to the Cove!

There?s really no guide in implementing ISO 14971 (ISO TR 24971 is named Guidance on the application of ISO 14971 but it?s a bit misleading, because it only deals with 6 separate topics). There is a handbook from CSA - PLUS 14971 (2nd ed. pub. 2007), but I also think this document does not clearly show how to implement the standard.

One of the reasons for this is that the standard needs to be embedded in the medical device manufacturer design process, and also in the QMS, during the product lifecycle, and there?s no defined way to do that, as the implementation will change for each company.

Regarding examples, it?s even worse, because risk management documentation has confidential information, and people usually do not share those.
 
M

mmojica

#3
Thanks for your answer Marcelo.
Could you help me with a simple question?
The Risk Management Plan is the same that Risk Management File?
I?m sorry if this is an stupid question but I?m a beginner on this area.
At this moment my equipment is under testing process in a Lab in USA and they are requirement me a Risk Management File to my equipment.
My "big goal" is to obtain the FDA approval, and as you know, a lot of tests and paperwork is needed to reach that.
 

Marcelo

Inactive Registered Visitor
#4
No, the risk management plan is created for each device and details how you are going the apply the risk management process to that device.

The risk management file is a document (in fact it is more of a placeholder) for all the information, for example, documents and records, that are created by the risk management process.
 
M

mmojica

#5
Ok Marcelo, thanks for your answer and support.
In my opinion I?m in a big trouble, a lot of work is waiting to me.
One of my "big concerns" is that I understand that risk management process must be implemented from the first stages of design, and in this case, this not was done.
 

Marcelo

Inactive Registered Visitor
#6
One of my "big concerns" is that I understand that risk management process must be implemented from the first stages of design, and in this case, this not was done.
You are correct, the expectation is that risk management is applied during design, not after the product is designed. You will have to create information backwards, and although it may seem simpler, it?s not. My experience is that, in those cases, people only think about the finished device. This is a problem because for the risk management process to be applied, you can?t take into consideration risk control measures already implemented.
 

Ronen E

Problem Solver
Staff member
Moderator
#7
You are correct, the expectation is that risk management is applied during design, not after the product is designed. You will have to create information backwards, and although it may seem simpler, it?s not. My experience is that, in those cases, people only think about the finished device. This is a problem because for the risk management process to be applied, you can?t take into consideration risk control measures already implemented.
I partly disagree.

Risk management can commence at any stage, better late than never. Yes, it's preferable to begin at the beginning, but that's water under the bridge for the OP (as for many others).

I think that it's OK to look at a device and consider the CURRENT risk, taking into account all the control measures already implemented. That would be the "baseline". Then, if additional risk mitigation is necessary, it can be addressed under Risk Control. The only requirement for doing that is to unambiguously identify the design version and state, and the time point at which the evaluation takes place, so that it is extra-clear what the baseline relates to.

To the OP - There is no mandatory regulatory requirement under the FDA to have a risk management file by ISO 14971. In general, the FDA's requirements / expectations of risk management are quite limited and quite vague. I recommend checking what actually comes from the regulation or FDA officials, and what is just a nosie generated by the system.

Cheers,
Ronen.
 

Marcelo

Inactive Registered Visitor
#8
Risk management can commence at any stage, better late than never. Yes, it's preferable to begin at the beginning, but that's water under the bridge for the OP (as for many others).
Well, yes, but I was trying to say ISO 14971 (not risk management in general) was created to be used during design, not after a device is designed.

I think that it's OK to look at a device and consider the CURRENT risk, taking into account all the control measures already implemented. That would be the "baseline". Then, if additional risk mitigation is necessary, it can be addressed under Risk Control. The only requirement for doing that is to unambiguously identify the design version and state, and the time point at which the evaluation takes place, so that it is extra-clear what the baseline relates to.
Well, it depends on how you do it. What I was trying to make clear i that you cannot consider the current risk control measures when identifying hazards and hazardous situations, otherwise, most of the time you would conclude that are nor risk. You need to consider current controls as control. For example, my device uses electricity, and I conclude that my device does not have an electrical hazard because it already complies with specific clauses of IEC 60601. This makes no sense (and I?ve seen this a lot), you use the clauses of IEC 600601 to control the risks.

There is no mandatory regulatory requirement under the FDA to have a risk management file by ISO 14971. In general, the FDA's requirements / expectations of risk management are quite limited and quite vague. I recommend checking what actually comes from the regulation or FDA officials, and what is just a nosie generated by the system
Agreed. But if you do not know risk management, there?s also the possibility that asking you confuse you more :-(
 
M

mmojica

#9
To the OP - There is no mandatory regulatory requirement under the FDA to have a risk management file by ISO 14971. In general, the FDA's requirements / expectations of risk management are quite limited and quite vague. I recommend checking what actually comes from the regulation or FDA officials, and what is just a nosie generated by the system.
Ronen, Thanks for your comments.
Great information about FDA?s requirements, but unfortunately the laboratory that is doing the safety tests to my equipment, is requirement me a Risk File based on a document of 52 pages (provided by the lab) that contain "the minimum" topics that a "good risk file" needs to cover, I investigate a little and I found that all these topics comes from the ISO 14971. That's the reason why I buyed this standard. But one thing is to have the standard, and another is to have the experience to develop a Risk management file.
 

Marcelo

Inactive Registered Visitor
#10
Great information about FDA?s requirements, but unfortunately the laboratory that is doing the safety tests to my equipment, is requirement me a Risk File based on a document of 52 pages (provided by the lab) that contain "the minimum" topics that a "good risk file" needs to cover, I investigate a little and I found that all these topics comes from the ISO 14971.
Are you testing your device to IEC 60601?
 
Thread starter Similar threads Forum Replies Date
D Risk Analysis & Technical File - What detail goes in the Risk Management Report ISO 14971 - Medical Device Risk Management 5
A Defining Expected Service Life in Risk Management File Reliability Analysis - Predictions, Testing and Standards 5
S Medical Device Cybersecurity Risk Management File ISO 14971 - Medical Device Risk Management 2
G Risk Management file for EN 60601-1 3rd test ISO 14971 - Medical Device Risk Management 3
D CAPA FDA Requirements and Guidance related to the Risk Management File 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 6
B Define Fault, Double Fault and Normal Conditions - Preparing a Risk Management File FMEA and Control Plans 1
V ISO 14971: 2007 Risk Management File - Separate file required for each product? ISO 14971 - Medical Device Risk Management 3
S Technical & Risk Management File - Subcontract manufacturer ISO 13485:2016 - Medical Device Quality Management Systems 4
A 21 CFR 820 - Risk Management - Looking for some guidance US Food and Drug Administration (FDA) 3
Sravan Manchikanti Software Risk Management & probability of occurrence as per IEC 62304 IEC 62304 - Medical Device Software Life Cycle Processes 8
R Identify Medical Device characterstics as Annex C of ISO 14971 Risk Management ISO 14971 - Medical Device Risk Management 5
N Device Labeling - Medtronic Ventilator Files (Risk Management documents) Coffee Break and Water Cooler Discussions 2
T How do you define your Hazards? <a Risk Management discussion> ISO 14971 - Medical Device Risk Management 16
adir88 MDR requirement: Risk Management Plan for "each device" ISO 14971 - Medical Device Risk Management 5
C AS9100 Rev D 8.1.1 & APQP - Operational risk management process AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 0
B ATP 5-19 "Risk Management" Misc. Quality Assurance and Business Systems Related Topics 2
N Risk Management besides mandated FDA requirements 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 1
M Identifying Hazards - Risk management process ISO 14971 - Medical Device Risk Management 6
R Risk Management in the Medical Device Industry ISO 14971 - Medical Device Risk Management 4
F Linking an ISO 31000 Risk management SOP to ISO 17025 ISO 17025 related Discussions 2
Ronen E The unbearable insensitivity of risk management language Other Medical Device and Orthopedic Related Topics 1
S ISO 14971 Risk Management - Questions for Hazard identification ISO 14971 - Medical Device Risk Management 2
M Risk/Benefit vs. benefit-risk - Revising an SOP covering Risk Management with the MDR in mind EU Medical Device Regulations 10
R Linking the Processes of Continual Improvement, Change Management, Risk Management, Action Planning, etc? Preventive Action and Continuous Improvement 5
D Risk management according to ISO 14971 - When to document risk controls? ISO 14971 - Medical Device Risk Management 10
J Software for Techfiles and Risk management ISO 14971 - Medical Device Risk Management 1
M Informational ISO TC 210 IEC SC 62A JWG 1 Medical device risk management – São Paulo meeting 2019 Medical Device and FDA Regulations and Standards News 6
M Medical Device News ISO TC 210 IEC SC 62A JWG 1 Medical device risk management – São Paulo meeting 2019 Medical Device and FDA Regulations and Standards News 0
D Where does FMEA fit in your ISO 14971 Risk Management process? ISO 14971 - Medical Device Risk Management 13
M Informational ISO TC 210 JWG 1 meeting in São Paulo – Revision of ISO 14971 and ISO TR 24971 – Medical Device Risk Management Medical Device and FDA Regulations and Standards News 0
T Risk Management Report as per MDR Requirements EU Medical Device Regulations 4
M Medical Device News Health Canada Notice of intent: Strengthening the post-market surveillance and risk management Canada Medical Device Regulations 1
Q Evidence of precautions (clinical evaluation report, risk management report) EU Medical Device Regulations 6
Q Risk / benefit Analysis in Risk Management Report CE Marking (Conformité Européene) / CB Scheme 12
A How to view supplier APQP timeline and do risk management APQP and PPAP 4
O Medical Device EMC Risk Management CE Marking (Conformité Européene) / CB Scheme 4
S ISO 13485:2016 - How I can integrate a risk management approach in our SOPs ISO 13485:2016 - Medical Device Quality Management Systems 1
B Time necessary for all Risk Management activities ISO 14971 - Medical Device Risk Management 2
W Virtual Manufacturer and Risk Management ISO 14971 - Medical Device Risk Management 3
O CQE Handbook - Missing Section VII - Risk Management Misc. Quality Assurance and Business Systems Related Topics 1
F Medical Device HACCP (Hazard Analysis and Critical Control Point) Risk Management ISO 14971 - Medical Device Risk Management 2
J Differences between a Risk Management Plan vs. Production Part Approval Process AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 3
M Free Risk Management Webinar - Design for Quality - May 2017 Risk Management Principles and Generic Guidelines 1
J Will this fulfill the AS9100D Risk Management Requirement AS9100, IAQG, NADCAP and Aerospace related Standards and Requirements 7
A Including all Processes in Risk Management - ISO 13485:2016 ISO 13485:2016 - Medical Device Quality Management Systems 8
F Risk Management vs. FMEA ISO 14971 - Medical Device Risk Management 11
T Using Risk Management in ISO 10993 - Medical Device Accessory 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 4
Q Risk Management - Additional Process in ISO 9001:2015? ISO 9000, ISO 9001, and ISO 9004 Quality Management Systems Standards 3
alonFAI How to define a Risk Based Approach for Supplier Management per ISO 13485:2016 ISO 13485:2016 - Medical Device Quality Management Systems 1
J What ever happened to Medical Device Risk Management, anyway? 21 CFR Part 820 - US FDA Quality System Regulations (QSR) 17

Similar threads

Top Bottom