IGX Solutions

FDA QMSR

FDA's QMSR incorporates ISO 13485:2016 into 21 CFR Part 820, which changes the quality-system and inspection context for medical-device manufacturers. It is a chance to show that the documented quality system and the processes that run it are aligned. IGX360 Insights connects the documented quality system to the process records and evidence behind it.

Jurisdiction
United States
Regulator / Authority
FDA
Status
In force
Relevant instrument / framework
21 CFR Part 820 (Quality Management System Regulation), incorporating ISO 13485:2016 by reference
Effective / key date
2 February 2026
Last reviewed
September 2026

10 ways to get ahead on FDA QMSR

Establish how the work runs today

  • Process discovery
  • Current-state mapping
  • Operating baseline
  • Cross-regulatory

In your words: “We do not know how work really happens”

A governed, connected view of how work runs gives every team the same starting point. It replaces individual descriptions with one baseline that can be queried, owned and kept current.

Know which of your process knowledge you can stand behind

  • Process repository
  • Single source of truth
  • Knowledge governance
  • Cross-regulatory

In your words: “Our process knowledge is fragmented and untrusted”

Content held across Visio, SharePoint, SOPs and spreadsheets works as one source once versions, owners and dates are visible. Then people know which version is authoritative and who to ask.

Prove your compliance with evidence

  • Continuous compliance
  • Control assurance
  • Audit readiness
  • Cross-regulatory

In your words: “We think we are compliant but cannot prove it”

Traceability from obligation through process, owner, system, control and retained evidence lets you show how a duty is met, whenever you are asked.

Bring your documented process and daily work together

  • Design-reality gap
  • Process validation
  • Execution alignment
  • Cross-regulatory

In your words: “Our documented process is not how the work actually gets done”

When the process model and daily execution are connected, the model stays useful and governance reflects real work. Approved workarounds become part of the design.

Turn execution evidence into learning

  • Learning from execution
  • Execution evidence
  • Governed learning
  • Cross-regulatory

In your words: “Our systems tell us what happened, but not why the process failed or what to change”

When execution evidence is retained and connected, the organisation can see not just what happened but why, and what to change.

Connect risks, controls, processes and obligations

  • Risk-control traceability
  • Obligation mapping
  • Connected assurance
  • Cross-regulatory

In your words: “Risks, controls, processes and obligations are disconnected”

A connected process-centric risk model shows which processes create each risk, which controls operate within them and where coverage can be strengthened.

Turn regulatory change into process change

  • Regulatory change impact
  • Obligation-to-process mapping
  • Compliance agility
  • Cross-regulatory

In your words: “When regulations change, we cannot quickly identify every process, control, system and role affected”

Connected impact analysis identifies affected processes, systems, controls, roles and suppliers consistently, so implementation starts from a complete list.

Prepare for the FDA QMSR transition with evidence

  • FDA QMSR
  • Medical device quality
  • Inspection readiness

In your words: “FDA QMSR changes expose process and evidence gaps”

Traceability from requirements through quality processes, controls, records, CAPA and accountable roles in one model shows how the quality system runs.

Make governance shape what people do

  • Governance execution
  • Policy-to-practice
  • Control observability
  • Cross-regulatory

In your words: “Our governance says what should happen, but does not reliably control what people actually do”

Governance that changes tasks, decision thresholds, approvals, escalation and evidence capture is governance you can rely on in operation.

Make your safety-management system shape daily work

  • Safety management system
  • Operational safety assurance
  • SMS embedding
  • Cross-regulatory

In your words: “Safety-management systems do not reliably shape daily work”

When mitigations, competence, occurrence reporting and assurance are embedded in workflow, the safety-management system shapes daily work.

IGX360 Insights supports mapping, evidence and assurance. Regulatory interpretation and accountability remain with the organisation.