The Medical Device Single Audit Program (MDSAP) is a certification program for the quality management system (QMS) of manufacturers who sell medical devices. MDSAP audit checklists help ensure compliance with ISO 13485:2016 and the verification of this by regulatory authorities. The MDSAP Audit Checklist is used to assess the readiness of medical device manufacturers for a MDSAP certification.
1.1.1 Is objective evidence available to demonstrate that each site has defined, planned, and implemented MDSAP QMS quality management system?
1.1.2 Has each site improved the effectiveness of its QMS through the use of quality objectives, audit results, analysis of data, corrective and preventive actions, and management review?
1.1.3 Has each site identified the processes needed to implement MDSAP throughout the organization?
1.1.4 Have criteria and methods been established to ensure that the operation and control of these processes are effective?
1.1.5 Has a quality manager been appointed with defined responsibility and authority for ensuring that the management system related to quality is implemented?
1.1.6 Are processes measured, monitored, and analyzed with appropriate actions taken to achieve planned results and continual improvement?
1.2 Quality Management System Documented information
1.2.1 Are documents required for the quality management system properly controlled and managed?
1.2.2 Has each site implemented the MDSAP QMS P0002 in the following aspects:
a. Developing, reviewing and approving documents for adequacy before they are issued?
b. Reviewing, updating as necessary?
c. Re-approving changed documents to ensure adequacy prior to use?
d. Identifying and maintaining the current revision of documents?
e. Ensuring current documents remain legible, readily identifiable and retrievable?
f. Identifying and controlling documents of external origin?
g. Notifying staff of new, revised or cancelled documents?
h. Archiving superseded or obsolete documents?
i. Preventing unintended use of obsolete documents retained for any purpose?
1.2.3 Has the established MDSAP Quality Manual been implemented, including:
a. Scope of quality system, details and exclusion justifications?
b. MDSAP QMS Procedures?
c. Sequence and interaction of processes or reference to them?
1.2.4 Are records properly managed and controlled?
1.2.5 Has each site implemented the MDSAP QMS P0007 in the following aspects:
a. Identification?
b. Recording and error correction?
c. Electronic record identification and back up?
d. Access?
e. Retention?
f. Disposal?
g. Archiving?
1.2.6 Do the record control procedures cover reports, correspondence, and technical records, i.e. collection reports, analytical worksheets, equipment data recordings, etc.?
1.2.7 Do record control procedures cover quality records such as procedures, audit reports, corrective action reports, and management reviews?
2.1 –Leadership and Commitment - MDSAP Quality Manual – Section 5.1 Leadership and Commitment
2.1.1 Has the RAC demonstrated commitment to the QMS development and improvement by:
a. Communicating to the staff the importance of meeting customer as well as regulatory & legal requirements?
b. Communicating the established quality policy and quality objectives?
3.1.2 Is quality management system planning carried out to meet the requirements of the quality management system and the quality objectives?
3.1.3 If applicable, is there evidence that the integrity of the quality management system is maintained during changes?
4.1 Support – Resources, Competence and Awareness
PROCEDURE MDSAP QMS P0014 – Training
MDSAP Quality Manual – Support – Section 7.1 Resources, Section 7.2 Competence and Section 7.3 Awareness
4.1.1 Is objective evidence available to demonstrate that the MDSAP site has adequate infrastructure needed to implement the quality management system and to maintain its effectiveness?
4.1.2 Has the MDSAP site available resources to enhance customer satisfaction by meeting customer requirements?
4.1.3 Are personnel performing work affecting quality competent on the basis of appropriate education, training, skills, and experience?
4.1.4 Has the MDSAP site determined the necessary competence for personnel performing activities affecting product quality?
4.1.5 Are personnel who have been assigned QMS responsibilities qualified and deemed competent based on skills, experience, and education & training requirements?
4.2 Support – Internal Communication
MDSAP Quality Manual – Support - Section7.4 Communication
4.2.1 Is there communication between various levels and functions with respect to the processes of the management system?
5.1 Operation – Operational planning and control
MDSAP Quality Manual – Operation, Section 8.1 Operational planning and control
MDSAP Audit Procedures and Forms
MDSAP Assessment Procedures and Forms
MDSAP products and services: Assessment documentation, audit reports and manufacturer certificates
5.1.1 Has the MDSAP site planned and developed the processes needed for their products and services?
5.1.2 Is objective evidence available to demonstrate that the MDSAP site’s management ensures that the MDSAP staff uses defined procedures for performing work, for assuring work is reproducible, and for maintaining information integrity?
5.2 Operation – Release of Product and Services
MDSAP Quality Manual – Operation, Section 8.6 Release of products and services
MDSAP Audit Procedures and Forms
MDSAP Assessment Procedures and Forms
MDSAP products and services: Assessment documentation, audit reports and manufacturer certificates
5.2.1 Does MDSAP measures and monitors product and services characteristics to verify that product and services requirements have been met?
5.2.2 Is there objective evidence that product and services acceptance criteria have been met?
5.2.3 Do records identify the person authorizing release of the products and services?
5.2.4 Are all specified activities performed before product release and service delivery?
5.2.5 If there are instances in which all specified activities have not been performed before product release or service delivery, has a relevant authority, or as appropriate the customer, been informed and approval gained?
5.3 Operation – Control of Non-conforming outputs
PROCEDURE MDSAP QMS P0009 – Nonconformity and Corrective Action
MDSAP Quality Manual – Operation, Section 8.7 Control of nonconforming outputs
5.3.1 Does each MDSAP site- ensure that a non-conforming output is identified and controlled to prevent unintended use or delivery?
5.3.2 Has each MDSAP site implemented the MDSAP QMS P0009 in the following aspects:
a. Assignment of responsibility for halting work where appropriate and ensuring work resumption upon resolution of non-conformity:
b. Making appropriate disposition on a non-conforming output:
c. When necessary, notifying the customer of the non-conformance.
5.3.3 Is non-conforming output corrected and subjected to re-verification after correction to demonstrate conformity?
5.3.4 When non-conforming output is detected after delivery or use has started, is appropriate action taken regarding the consequences of the non-conformity?
6.1 Performance Evaluation and Improvement – General
6.1.1 Is objective evidence available to demonstrate that MDSAP has defined, planned, and implemented the monitoring and measurement activities needed to assure conformity and to achieve improvement?
6.1.2 Are suitable methods used to measure and monitor these key processes?
6.1.3 Are the intended purposes of the key processes quantified by process parameter specifications, by specifications for the product output of the process or by some other means?
6.2 Performance Evaluation and Improvement – Monitoring, measurement, analysis and evaluation - Customer Satisfaction - Complaints & Feedback
6.2.1 Are complaints properly documented, investigated and resolved?
6.2.2 Is feedback other than complaints properly documented and reviewed for opportunities to improve processes, services and work products?
6.2.3 Has each MDSAP site implemented the MDSAP QMS P0011 in the following aspects:
a. Receiving, documenting and categorizing complaints and feedback about any process, internal or external, that impacts MDSAP components’ processes, services or work products?
b. Processing the complaint?
c. Determination and investigation of adverse impact?
d. For complaints with adverse impact, initiation of corrective action process to resolve the complaint or elevate the issue to the appropriate level for resolution?
e. Including complaints/feedback in audits and internal management reviews to ensure that follow-ups were effective in correcting the root causes?
f. Review to determine if actions taken in response to complaints or feedback were sufficient and appropriate?
g. Closing complaints after corrective action has been completed?
6.2.4 Is complaint data tracked and trended in the CAPA system?
6.2.5 Is customer satisfaction information recorded and monitored?
6.2.6 Is customer feedback analyzed for trends and improvements?
6.3 Performance Evaluation and Improvement – Analysis and Evaluation
6.5.1 Does top management review the quality management system at planned intervals (at least annually), to determine the fitness and effectiveness of the quality system in achieving the stated quality objectives?
a. Does management review include management as well as the quality system manager?
6.5.2 Do management reviews include at a minimum:
a. Suitability of policies and procedures?
b. Changes that could affect the quality management system?
c. Outcome of recent audits?
d. Status of corrective and preventive actions and follow-up from prior management reviews?
e. Customer complaints/feedback?
f. Process performance?
g. Product conformity, including product related customer requirements?
h. Recommendations and opportunities for improvement?
i. Resources and staff training?
6.5.3 Do reviews evaluate the need to change the quality management system, including quality policy and quality objectives?
6.5.4 Are management reviews recorded to include:
a. Summary of findings
b. Decisions and actions related to improvement of the effectiveness and efficiency of the quality management system and its processes
c. Improvements related to customer requirements
d. Determination of resource needs
6.5.5 Are management reviews maintained and subsequent actions assigned, planned and monitored to completion?
6.6 Performance Evaluation and Improvement - Improvement – Nonconformity and Corrective Action
6.6.1 Does each MDSAP site identify, document, investigate, track and correct the causes of non-conformances?
6.6.2 Has each MDSAP site implemented the MDSAP QMS P0009 in the following aspects:
a. Identifying non-conformities, including those contained in customer complaints?
b. Investigation to examine the extent?
c. Determining the root cause of non-conformity to prevent recurrence?
d. Determining and implementing corrective actions needed?
e. Implementing corrective actions appropriate to the magnitude of the problem?
f. Recording results of corrective actions?
g. Reviewing corrective actions taken to determine their effectiveness?
h. Stopping work if necessary until the non-conformance is addressed?
i. Approval of by the initiator’s immediate manager of the correction action?
j. Closing the corrective action when there is objective evidence that the action is completed and effective?
6.6.3 Do procedures require that processes/services/work products will not be used until the problem is resolved and verified by the appropriate manager and quality system manager?
6.6.4 For corrective actions initiated due to complaints, are customers contacted to confirm their concerns have been met prior to closing corrective actions?
6.6.5 Do procedures ensure relevant information on corrective actions is reviewed during audits and submitted for management review?
6.7 Performance Evaluation and Improvement - Improvement - Continual Improvement
6.7.1 Is the site engaged in continual improvement of its work products, processes and services according to an established procedure?
6.7.2 Analysis of Data: Are appropriate data collected and analyzed to determine quality management system suitability and effectiveness, and to identify possible improvements?
6.7.3 How are data analyzed to provide information and identify opportunities for improvement on:
a. Customer satisfaction and/or dissatisfaction?
b. Conformance to customer requirements?
c. Characteristics of processes, products, and trends of quality characteristics?
d. Contractors’ performance?
6.7.4 Is there objective evidence available to demonstrate that the site’s management has created an environment that empowers and encourages staff to actively seek opportunities for improvement of performance in processes, services and products?
6.7.5 Are processes to achieve continual improvement of the quality management system planned and managed?
6.7.6 How is continual improvement of the quality management system facilitated through use of:
a. Quality policy?
b. Quality objectives?
c. Internal Audit results?
d. Analysis of data?
e. Corrective actions?
f. Management reviews to include reviews of corrective action reports, audit reports, and customer feedback?
Please note that this checklist template is a hypothetical appuses-hero example and provides only standard information. The template does not aim to replace, among other things, workplace, health and safety advice, medical advice, diagnosis or treatment, or any other applicable law. You should seek your professional advice to determine whether the use of such a checklist is appropriate in your workplace or jurisdiction.
