Many regulatory requirements demand that manufacturers define processes and procedures. Such requirements include, for example, EU regulations (MDR and IVDR), standards such as ISO 13485, IEC 62304, and ISO 14971, and the FDA.


On this page, you will find references to articles on processes and procedures:

  1. Articles on processes and procedures in general
  2. Articles on individual processes and procedures
  3. Information on support for processes and procedures

1. Articles on processes and procedures in general

a) Differentiation between process instructions and standard operating procedures

The description of processes and procedures differs in their level of granularity. Processes describe WHAT is done. Standard operating procedures describe HOW something is done.

However, regulatory requirements do not always distinguish precisely between the two.

All instructions must ultimately determine

  • who does what, when, in what order, and how
  • and which input is converted into which output.

b) Articles

The processes and procedures are part of quality management. This overview page provides a helpful introduction to the topic of quality management.

The article on creating process and standard operating procedures is helpful. This should only be the task of the QM representative for selected processes.

Once the processes have been defined, they must be subjected to process validation.

Manufacturers should note the difference between process orientation and process management.

2. Articles on individual processes and procedures

a) Development

All manufacturers must define a development process. They should understand the boundaries and interactions between the development plan and process to do this.

Many manufacturers use agile development models for software development. On the other hand, documentation should follow a model more akin to the V-model.

Part of development involves risk management or the risk management process. Here, manufacturers must also analyze the risks posed by inadequate processes, for example, with a process FMEA (pFMEA).

b) Post-production phase

The processes must cover the entire life-cycle of the devices:

3. Support

The Johner Institute helps manufacturers of medical devices to establish lean and standard-compliant processes and procedures.

This enables you to develop and launch your devices quickly and safely in the planned time and at the scheduled cost.

Contact us so that we can draw up a plan together on how you can establish these processes and procedures in a short time and at minimal cost.

Understanding and avoiding deviations and nonconformities

Deviations, nonconformities, errors, findings, observations, and other terms are often used mistakenly synonymously. Even standards explicitly contradict each other when defining individual terms. This article clarifies, 1. Nonconformities: The basics 1.1 Definitions 1.1.1 Nonconformity ISO 9000:2015 defines nonconformity as “non-fulfilment of a requirement.” It equates this term with “error.” ISO 13485 contradicts this. This standard…


QM document control: How many fail audits

Document control is a documented procedure that specifies how documents are created, reviewed, approved, labeled, distributed, and updated. Organizations certified according to ISO 9001 or ISO 13485 are obliged to document control. 1. Subject matter of document control It is obvious that document control is about documents. What is less obvious is what documents are.…


Software maintenance: How to avoid typical audit pitfalls

Software maintenance is the phase in which software is further developed, e.g., with the objective of According to the FDA, 79% of all bugs occur during software maintenance. Accordingly, some regulations address this topic. Regulatory requirements for software maintenance Requirements of the Medical Device Regulation MDR (2017/745) The Medical Device Regulation requires medical device manufacturers…