The QMSR Is Here: First Priorities for Medical Device Manufacturers

The FDA’s Quality Management System Regulation (QMSR) marks one of the most significant regulatory updates for medical device manufacturers in decades. By incorporating ISO 13485:2016 into the FDA regulatory framework, the agency is moving toward a more globally harmonized approach to quality system regulation.

For many companies, however, the most pressing question is not theoretical:

What should manufacturers do now?

The good news is that the transition to QMSR does not require organizations to rebuild their quality systems from scratch. But it does require a thoughtful review of how existing quality systems align with both ISO 13485 requirements and FDA-specific regulatory expectations.

What actually changed

The most important change introduced by the QMSR is the FDA’s decision to align its quality system regulation with ISO 13485:2016 – Medical devices: Quality management systems – Requirements for regulatory purposes.

Rather than maintaining a separate quality system framework, FDA has incorporated ISO 13485 into 21 CFR Part 820, creating a regulatory structure that closely mirrors the internationally recognized standard.

This change has several implications, starting with manufacturers must ensure their quality systems meet ISO 13485 requirements. FDA inspections will evaluate compliance using the ISO-based framework, although certain FDA-specific requirements remain in Part 820 and must still be addressed.

For companies already certified to ISO 13485, this alignment may simplify regulatory compliance by reducing the need for parallel quality system structures.

What didn’t change

Despite the structural shift toward ISO 13485, many of the core expectations of FDA inspections remain unchanged.

Manufacturers will still be expected to maintain effective systems for design controls, corrective and preventive action (CAPA), complaint handling, process validation, supplier controls, and document and record management.

These elements have always been central to FDA’s quality system oversight and remain critical under the QMSR framework.

In other words, the QMSR does not introduce entirely new quality principles. Instead, it formalizes a framework that many manufacturers are already familiar with through the previous version of 21 CFR 820.

First steps for manufacturers

Organizations preparing for QMSR should begin with a structured review of their current quality systems. The goal is not to reinvent existing processes but to identify areas where adjustments may be needed to align with the ISO-based framework.

Several practical steps can help manufacturers begin the transition.

Conduct a QSR-to-QMSR Gap Analysis

A structured gap analysis comparing current quality system procedures with ISO 13485 requirements is the most effective way to identify transition priorities.

This analysis should evaluate quality system documentation, risk management integration, supplier controls, internal audit processes, and management review activities.

Review Quality System Terminology

Because the QMSR adopts ISO terminology, some organizations will need to update their documentation to align with ISO language and structure.

Strengthen Risk-Based Thinking

ISO 13485 emphasizes the role of risk management throughout the product lifecycle. Manufacturers should ensure risk considerations are clearly integrated into quality system processes such as design controls, supplier management, and post-market activities.

Evaluate Internal Audit Programs

Internal audits will play a critical role in confirming QMSR readiness. Audit programs should reflect the ISO-based framework and ensure that both ISO and FDA-specific requirements are addressed.

The Biggest Transition Risks

While the QMSR transition may appear straightforward on paper, several areas present potential challenges for manufacturers.

Assuming Compliance Without Verification

Organizations already certified to ISO 13485 may assume they are fully prepared for QMSR. However, ISO certification alone does not guarantee compliance with FDA-specific regulatory requirements.

A careful review of FDA expectations remains essential.

Documentation Misalignment

Differences in terminology and document structure between existing QSR-based systems and ISO-based systems may require updates to procedures, policies, and quality manuals.

Incomplete Risk Integration

Some organizations have implemented risk management primarily within design controls. Under ISO-based quality systems, risk considerations should be integrated across multiple processes.

Inspection Preparedness

FDA inspections under the QMSR framework may emphasize the interaction between processes rather than reviewing individual procedures in isolation. Manufacturers should ensure that quality system processes are well integrated and consistently implemented.

A Strategic Opportunity

Although the QMSR transition introduces new regulatory considerations, it also provides an opportunity for manufacturers to strengthen their quality management systems.

Organizations that use the transition period to clarify procedures, strengthen process controls, improve risk management integration, and enhance internal audit programs will be better positioned for both FDA inspections and global regulatory compliance.

In many cases, the QMSR transition is less about creating new systems and more about ensuring that existing systems are coherent, well-documented, and consistently implemented.

The Bottom Line

For most medical device manufacturers, the QMSR transition should begin with a simple principle. Understand what changed, confirm what remains the same, and systematically evaluate how your quality system aligns with the new regulatory framework.

Companies that approach the transition thoughtfully will find that QMSR does not fundamentally alter the principles of quality management. Instead, it reinforces them within a globally harmonized structure.