Medical Devices: Linking Design Changes to Risk Controls

Connect a device design modification to intended use, risk management, verification, validation, suppliers and regulatory change assessment.

ISO Toolkits Editorial Team · Practical case based analysis · Reading time: approximately 7 min

A component change is controlled only when its consequences for intended use, hazards and verified performance are understood. The practical challenge is to select a response supported by evidence across the operating interfaces: Evaluate change significance before approving new materials.

This illustrative case is assessed through seven operational junctions, each identifying a real decision, a plausible failure route and records that could support management assurance. The recommended methods remain subject to the organization’s own risks, laws and contracts.

Illustrative scenario. A manufacturer proposes a revised polymer component to resolve a recurring assembly issue in a reusable medical device accessory.

Scope and limitations. Illustrative design control scenario, not a regulatory opinion about a specific device. Jurisdictional change notification and safety obligations must be assessed by qualified personnel.

Standards and applicability. Medical device design controls must maintain an unbroken relationship among user needs, design inputs, verification, validation, residual risk and production configuration. A supplier material certificate may be necessary evidence, but it cannot establish every consequence of a changed polymer, especially for patient contact, reprocessing or long term reliability.

ISO 13485 structures device quality management while ISO 14971 structures device risk management. Regulatory reporting, submissions and significant change classifications are assessed under laws in each market. Passing an ISO audit does not, by itself, create authorization for an altered device to be placed on that market. Consult ISO 13485:2016, medical device quality management and ISO 14971:2019, medical device risk management for the official publication scope.

The analysis begins at the operating interface where the condition became visible. The control system should be judged by what personnel can establish with records, observation and the actual authority to act.

Medical-device engineer examining a precision component in a laboratory — **Editorial illustration:** Identify the intended change and claims.

01Identify the intended change and claims

Define the exact polymer, supplier, geometry, manufacturing route and affected device variants. Record what is changing and what is explicitly unchanged, including intended use and existing claims.

A “like for like” description may conceal different biocompatibility, sterilization or mechanical properties. Change classification requires evidence rather than purchasing terminology.

Open controlled design change and link it to the current design history, risk file and regulatory product configuration.

Evidence to examine. Change request, device configurations, user needs and approved design records. Compare source records with the implemented control, noting any disagreement that could change the decision.

02Revisit hazard scenarios and risk controls

Consider mechanical failure, material interaction, cleaning, reprocessing, misuse and user contact scenarios affected by the new component. Review previously accepted risks and control effectiveness.

A stable residual risk rating in a spreadsheet does not prove the new material has the same behavior. The basis for probability and severity judgments should be challenged.

Update risk management documentation where necessary and ensure each changed control has a measurable verification path.

Evidence to examine. Hazard analysis, risk evaluation rationale, risk control mapping and review approval. Compare source records with the implemented control, noting any disagreement that could change the decision.

Decision point. Decide who has authority to accept the immediate risk and which objective evidence would justify restoring normal operations. Make any time limited approval visible to affected teams.

03Specify verification requirements

Derive objective tests from relevant design inputs, such as dimensions, force limits, compatibility, ageing or environmental exposure as applicable to the device.

Passing supplier inspection does not verify the fully assembled device under foreseeable operating conditions. Validation may also be needed to confirm user facing needs.

Use justified test methods, acceptance criteria, sample rationale and appropriate independence or review.

Evidence to examine. Approved protocols, raw results, deviations and verification conclusions. Compare source records with the implemented control, noting any disagreement that could change the decision.

04Evaluate suppliers and process capability

Assess material certificates, change notifications, traceability and process controls at the source. Confirm that new moulding or assembly parameters do not introduce defects.

A qualified supplier for the old formulation is not necessarily qualified for the new one. Control of outsourced processing must match critical product characteristics.

Approve suppliers and production processes through risk based evidence and ensure records link to each device lot.

Evidence to examine. Supplier assessment, specifications, process validation decisions and incoming tests. Compare source records with the implemented control, noting any disagreement that could change the decision.

Evidence check. The decisive verification at this junction concerns evaluate suppliers and process capability. Check whether the approved response can be reconstructed using supplier assessment, specifications, process validation decisions and incoming tests.

Medical-device designer evaluating specifications at a workstation — **Editorial illustration:** Supporting view of evaluate suppliers and process capability.

05Determine regulatory and labelling implications

Regulatory specialists evaluate whether modifications affect submissions, technical documentation, safety reports, device identifiers or instructions for use under applicable markets.

ISO 13485 conformity does not itself determine regulatory change classification. Different legal frameworks may reach different filing or notification conclusions.

Keep the regulatory determination connected to design approval, market availability and implementation timing.

Evidence to examine. Regulatory assessment, approved labelling, jurisdictional decisions and release restrictions. Compare source records with the implemented control, noting any disagreement that could change the decision.

Evaluate decisionEvaluate change significance before approving new materials

Connect decisionConnect hazard analysis to measurable design inputs

Verify decisionVerify technical outputs and validate intended use performance where needed

Review decisionReview regulatory obligations and production transfer before release

06Validate use and transfer to manufacturing

Where needed, validate that device performance supports intended user needs in representative conditions. Transfer design outputs and risk controls into manufacturing and service documentation.

A passing bench test may miss cleaning behaviour, user interaction or assembly variability. Acceptance should account for the device’s context of use.

Train production and inspection personnel, manage old/new configurations and segregate inventory until approved transition.

Evidence to examine. Validation reports, transfer checklist, training, changeover reconciliation and lot traceability. Compare source records with the implemented control, noting any disagreement that could change the decision.

Audit challenge. Sample at least one ordinary operating period and one high pressure or exceptional condition. Compare what staff do with the controlled process and investigate discrepancies without rewriting history.

07Use production and post market information

Watch early production nonconformities, complaints, service experience and relevant surveillance feedback for unexpected hazards.

Design change closure on the release date ignores how the altered component performs over time. New information may require revisiting residual risk.

Define a suitable post implementation review and clear escalation when new evidence challenges risk acceptability.

Evidence to examine. Complaint trending, nonconformance review, effectiveness conclusion and updated risk file. Compare source records with the implemented control, noting any disagreement that could change the decision.

Implementation priorities. Evaluate change significance before approving new materials; Connect hazard analysis to measurable design inputs; Verify technical outputs and validate intended use performance where needed; Review regulatory obligations and production transfer before release. These are practical checkpoints for this example; local procedures must define the actual sequence and decision owners.

Closing Perspective

A component change is controlled only when its consequences for intended use, hazards and verified performance are understood. In this case, closure depends on the ability to verify technical outputs and validate intended use performance where needed while retaining the earlier decision history.

For this particular case, the next review should challenge review regulatory obligations and production transfer before release. The final operating stage provides a suitable evidence trail: Complaint trending, nonconformance review, effectiveness conclusion and updated risk file.