Services: Product Life Cycle Management-Device

For Medical Devices Industry

Medical Device Consultant: Learn About our Experts

Whether you need medical device consultant support with New Product Development, Compliance Assurance, or help to navigate a 483, Warning Letter, or Consent Decree, Regulatory Compliance Associates®  can help. Our medical device consultants have a proven track record of success and can negotiate the potential minefield of medical devices with insight, hindsight, and the clear advantage of our breadth and depth of knowledge and experience.

Our services highlighted in this handout include:

  • Regulatory Support for New Product Development
  • Compliance Assurance
  • Quality Systems
  • Remediation Strategy & Support
  • Strategic Consulting
  • Additional Regulatory Services

The regulatory process surrounding the medical device industry involves a strict adherence to pre/post market compliance throughout a device’s life-cycle. Even a single compliance issue you have can turn into a significant effect on your business. RCA’s medical device consultants can help guide you through any stage of this strategic process, with capabilities during product development through the regulatory clearance/approval of your product.

Our team of over 500 industry experts — including former FDA officials and other leaders in the field of medical device regulation — will work with your company to create a quality assurance and regulatory compliance approach tailored to your products and regulatory needs. RCA works with both international Fortune 100 companies and small local start-ups, as well as law firms requesting remediation for warning letters, 483’s, import bans or consent decrees. We offer expertise in a variety of medical fields, such

 

Cybersecurity

For medical device manufacturers, technology can be a double-edged sword. The innovative technologies that elevate the quality of life for patients can also be used to potentially undermine the organization using the device. The consequences can affect the device itself if we do not implement good IoT cybersecurity and FDA cybersecurity protocols. At Regulatory Compliance Associates Inc.®, we offer a wide variety of services for medical devices security to help ensure that your product is protected from cyber-attacks.

With a well-planned design, along with full visibility of product development and the supply chain, RCA can help strengthen your device’s cybersecurity posture throughout. We partner with medical device companies for the entire life cycle, including from the development of your product to the regulatory submission to your notified body.

 

Regulatory Affairs

Regulatory affairs is Regulatory Compliance Associates® Inc.’s backbone, and we handle more submissions in a month than many manufacturers do in a lifetime. We have experience working with the FDA, global regulatory bodies and / or agencies, and notified bodies worldwide. Therefore, you can count on us for in-depth and up-to-date insights which increase speed-to-market.

As a trusted regulatory affairs consultant, our FDA veterans and industry experts are here to help you navigate the difficulties associated with new product submissions. They have expertise in both the approval process and post-approval support. 

  • New Product Approval
  • Post-Approval Support
  • Outsourced Staffing
  • EU MDR

 

Compliance Assurance

Increasingly, life science companies are feeling the pressure of greater scrutiny by regulators, and responding by developing sustainable compliance strategies. Whether it’s preparing for an audit, developing a response to an FDA finding, or remediation to an adverse event, Regulatory Compliance Associates® Inc. can help.

Our network of over 500 FDA veterans and industry professionals offers a unique blend of expertise that allows us to handle both simple and complex regulatory compliance challenges within the medical device industry.

  • Gap Assessments
  • Internal Audits
  • Employee Training
  • Notified Body Response

 

Quality Assurance

Regulatory Compliance Associates® Inc.’s Quality Assurance services include quality system assessments, strategy, implementations, and identification of quality metrics to ensure continuous improvement, aligning with your business needs and goals. Our consultants are quality experts with experience spanning major corporations and start-ups. We know firsthand how to achieve, maintain, and improve quality, and we excel in transferring this knowledge to your organization.

In the medical devices field, quality assurance (QA) is more than merely ensuring the quality of a finished product. You need the tools to monitor and regulate every process from the design of a new product to continued quality compliance as the device is sent to market. At RCA, we offer you the assistance you need to monitor these processes and ensure quality compliance every step of the way.

With more than 15 years of experience as a trusted medical device quality assurance consultant, our team of over 500 industry experts and FDA veterans is fully equipped to handle your unique QA needs.

  • ISO13485 
  • 21 CFR 210
  • 21 CFR 211
  • Outsourced Staffing
  • MDSAP
  • Facility Validation
  • Equipment Validation

 

Remediation Support

Regulatory Compliance Associates® Inc. is widely recognized within the life science industry and global regulatory agencies for its ability to help companies successfully resolve complex regulatory challenges, including remediation. With a proven track record of success, we have significant experience with the development of responses to 483 Observations, Warning Letters, Untitled Letters and Consent Decrees.

Our value goes beyond the initial response by helping companies successfully execute their action plans, develop an improved compliance culture tailored to the needs of their business, and ultimately move beyond the regulatory action to emerge as a stronger business. We negotiate difficult demands of remediation with insight and the clear advantage of our unique expertise and experience that makes partnering with RCA® Inc. a competitive differentiator in the remediation space.

  • Quality System
  • Technical File
  • Design History File
  • Data Integrity
  • cGMP 

 

Strategic Consulting

Whether it’s a strategy, a technical plan, or project, Regulatory Compliance Associates® Inc.’s worldwide experience can help ensure a successful mix of people and product so your project is on time, on budget, and you’re never embroiled in a costly mistake.

Our 500 industry and FDA experts are here to provide the unique insight you need before an M&A deal, through a staffing crisis and in every area of your product’s development and life cycle. As the trusted medical device manufacturing consultants of thousands of companies around the world, we have the knowledge and expertise needed to deliver exceptional results to your business — no matter your size or unique needs.

  • Manufacturing Optimization
  • Product Lifecycle Management
  • Mergers & Acquisitions (M&A)
  • Due Diligence
  • Device Vigilance
  • Product Complaints
  • Medical Information

 

About RCA®

 

Regulatory Compliance Associates (RCA) provides medical device consulting to the following industries for the resolution of life science challenges:

 

 

We understand the complexities of running a life science business and possess areas of expertise that include every facet of R&D, operations, regulatory affairs, quality, and manufacturing. We are used to working on the front lines and thriving in the scrutiny of FDA, Health Canada, MHRA, and globally regulated companies.

 

As your partners, we can negotiate the potential minefield of regulatory compliance and regulatory due diligence with insight, hindsight, and the clear advantage of our unique expertise and experience.

 

  • Founded in 2000
  • Headquartered in Wisconsin (USA)
  • Expertise backed by over 500 industry subject matter experts
  • Acquired by Sotera Health in 2021

 

About Sotera Health®

 

The name Sotera Health was inspired by Soteria, the Greek goddess of safety, and reflects the Company’s unwavering commitment to its mission, Safeguarding Global Health®.

 

Sotera Health Company, along with its three best-in-class businesses – Sterigenics®Nordion® and Nelson Labs®, is a leading global provider of mission-critical end-to-end sterilization solutions and lab testing and advisory services for the healthcare industry. With a combined tenure across our businesses of nearly 200 years and our industry-recognized scientific and technological expertise, we help to ensure the safety of over 190 million patients and healthcare practitioners around the world every year.

 

We are a trusted partner to more than 5,800 customers in over 50 countries, including 40 of the top 50 medical device companies and 8 of the top 10 pharmaceutical companies.

 

 

To begin the Regulatory Compliance Associates® scoping process today, please enter your information in the blue form below and click the submit button at the bottom of the webpage. 

 

Medical Devices

 

When a medical product fails in the field, everyone suffers — not just the patient, but also the manufacturer and its employees, investors, suppliers, and even competitors. No one wants a product failure, least of all the liable company for its safety. Faced with a quality investigation crisis, the manufacturer has three priorities: (1) protect patients; (2) resolve the problem as quickly as possible; and (3) prevent the problem from recurring.

 

Any product failure threatens a huge loss of value, above and beyond liability, to the manufacturer. If investors lose confidence and share price falls, enterprise value is destroyed. Then, as the company dedicates resources to resolving the problem, their other jobs — such as new product development — don’t get done (or, at best, don’t get done as quickly).

 

Risk Management

 

Since innovation is the beating heart of the medical device industry, any delay of a new product launch can cost a manufacturer millions; time really is money. All the more reason that quality investigation speed is so important in fixing any product problem.

 

Yet, many companies are not really prepared for product failure because they lack a crisis playbook. Through our work in helping companies investigate and resolve product failures, Regulatory Compliance Associates and The Science Cooperative (Chicago, IL) have gained the following insights about what works (and what doesn’t) in managing a product crisis.

 

“First Responders”

 

quality investigationA problem is identified as serious when field events indicate a trend beyond isolated incidences. At that time, the company’s leadership has to make a few decisions: Should an official notice be released? Should the product be recalled? Everywhere or only in some markets? Should production be stopped? In multiple or select plants?

 

Prompt action generally contributes to good will and positive publicity during a quality investigation. But the challenge is a deficit of facts at this stage since the forensic investigation itself hasn’t started.\

 

Standard Operating Procedure

 

In putting together a crisis playbook, a company should begin with guidelines and policies to direct the first responders in evaluating the size of the threat and the appropriateness of various options for response, depending on the apparent scope and severity of the problem.

 

For example, if a product is one component in an assembly, perhaps the best response is for multiple supply chain owners to work together to find the optimal fix for the problem. Among other issues that could be decided in advance would be choosing the “point man” for making that happen.

 

Risk Assessment

 

Of course, a crisis playbook would also help business leaders evaluate the cost of alternative responses. Say the chance of the company’s product being the cause of the crisis is 20 percent and pulling it off the market would cost $500 million: what’s the optimal strategy for moving forward?

 

Scenario-based planning provides a context for weighing alternatives and options during a quality investigation. But above all else, the first responders would want to stop patient harm; protecting the safety of the patient population comes first.

 

Functional Forensic Teams: Divide & Conquer

 

After the first responders have reviewed the situation and decided there is cause for escalation, it’s time to identify an investigation leader/crisis manager, an investigation leader, and the functional forensic team(s). An attorney or senior executive with strong project management skills is a good choice for crisis manager; also, each team needs at least one a member with strong organizational skills.

 

Product Validation

 

The crisis playbook should cover roles and responsibilities — including potential action checklists — for multiple functional forensic teams across the quality investigation. It’s feasible that a crisis might require teams in R&D, sciences, manufacturing, distribution, supply chain, human resources, legal, regulatory, quality, environmental, sales/marketing, and communications, as well as sub-teams for representatives from affected countries and from government affairs.

 

What expertise would each team require? What would be each team’s scope and focus? Most important, how should the teams interact, coordinate activities, and measure progress toward milestones and a final resolution? A crisis playbook should provide answers, which would vary case by case.

 

Project Management

 

Good project management skills are fundamental to managing the investigation process effectively and efficiently. Although the teams are all working on the same problem, each requires its own plan and milestones.

 

Role-based accountability for project and team-specific organization, documentation, schedules, data management, and reporting can be decided well in advance of a crisis. It’s best that the leaders of the crisis management team meet daily to assure clear, timely, cross-functional communication and to agree on next steps.

 

Resources: Knowledge & “Know-How”

 

If valuable resources are taken away or distracted from their jobs to any significant degree, real and measurable enterprise value is destroyed. So, while leaders and experts from each affected corporate function play a vital role in an investigation, it may be a smart business strategy to bring in specialists to support the effort with their expertise and experience.

 

In addition to minimizing damage to the company’s value and brand, the quick building up of expertise also speeds up the forensic process itself. One client asked both the FDA and EU notified bodies to participate in an investigation; as a result, the company tripled its lab capacity and bolstered credibility with shareholders and the marketplace.

 

FDA Investigation

 

Independent consultants can add muscle to any FDA investigation, while buttressing investor confidence. As an added benefit, because they’re beyond the “politics” of the enterprise, they can often give employees the freedom to speak without repercussion. Also, outside resources with the right knowledge and “know-how” will be well versed in Corrective and Preventive Action (CAPA) processes and can use this expertise to streamline and speed up the investigation.

 

Roadmap: Imagine a Practical Path Forward

 

Each team needs a directed course of action based on scenario planning. Given a set of variables that would vary by product and case — including (but not limited to) the severity of the crisis, geography, financial liability, and the possibility of substitute products — what steps should each team take to contribute to the problem identification, resolution, and ongoing prevention? 

 

The steps required of each team can be captured in “punch lists” to minimize redundancy and duplication of effort. Then, it’s relatively easy to assign responsibility for each item on the list. If the product is used in more than one country or region, the work of the corporate teams needs to be mirrored by local teams, and everyone’s findings need to roll up to the top.

 

Root Cause Analysis

 

 

Perhaps one of the most critical points in the quality investigation roadmap — and the one that’s most often missing — is a “stop” point. The longer an investigation goes on, the more enterprise value it can destroy.

 

So, in the beginning, it is important to decide: When is the problem solved? Is it when the contaminant is found? When the process in the factory or the supply chain is fixed? Or when the product is reintroduced to the market? Among these inquiries is another with implications for continuous improvement: Why didn’t the QA processes in place (for design, manufacturing, and other functions) detect the potential failure?

 

Scope control is a fundamental component of good project management. In most cases, there’s no need to parse the problem beyond a practical solution. The crisis playbook should include prototype action plans, checklists, work streams, decision processes, schedules, milestones, resource requirements, budgets, and documentation.

 

Steps for Post-Crisis Resolution:

 

  • Assure that all commitments made have been honored.
  • Update all prevention measures, including software procedures and policies, as appropriate.
  • Debrief the crisis management teams to mine “lessons learned”.
  • Ensure appropriate closure communication with key stakeholders, including regulatory agencies, media, customers, investment community, and employees.

 

Strategic Communication

 

From day one, the investigation leader/crisis manager needs to share information about commitments, expectations, and progress. Communication — internally with employees and externally with investors, supply chain partners, regulatory agencies, the public, and sometimes competitors — is critically important.

 

The overall process needs a “point person” for communication, as does each team, whether at the corporate or local level. The role of each communication channel — including press releases, internal newsletters or briefs, media contacts, video, and letters to shareholders and the investment community — can be planned well in advance: a crisis playbook can take chaos out of the process and enable the company to put its best foot forward. In communication, the current best practice is a dedicated portal, a single source for real-time updates on the investigation, typically accessible through the company’s Website.

 

Crisis Management

 

The old proverb “a stitch in time saves nine” captures the value of a crisis playbook: being prepared will save time and money down the road; most importantly, it could literally save lives. By being mindful of the components of effective and efficient crisis management — building up and deploying expert resources; coordinating and integrating parallel work streams; following and documenting rationalized processes — a company’s leadership can be confident in its preparedness to handle a product failure to the satisfaction of everyone’s best interests.

 

Article Details

Complete article published in Medical Design Briefs.

 

About RCA’s Medical Device Consulting Services 

 

The regulatory compliance process surrounding the medical device industry involves a strict adherence to pre/post market information throughout a device’s life-cycle. Even a single compliance issue you have can turn into a significant effect on your business. Regulatory Compliance Associates medical device consultants can help guide you through any stage of this strategic process, with capabilities during product development through the regulatory clearance/approval of your product.

 

Our team of over 500 medical device consulting Experts — including former FDA officials and regulatory compliance leaders in the field of medical device regulation — will work with your company to create a quality assurance and regulatory compliance approach tailored to your products and regulatory needs. Regulatory Compliance Associates works with international Fortune 100 companies, venture capital start ups, and companies of all sizes and shapes. our compliance enforcement solutions for law firms include remediation for warning letters, FDA 483’s, import bans or consent decrees. Very few regulatory compliance services have the same regulatory compliance expertise in a variety of medical fields.

 

Cybersecurity

 

For medical device manufacturers, technology can be a double-edged sword. The innovative technologies that elevate the quality of life for patients can also be used to potentially undermine the organization using the device. The consequences can affect the device itself if Regulatory Compliance Associates medtech consultants do not implement good IoT cybersecurity and FDA cybersecurity protocols.

 

At Regulatory Compliance Associates, we offer a wide variety of services for medical devices security to help ensure that your product is protected from cyber-attacks. With a well-planned design, along with full visibility of product development and the supply chain, Regulatory Compliance Associates medical device consultant Experts can help strengthen your device’s cybersecurity. We partner with medical device companies in each phase of the design cycle, including protecting inputs from threat exposure and hardening outputs for regulatory compliance & FDA submission approval of your medical technology.

 

Regulatory Affairs

 

Regulatory affairs is Regulatory Compliance Associates® backbone, and we handle more submissions in a month than many manufacturers do in a lifetime. Our regulatory compliance consulting Experts have experience working with the FDA, global regulatory bodies and / or agencies, and notified bodies worldwide. Therefore, you can count on us for in-depth and up-to-date insights which increase speed-to-market.

 

As a trusted regulatory affairs consultant, our FDA veterans and industry experts represent Regulatory Compliance Associates® as one of the top medical device consulting firms. We’re here to help you navigate the difficulties associated with new product submissions. Regulatory Compliance Associates® medical device consulting company has expertise in both the approval process and post-approval support. 

 

  • New Product Approval
  • Post-Approval Support
  • Outsourced Staffing
  • EU MDR
  • Combination Products

 

Compliance Assurance

 

Increasingly, life science companies are feeling the pressure of greater scrutiny by regulators, and responding by developing sustainable compliance strategies. Whether it’s preparing for an audit, developing a response to an FDA finding, or remediation to an adverse event, Regulatory Compliance Associates® can help.

 

Our network of over 500 medical device consultant & FDA, MHRA & EMA veterans are industry professionals offers a unique blend of expertise. This allows Regulatory Compliance Associates® to handle both simple and complex regulatory compliance challenges within medical device consulting companies.

 

  • Gap Assessments
  • Internal Audits
  • Employee Training
  • Notified Body Response
  • Data Integrity

 

Quality Assurance

 

Regulatory Compliance Associates® Quality Assurance consulting includes quality system assessments, strategy, implementations, and identification of quality metrics to ensure continuous improvement, aligning with your business needs and goals. Each Regulatory Compliance Associates® medical device consultant is a quality expert with experience spanning major corporations and start-ups. We know firsthand how to achieve, maintain, and improve quality, and we excel in transferring this knowledge to your organization.

 

In the medical devices field, quality assurance (QA) is more than merely ensuring the quality of a finished product. You need the tools to monitor and regulate every process from the design of a new product to continued quality compliance as the device is sent to market. At Regulatory Compliance Associates®, we offer you the quality assurance services you need to monitor these processes and ensure quality compliance every step of the way.

 

With more than 20 years experience working with medical device consulting companies, Regulatory Compliance Associates® trusted medical device quality assurance consultant team is fully equipped to handle your unique QA needs.

 

  • ISO13485 
  • 21 CFR 210
  • 21 CFR 211
  • Outsourced Staffing
  • MDSAP
  • Facility Validation
  • Equipment Validation
  • Quality Metrics

 

Remediation Support

 

Regulatory Compliance Associates® is widely recognized within medical device consulting companies & the life science industry for remediation support. Regulatory Compliance Associates® ability to help companies successfully resolve complex regulatory challenges have a proven track record of success. Our medical device consulting services include significant experience with the development of responses to 483 Observations, Warning Letters, Untitled Letters and Consent Decrees.

 

  • Regulatory Action
  • Regulatory Compliance
  • Regulatory Enforcement
  • Warning Letter
  • 483 Observation
  • Oversight Services

 

Our value goes beyond the initial response by helping companies successfully execute their action plans, develop an improved compliance culture tailored to the needs of their business, and ultimately move beyond the regulatory action to emerge as a stronger business. We negotiate difficult demands of remediation with insight and the clear advantage of our medical device consultant expertise and experience that makes partnering with Regulatory Compliance Associates®  a competitive differentiator in the remediation space.

 

  • Quality System
  • Technical File
  • Design History File
  • Data Integrity
  • cGMP

 

Strategic Consulting

 

Whether it’s a strategy, a technical plan, or project, Regulatory Compliance Associates® medical device consultancy can help ensure a successful project. Regulatory Compliance Associates® medical device strategy consulting can deliver your project on time, on budget, and you’re never embroiled in a costly mistake.

 

Our medical device consultant Experts are industry Experts are here to provide the unique insight you need before an M&A deal, through a staffing crisis and in every area of your product’s development and life cycle. As the trusted medical device manufacturing consultants of thousands of companies around the world, we have the knowledge and expertise needed to deliver exceptional results to your business — no matter your size or unique needs.

 

  • Manufacturing Optimization
  • Product Lifecycle Management
  • Mergers & Acquisitions (M&A)
  • Due Diligence
  • Device Vigilance
  • Risk Management Plan
  • Product Complaints
  • Medical Information

 

About Regulatory Compliance Associates

 

Regulatory Compliance Associates® (RCA) provides medical device consulting to the following industries for resolution of life science challenges:

 

 

We understand the complexities of running a life science business and possess areas of expertise that include every facet of R&D, operations, regulatory affairs, quality, and manufacturing. We are used to working on the front lines and thriving in the scrutiny of FDA, Health Canada, MHRA and globally-regulated companies.

 

As your partners, we can negotiate the potential minefield of regulatory compliance and regulatory due diligence with insight, hindsight, and the clear advantage of our unique expertise and experience.

 

  • Founded in 2000
  • Headquartered in Wisconsin (USA)
  • Expertise backed by over 500 industry subject matter experts
  • Acquired by Sotera Health in 2021

 

About Sotera Health

 

The name Sotera Health was inspired by Soteria, the Greek goddess of safety, and reflects the Company’s unwavering commitment to its mission, Safeguarding Global Health®.

 

Sotera Health Company, along with its three best-in-class businesses – Sterigenics®Nordion® and Nelson Labs®, is a leading global provider of mission-critical end-to-end sterilization solutions and lab testing and advisory services for the healthcare industry. With a combined tenure across our businesses of nearly 200 years and our industry-recognized scientific and technological expertise, we help to ensure the safety of over 190 million patients and healthcare practitioners around the world every year.

 

We are a trusted partner to more than 5,800 customers in over 50 countries, including 40 of the top 50 medical device companies and 8 of the top 10 pharmaceutical companies.

 

Commitment to Quality

 

Our Certificate of Registration demonstrates that our Quality Management System meets the requirements of ISO 9001:2015, an internationally recognized standard of quality.

 

To begin the Regulatory Compliance Associates® scoping process today, please enter your information in the blue form below and click the submit button at the bottom of the webpage. 

 

 

For medical device manufacturers, technology can be a double-edged sword. The technologies that elevate the quality of life for patients can be used by cybersecurity bad actors to potentially harm patients or undermine the organization using the device as well as the device itself. RCA’s medical device consultants have seen the vast interconnectivity of medical devices widen the attack surface of the public health sector. Intrusions and breaches are possible because of weaknesses in a medical device’s cybersecurity design.

 

Medical device vulnerabilities that are not identified and remediated before the device goes to market can serve as access points for entry into a health care facility’s network, which leads to compromising data confidentiality and integrity as well as potential patient safety.

 

That said, security now needs a seat at the design table, accompanied by its own list of requirements. Many cybersecurity weaknesses are a result of poor design choices and lack of clear requirements. Having a security expert who is familiar with medical device cybersecurity and device development should review the requirements. Many RCA medical device consultants can uncover architecture security vulnerabilities, which can be mitigated during development long before the product goes into manufacturing.

 

The strongest cybersecurity risk control is to use secure by design principles to eliminate the vulnerabilities. The next strongest risk control category is a protective system where the security threat can be detected, responded to, and recovered, so the risk does not materialize. The weakest cybersecurity risk controls are labelling and instructions. All three of these categories of risk controls can be used to manage cybersecurity risks in medical devices.

 

Effective security by design depends on the ability to understand and stay on top of cybersecurity issues to maintain the safety and security of devices, data, and users. One of the biggest challenges with medical device development is infrastructure diversity. Devices are designed, manufactured, configured, and deployed using various programming languages, operating systems, databases, networks, and hardware platforms. This means vulnerabilities can be anywhere.

 

One common issue that can lead to vulnerabilities is when devices still use legacy operating systems that are no longer supported by the companies that developed them. Health care organizations can mitigate these vulnerabilities by restricting access and monitoring for threats on the network where the device is connected.

 

It is not possible to have a completely secure device. But with a well-planned design along with full visibility of product development and the supply chain, companies can strengthen their device’s security posture. Also, cybersecurity must be monitored and maintained throughout the device’s life cycle. As new vulnerabilities are discovered, the device will require cybersecurity patches and updates. Just because something is not exploitable today does not mean it will not be exploitable in the future.

 

The following resources identify specific areas to focus cybersecurity efforts throughout the product’s life cycle.

 

International Medical Device Regulators Forum (IMDRF)

 

The IMDRF published the guidance “Principles and Practices for Medical Device Cybersecurity.” The document provides recommendations to help all stakeholders minimize cybersecurity risks across the product’s total life cycle. According to the guidance, medical device cybersecurity is a shared responsibility among all stakeholders, including the manufacturer, health care providers, users, and regulators. All stakeholders must understand their responsibilities and work closely with one another to continuously monitor, assess, mitigate, communicate, and respond to potential cybersecurity risks and threats throughout the life cycle of the medical device.

 

Technical Information Report 57 (TIR57) and TIR97

 

TIR57 is a cybersecurity standard for medical devices. The guidance, titled “Principles for Medical Device Security—Risk Management,” was published by the Association for the Advancement of Medical Instrumentation (AAMI). It provides recommendations on integrating cybersecurity risk management into the overall development of the device. TIR57 is closely modeled after ISO 14971 for safety risk management, which specifies the terminology, principles, and processes for risk management of medical devices.

 

TIR57 also works in conjunction with TIR97, which provides guidance for addressing postmarket security risk management within the risk management framework defined by ANSI/AAMI/ISO 14971. Both TIR57 and 14971 touch on the postmarket phase at a high level. TIR97 expands on the foundation established in TIR57 and focuses on establishing security risk management for the postmarket phase of the product’s life cycle.

 

Recognizing the need for protection of medical devices in an increasingly digitized world, the U.S. Food and Drug Administration (FDA) added TIR57 to its list of recognized consensus standards. Device manufacturers who implement it can expect to have all the information expected by the FDA in place for premarket submissions.

 

NIST Framework for Improving Critical Infrastructure Cybersecurity

 

The National Institute of Standards and Technology (NIST) is an agency within the Department of Commerce that promotes innovation for enhancing science, business, technology, and economic security. The organization produced a document called the “Framework for Improving Critical Infrastructure Cybersecurity,” which assists companies in improving the security of their infrastructure.

 

The framework is useful for any organization no matter what type or level of cybersecurity it currently employs. The framework is not intended to replace a company’s current cybersecurity strategy. Instead, it advises organizations on identifying their current cybersecurity posture, determining a target state for cybersecurity efforts, and developing a plan for progressing toward the target state.

 

Open Web Application Security Project (OWASP)

 

OWASP is a nonprofit organization that works to improve the security of software. The OWASP Top 10 is a standard awareness document for developers that provides information about the most current critical security risks to web applications. As part of their approach to security, companies can incorporate the OWASP findings and recommendations into their security practices. The OWASP list is routinely updated to stay up to date with the ongoing advances in technology.

 

FDA Cybersecurity Recommendations

 

According to the FDA’s guidance on premarket submissions for cybersecurity, a trustworthy medical device:

 

  • Contains hardware, software, and/or programmable logic that is reasonably secure from cybersecurity intrusion and misuse.
  • Provides a reasonable level of availability, reliability, and correct operation.
  • Is reasonably suited to performing its intended functions.
  • Adheres to generally accepted security procedures.

 

The agency’s Quality System Regulation (QSR) suggests that software device manufacturers employ a risk-based approach to the design and development of medical devices, which includes setting up appropriate cybersecurity protections. Using this approach, the FDA encourages device manufacturers to:

 

  • Identify assets, threats, and vulnerabilities.
  • Assess the impact of threats and vulnerabilities on the device’s functionality, end users, and patients.
  • Assess the likelihood of a threat as well as the likelihood of a vulnerability being exploited.
  • Determine risk levels and suitable mitigation strategies.
  • Evaluate residual risk and risk acceptance criteria.

 

Implementing these design controls improves the likelihood that the FDA will find your device meets its applicable statutory standard for premarket review.

 

To effectively combat the ongoing cybersecurity threats, companies should have a clear definition of responsibilities for all relevant stakeholders regarding infrastructure, policy development, and communication. To achieve this, regulatory agencies along with cybersecurity experts strongly advocate effective and unified collaboration across the enterprise. Using a platform-based quality management system (QMS), companies easily manage design control, risk, changes, suppliers, etc. from a single platform. This way, all stakeholders can have an appreciable impact on the transformation of the product throughout its design, development, and postmarket life cycle.

 

Follow the link to read the full article where we go over specific areas to focus cybersecurity efforts throughout the product’s life cycle as well as FDA Cybersecurity Recommendations.

 

About RCA’s Medical Device Services

 

The regulatory compliance process surrounding the medical device industry involves a strict adherence to pre/post market information throughout a device’s life-cycle. Even a single compliance issue you have can turn into a significant effect on your business. Regulatory Compliance Associates medical device consultants can help guide you through any stage of this strategic process, with capabilities during product development through the regulatory clearance/approval of your product.

 

Our team of over 500 medical device consulting Experts — including former FDA officials and regulatory compliance leaders in the field of medical device regulation — will work with your company to create a quality assurance and regulatory compliance approach tailored to your products and regulatory needs. Regulatory Compliance Associates works with international Fortune 100 companies, venture capital start ups, and companies of all sizes and shapes. our compliance enforcement solutions for law firms include remediation for warning letters, FDA 483’s, import bans or consent decrees. Very few regulatory compliance services have the same regulatory compliance expertise in a variety of medical fields.

 

Cybersecurity

 

For medical device manufacturers, technology can be a double-edged sword. The innovative technologies that elevate the quality of life for patients can also be used to potentially undermine the organization using the device. The consequences can affect the device itself if Regulatory Compliance Associates medtech consultants do not implement good IoT cybersecurity and FDA cybersecurity protocols.

 

At Regulatory Compliance Associates, we offer a wide variety of services for medical devices security to help ensure that your product is protected from cyber-attacks. With a well-planned design, along with full visibility of product development and the supply chain, Regulatory Compliance Associates medical device consultant Experts can help strengthen your device’s cybersecurity. We partner with medical device companies in each phase of the design cycle, including protecting inputs from threat exposure and hardening outputs for regulatory compliance & FDA submission approval of your medical technology.

 

Regulatory Affairs

 

Regulatory affairs is Regulatory Compliance Associates® backbone, and we handle more submissions in a month than many manufacturers do in a lifetime. Our regulatory compliance consulting Experts have experience working with the FDA, global regulatory bodies and / or agencies, and notified bodies worldwide. Therefore, you can count on us for in-depth and up-to-date insights which increase speed-to-market.

 

As a trusted regulatory affairs consultant, our FDA veterans and industry experts represent Regulatory Compliance Associates® as one of the top medical device consulting firms. We’re here to help you navigate the difficulties associated with new product submissions. Regulatory Compliance Associates® medical device consulting company has expertise in both the approval process and post-approval support. 

 

  • New Product Approval
  • Post-Approval Support
  • Outsourced Staffing
  • EU MDR
  • Combination Products

 

Compliance Assurance

 

Increasingly, life science companies are feeling the pressure of greater scrutiny by regulators, and responding by developing sustainable compliance strategies. Whether it’s preparing for an audit, developing a response to an FDA finding, or remediation to an adverse event, Regulatory Compliance Associates® can help.

 

Our network of over 500 medical device consultant & FDA, MHRA & EMA veterans are industry professionals offers a unique blend of expertise. This allows Regulatory Compliance Associates® to handle both simple and complex regulatory compliance challenges within medical device consulting companies.

 

  • Gap Assessments
  • Internal Audits
  • Employee Training
  • Notified Body Response
  • Data Integrity

 

Quality Assurance

 

Regulatory Compliance Associates® Quality Assurance consulting includes quality system assessments, strategy, implementations, and identification of quality metrics to ensure continuous improvement, aligning with your business needs and goals. Each Regulatory Compliance Associates® medical device consultant is a quality expert with experience spanning major corporations and start-ups. We know firsthand how to achieve, maintain, and improve quality, and we excel in transferring this knowledge to your organization.

 

In the medical devices field, quality assurance (QA) is more than merely ensuring the quality of a finished product. You need the tools to monitor and regulate every process from the design of a new product to continued quality compliance as the device is sent to market. At Regulatory Compliance Associates®, we offer you the quality assurance services you need to monitor these processes and ensure quality compliance every step of the way.

 

With more than 20 years experience working with medical device consulting companies, Regulatory Compliance Associates® trusted medical device quality assurance consultant team is fully equipped to handle your unique QA needs.

 

  • ISO13485 
  • 21 CFR 210
  • 21 CFR 211
  • Outsourced Staffing
  • MDSAP
  • Facility Validation
  • Equipment Validation
  • Quality Metrics

 

Remediation Support

 

Regulatory Compliance Associates® is widely recognized within medical device consulting companies & the life science industry for remediation support. Regulatory Compliance Associates® ability to help companies successfully resolve complex regulatory challenges have a proven track record of success. Our medical device consulting services include significant experience with the development of responses to 483 Observations, Warning Letters, Untitled Letters and Consent Decrees.

 

  • Regulatory Action
  • Regulatory Compliance
  • Regulatory Enforcement
  • Warning Letter
  • 483 Observation
  • Oversight Services

 

Our value goes beyond the initial response by helping companies successfully execute their action plans, develop an improved compliance culture tailored to the needs of their business, and ultimately move beyond the regulatory action to emerge as a stronger business. We negotiate difficult demands of remediation with insight and the clear advantage of our medical device consultant expertise and experience that makes partnering with Regulatory Compliance Associates®  a competitive differentiator in the remediation space.

 

  • Quality System
  • Technical File
  • Design History File
  • Data Integrity
  • cGMP

 

Strategic Consulting

 

Whether it’s a strategy, a technical plan, or project, Regulatory Compliance Associates® medical device consultancy can help ensure a successful project. Regulatory Compliance Associates® medical device strategy consulting can deliver your project on time, on budget, and you’re never embroiled in a costly mistake.

 

Our medical device consultant Experts are industry Experts are here to provide the unique insight you need before an M&A deal, through a staffing crisis and in every area of your product’s development and life cycle. As the trusted medical device manufacturing consultants of thousands of companies around the world, we have the knowledge and expertise needed to deliver exceptional results to your business — no matter your size or unique needs.

 

  • Manufacturing Optimization
  • Product Lifecycle Management
  • Mergers & Acquisitions (M&A)
  • Due Diligence
  • Device Vigilance
  • Risk Management Plan
  • Product Complaints
  • Medical Information

 

About Regulatory Compliance Associates

 

Regulatory Compliance Associates® (RCA) provides medical device consulting to the following industries for resolution of life science challenges:

 

 

We understand the complexities of running a life science business and possess areas of expertise that include every facet of R&D, operations, regulatory affairs, quality, and manufacturing. We are used to working on the front lines and thriving in the scrutiny of FDA, Health Canada, MHRA and globally-regulated companies.

 

As your partners, we can negotiate the potential minefield of regulatory compliance and regulatory due diligence with insight, hindsight, and the clear advantage of our unique expertise and experience.

 

  • Founded in 2000
  • Headquartered in Wisconsin (USA)
  • Expertise backed by over 500 industry subject matter experts
  • Acquired by Sotera Health in 2021

 

About Sotera Health

 

The name Sotera Health was inspired by Soteria, the Greek goddess of safety, and reflects the Company’s unwavering commitment to its mission, Safeguarding Global Health®.

 

Sotera Health Company, along with its three best-in-class businesses – Sterigenics®Nordion® and Nelson Labs®, is a leading global provider of mission-critical end-to-end sterilization solutions and lab testing and advisory services for the healthcare industry. With a combined tenure across our businesses of nearly 200 years and our industry-recognized scientific and technological expertise, we help to ensure the safety of over 190 million patients and healthcare practitioners around the world every year.

 

We are a trusted partner to more than 5,800 customers in over 50 countries, including 40 of the top 50 medical device companies and 8 of the top 10 pharmaceutical companies.

 

Commitment to Quality

 

Our Certificate of Registration demonstrates that our Quality Management System meets the requirements of ISO 9001:2015, an internationally recognized standard of quality.

 

To begin the Regulatory Compliance Associates® scoping process today, please enter your information in the blue form below and click the submit button at the bottom of the webpage. 

 

Medical Device Strategic Consulting

Whether it’s a strategy, a technical plan, or project, Regulatory Compliance Associates® (RCA) worldwide experience can help ensure a successful mix of people and product so your project is on time, on budget, and you’re never embroiled in a costly mistake.

 

RCA can provide Strategic Consulting and services in the following key areas:

 

To begin the Regulatory Compliance Associates scoping process today, please enter your information in the blue form below and click the submit button at the bottom of the webpage. You may also email us at [email protected].

 

MDSAP is a standardized global auditing program which allows for a single regulatory audit of a medical device manufacturer’s quality management system (QMS) to be conducted to satisfy the requirements of several global regulatory agencies and/or regulatory bodies. 

MDSAP was conceived in 2012 (launched in 2014) by the International Medical Device Regulators Forum (IMDRF).  The program officially completed the pilot phase in December of 2016 and manufacturers are now able to begin the process for certification.  Currently 5 countries are participating in the program and they include: USA, Canada, Australia, Brazil and Japan.  The World Health Organization (WHO) and the European Union (EU) are Official Observers.  One special area of consideration is that manufacturers selling products in Canada have a deadline of January 1, 2019 to become certified in order to continue to sell their products on the Canadian Market. MDSAP will replace the current Canadian Medical Devices Conformity Assessment System (CMDCAS) in Canada. The two (2) year transition period in Canada started on January 1, 2017 and continues through January 1, 2019. At the end of this transition period, only MDSAP certificates will be accepted. 

 

Global Regulatory Authorities Designated Use of the MDSAP Audit Reports
US – FDA The FDA will accept the MDSAP Audit Report in lieu of FDA routine inspections.However, MDSAP does NOT apply for certain types of regulatory inspections including:·         “for cause” inspections·         “compliance follow-up” inspections; or·         pre-or post-approval inspections for PMA (Premarket Authorization)
Canada – HC MDSAP will replace the Canadian Medical Device Conformity Assessment System (CMDCAS) by the end of the (2) two year transition period in Canada [January 1, 2017 to January 1, 2019]. After the transition period ends in Canada, only  MDSAP certificates will be accepted.
Australia – TGA MDSAP Audit Reports may be used to support compliance with the medical device authorization requirements (unless the particular medical device is excluded or exempt from the requirements)
Brazil – ANVISA MDSAP Audit Reports may be used to support the technical evaluation of the premarket and post-marketing requirements.
Japan – MHLW and PMDA MDSAP Audit Reports may be used to support the premarket and postmarket requirements.

 

MDSAP audits must be conducted by recognized Auditing Organizations (AO) authorized by the participating global regulatory agencies and/or regulatory bodies pursuant to the MDSAP requirements.  These will be conducted on an annual basis based on a (3) three year certification cycle.

 

What to expect in the MDSAP audit:

During your MDSAP audit, you should expect the Auditing Organization to cover all elements of ISO 13485 (Management, Device Marketing Authorization, Measurement and Analysis, Medical Device Adverse Events Reporting, Design and Development, Production and Service Controls, and Purchasing) with a heavy emphasis on:

  • Incorporation of risk within all processes to manage your product lifecycle
  • More scrutiny on your outsourcing practices
  • Both design and process validation
  • Design change management and risks associated with these changes

 

Value Proposition

Traditionally, manufacturers selling their products globally were faced with the challenge of being audited by multiple regulatory authorities causing disruption to manufacturers.  MDSAP evolved because it was recognized that a single audit would be more efficient while ensuring the Quality Management System was thoroughly covered during an audit.  It also provides consistency in the audit process and minimizes the burden on resources.  All important factors when you consider efficiency goals within an organization.

 

What’s in it for the Regulatory Authorities?

  • Creates a coalition of countries utilizing shared technology, resources, and services to improve the oversight of medical devices more efficiently.
  • Better utilizes the widely accepted international standards and best practices to achieve alignment of regulatory approaches of multiple regulatory bodies.

 

What’s in it for the manufacturer?

  • One audit overall instead of one per Regulatory Authority means less burden on manufacturer resources to deal with multiple audits.
  • Use of standardized non-conformity grading system will make the outcomes more predictable.
  • Utilization of a consistent audit criteria compliant to the requirements of all participating regulatory authorities will be used by the Auditing Organizations.
  • Saves you time and money by participating in 1 audit versus multiple audits.

 

Country specific Adverse Event Reporting

  • In 2012 Australia made access available to the Database of Adverse Event Notifications (DAEN). The database is searchable by report number, date, manufacture, sponsor, etc. 
  • The Manufacturer and User Facility Device Experience (MAUDE) has been available since 1996 and is also searchable by report number, date, manufacturer, etc. The product problems are categorized into more than 1,000 device and patient problems as defined by Code 3500A
  • Canada utilizes what is referred to as the Adverse Reaction Database. The search criteria is more limited however, reports date back to 1965.
  • Japan and Brazil also have information available publicly however, the incidents are only available in the local languages.
  • European Database on Medical Devices (EUDAMED)*
    • EUDAMED will be an information system for exchanging legal information related to the application of European Union Directives on medical devices between the European Commission’s Enterprise and Industry Directorate General and the Competent Authorities in the European Union Member States. Its legal basis is laid down in Directives 90/385/EEC, 93/42/EEC, 98/79/EC and 2000/70/EC.
    • EUDAMED will also develop a vigilance module. This vigilance module will inform Member States on incidents or near-incidents in relation to certain devices on the market.
    • EUDAMED will also develop a vigilance module. This vigilance module will inform Member States on incidents or near-incidents in relation to certain devices on the market.

*Note, EUDAMED is expected to be operational in March of 2019.  Note this date is subject to change.

 

About RCA’s Medical Device Consulting Services

The regulatory process surrounding the medical device industry involves a strict adherence to pre/post-market compliance throughout a device’s life cycle. Even a single compliance issue you have can turn into a significant effect on your business. RCA’s medical device consultants can help guide you through any stage of this strategic process, with capabilities during product development through the regulatory clearance/approval of your product.

Our team of over 500 industry experts — including former FDA officials and other leaders in the field of medical device regulation — will work with your company to create a quality assurance and regulatory compliance approach tailored to your products and regulatory needs. RCA works with both international Fortune 100 companies and small local start-ups, as well as law firms requesting remediation for warning letters, 483’s, import bans, or consent decrees. We offer expertise in a variety of medical fields, such

 

Cybersecurity

For medical device manufacturers, technology can be a double-edged sword. The innovative technologies that elevate the quality of life for patients can also be used to potentially undermine the organization using the device. The consequences can affect the device itself if we do not implement good IoT cybersecurity and FDA cybersecurity protocols. At Regulatory Compliance Associates Inc.®, we offer a wide variety of services for medical devices security to help ensure that your product is protected from cyber-attacks.

With a well-planned design, along with full visibility of product development and the supply chain, RCA can help strengthen your device’s cybersecurity posture throughout. We partner with medical device companies for the entire life cycle, including from the development of your product to the regulatory submission to your notified body.

 

Regulatory Affairs

Regulatory affairs is Regulatory Compliance Associates backbone, and we handle more submissions in a month than many manufacturers do in a lifetime. We have experience working with the FDA, global regulatory bodies and/or agencies, and notified bodies worldwide. Therefore, you can count on us for in-depth and up-to-date insights which increase speed-to-market.

As a trusted regulatory affairs consultant, our FDA veterans and industry experts are here to help you navigate the difficulties associated with new product submissions. They have expertise in both the approval process and post-approval support. 

  • New Product Approval
  • Post-Approval Support
  • Outsourced Staffing
  • EU MDR

 

Compliance Assurance

Increasingly, life science companies are feeling the pressure of greater scrutiny by regulators, and responding by developing sustainable compliance strategies. Whether it’s preparing for an audit, developing a response to an FDA finding, or remediation to an adverse event, Regulatory Compliance Associates can help.

Our network of over 500 FDA veterans and industry professionals offers a unique blend of expertise that allows us to handle both simple and complex regulatory compliance challenges within the medical device industry.

  • Gap Assessments
  • Internal Audits
  • Employee Training
  • Notified Body Response

 

Quality Assurance

Regulatory Compliance Associates Quality Assurance services include quality system assessments, strategy, implementations, and identification of quality metrics to ensure continuous improvement, aligning with your business needs and goals. Our consultants are quality experts with experience spanning major corporations and start-ups. We know firsthand how to achieve, maintain, and improve quality, and we excel in transferring this knowledge to your organization.

In the medical devices field, quality assurance (QA) is more than merely ensuring the quality of a finished product. You need the tools to monitor and regulate every process from the design of a new product to continued quality compliance as the device is sent to market. At RCA, we offer you the assistance you need to monitor these processes and ensure quality compliance every step of the way.

With more than 15 years of experience as a trusted medical device quality assurance consultant, our team of over 500 industry experts and FDA veterans is fully equipped to handle your unique QA needs.

  • ISO13485 
  • 21 CFR 210
  • 21 CFR 211
  • Outsourced Staffing
  • MDSAP
  • Facility Validation
  • Equipment Validation

 

Remediation Support

Regulatory Compliance Associates is widely recognized within the life science industry and global regulatory agencies for its ability to help companies successfully resolve complex regulatory challenges, including remediation. With a proven track record of success, we have significant experience with the development of responses to 483 Observations, Warning Letters, Untitled Letters and Consent Decrees.

Our value goes beyond the initial response by helping companies successfully execute their action plans, develop an improved compliance culture tailored to the needs of their business, and ultimately move beyond the regulatory action to emerge as a stronger business. We negotiate difficult demands of remediation with insight and the clear advantage of our unique expertise and experience that makes partnering with RCA® a competitive differentiator in the remediation space.

  • Quality System
  • Technical File
  • Design History File
  • Data Integrity
  • cGMP 

 

Strategic Consulting

Whether it’s a strategy, a technical plan, or project, Regulatory Compliance Associates worldwide experience can help ensure a successful mix of people and products so your project is on time, on budget, and you’re never embroiled in a costly mistake.

Our 500 industry and FDA experts are here to provide the unique insight you need before an M&A deal, through a staffing crisis and in every area of your product’s development and life cycle. As the trusted medical device manufacturing consultants of thousands of companies around the world, we have the knowledge and expertise needed to deliver exceptional results to your business — no matter your size or unique needs.

  • Manufacturing Optimization
  • Product Lifecycle Management
  • Mergers & Acquisitions (M&A)
  • Due Diligence
  • Device Vigilance
  • Product Complaints
  • Medical Information

 

About RCA®

 

Regulatory Compliance Associates (RCA) provides medical device consulting to the following industries for the resolution of life science challenges:

 

 

We understand the complexities of running a life science business and possess areas of expertise that include every facet of R&D, operations, regulatory affairs, quality, and manufacturing. We are used to working on the front lines and thriving in the scrutiny of FDA, Health Canada, MHRA, and globally regulated companies.

 

As your partners, we can negotiate the potential minefield of regulatory compliance and regulatory due diligence with insight, hindsight, and the clear advantage of our unique expertise and experience.

 

  • Founded in 2000
  • Headquartered in Wisconsin (USA)
  • Expertise backed by over 500 industry subject matter experts
  • Acquired by Sotera Health in 2021

 

About Sotera Health®

 

The name Sotera Health was inspired by Soteria, the Greek goddess of safety, and reflects the Company’s unwavering commitment to its mission, Safeguarding Global Health®.

 

Sotera Health Company, along with its three best-in-class businesses – Sterigenics®Nordion® and Nelson Labs®, is a leading global provider of mission-critical end-to-end sterilization solutions and lab testing and advisory services for the healthcare industry. With a combined tenure across our businesses of nearly 200 years and our industry-recognized scientific and technological expertise, we help to ensure the safety of over 190 million patients and healthcare practitioners around the world every year.

 

We are a trusted partner to more than 5,800 customers in over 50 countries, including 40 of the top 50 medical device companies and 8 of the top 10 pharmaceutical companies.

 

 

To begin the Regulatory Compliance Associates® scoping process today, please enter your information in the blue form below and click the submit button at the bottom of the webpage. 

 

In this episode of RCA Radio, host Brandon Miller is joined by Dr. Matthew Jorgensen and Dr. Helin Räägel from Nelson Labs. Click now to listen to RCA’s biocompatibility podcast as Matt and Helin help educate our listers about the world of pre-clinical testing/biocompatibility for medical devices.

Matt a board-certified toxicologist with a Ph.D. in chemistry and is Nelson Laboratory’s Chemistry and Materials Scientist and Helin is Nelson Labs Senior Biocompatibility Expert with a Ph.D. in cell biology.  We cover the basic background of pre-clinical testing, explore the new things happening in the field, go over some best practices for testing, and advice on picking a testing lab.

 

About RCA’s Medical Device Consulting Services

The regulatory compliance process surrounding the medical device industry involves a strict adherence to pre/post market information throughout a device’s life-cycle. Even a single compliance issue you have can turn into a significant effect on your business. Regulatory Compliance Associates medical device consultants can help guide you through any stage of this strategic process, with capabilities during product development through the regulatory clearance/approval of your product.

Our team of over 500 medical device consulting Experts — including former FDA officials and regulatory compliance leaders in the field of medical device regulation — will work with your company to create a quality assurance and regulatory compliance approach tailored to your products and regulatory needs. Regulatory Compliance Associates works with international Fortune 100 companies, venture capital start ups, and companies of all sizes and shapes. our compliance enforcement solutions for law firms include remediation for warning letters, FDA 483’s, import bans or consent decrees. Very few regulatory compliance services have the same regulatory compliance expertise in a variety of medical fields.

Cybersecurity

For medical device manufacturers, technology can be a double-edged sword. The innovative technologies that elevate the quality of life for patients can also be used to potentially undermine the organization using the device. The consequences can affect the device itself if Regulatory Compliance Associates medtech consultants do not implement good IoT cybersecurity and FDA cybersecurity protocols.

At Regulatory Compliance Associates, we offer a wide variety of services for medical devices security to help ensure that your product is protected from cyber-attacks. With a well-planned design, along with full visibility of product development and the supply chain, Regulatory Compliance Associates medical device consultant Experts can help strengthen your device’s cybersecurity. We partner with medical device companies in each phase of the design cycle, including protecting inputs from threat exposure and hardening outputs for regulatory compliance & FDA submission approval of your medical technology.

Regulatory Affairs

Regulatory affairs is Regulatory Compliance Associates® backbone, and we handle more submissions in a month than many manufacturers do in a lifetime. Our regulatory compliance consulting Experts have experience working with the FDA, global regulatory bodies and / or agencies, and notified bodies worldwide. Therefore, you can count on us for in-depth and up-to-date insights which increase speed-to-market.

As a trusted regulatory affairs consultant, our FDA veterans and industry experts represent Regulatory Compliance Associates® as one of the top medical device consulting firms. We’re here to help you navigate the difficulties associated with new product submissions. Regulatory Compliance Associates® medical device consulting company has expertise in both the approval process and post-approval support. 

  • New Product Approval
  • Post-Approval Support
  • Outsourced Staffing
  • EU MDR
  • Combination Products

Compliance Assurance

Increasingly, life science companies are feeling the pressure of greater scrutiny by regulators, and responding by developing sustainable compliance strategies. Whether it’s preparing for an audit, developing a response to an FDA finding, or remediation to an adverse event, Regulatory Compliance Associates® can help.

Our network of over 500 medical device consultant & FDA, MHRA & EMA veterans are industry professionals offers a unique blend of expertise. This allows Regulatory Compliance Associates® to handle both simple and complex regulatory compliance challenges within medical device consulting companies.

  • Gap Assessments
  • Internal Audits
  • Employee Training
  • Notified Body Response
  • Data Integrity

Quality Assurance

Regulatory Compliance Associates® Quality Assurance consulting includes quality system assessments, strategy, implementations, and identification of quality metrics to ensure continuous improvement, aligning with your business needs and goals. Each Regulatory Compliance Associates® medical device consultant is a quality expert with experience spanning major corporations and start-ups. We know firsthand how to achieve, maintain, and improve quality, and we excel in transferring this knowledge to your organization.

In the medical devices field, quality assurance (QA) is more than merely ensuring the quality of a finished product. You need the tools to monitor and regulate every process from the design of a new product to continued quality compliance as the device is sent to market. At Regulatory Compliance Associates®, we offer you the quality assurance services you need to monitor these processes and ensure quality compliance every step of the way.

With more than 20 years experience working with medical device consulting companies, Regulatory Compliance Associates® trusted medical device quality assurance consultant team is fully equipped to handle your unique QA needs.

  • ISO13485 
  • 21 CFR 210
  • 21 CFR 211
  • Outsourced Staffing
  • MDSAP
  • Facility Validation
  • Equipment Validation
  • Quality Metrics

Remediation Support

Regulatory Compliance Associates® is widely recognized within medical device consulting companies & the life science industry for remediation support. Regulatory Compliance Associates® ability to help companies successfully resolve complex regulatory challenges have a proven track record of success. Our medical device consulting services include significant experience with the development of responses to 483 Observations, Warning Letters, Untitled Letters and Consent Decrees.

  • Regulatory Action
  • Regulatory Compliance
  • Regulatory Enforcement
  • Warning Letter
  • 483 Observation
  • Oversight Services

Our value goes beyond the initial response by helping companies successfully execute their action plans, develop an improved compliance culture tailored to the needs of their business, and ultimately move beyond the regulatory action to emerge as a stronger business. We negotiate difficult demands of remediation with insight and the clear advantage of our medical device consultant expertise and experience that makes partnering with Regulatory Compliance Associates®  a competitive differentiator in the remediation space.

  • Quality System
  • Technical File
  • Design History File
  • Data Integrity
  • cGMP

Strategic Consulting

Whether it’s a strategy, a technical plan, or project, Regulatory Compliance Associates® medical device consultancy can help ensure a successful project. Regulatory Compliance Associates® medical device strategy consulting can deliver your project on time, on budget, and you’re never embroiled in a costly mistake.

Our medical device consultant Experts are industry Experts are here to provide the unique insight you need before an M&A deal, through a staffing crisis and in every area of your product’s development and life cycle. As the trusted medical device manufacturing consultants of thousands of companies around the world, we have the knowledge and expertise needed to deliver exceptional results to your business — no matter your size or unique needs.

  • Manufacturing Optimization
  • Product Lifecycle Management
  • Mergers & Acquisitions (M&A)
  • Due Diligence
  • Device Vigilance
  • Risk Management Plan
  • Product Complaints
  • Medical Information

About Regulatory Compliance Associates

Regulatory Compliance Associates® (RCA) provides medical device consulting to the following industries for resolution of life science challenges:

We understand the complexities of running a life science business and possess areas of expertise that include every facet of R&D, operations, regulatory affairs, quality, and manufacturing. We are used to working on the front lines and thriving in the scrutiny of FDA, Health Canada, MHRA and globally-regulated companies.

As your partners, we can negotiate the potential minefield of regulatory compliance and regulatory due diligence with insight, hindsight, and the clear advantage of our unique expertise and experience.

  • Founded in 2000
  • Headquartered in Wisconsin (USA)
  • Expertise backed by over 500 industry subject matter experts
  • Acquired by Sotera Health in 2021

About Sotera Health

The name Sotera Health was inspired by Soteria, the Greek goddess of safety, and reflects the Company’s unwavering commitment to its mission, Safeguarding Global Health®.

Sotera Health Company, along with its three best-in-class businesses – Sterigenics®Nordion® and Nelson Labs®, is a leading global provider of mission-critical end-to-end sterilization solutions and lab testing and advisory services for the healthcare industry. With a combined tenure across our businesses of nearly 200 years and our industry-recognized scientific and technological expertise, we help to ensure the safety of over 190 million patients and healthcare practitioners around the world every year.

We are a trusted partner to more than 5,800 customers in over 50 countries, including 40 of the top 50 medical device companies and 8 of the top 10 pharmaceutical companies.

Commitment to Quality

Our Certificate of Registration demonstrates that our Quality Management System meets the requirements of ISO 9001:2015, an internationally recognized standard of quality.

 

To begin the Regulatory Compliance Associates® scoping process today, please enter your information in the blue form below and click the submit button at the bottom of the webpage.