ISO 13485 Medical Devices Consultant

What is ISO 13485?

ISO 13485:2016 is the international standard for Quality Management Systems for medical devices. Published by ISO, it specifies QMS requirements for organisations involved in the design, production, installation, and servicing of medical devices and related services.

Unlike ISO 9001, which is designed for continual improvement, ISO 13485 is designed to ensure that medical device manufacturers can consistently demonstrate their ability to provide devices and related services that meet customer and applicable regulatory requirements. The emphasis is on risk management, design controls, traceability, and post-market surveillance — recognising the patient safety implications of medical device failures.

ISO 13485:2016 is aligned with the regulatory requirements of major medical device markets. It is a prerequisite for CE marking under the EU Medical Device Regulation (MDR 2017/745) and the EU In Vitro Diagnostic Regulation (IVDR 2017/746), and is referenced in regulatory frameworks in the United States, Canada, Japan, Australia, and other markets. In Indonesia, BPOM (Badan Pengawas Obat dan Makanan) regulates medical device registration, and ISO 13485 certification supports BPOM registration processes.

Who needs it?

• Medical device manufacturers in Indonesia supplying domestic or export markets
• Manufacturers seeking CE marking for entry to European markets under EU MDR/IVDR
• OEM and contract manufacturers producing components or assemblies for the global medical device supply chain
• Distributors and importers of medical devices where regulatory requirements mandate QMS certification
• In vitro diagnostic (IVD) device manufacturers
• Manufacturers transitioning from ISO 13485:2003 or older QMS frameworks

Benefits of ISO 13485 certification

• Regulatory market access — ISO 13485 certification is a prerequisite for CE marking and is recognised in medical device regulatory frameworks across major export markets
• BPOM registration support — a documented ISO 13485 QMS demonstrates device quality and safety controls in support of Indonesian BPOM device registration
• Risk-based quality management — systematic risk management per ISO 14971 principles integrated into design controls and production processes reduces device failure and patient risk
• Supply-chain qualification — global medical device OEMs require ISO 13485 certification from component and contract manufacturers in their supply chains
• Design control discipline — the standard's design and development requirements ensure that device performance, safety, and regulatory requirements are addressed systematically during product development
• Post-market surveillance framework — requirements for complaint handling, adverse event reporting, and field safety corrective actions support proactive device lifecycle management

Our process — from kickoff to certificate in 4 steps

1. Gap Analysis. We assess your current QMS against ISO 13485:2016 requirements, covering regulatory requirements identification, design controls, risk management, production and process controls, traceability, complaint handling, and post-market surveillance.
2. Documentation. We develop your medical device QMS documentation — quality manual, device file structure, design and development procedures, risk management procedures (aligned to ISO 14971), production controls, traceability procedures, and post-market surveillance framework.
3. Implementation & Training. We train your quality team on medical device QMS requirements, support design-control and risk-management process implementation, and run an internal audit cycle.
4. Certification Audit Support. We prepare your team for Stage 1 and Stage 2 audits with an accredited certification body, and support notified body (for CE marking) technical file preparation where applicable.

What you'll get

• ISO 13485:2016 Quality Management System documentation
• Device file and technical documentation structure
• Design and development control procedures
• Risk management framework (aligned to ISO 14971)
• Production and process control procedures
• Traceability and labelling procedures
• Complaint handling and adverse event reporting procedures
• Post-market surveillance plan template
• Internal audit programme and trained auditors
• Certification audit accompaniment

Why RKM for ISO 13485

RKM's quality management system expertise, built over decades of ISO 9001 and sector-specific QMS implementation, provides a strong foundation for ISO 13485 work. Medical device QMS requirements demand rigorous documentation, design controls, and risk management — disciplines central to our consulting methodology.

We advise on the pathway from ISO 13485 certification to CE marking, including the role of notified bodies and the technical file requirements under EU MDR/IVDR, for manufacturers seeking European market access. We work with clients to build QMS documentation that satisfies both ISO 13485 certification auditors and regulatory technical file reviewers.

Frequently Asked Questions

How does ISO 13485 differ from ISO 9001? ISO 13485 is based on ISO 9001 but is specifically designed for the medical device industry. Key differences include: ISO 13485 does not require a commitment to continual improvement (it requires effectiveness of the QMS), it has specific requirements for design and development, risk management, sterile device controls, and post-market surveillance that are not in ISO 9001.

Is ISO 13485 required for CE marking? CE marking under EU MDR/IVDR requires a Quality Management System that covers the regulatory requirements of the Regulation. ISO 13485 certification is a recognised way to demonstrate QMS compliance, and most notified bodies audit against ISO 13485 as part of the CE marking conformity assessment process.

What is the role of ISO 14971 in ISO 13485 implementation? ISO 14971 is the international standard for risk management for medical devices. ISO 13485 requires a risk management process throughout product realisation, and ISO 14971 provides the methodology. We implement both together as part of the QMS.

Does ISO 13485 apply to software as a medical device (SaMD)? Yes — software that meets the definition of a medical device is subject to ISO 13485 and applicable regulatory requirements. EU MDR and FDA guidance provide specific guidance on SaMD classification. RKM advises on regulatory classification as part of the scoping process.

How long does ISO 13485 certification take? Typically 8–14 months from gap analysis to certification, depending on the complexity of your device types, the presence of design activities, and the maturity of existing quality controls.

What is the connection to BPOM medical device registration in Indonesia? BPOM requires medical device manufacturers (or their Indonesian representatives) to submit documentation supporting device safety and performance. An ISO 13485-certified QMS provides credible evidence of manufacturing quality controls and supports the BPOM registration dossier. RKM advises on what documentation to prepare for BPOM registration alongside ISO 13485 implementation.

Can ISO 13485 be integrated with ISO 9001? ISO 13485 is structured similarly to ISO 9001 and covers all ISO 9001 requirements (with medical-device-specific modifications). A company certified to ISO 13485 generally does not need a separate ISO 9001 certificate, though some customers may request both. We advise on the most efficient path for your customer mix.