← All courses

Practitioner · Medical device quality

ISO 14971 Medical Device Risk Management

Build and keep alive a risk management file that stands up to scrutiny.

A practitioner course on ISO 14971:2019, Medical devices — Application of risk management to medical devices: the policy and plan, risk analysis, evaluation and control, overall residual risk, the risk management review, and production and post-production information, with the links to ISO 13485:2016.

Secure payment by Stripe · for yourself or for your team

Standard and editionISO 14971:2019

Last updated3 October 2026

Preview this course

Experience the learning
before you enrol.

Watch a sample from ISO 14971 Medical Device Risk Management before you enrol.

ISO 14971 Medical Device Risk ManagementSample

Learning outcomes

Knowledge you can put to work.

Connect the subject to the responsibilities and decisions people encounter in their roles.

  • Tell a hazard, a hazardous situation and a harm apart, and trace the sequence of events between them
  • Set up the policy for risk acceptability, the risk management plan and the risk management file
  • Analyse intended use, reasonably foreseeable misuse, characteristics related to safety and hazards
  • Choose risk control measures in the standard's order and verify their implementation and effectiveness
  • Evaluate residual and overall residual risk, apply benefit-risk analysis correctly, and act on post-production information

Part of: Medical Device Quality and Risk Management Training

Inside the course

A clear path through the essentials.

33 modules, 33 practice checkpoints and a final exam. Video runtimes are approximate; allow additional time for the practice questions and the final exam.

Part 1Module 1Approx. 9 min
  1. Why device risk management matters9 min
  2. Practice: Why device risk management matters3 questions
Part 2Module 2Approx. 9 min
  1. Scope, life cycle and the manufacturer9 min
  2. Practice: Scope, life cycle and the manufacturer3 questions
Part 3Module 3Approx. 8 min
  1. ISO 14971 and ISO 13485: one thread8 min
  2. Practice: ISO 14971 and ISO 13485: one thread3 questions
Part 4Module 4Approx. 8 min
  1. Hazard, hazardous situation, harm8 min
  2. Practice: Hazard, hazardous situation, harm3 questions
Part 5Module 5Approx. 7 min
  1. Sequences of events7 min
  2. Practice: Sequences of events3 questions
Part 6Module 6Approx. 7 min
  1. Risk: severity and probability7 min
  2. Practice: Risk: severity and probability3 questions
Part 7Module 7Approx. 8 min
  1. Top management and the policy8 min
  2. Practice: Top management and the policy3 questions
Part 8Module 8Approx. 8 min
  1. Risk acceptability criteria and the matrix8 min
  2. Practice: Risk acceptability criteria and the matrix3 questions
Part 9Module 9Approx. 8 min
  1. Competence and the risk management plan8 min
  2. Practice: Competence and the risk management plan3 questions
Part 10Module 10Approx. 7 min
  1. The risk management file and traceability7 min
  2. Practice: The risk management file and traceability3 questions
Part 11Module 11Approx. 7 min
  1. Starting a risk analysis7 min
  2. Practice: Starting a risk analysis3 questions
Part 12Module 12Approx. 8 min
  1. Intended use and foreseeable misuse8 min
  2. Practice: Intended use and foreseeable misuse3 questions
Part 13Module 13Approx. 8 min
  1. Characteristics related to safety8 min
  2. Practice: Characteristics related to safety3 questions
Part 14Module 14Approx. 8 min
  1. Finding hazards: the Annex C checklists8 min
  2. Practice: Finding hazards: the Annex C checklists3 questions
Part 15Module 15Approx. 7 min
  1. Hazard-hunting techniques7 min
  2. Practice: Hazard-hunting techniques3 questions
Part 16Module 16Approx. 8 min
  1. Use error and usability8 min
  2. Practice: Use error and usability3 questions
Part 17Module 17Approx. 8 min
  1. Software, data, security and IVDs8 min
  2. Practice: Software, data, security and IVDs3 questions
Part 18Module 18Approx. 7 min
  1. Risk estimation with data7 min
  2. Practice: Risk estimation with data3 questions
Part 19Module 19Approx. 7 min
  1. Risk evaluation7 min
  2. Practice: Risk evaluation3 questions
Part 20Module 20Approx. 8 min
  1. The risk control option order8 min
  2. Practice: The risk control option order3 questions
Part 21Module 21Approx. 7 min
  1. Risk control in practice7 min
  2. Practice: Risk control in practice3 questions
Part 22Module 22Approx. 7 min
  1. Implementing and verifying controls7 min
  2. Practice: Implementing and verifying controls3 questions
Part 23Module 23Approx. 7 min
  1. Residual risk and risks from controls7 min
  2. Practice: Residual risk and risks from controls3 questions
Part 24Module 24Approx. 7 min
  1. Benefit-risk analysis7 min
  2. Practice: Benefit-risk analysis3 questions
Part 25Module 25Approx. 7 min
  1. Completeness of risk control7 min
  2. Practice: Completeness of risk control3 questions
Part 26Module 26Approx. 8 min
  1. The register, end to end8 min
  2. Practice: The register, end to end3 questions
Part 27Module 27Approx. 7 min
  1. Overall residual risk and disclosure7 min
  2. Practice: Overall residual risk and disclosure3 questions
Part 28Module 28Approx. 6 min
  1. Risk management review and report6 min
  2. Practice: Risk management review and report3 questions
Part 29Module 29Approx. 7 min
  1. Collecting production and market information7 min
  2. Practice: Collecting production and market information3 questions
Part 30Module 30Approx. 7 min
  1. Reviewing information and acting7 min
  2. Practice: Reviewing information and acting3 questions
Part 31Module 31Approx. 8 min
  1. Process risk on the shop floor8 min
  2. Practice: Process risk on the shop floor3 questions
Part 32Module 32Approx. 7 min
  1. Suppliers, outsourcing and change7 min
  2. Practice: Suppliers, outsourcing and change3 questions
Part 33Module 33Approx. 7 min
  1. The auditor's view and your part7 min
  2. Practice: The auditor's view and your part3 questions

Frequently asked questions

Your questions,
answered.

About ISO 14971 Medical Device Risk Management, its certificate and enrolment.

Ask Sterling
Who is the ISO 14971 Medical Device Risk Management course for?

It is for the people who build and maintain a medical device risk management file: risk management, design, R&D and software engineers, and quality and regulatory staff of device manufacturers. It also suits production and supplier-quality leads, contract manufacturers, importers and distributors, whose work feeds the file, and top management, who set the policy for risk acceptability. No prior knowledge of ISO 14971 is needed; ISO 13485 awareness helps.

What does the ISO 14971 Medical Device Risk Management course cover?

It covers the scope of ISO 14971:2019 and its link with ISO 13485:2016; hazards, hazardous situations, harm and risk; the policy for risk acceptability, the plan and the risk management file; risk analysis, including intended use, foreseeable misuse, use error, software and data; risk evaluation and control in the standard's order; residual risk, benefit-risk analysis and overall residual risk; the risk management review; and production and post-production information, process risk, suppliers and change.

How long does the ISO 14971 Medical Device Risk Management course take?

It is a set of short video modules, each followed by practice questions, and a final exam. The course page shows the number of modules and the approximate video runtime; allow additional time for the practice questions and the exam. With 12 months of access, you can complete it in one sitting or spread it over several sessions.

Do learners receive a certificate?

Yes. Learners who reach the 70% pass mark in the final exam receive a Sterling Academy Certificate of Completion for ISO 14971 Medical Device Risk Management. Each certificate carries a unique number and a QR code, and anyone can check it online using the certificate number and the holder's surname. It is a training certificate for the individual learner.

Is the course online and self-paced?

Yes. ISO 14971 Medical Device Risk Management is a self-paced online course made of short video modules, in English with captions. You study at your own pace during 12 months of access, and practice questions after modules help you check your understanding before the final exam. If a point is unclear, questions are answered by a Sterling consultant.

Can we enrol a team, and how much does it cost?

ISO 14971 Medical Device Risk Management has a list price of US$149 per learner, with a limited-time offer of US$99 per learner until 31 December 2026. Teams save 20% for 11 to 50 learners and 30% for 51 to 200; 201 or more learners are priced on request. Client administrators can track their team's progress. Prices are in US dollars, excluding taxes, and Sterling confirms final pricing and enrolment.

Does this course make our organisation ISO 14971 or ISO 13485 certified?

No. The Certificate of Completion is a training certificate: it shows that one person completed ISO 14971 Medical Device Risk Management and reached the pass mark in its final exam. It is not certification of an organisation, and Sterling does not certify organisations. Where an organisation seeks certification, for example of its ISO 13485 quality management system, which requires documented risk management, it is certified by an independent certification body after that body's own audit.

Assessment & completion

Complete the learning.
Keep a verifiable record.

Learners who complete the course and its final exam receive a numbered Sterling Academy Certificate of Completion with online QR verification.

This records course completion. It does not confer ISO certification or a professional auditor qualification.

Pass mark
70%
Prerequisites
None
Ask about course requirements

Your next step

Ready to put ISO 14971 Medical Device Risk Management into practice?

Expert and experienced consultants, 8,100+ client engagements in 60+ countries, from gap assessment to a system ready for its certification audit.

Talk to a Sterling consultant

Not sure which course?

Plan your next step
in learning.

Discuss your learning needs