MDSAP Training: Prepare Your Quality System for the Medical Device Single Audit Program

Opens with the June 2021 Philips Respironics recall of ventilators and CPAP and BiPAP machines whose sound-reducing foam could break down, affecting 15 million devices worldwide, and the FDA Form 483 that followed an inspection of a Philips site in Pennsylvania. The second case is the Medtronic diabetes business warning letter after an inspection of its headquarters in Northridge, California. Shows how complaints, risk, corrective action, recalls and reporting form one chain, and how MDSAP works from start to finish in five steps: one audit, used by five regulators, against ISO 13485 and each market's added rules. Introduces DEF Medical Inc. in Toronto, which makes bedside patient monitors and sterile blood pressure transducers for five markets. Ends with how the thirteen modules, four practice exercises and the exam work, and a recap.

What you will be able to do

• Explain how complaints, risk, CAPA, recalls and reporting form one chain
• Describe how MDSAP works from application to certificate in five steps
• State why one MDSAP audit matters to a maker selling in all five markets

Why it matters

Seeing how weak links surfaced at Philips and Medtronic shows why one well-prepared audit protects access to every market.

Practice: Practice: Welcome: why MDSAP matters · 3 questions

Starts with Health Canada's transition, announced in December 2015, from accepting both its old scheme and MDSAP certificates from 1 January 2017 to accepting only MDSAP certificates as of 1 January 2019. Explains who takes part: five members, with official observers and affiliate members around them, and how each member uses the audit under its own rules and exceptions. Covers recognition of auditing organisations as a joint exercise, and what the certificate states: that the listed sites were audited against the listed criteria for the listed scope and found to conform, while not being a marketing authorisation. Then shows how DEF Medical writes down its MDSAP scope with its auditing organisation, and how scope works for an orthopaedic implant maker in Boston selling only in the United States and Canada. Ends with a recap.

What you will be able to do

• Name the MDSAP members and explain how each uses the audit report
• Explain what an MDSAP certificate does and does not mean
• Write an audit scope that covers every market and product you supply

Why it matters

Your scope must match your sales; a scope that misses a market leaves a gap that a regulator will find.

Practice: Practice: MDSAP at a glance: the regulators and the audit · 3 questions

Opens with two ways to audit DEF Medical: one auditor works down a list and picks a design project at random, while the other starts with measurement and improvement, finds a corrective action on alarms users could not hear, and follows it into the alarm redesign project. Explains the audit approach: processes, tasks written as the auditor meets them, and linkages and risk management that tie the processes together and guide the samples. Covers the sequence of Management, measurement and improvement, design, then production, with purchasing alongside, and the trail of records from a complaint to the release of a changed device. Then shows DEF Medical's plan for its first three-year cycle: an initial audit in two stages, two surveillance audits and a re-audit, with a hearing aid maker in Sydney. Ends with a simple test and a recap.

What you will be able to do

• Explain how linkages between processes guide the auditor's samples
• Describe the MDSAP audit sequence across the seven processes
• Plan an audit programme for the three-year MDSAP cycle

Why it matters

Following the trail rather than clause numbers is how MDSAP auditors find problems, so preparing the same way finds them first.

Practice: Practice: The audit approach and the audit cycle · 3 questions

Starts with a situation that could happen at DEF Medical: a distributor orders twenty monitors for a market where the new model's application is still under review, and the order system accepts it. Explains why such controls sit in the Management process, which verifies that top management keeps an adequate and effective quality system. Covers its eleven tasks, from quality system planning to making sure devices ship only where they are authorised, with management commitment judged at the end. Then shows where the countries differ: Australia's Sponsor and the Australian register, Canada's importers and distributors, Brazil's rules on consultants, and longer record retention in some markets such as Japan, with a surgical instrument maker in Frankfurt that sells in Brazil and uses an outside design consultant. Ends with a simple test and a recap.

What you will be able to do

• Explain what the MDSAP Management process verifies
• Check that controls stop devices shipping to markets where they are not authorised
• Identify the country add-ons for Australia, Canada, Brazil and Japan

Why it matters

Management owns the controls behind every process; an order accepted for an unauthorised market is a management failure.

Practice: Practice: Process 1: Management · 3 questions

Opens with DEF Medical improving the alarm algorithm in its patient monitor software, verified and validated through design control, then asks which regulators must be notified or asked for approval in each of its five markets. Explains who applies in each market: the manufacturer for a Canadian device licence, the owner or operator registering and listing in the United States, the Sponsor for the ARTG in Australia, a marketing authorisation holder resident in Japan, and a domestic manufacturer or importer in Brazil. Covers each market's rules for registration, listing, licences and approvals, such as registering within thirty days in the United States, registered manufacturing sites for Japan, and registration or notification by class in Brazil. Then shows how DEF Medical assesses the alarm software change for every market before release. Ends with a recap.

What you will be able to do

• Identify who applies for authorisation in each MDSAP market
• Explain the registration and listing duties the auditor checks
• Assess a design change for every market before release

Why it matters

Authorised first, shipped second; a change released before every market is assessed can put devices on sale unlawfully.

Practice: Practice: Process 2: Authorisation and registration · 3 questions

Returns to the Medtronic case from Module 1, where the December 2021 warning letter named risk assessment, corrective and preventive action, complaint handling, recalls and adverse event reporting, almost all of which sit in or link to this process. Explains how the auditor follows the improvement loop record by record. Covers the sources of quality data the audit approach names, connecting and analysing them with sound methods, and investigating problems in proportion to risk. Then covers corrective and preventive actions that must be shown to work, including the changes they cause, and the Japan rule on notifying significant process changes, shown in a corrective action record from DEF Medical that an auditor samples. Ends with nonconforming product before and after delivery, independent internal audits, management review input, a simple test and a recap.

What you will be able to do

• List the quality data sources the MDSAP audit approach names
• Investigate problems in proportion to risk and show CAPA works
• Check that internal audit is independent and feeds management review

Why it matters

Data in, causes found, problems gone; a CAPA system that shows its actions work is central to every MDSAP audit.

Practice: Practice: Process 3: Measurement, analysis and improvement · 3 questions

Looks again at the Philips recall and the Medtronic warning letter, where complaints, reports and recalls behaved as one chain across many markets. Explains how complaints are handled, investigated and recorded to the rules of every market you supply, and feed risk management. Covers assessing every complaint for adverse event reporting against each market's criteria and timeframes, why reporting clocks start when you become aware, why malfunctions can be reportable, and justifying decisions not to report, with the Japan arrangements between registered site and marketing authorisation holder. Shows how DEF Medical records a reporting decision, an example of what the auditor samples. Then covers advisory notices decided by risk, scoped across markets and reported within each market's rules. Ends with keeping one table of every market's reporting timeframes built into the complaint form, and a recap.

What you will be able to do

• Assess each complaint for adverse event reporting in every market
• Record and justify a decision not to report
• Scope an advisory notice across all affected markets

Why it matters

One event can be reportable in one market and not another; a timeframe table on the complaint form prevents late reports.

Practice: Practice: Complaints, adverse events and advisory notices · 3 questions

Returns to DEF Medical's corrective action on alarms that were hard to hear, now followed into design and development, where the auditor selects the alarm redesign project. Explains the priority criteria for choosing a design project: complaints, risk and recent changes. Covers the seventeen tasks: planning, complete inputs, verified outputs, validation of the device and its software including testing at user sites, and risk controls shown to work, with acceptance criteria set before each test and Australia's design procedure requirements. Then covers design transfer in steps and design change control for the whole life of the product, shown in DEF Medical's design change record for the alarm fix, including risks, devices already delivered and every market assessed. Ends with common myths, a simple test and a recap.

What you will be able to do

• Explain how the auditor chooses a design project to sample
• Check that verification has acceptance criteria set before testing
• Control a design change, including devices already delivered

Why it matters

Verified, validated and risk-checked design records are what let a design change pass through every market's review.

Practice: Practice: Process 5: Design and development · 3 questions

Opens with DEF Medical's Chicago steriliser moving the transducers to a new sterilisation chamber and mentioning it in a short e-mail, while batches keep shipping on certificates that still say pass. Explains how auditors choose production processes by corrective action signals, risk, novelty and wide use. Covers controlled conditions, including buildings, workspace, equipment and supporting services, and a clean, suitable and monitored environment. Then explains why processes such as sterilisation, welding or moulding, whose results cannot be fully verified, must be validated with criteria set first, and why every change to a validated process is reviewed and revalidated where appropriate, with outsourced processes staying your responsibility. Shows DEF Medical's sterilisation file after it dealt with the chamber change. Ends with a simple test and a recap.

What you will be able to do

• Explain how auditors select production processes to sample
• Identify processes that must be validated because results cannot be fully verified
• Review and revalidate a changed process before release

Why it matters

A validated process that changes without review leaves nobody able to show the product is sterile or safe.

Practice: Practice: Process 6, part 1: validation, sterilisation · 3 questions

Starts with an everyday event at DEF Medical: the torque gauge for the monitor's mounting screws is found out of tolerance at calibration, adjusted and returned to use, leaving the question of the monitors it measured since its last good calibration. Explains competent people, calibrated measuring equipment, look-back on out-of-tolerance results, and validated production software, even when you never see its code. Shows DEF Medical's look-back record for the torque gauge. Covers the device master file and batch records showing each batch was made, labelled and released as planned, and traceability set by risk, full for implants and life-supporting devices. Then covers distribution, installation and service records as quality data that close the loop. Ends with a simple test, a recap and a practice exercise to plan an audit trail through one batch.

What you will be able to do

• Carry out a look-back after an out-of-tolerance calibration
• Check that batch records show each batch was made and released as planned
• Set the extent of traceability by risk

Why it matters

One batch traced both ways is how you limit a recall to the devices actually affected.

Practice: Practice: Process 6, part 2: records, traceability · 3 questions

Opens with DEF Medical's Singapore circuit board maker switching to a cheaper capacitor of the same rating without telling DEF Medical, followed months later by complaints of monitors resetting in hot rooms. Explains that a supplier is anyone outside your quality system who supplies what you use, including companies in your own group, contractors and consultants. Covers control that grows with the effect on the device: selection on capability, written agreements that require notification of changes, real monitoring and re-evaluation that follows the product's significance and the supplier's performance. Then covers verification of what arrives, which must be able to catch the faults that matter, and the Australian Sponsor duties not audited at the manufacturer. Shows DEF Medical's supplier file for the Singapore board maker after the capacitor problem. Ends with myths, a simple test and a recap.

What you will be able to do

• Set supplier controls in proportion to the effect on the device
• Write a supplier agreement that requires notice of changes
• Design incoming checks able to catch the faults that matter

Why it matters

An unnotified supplier change can reach patients months later; risk-based controls catch it at the agreement or the gate.

Practice: Practice: Process 7: Purchasing · 3 questions

Starts with two findings an auditor might raise at DEF Medical: a skipped procedure step with no product affected, and faulty monitors shipped to hospitals for a second audit in a row, and why regulators need to see at once which is worse. Explains how a nonconformity names the requirement, states the failure and gives traceable evidence, recorded on a grading and exchange form that travels with the audit report. Covers grading: starting at grade one or three by clause, and escalating for a repeat, a missing and unimplemented process, or a released nonconforming device, up to five, with no overall grade. Then shows the rules on four findings at DEF Medical, and the timeline from day zero: a possible five-day notice, a remediation plan in fifteen days, and evidence for grades four and five in thirty. Ends with an exercise and a recap.

What you will be able to do

• Write a nonconformity with requirement, failure and evidence
• Grade a nonconformity from one to five using the escalation rules
• Meet the post-audit timeline for remediation plans and evidence

Why it matters

Fixing the cause before the next audit avoids repeat findings, which escalate grades and can trigger a five-day notice.

Practice: Practice: Grading nonconformities and the timeline · 3 questions

Begins with the end of the Philips story from Module 1: an April 2024 consent decree after the June 2021 recall. Then walks through a mock MDSAP audit at DEF Medical in the audit approach's own sequence, following the plan from Module 3. On day one the auditor starts with Management and finds a recent change in Brazilian rules not identified, then follows trails through the other processes, finding issues such as distribution records with missing details. Shows how the findings are graded and DEF Medical's remediation plan for a grade three reporting finding, sent within fifteen days, with its cause and corrective action. Gives a readiness road map: fix your scope, assess gaps process by process, close them, audit yourself in MDSAP order, then contract a recognised auditing organisation, plus a checklist. Ends with the final exam: 60% to succeed, one retake included.

What you will be able to do

• Follow audit trails through all seven MDSAP processes
• Write a remediation plan with cause and corrective action
• Apply the five-step readiness road map to your own organisation

Why it matters

Rehearsing a full MDSAP audit shows where your trails break and gives you a plan to fix them before the real one.

Practice: Practice: Putting it together: a mock MDSAP audit · 3 questions