ISO 13485:2016 Consulting, ISO 13485 Certification Consulting Combined with MDR (EU) 2017/745 Regulation for Medical Devices

ISO 13485:2016 Consulting, ISO 13485 Certification Consulting Combined with MDR (EU) 2017/745 Regulation for Medical Devices

ISO 13485:2016 consulting and ISO 13485 certification consulting combined with MDR (EU) 2017/745 Regulation provide an integrated approach for medical device manufacturers and organizations seeking to establish an effective quality management system, meet applicable medical device regulatory requirements, and prepare their products for the European Union market.

In practice, ISO 13485:2016 and MDR (EU) 2017/745 are closely related, but they are not interchangeable requirements. ISO 13485:2016 focuses on the quality management system for medical devices, while MDR (EU) 2017/745 is an EU regulation establishing legal requirements for medical devices, including requirements related to safety and performance, device classification, conformity assessment, technical documentation, clinical evaluation, post-market surveillance, and obligations of relevant economic operators.

Therefore, businesses should approach ISO 13485 consulting and MDR compliance in an integrated manner, clearly identifying which requirements apply to the quality management system and which requirements apply to the specific product and its regulatory compliance.

VINTECOM International provides ISO 13485:2016 consulting, medical device quality management system consulting, ISO 13485 certification preparation, and consulting related to MDR (EU) 2017/745 requirements, helping organizations identify gaps between their existing systems and the applicable quality and regulatory requirements.

1. Scope of ISO 13485:2016 and MDR (EU) 2017/745 Consulting

ISO 13485:2016 specifies requirements for a quality management system where an organization needs to demonstrate its ability to provide medical devices and related services that consistently meet customer requirements and applicable regulatory requirements.

MDR (EU) 2017/745, meanwhile, establishes the regulatory framework applicable to medical devices placed on the European Union market or put into service within the EU.

Depending on the organization and product, consulting may include:

ISO 13485:2016 quality management system consulting, implementation, and improvement.
Gap assessment against ISO 13485:2016.
Identification of applicable legal and regulatory requirements.
Integration of applicable MDR requirements into the quality management system.
Medical device design and development controls.
Medical device risk management.
Supplier and outsourced-process controls.
Document control, records, and traceability.
Production and service provision controls.
Complaint handling and nonconformity management.
Corrective and preventive action processes.
Post-Market Surveillance (PMS).
Internal audit and management review preparation.
Preparation for applicable ISO 13485 certification and conformity assessment activities.

The exact scope should be determined based on the type of medical device, intended purpose, device classification, regulatory role of the organization, and target market.

2. What Is the Difference Between ISO 13485:2016 and MDR (EU) 2017/745?

This is one of the first issues that medical device manufacturers should clearly understand.

Area	ISO 13485:2016	MDR (EU) 2017/745
Nature	International quality management system standard	European Union medical device regulation
Main focus	Quality management system	Product safety, performance, and regulatory compliance
Scope	Organization's QMS	Medical devices and relevant economic operators
Design & development	Requirements for controlling applicable design and development processes	Requirements concerning device design, safety, and performance
Risk management	Requires an appropriate risk management process	Establishes regulatory requirements related to risk management
Technical documentation	Controls relevant documents and records within the QMS	Establishes requirements for technical documentation
Clinical evaluation	Supports applicable quality and regulatory processes	Important regulatory requirement under MDR
Post-market activities	Complaint handling, feedback, corrective actions, and related QMS processes	PMS, vigilance, and other applicable post-market obligations
CE Marking	ISO 13485 certification itself does not constitute CE Marking	Provides the regulatory framework for CE conformity assessment

Important: ISO 13485:2016 certification does not automatically mean that a medical device complies with all MDR requirements or that the product automatically qualifies for CE Marking. The manufacturer must determine and fulfill the applicable legal and conformity assessment requirements for the specific device.

3. Why Should Medical Device Companies Integrate ISO 13485 with MDR?

If a company implements ISO 13485 separately from the regulatory requirements applicable to its target market, there may be a risk that the QMS is established but does not fully support the product's regulatory compliance strategy.

An integrated approach can help organizations:

Identify applicable requirements at an early stage.
Link the QMS with product-specific regulatory requirements.
Establish systematic design and development controls.
Build appropriate technical and quality records.
Control risks throughout the product life cycle.
Control suppliers and outsourced processes.
Manage product and process changes.
Improve traceability.
Standardize complaint handling and market feedback.
Prepare for applicable audits and conformity assessment activities.

For Vietnamese medical device manufacturers targeting the EU market, establishing a product-specific regulatory strategy at an early stage can be particularly important for project planning and compliance preparation.

4. Which Organizations Can Benefit from ISO 13485:2016 Consulting?

ISO 13485 consulting may be relevant to different organizations involved in the medical device supply chain, depending on their activities and applicable requirements, including:

Medical device manufacturers.
Medical device design and development organizations.
Manufacturers of components and parts for medical devices.
Contract manufacturers and outsourced production organizations.
Organizations providing services related to medical devices.
Suppliers performing outsourced processes within the medical device supply chain.
Manufacturers of diagnostic devices and other applicable medical products.
Vietnamese companies planning to export medical devices to the European Union.

The applicable scope should be determined according to the organization's actual activities and relevant regulatory requirements.

5. ISO 13485:2016 Consulting Process Combined with MDR Requirements

An integrated consulting project may be implemented through the following stages.

Step 1 – Identify the Product and Project Scope

The first step is to determine:

What is the product?
What is its intended purpose?
What is the organization's regulatory role?
Where is the product manufactured?
What is the target market?
Does the organization already have a QMS?
Is the product in the design, testing, validation, or production stage?
Which regulatory requirements have already been identified?

This is a critical step because an MDR compliance strategy cannot be fully determined simply from the product name.

Step 2 – Gap Assessment

VINTECOM may conduct an assessment of the organization's current status covering areas such as:

Quality management system.
Document control.
Design and development.
Risk management.
Purchasing and supplier management.
Production.
Inspection and testing.
Monitoring and measuring equipment.
Traceability.
Complaint handling.
CAPA.
PMS.
Change control.
Technical documentation and related evidence.

The results can be used to develop a corrective action and implementation roadmap.

Step 3 – Establish and Implement the ISO 13485 QMS

Applicable procedures, work instructions, forms, and records are developed or revised according to the organization's actual operations.

The objective is not simply to create extensive documentation, but to establish a system capable of effectively controlling the processes that ensure the conformity and continued safety and performance of medical devices.

Step 4 – Integrate Applicable MDR Requirements

Applicable MDR requirements are identified and linked to the corresponding organizational and product processes.

For example:

Risk Management

→ Design & Development
→ Verification & Validation
→ Technical Documentation
→ Clinical Evaluation
→ PMS

This creates an integrated relationship between:

QMS – Product – Risk – Regulatory Evidence

Step 5 – Training and Implementation

Relevant personnel may receive training covering:

ISO 13485:2016.
Internal QMS procedures.
Applicable regulatory requirements.
Risk management.
Design controls.
Document control.
CAPA.
Complaint handling.
PMS.
Other product-specific requirements.

Step 6 – Internal Audit and Corrective Action

The organization conducts internal audits to identify nonconformities, improvement opportunities, and areas where objective evidence needs to be strengthened before external assessment.

Step 7 – ISO 13485 Certification Assessment

After the QMS has been implemented and the applicable requirements have been addressed, the organization may work with an appropriate certification body to conduct the ISO 13485:2016 certification process.

The selection of a certification body should consider its scope of certification, competence, medical device expertise, applicable product categories, and customer or market requirements.

6. MDR and CE Marking for Medical Devices

One of the most frequently asked questions is:

“If we have ISO 13485 certification, does our medical device already have CE conformity under MDR?”

The answer is no, this cannot be automatically concluded.

ISO 13485 focuses on the organization's quality management system. MDR establishes the EU regulatory requirements applicable to medical devices.

For a specific medical device, the organization may need to consider:

Intended purpose.
Device classification.
General Safety and Performance Requirements (GSPR).
Risk management.
Technical documentation.
Clinical evaluation.
Post-Market Surveillance.
Vigilance.
Unique Device Identification (UDI), where applicable.
Economic operator obligations.
Applicable conformity assessment procedure.
Notified Body involvement, where applicable.
EU Declaration of Conformity.
CE Marking.

Therefore, ISO 13485 is an important component of a medical device organization's quality management system, but it should not be regarded as a substitute for the complete MDR compliance process.

7. Documents and Information to Prepare for ISO 13485 and MDR Consulting

To enable a more accurate preliminary assessment, an organization should consider providing information such as:

Company Information

Company name and site addresses.
Number of employees.
Manufacturing locations.
Scope of activities.

Product Information

Product name.
Product description.
Intended purpose.
Catalogue and specifications.
Design drawings, where applicable.
Similar or equivalent products.
Current markets.

Quality Management System Information

Existing ISO 9001 certification, if applicable.
Existing ISO 13485 certification, if applicable.
Other relevant certifications.
Existing procedures.
Internal audit records.
CAPA records.
Complaint records.
Supplier management records.

Regulatory Information

Existing regulatory classification.
Technical documentation.
Risk management file.
Clinical evaluation information.
Test reports.
Existing CE-related documentation, if applicable.
Authorized Representative and Notified Body information, where relevant.

These documents help determine the consulting scope, compliance gaps, and appropriate implementation roadmap.

8. How Does VINTECOM Provide ISO 13485:2016 and MDR Consulting?

VINTECOM International applies a risk-based and evidence-based approach to consulting projects, focusing on requirement identification, current-state assessment, system development, implementation, and preparation of appropriate objective evidence.

Services can be structured according to the organization's needs.

ISO 13485:2016 Consulting

→ Gap Assessment
→ QMS Implementation
→ Documentation
→ Training
→ Internal Audit
→ Management Review
→ Certification Preparation

ISO 13485 + MDR Consulting

→ Product & Intended Purpose Review
→ Applicable Requirements
→ QMS Gap Assessment
→ Risk Management
→ Design & Development Controls
→ Technical Documentation
→ Clinical/Regulatory Interface
→ PMS & Vigilance Processes
→ Conformity Assessment Preparation

The exact consulting scope is determined according to the product, the organization's regulatory role, and applicable requirements. VINTECOM does not replace the role of regulatory authorities, certification bodies, or Notified Bodies in activities that fall under their respective legal responsibilities.

9. Frequently Asked Questions About ISO 13485 and MDR

Is ISO 13485:2016 mandatory for every medical device company?

It should not be answered simply as “yes” or “no.” The applicability of ISO 13485 depends on the organization's role, target market, applicable regulations, customer requirements, and supply-chain requirements. For the EU market, organizations should separately assess the MDR requirements applicable to the specific device.

Does ISO 13485 replace MDR?

No. ISO 13485 is a quality management system standard for medical devices, whereas MDR is an EU regulation establishing legal requirements applicable to medical devices.

Does ISO 13485 certification allow a product to use the CE Marking?

Not automatically. The manufacturer must complete the applicable conformity assessment procedure and meet the MDR requirements applicable to the specific device.

Can a Vietnamese company establish ISO 13485 first and implement MDR later?

A project may be implemented in stages. However, from a project-planning perspective, applicable MDR requirements should be considered from the beginning so that the QMS is not developed separately from product-specific regulatory requirements and evidence.

Which products are covered by MDR?

MDR applies to medical devices within the scope of Regulation (EU) 2017/745. Whether a specific product falls within the scope of MDR must be determined based on its characteristics, intended purpose, and applicable regulatory provisions.

10. ISO 13485:2016 and MDR Consulting for Medical Device Companies in Vietnam

For Vietnamese companies participating in the international medical device supply chain, establishing a quality management system should not be limited to obtaining a certificate.

An effective system should create an integrated relationship between:

Quality Management System

→ Product Requirements

→ Risk Management

→ Design & Development

→ Verification & Validation

→ Technical Documentation

→ Clinical/Regulatory Evidence

→ Production

→ Post-Market Surveillance

→ Continual Improvement

This is why ISO 13485:2016 consulting combined with an MDR (EU) 2017/745 compliance approach should begin with the correct identification of the product and its intended purpose, rather than simply starting with the preparation of ISO documentation.

Register for ISO 13485:2016 and MDR Consulting

Organizations seeking ISO 13485:2016 consulting, ISO 13485 certification consulting, medical device quality management system consulting, or consulting combining ISO 13485 with MDR (EU) 2017/745 requirements can contact VINTECOM International to discuss their products, regulatory scope, current QMS, and project requirements.

VINTECOM International – ISO Consulting, ISO Training, Assessment and International Standards Solutions for Vietnamese Companies and FDI Supply Chains.

📶📶📶 Contact to register for Training and Consulting services for ISO 13485: 2016 & MDR

Customers, organizations and enterprises require the Training course, Consulting or Certification services of ISO 13485: 2016 and MDR, please click on "Registration - Quotation" or on the right toolbar below the PC screen to receive a quotation for Training, Consulting and Certification services.

📶📶📶 Further information, Please contact us as below:

☎ VINTECOM International Office in Ha Noi City: 16th Floor - Green Stars City, 234 Pham Van Dong Street, Phu Dien Ward, Hanoi City. Hotline 094-886-5288/ (024) 730-588-58

☎ VINTECOM International Office in Ho Chi Minh City: Glory Height Vinhome Grand Park - 88 Phuoc Thien Street, Long Binh Ward, HCM City. Hotline 0938-083-998/ (028) 7300-7588

VINTECOM INTERNATIONAL MANAGEMENT CONSULTANCY COMPANY

Head Office: No. 5 Hoang Sam treet, Nghia Do, Cau Giay district, Ha noi City

HANOI VINTECOM INTERNATIONAL OFFICE

Address: 16th Floor - Green Stars City

234 Pham Van Dong Street, Phu Dien Ward, Hanoi City

Tel : (024) 730.588.58/ (024) 730.333.86

Hotline: 094 886 5288

Skype: kd.vintecom

Email : office-hn@vintecom.com.vn

Web : www.vintecom.com.vn

HCM VINTECOM INTERNATIONAL OFFICE

Address : Glory Heights - Vinhomes Grand Park