All terms
    Quality & RiskQuality SystemQMS

    Quality Management System

    The organizational structure, processes, and resources a manufacturer implements to consistently design, manufacture, and support devices meeting regulatory and quality requirements.

    Reviewed by Christian Espinosa, Founder, Blue Goat CyberLast reviewed September 19, 2026

    Definition

    A quality management system is the set of interrelated processes, documented procedures, and management structures a manufacturer uses to ensure that devices are consistently designed, produced, and monitored to meet applicable regulatory requirements and their own quality objectives. ISO 13485:2016 is the internationally recognized QMS standard specific to medical devices, structured around a process approach covering management responsibility, resource management, product realization (including design controls), and measurement/analysis/improvement, including corrective and preventive action (CAPA). In the United States, FDA's Quality System Regulation, 21 CFR Part 820, historically ran in parallel to ISO 13485 with some differences; the Quality Management System Regulation (QMSR), effective February 2, 2026, replaces the Part 820 requirements by incorporating ISO 13485:2016 by reference, substantially harmonizing the US and international frameworks.
    What the regulation says
    The FDA Quality Management System Regulation, published in the Federal Register on February 2, 2024 and effective February 2, 2026, amends 21 CFR Part 820 to incorporate ISO 13485:2016 by reference as the QMS requirement for devices subject to FDA jurisdiction.

    What this means in practice

    A certified or FDA-compliant QMS is a prerequisite for market access under both the EU MDR/IVDR (via notified body QMS certification, typically under Annex IX) and the US FDA framework (via QMSR conformance, subject to FDA inspection). Manufacturers commonly maintain a single integrated QMS referencing ISO 13485:2016 to satisfy both regimes, supplementing it with jurisdiction-specific procedures (e.g. MDR vigilance reporting timelines, US Medical Device Reporting).
    Common pitfalls
    • Assuming ISO 13485 certification alone satisfies all US FDA QMSR expectations without reviewing the specific FDA amendments and definitions layered onto the incorporated standard.
    • Treating the QMS as a documentation exercise for audits rather than an operating system that should demonstrably drive day-to-day design, production, and CAPA decisions.
    • Failing to update QMS procedures promptly when regulatory requirements change (e.g. new vigilance timelines, new UDI requirements), leaving the documented system out of sync with actual practice.

    Frequently asked questions

    Formal ISO 13485 certification by an accredited certification body is not itself an EU legal requirement, but MDR/IVDR require manufacturers of most device classes to operate a QMS assessed by a notified body, and in practice manufacturers almost universally obtain ISO 13485 certification to streamline that assessment.
    Grouped by theme
    Cited by

    Where this term appears across MedTech Terms.

    Ecosystems (1)

    Sources

    3 sources

    Every citation below opens the original document. Each is graded against our source-tier hierarchy so you can see what rests on binding law versus commentary.

    Tier 1Binding law and standards· 3
    Link health: 2 verified 1 unchecked· last checked 2026-06-20
    ISO·1eCFR·1FDA·1
    1. 1
      ISO 13485:2016
      Tier 1 Verified
      ISOiso.org
    2. 2
      21 CFR Part 820, Quality System Regulation / QMSR
      Tier 1 Verified
      eCFRecfr.gov
    3. 3
      FDA, Quality Management System Regulation Final Rule
      Tier 1 Unchecked
      FDAfederalregister.gov

    Inline markers like [1] jump to the matching reference above.