Medical devices - Application of risk management to medical devices (ISO 14971:2019)

This document specifies terminology, principles and a process for risk management of medical devices, including software as a medical device and in vitro diagnostic medical devices. The process described in this document intends to assist manufacturers of medical devices to identify the hazards associated with the medical device, to estimate and evaluate the associated risks, to control these risks, and to monitor the effectiveness of the controls.
The requirements of this document are applicable to all phases of the life cycle of a medical device. The process described in this document applies to risks associated with a medical device, such as risks related to biocompatibility, data and systems security, electricity, moving parts, radiation, and usability.
The process described in this document can also be applied to products that are not necessarily medical devices in some jurisdictions and can also be used by others involved in the medical device life cycle.
This document does not apply to:
— decisions on the use of a medical device in the context of any particular clinical procedure; or
— business risk management.
This document requires manufacturers to establish objective criteria for risk acceptability but does not specify acceptable risk levels.
Risk management can be an integral part of a quality management system. However, this document does not require the manufacturer to have a quality management system in place.
NOTE Guidance on the application of this document can be found in ISO/TR 24971[9].

Medizinprodukte - Anwendung des Risikomanagements auf Medizinprodukte (ISO 14971:2019)

Dispositifs médicaux - Application de la gestion des risques aux dispositifs médicaux (ISO 14971:2019)

Le présent document spécifie la terminologie, les principes et un processus de gestion des risques relatifs aux dispositifs médicaux, y compris les logiciels utilisés en tant que dispositifs médicaux et les dispositifs médicaux de diagnostic in vitro. Le processus décrit dans le présent document vise à aider les fabricants de dispositifs médicaux à identifier les dangers associés au dispositif médical, à estimer et évaluer les risques correspondants, à maîtriser ces risques et à surveiller l'efficacité des moyens de maîtrise.
Les exigences du présent document s'appliquent à tous les stades du cycle de vie d'un dispositif médical. Le processus décrit dans le présent document s'applique aux risques associés à un dispositif médical, tels que les risques concernant la biocompatibilité, la sécurité des données et des systèmes, l'électricité, les parties en mouvement, le rayonnement et l'aptitude à l'utilisation.
Le processus décrit dans le présent document peut aussi s'appliquer aux produits qui ne sont pas nécessairement des dispositifs médicaux dans certaines juridictions et peut être utilisé par d'autres personnes impliquées dans le cycle de vie de dispositifs médicaux.
Le présent document ne s'applique pas à ce qui suit:
— les décisions relatives à l'utilisation d'un dispositif médical au cours d'une procédure clinique particulière; ou
— la gestion des risques commerciaux.
Le présent document impose aux fabricants d'établir des critères objectifs d'acceptabilité des risques, mais ne spécifie pas de niveaux de risque acceptables.
La gestion des risques peut faire partie intégrante d'un système de management de la qualité. Cependant, le présent document n'exige pas du fabricant qu'il mette en place un système de management de la qualité.
NOTE Des recommandations relatives à l'application du présent document sont données dans l'ISO/TR 24971[9].

Medicinski pripomočki - Uporaba obvladovanja tveganja pri medicinskih pripomočkih (ISO 14971:2019) - Dopolnilo A11

Ta dokument določa terminologijo, načela in postopek za obvladovanje tveganja medicinskih pripomočkov, vključno s programsko opremo kot medicinskim pripomočkom ter in vitro diagnostičnimi medicinskimi pripomočki. Postopek, opisan v tem dokumentu, je namenjen podpori proizvajalcem medicinskih pripomočkov pri prepoznavanju nevarnosti, povezanih z medicinskim pripomočkom, ocenjevanju in ovrednotenju povezanih tveganj, nadzorovanju teh tveganj ter spremljanju uspešnosti ukrepov nadzora.
Zahteve tega dokumenta se uporabljajo za vse faze življenjskega cikla medicinskega pripomočka. Postopek, opisan v tem dokumentu, se uporablja za tveganja, povezana z medicinskimi pripomočki, kot so tveganja v zvezi z biološko združljivostjo, varnostjo podatkov in sistemov, elektriko, premikajočimi se deli, sevanjem ter uporabljivostjo.
Postopek, opisan v tem dokumentu, je mogoče uporabiti tudi za izdelke, ki niso nujno medicinski pripomočki v nekaterih zakonodajah in ki jih morda uporabljajo tudi drugi, vključeni v življenjski cikel medicinskega pripomočka.
Ta dokument se ne uporablja za:
– odločitve glede uporabe medicinskega pripomočka v okviru določenega kliničnega postopka; ali
– obvladovanje poslovnega tveganja.
Ta dokument od proizvajalcev zahteva, da vzpostavijo objektivne kriterije za sprejemljivost tveganja, vendar ne določa stopenj sprejemljivega tveganja.
Obvladovanje tveganja je lahko sestavni del sistema vodenja kakovosti. Vendar pa ta dokument od proizvajalca ne zahteva, da ima uveden sistem vodenja kakovosti.
OPOMBA: Navodila za uporabo tega dokumenta so na voljo v standardu ISO/TR 24971[9].

General Information

Status
Published
Publication Date
18-Jan-2022
Technical Committee
VAZ - Healthcare
Current Stage
6060 - National Implementation/Publication (Adopted Project)
Start Date
27-Dec-2021
Due Date
03-Mar-2022
Completion Date
19-Jan-2022

Relations

Effective Date
10-Nov-2021

Overview

SIST EN ISO 14971:2020/A11:2022 is a critical European amendment to the international standard ISO 14971:2019, issued by CEN, focused on the application of risk management to medical devices. This standard provides updated terminology, principles, and a comprehensive process aimed at helping manufacturers effectively identify, evaluate, control, and monitor risks throughout the entire life cycle of medical devices, including software as a medical device (SaMD) and in vitro diagnostic medical devices (IVDs).

The amendment aligns risk management practices with the requirements of relevant EU regulations such as Regulation (EU) 2017/745 for medical devices and Regulation (EU) 2017/746 for IVDs. It also emphasizes that while manufacturers must set objective criteria for risk acceptability, the standard does not prescribe specific acceptable risk levels.

Key Topics

  • Risk Management Process
    The standard outlines a systematic process comprising hazard identification, risk estimation and evaluation, risk control implementation, and effectiveness monitoring. This process addresses risks from various sources including:

    • Biocompatibility issues
    • Data and systems security vulnerabilities
    • Electrical safety
    • Mechanical hazards (moving parts)
    • Radiation exposure
    • Usability concerns
  • Scope of Application
    EN ISO 14971:2019/A11 applies to all phases of a medical device’s life cycle from design and production to post-market surveillance. This includes devices regulated under EU directives and can also be adapted for products not formally classified as medical devices in some jurisdictions.

  • Regulatory Compliance
    The amendment ensures compatibility with the EU’s General Safety and Performance Requirements by providing a voluntary means to demonstrate conformity. It mandates that the manufacturer’s risk acceptability criteria align with EU regulations, supporting compliance with safety obligations.

  • Exclusions
    This document does not cover:

    • Clinical procedure decisions involving the use of devices
    • Business or commercial risk management unrelated to medical device safety

Applications

The standard is indispensable for medical device manufacturers, risk managers, and quality assurance professionals who seek to:

  • Establish effective risk management systems tailored to medical device safety.
  • Align device safety processes with EU regulatory requirements such as MDR 2017/745 and IVDR 2017/746.
  • Manage risks associated with software as a medical device (SaMD) and in vitro diagnostic devices.
  • Improve patient safety by controlling risks related to biocompatibility and electrical hazards.
  • Address emerging risks in medical device technology, including cybersecurity and usability risks.
  • Integrate risk management processes seamlessly with existing or future quality management systems.

This standard supports manufacturers in maintaining regulatory compliance while fostering innovation and safe use of medical technology.

Related Standards

  • ISO 14971:2019 – The base international standard for risk management of medical devices, setting the groundwork for EN ISO 14971 amendments.
  • ISO/TR 24971 – Provides guidance on the application of ISO 14971:2019.
  • EU Regulation (EU) 2017/745 – Medical Device Regulation (MDR), covering safety and performance requirements.
  • EU Regulation (EU) 2017/746 – In Vitro Diagnostic Medical Devices Regulation (IVDR).
  • IEC 62304 – Software lifecycle processes, complementing risk management for SaMD.
  • EN ISO 13485 – Quality management system standard for medical devices, often implemented alongside ISO 14971.

Keywords: SIST EN ISO 14971:2020/A11:2022, medical device risk management, ISO 14971 amendment, medical device safety, EU MDR compliance, medical device software risks, in vitro diagnostic devices, risk acceptability criteria, CEN standards, medical device regulatory standards

Amendment

SIST EN ISO 14971:2020/A11:2022

English language
9 pages
Preview
Preview
e-Library read for
1 day

Frequently Asked Questions

SIST EN ISO 14971:2020/A11:2022 is a amendment published by the Slovenian Institute for Standardization (SIST). Its full title is "Medical devices - Application of risk management to medical devices (ISO 14971:2019)". This standard covers: This document specifies terminology, principles and a process for risk management of medical devices, including software as a medical device and in vitro diagnostic medical devices. The process described in this document intends to assist manufacturers of medical devices to identify the hazards associated with the medical device, to estimate and evaluate the associated risks, to control these risks, and to monitor the effectiveness of the controls. The requirements of this document are applicable to all phases of the life cycle of a medical device. The process described in this document applies to risks associated with a medical device, such as risks related to biocompatibility, data and systems security, electricity, moving parts, radiation, and usability. The process described in this document can also be applied to products that are not necessarily medical devices in some jurisdictions and can also be used by others involved in the medical device life cycle. This document does not apply to: — decisions on the use of a medical device in the context of any particular clinical procedure; or — business risk management. This document requires manufacturers to establish objective criteria for risk acceptability but does not specify acceptable risk levels. Risk management can be an integral part of a quality management system. However, this document does not require the manufacturer to have a quality management system in place. NOTE Guidance on the application of this document can be found in ISO/TR 24971[9].

This document specifies terminology, principles and a process for risk management of medical devices, including software as a medical device and in vitro diagnostic medical devices. The process described in this document intends to assist manufacturers of medical devices to identify the hazards associated with the medical device, to estimate and evaluate the associated risks, to control these risks, and to monitor the effectiveness of the controls. The requirements of this document are applicable to all phases of the life cycle of a medical device. The process described in this document applies to risks associated with a medical device, such as risks related to biocompatibility, data and systems security, electricity, moving parts, radiation, and usability. The process described in this document can also be applied to products that are not necessarily medical devices in some jurisdictions and can also be used by others involved in the medical device life cycle. This document does not apply to: — decisions on the use of a medical device in the context of any particular clinical procedure; or — business risk management. This document requires manufacturers to establish objective criteria for risk acceptability but does not specify acceptable risk levels. Risk management can be an integral part of a quality management system. However, this document does not require the manufacturer to have a quality management system in place. NOTE Guidance on the application of this document can be found in ISO/TR 24971[9].

SIST EN ISO 14971:2020/A11:2022 is classified under the following ICS (International Classification for Standards) categories: 11.040.01 - Medical equipment in general. The ICS classification helps identify the subject area and facilitates finding related standards.

SIST EN ISO 14971:2020/A11:2022 has the following relationships with other standards: It is inter standard links to SIST EN ISO 14971:2020. Understanding these relationships helps ensure you are using the most current and applicable version of the standard.

SIST EN ISO 14971:2020/A11:2022 is associated with the following European legislation: EU Directives/Regulations: 2017/745, 2017/746; Standardization Mandates: M/565, M/575, M/575 AMD 2. When a standard is cited in the Official Journal of the European Union, products manufactured in conformity with it benefit from a presumption of conformity with the essential requirements of the corresponding EU directive or regulation.

You can purchase SIST EN ISO 14971:2020/A11:2022 directly from iTeh Standards. The document is available in PDF format and is delivered instantly after payment. Add the standard to your cart and complete the secure checkout process. iTeh Standards is an authorized distributor of SIST standards.

Standards Content (Sample)


SLOVENSKI STANDARD
01-februar-2022
Medicinski pripomočki - Uporaba obvladovanja tveganja pri medicinskih
pripomočkih (ISO 14971:2019) - Dopolnilo A11
Medical devices - Application of risk management to medical devices (ISO 14971:2019)
Medizinprodukte - Anwendung des Risikomanagements auf Medizinprodukte (ISO
14971:2019)
Dispositifs médicaux - Application de la gestion des risques aux dispositifs médicaux
(ISO 14971:2019)
Ta slovenski standard je istoveten z: EN ISO 14971:2019/A11:2021
ICS:
11.040.01 Medicinska oprema na Medical equipment in general
splošno
2003-01.Slovenski inštitut za standardizacijo. Razmnoževanje celote ali delov tega standarda ni dovoljeno.

EUROPEAN STANDARD EN ISO 14971:2019/A11

NORME EUROPÉENNE
EUROPÄISCHE NORM
December 2021
ICS 11.040.01
English version
Medical devices - Application of risk management to
medical devices (ISO 14971:2019)
Dispositifs médicaux - Application de la gestion des Medizinprodukte - Anwendung des
risques aux dispositifs médicaux (ISO 14971:2019) Risikomanagements auf Medizinprodukte (ISO
14971:2019)
This amendment A11 modifies the European Standard EN ISO 14971:2019; it was approved by CEN on 27 October 2021.

CEN and CENELEC members are bound to comply with the CEN/CENELEC Internal Regulations which stipulate the conditions for
inclusion of this amendment into the relevant national standard without any alteration. Up-to-date lists and bibliographical
references concerning such national standards may be obtained on application to the CEN-CENELEC Management Centre or to
any CEN and CENELEC member.
This amendment exists in three official versions (English, French, German). A version in any other language made by translation
under the responsibility of a CEN and CENELEC member into its own language and notified to the CEN-CENELEC Management
Centre has the same status as the official versions.

CEN and CENELEC members are the national standards bodies and national electrotechnical committees of Austria, Belgium,
Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland, Italy,
Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Republic of North Macedonia, Romania, Serbia,
Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and United Kingdom.

CEN-CENELEC Management Centre:
Rue de la Science 23, B-1040 Brussels
© 2021 CEN/CENELEC All rights of exploitation in any form and by any means
Ref. No. EN ISO 14971:2019/A11:2021 E
reserved worldwide for CEN national Members and for
CENELEC Members.
Contents Page
European foreword . 3
Annex ZA (informative) Relationship between this European standard and the
General Safety and Performance Requirements of Regulation (EU) 2017/745
aimed to be covered . 4
Annex ZB (informative)  Relationship between this European standard and the
General Safety and Performance Requirements of Regulation (EU) 2017/746
aimed to be covered . 7

European foreword
This document (EN ISO 14971:2019/A11:2021) has been prepared by Technical Committee
CEN/CLC/TC 3 “Quality management and corresponding general aspects for medical devices” the
secretariat of which is held by NEN.
This Amendment to the European Standard EN ISO 14971:2019 shall be given the status of a national
standard, either by publication of an identical text or by endorsement, at the latest by June 2022, and
conflicting national standards shall be withdrawn at the latest by June 2022.
Attention is drawn to the possibility that some of the elements of this document may be the subject of
patent rights. CEN [and/or CENELEC] shall not be held responsible for identifying any or all such patent
rights.
This Amendment to the European Standard EN ISO 14971:2019 has been prepared under a mandate
given to CEN by the European Commission and the European Free Trade Association, and supports
requirements of EU Regulation(s).
For relationship with EU Regulation(s), see informative Annex ZA, and ZB, which are an integral part of
this document.
Any feedback and questions on this document should be directed to the users’ national standards
body/national committee. A complete listing of these bodies can be found on the CEN websites.
According to the CEN-CENELEC Internal Regulations, the national standards organizations of the
following countries are bound to implement this European Standard: Austria, Belgium, Bulgaria, Croatia,
Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Iceland, Ireland,
Italy, Latvia, Lithuania, Luxembourg, Malta, Netherlands, Norway, Poland, Portugal, Republic of North
Macedonia, Romania, Serbia, Slovakia, Slovenia, Spain, Sweden, Switzerland, Turkey and the United
Kingdom.
Annex ZA
(informative)
Relationship between this European standard and the General Safety and
Performance Requirements of Regulation (EU) 2017/745 aimed to be
covered
This European standard has been prepared under a Commission’s standardisation request M/575 to
provide one voluntary means of conforming to the General Safety and Performance Requirements of
Regulation (EU) 2017/745 of 5 April 2017 concerning medical devices [OJ L 117].
Once this standard is cited in the Official Journal of the European Union under that Regulation, compliance
with the normative clauses of this standard given in Table ZA.1 confers, within the limits of the scope of
this standard, a presumption of conformity with the corresponding General Safety and Performance
Requirements of that Regulation, and associated EFTA regulations.
For application of this European standard under Regulation (EU) 2017/745,
1. the scope is limited to medical devices and accessories for a medical device as defined in that
Regulation and to products regulated as a device under that Regulation;
2. in case of differences between terms defined in this European standard and terms defined in that
Regulation, the terms defined in the Regulation shall prevail;
3. the manufacturer’s policy for establishing criteria for risk acceptability (see 4.2 of this European
standard) shall ensure that the criteria comply with the General Safety and Performance
Requirements of that Regulation.
Explanation on the correspondence of the standard and the General Safety and Performance
Requirements is included in Table ZA.1.
NOTE 1 Where a reference from a clause of this standard to the risk management process is made, the
risk management process needs to be in compliance with Regulation (EU) 2017/745. This means that
risks have to be ‘reduced as far as possible’, ‘reduced to the lowest possible level’, ‘reduced as far as
possible and appropriate’, ‘removed or reduced as far as possible’, ‘eliminated or reduced as far as
possible’, ’removed or minimized as far as possible’, or ‘minimized’, according to the wording of the
corresponding General Safety and Performance Requirement.
NOTE 2 The manufacturer’s policy for determining acceptable risk must be in compliance with General
Safety and Performance Requirements 1, 2, 3, 4, 5, 8, 9, 10, 11, 14, 16, 17, 18, 19, 20, 21 and 22 of the
Regulation.
NOTE 3 This Annex ZA is based on normative references according to the table of references in the
European Foreword, replacing the references in the core text.
NOTE 4 When a General Safety and Performance Requirement does not appear in Table ZA.1, it means
that it is not addressed by this European Standard.
EN ISO 14971:20
...

Questions, Comments and Discussion

Ask us and Technical Secretary will try to provide an answer. You can facilitate discussion about the standard in here.

Loading comments...

記事のタイトル:SIST EN ISO 14971:2020/A11:2022 - 医療機器 - 医療機器へのリスク管理の適用(ISO 14971:2019) 記事の内容:この文書は、医療機器、医療機器のソフトウェア、および体外診断医療機器を含む医療機器のリスク管理に関する用語、原則、およびプロセスを示しています。この文書で説明されているプロセスは、医療機器メーカーが医療機器に関連するハザードを特定し、関連するリスクを評価し、これらのリスクを制御し、制御の効果をモニタリングすることを支援することを意図しています。 この文書の要件は、医療機器のライフサイクルのすべての段階に適用されます。この文書で説明されているプロセスは、生体適合性、データおよびシステムのセキュリティ、電力、可動部品、放射線、および使いやすさなどの医療機器に関連するリスクに適用されます。 この文書で説明されているプロセスは、一部の管轄区域では医療機器でない製品にも適用することができ、医療機器のライフサイクルに関与する他の関係者も使用することができます。 この文書は次の項目には適用されません: - 特定の臨床的手続きの文脈での医療機器の使用に関する決定 - ビジネスリスク管理 この文書では、メーカーにリスクの受容性の客観的基準を確立することを求めますが、受容可能なリスクレベルを具体的に規定していません。 リスク管理は品質管理システムの一部となることができますが、この文書ではメーカーが品質管理システムを持っていることを必須とはしていません。 注:この文書の適用に関するガイダンスは、ISO/TR 24971[9]で確認できます。

기사 제목: SIST EN ISO 14971:2020/A11:2022 - 의료기기 - 의료기기에 대한 위험관리의 적용 (ISO 14971:2019) 기사 내용: 이 문서는 의료기기, 의료기기 소프트웨어 및 체외진단 의료기기를 포함한 의료기기의 위험관리에 대한 용어, 원칙 및 프로세스를 명시합니다. 이 문서에서 설명하는 프로세스는 의료기기 제조업체가 의료기기와 관련된 위험을 식별하고, 연관된 위험을 예측하고 평가하며, 이러한 위험을 통제하고 통제의 효과를 모니터링하는 데 도움을 주기 위해 작성되었습니다. 이 문서의 요구사항은 의료기기의 생명 주기의 모든 단계에 적용됩니다. 이 문서에서 설명하는 프로세스는 생체적합성, 데이터 및 시스템 보안, 전기, 이동부품, 방사선 및 사용성과 관련된 위험과 같은 의료기기와 관련된 위험에 적용됩니다. 이 문서의 프로세스는 일부 법률권에서 의료기기가 아닌 제품에도 적용될 수 있으며 의료기기 생명 주기에 참여하는 다른 이해 관계자도 사용할 수 있습니다. 이 문서는 다음에 해당하지 않습니다: - 특정 임상 절차의 맥락에서 의료기기 사용에 관한 결정 - 비즈니스 위험관리 이 문서는 제조업체가 위험 수용에 대한 목표 기준을 확립하도록 요구하지만 허용 가능한 위험 수준을 명시하지는 않습니다. 위험관리는 품질관리 시스템의 일부가 될 수 있습니다. 하지만 이 문서는 제조업체가 품질관리 시스템을 갖추도록 요구하지는 않습니다. 참고로 이 문서의 적용 가이드는 ISO/TR 24971[9]에서 확인할 수 있습니다.

The article discusses the SIST EN ISO 14971:2020/A11:2022 standard, which provides guidelines for the application of risk management to medical devices. This includes medical devices with software and in vitro diagnostic devices. The standard helps manufacturers identify, evaluate, and control hazards and associated risks, as well as monitor the effectiveness of these controls. It is applicable to all phases of a medical device's lifecycle and covers various risks such as biocompatibility, security, electricity, radiation, and usability. The standard can also be applied to non-medical devices and involves stakeholders throughout the device's lifecycle. However, it does not pertain to clinical procedure decisions or business risk management. Manufacturers are required to establish objective risk acceptability criteria, but the standard does not specify acceptable risk levels. While risk management can be part of a quality management system, the standard does not mandate its presence. Additional guidance on applying the standard can be found in ISO/TR 24971.