All skills
Skillintermediate

ISO 13485:2016 Gap Analysis Checklist

This comprehensive checklist helps identify gaps between your current Quality Management System and ISO 13485:2016 requirements.

Claude Code Knowledge Pack7/10/2026

Overview

ISO 13485:2016 Gap Analysis Checklist

This comprehensive checklist helps identify gaps between your current Quality Management System and ISO 13485:2016 requirements.

How to Use This Checklist

Status Indicators:

  • Compliant: Requirement fully implemented and documented
  • ⚠️ Partial: Requirement partially implemented, needs improvement
  • Non-compliant: Requirement not implemented or documented
  • N/A Not Applicable: Requirement doesn't apply (must be justified)

For Each Item:

  1. Assess current status
  2. Identify existing documentation
  3. Note gaps or deficiencies
  4. Prioritize actions needed
  5. Assign responsibility and target dates

Clause 4: Quality Management System

4.1 General Requirements

#RequirementStatusEvidenceGapsAction Required
4.1.1QMS established, documented, implemented, and maintained
4.1.2QMS processes identified with sequence and interaction
4.1.3Outsourced processes controlled and documented
4.1.4QMS requirements and applicable regulatory requirements met
4.1.5Risk management requirements documented and maintained
4.1.6Computer software applications validated before use

4.2 Documentation Requirements

#RequirementStatusEvidenceGapsAction Required
4.2.1QMS documentation includes policy, manual, procedures, records
4.2.2Quality Manual established with required content
4.2.2.aScope of QMS with justified exclusions
4.2.2.bDocumented procedures or references
4.2.2.cDescription of process interactions
4.2.2.dStructure of documentation described
4.2.3Medical Device File established for each device type/family
4.2.3.aGeneral description and intended use documented
4.2.3.bLabel and IFU specifications
4.2.3.cProduct specifications
4.2.3.dManufacturing specifications
4.2.3.ePurchasing, manufacturing, servicing procedures
4.2.3.fMeasurement and monitoring procedures
4.2.3.gInstallation requirements (if applicable)
4.2.3.hRisk management file(s)
4.2.3.iVerification and validation information
4.2.3.jDesign and development file(s) when applicable
4.2.4Control of Documents procedure established
4.2.4.aDocuments approved before issue
4.2.4.bDocuments reviewed, updated, and re-approved
4.2.4.cChanges and current revision status identified
4.2.4.dRelevant versions available at point of use
4.2.4.eDocuments remain legible and identifiable
4.2.4.fExternal documents controlled
4.2.4.gObsolete documents prevented from unintended use
4.2.4.hObsolete documents identified if retained
4.2.5Control of Records procedure established
4.2.5.aRecords remain legible, identifiable, and retrievable
4.2.5.bChanges to records remain identifiable
4.2.5.cRetention time at least device lifetime
4.2.5.dStorage, security, integrity, retrieval, disposition defined

Clause 5: Management Responsibility

5.1 Management Commitment

#RequirementStatusEvidenceGapsAction Required
5.1.aImportance of meeting requirements communicated
5.1.bQuality policy established
5.1.cQuality objectives established
5.1.dManagement reviews conducted
5.1.eResource availability ensured

5.2 Customer Focus

#RequirementStatusEvidenceGapsAction Required
5.2Customer and regulatory requirements determined and met

5.3 Quality Policy

#RequirementStatusEvidenceGapsAction Required
5.3.aPolicy appropriate to organization
5.3.bIncludes commitment to meet requirements and maintain effectiveness
5.3.cProvides framework for quality objectives
5.3.dCommunicated and understood within organization
5.3.eReviewed for continuing suitability

5.4 Planning

#RequirementStatusEvidenceGapsAction Required
5.4.1Quality objectives established at relevant functions/levels
5.4.1Objectives measurable and consistent with policy
5.4.2QMS planning meets general requirements and objectives
5.4.2QMS integrity maintained when changes occur

5.5 Responsibility, Authority and Communication

#RequirementStatusEvidenceGapsAction Required
5.5.1Responsibilities and authorities defined and communicated
5.5.1Roles for QMS management, performance, verification documented
5.5.1Interrelation of personnel identified
5.5.2Management representative appointed
5.5.2.aRepresentative ensures QMS processes established and maintained
5.5.2.bRepresentative reports to top management on performance
5.5.2.cRepresentative ensures awareness of requirements
5.5.3Internal communication processes established

5.6 Management Review

#RequirementStatusEvidenceGapsAction Required
5.6.1QMS reviewed at planned intervals (at least annually)
5.6.1Review ensures suitability, adequacy, effectiveness
5.6.1Review includes improvement opportunities
5.6.1Records of reviews maintained
5.6.2Review includes audit results
5.6.2Review includes customer feedback
5.6.2Review includes process performance and product conformity
5.6.2Review includes status of corrective and preventive actions
5.6.2Review includes follow-up from previous reviews
5.6.2Review includes changes affecting QMS
5.6.2Review includes recommendations for improvement
5.6.2Review includes new/revised regulatory requirements
5.6.3Review output includes QMS improvements
5.6.3Review output includes product improvements
5.6.3Review output includes resource needs
5.6.3Review output includes changes to maintain effectiveness

Clause 6: Resource Management

6.1 Provision of Resources

#RequirementStatusEvidenceGapsAction Required
6.1Resources determined and provided for QMS
6.1Resources provided to meet regulatory and customer requirements

6.2 Human Resources

#RequirementStatusEvidenceGapsAction Required
6.2Personnel competent based on education, training, skills, experience
6.2Documented evidence of competence maintained

6.3 Infrastructure

#RequirementStatusEvidenceGapsAction Required
6.3Infrastructure determined, provided, and maintained
6.3.aBuildings, workspace, and utilities provided
6.3.bProcess equipment (hardware and software) provided
6.3.cSupporting services provided
6.3Maintenance requirements documented (when affecting quality)
6.3Maintenance activity records maintained

6.4 Work Environment and Contamination Control

#RequirementStatusEvidenceGapsAction Required
6.4.1Work environment determined and managed
6.4.1Work environment requirements documented
6.4.2Contamination control requirements documented (if applicable)
6.4.2Special arrangements for contaminated product established

Clause 7: Product Realization

7.1 Planning of Product Realization

#RequirementStatusEvidenceGapsAction Required
7.1.aQuality objectives and requirements determined
7.1.bNeed for processes, documentation, and resources determined
7.1.cVerification, validation, monitoring, measurement activities determined
7.1.cHandling, storage, distribution, traceability determined
7.1.dRecords to provide evidence of conformity determined
7.1Risk management requirements documented
7.1Risk management records maintained

7.2 Customer-Related Processes

#RequirementStatusEvidenceGapsAction Required
7.2.1.aRequirements specified by customer determined
7.2.1.bRequirements not stated but necessary determined
7.2.1.cApplicable regulatory requirements determined
7.2.1.dAdditional requirements determined by organization
7.2.2Product requirements reviewed before commitment
7.2.2Requirements defined and documented
7.2.2Differences resolved
7.2.2Ability to meet requirements ensured
7.2.2Records of review and follow-up maintained
7.2.3Arrangements for communication with customers documented
7.2.3.aCommunication on product information
7.2.3.bCommunication on inquiry, contract, order handling
7.2.3.cCommunication on customer feedback including complaints
7.2.3.dCommunication on advisory notices

7.3 Design and Development

#RequirementStatusEvidenceGapsAction Required
7.3.1Design and development procedures documented
7.3.1Design and development plan documented for each device
7.3.1Design and development files maintained
7.3.2Design and development stages determined
7.3.2Required review, verification, validation determined
7.3.2Responsibilities and authorities defined
7.3.2Resources and interfaces managed
7.3.2Plans updated as design progresses
7.3.3Design inputs determined and recorded
7.3.3Functional, performance, usability, safety requirements included
7.3.3Regulatory requirements and standards included
7.3.3Risk management outputs included
7.3.3Previous similar design information included
7.3.3Inputs reviewed for adequacy
7.3.4Design outputs meet input requirements
7.3.4Outputs provide information for purchasing, production, service
7.3.4Outputs contain acceptance criteria
7.3.4Outputs specify characteristics for safe and proper use
7.3.4Outputs documented and maintained as records
7.3.5Systematic reviews conducted at suitable stages
7.3.5Review evaluates ability to meet requirements
7.3.5Review identifies problems and proposes actions
7.3.5Representatives of functions concerned included
7.3.5Records of reviews and follow-up maintained
7.3.6Verification performed per planned arrangements
7.3.6Verification ensures outputs meet inputs
7.3.6Records of verification and follow-up maintained
7.3.7Validation performed per planned arrangements
7.3.7Validation ensures product meets specified application
7.3.7Validation conducted before delivery or implementation
7.3.7Validation includes defined operating conditions
7.3.7Records of validation and follow-up maintained
7.3.8Transfer procedures documented
7.3.8Manufacturing output verified against design output
7.3.8Specifications appropriate for manufacturing
7.3.8Transfer records maintained
7.3.9Design changes identified, documented, and controlled
7.3.9Changes reviewed, verified, validated, and approved
7.3.9Effects on constituent parts and delivered product evaluated
7.3.9Records of changes and review maintained
7.3.10Design and development files maintained including all required content

7.4 Purchasing

#RequirementStatusEvidenceGapsAction Required
7.4.1Purchased product conforms to purchase information
7.4.1Purchasing activities documented
7.4.1Criteria for supplier evaluation and selection established
7.4.1Criteria based on supplier ability to supply per requirements
7.4.1Supplier performance monitored
7.4.1Records of supplier evaluations and follow-up maintained
7.4.1Process for notifying suppliers of changes established
7.4.2Purchasing information includes product approval requirements
7.4.2Purchasing information includes qualification of personnel
7.4.2Purchasing information includes QMS requirements
7.4.2Purchasing information includes notification requirements
7.4.2Purchasing information includes supplier change notification
7.4.2Purchasing information communicated to sub-tier suppliers
7.4.3Verification activities to ensure purchased product conformity
7.4.3Extent of verification documented
7.4.3Verification at supplier's premises documented (if applicable)

7.5 Production and Service Provision

#RequirementStatusEvidenceGapsAction Required
7.5.1.aDocumented procedures and work instructions available
7.5.1.bSuitable infrastructure and work environment availa