Bridging quality, engineering, and regulatory in medical devices with John Fraser
In this episode, Anne MacNeil interviews John Fraser to explore the critical intersection of quality assurance, engineering, and regulatory compliance in the medical device industry. Discover insights on how quality is integrated from R&D to commercialization, the challenges of software regulation, and the evolving role of quality engineers in medtech.
**Key topics:**
- The role of quality in early product development and design controls
- Differences between R&D and engineering in medical device development
- When to implement design controls: timing and considerations
- Unique challenges of software as a medical device (SaMD), including cybersecurity and rapid iteration
- How regulatory frameworks like ISO 14971 inform risk assessments
- Collaboration gaps between quality, regulatory, and engineering teams
- The importance of building quality into organizational culture from the start
- Future trends and the growing need for dedicated roles at the intersection of compliance and engineering
**Timestamps:**
00:00 - Introduction to quality in medtech R&D and the importance of early integration
02:28 - Balancing compliance with innovation in product development
03:18 - Differences between R&D and engineering roles across industries
04:12 - When to start applying design controls in medical device projects
05:23 - Risks and timelines involved in iterative development, especially for IVDs and software
06:53 - Classification of high-risk versus low-risk devices and early controls
08:12 - The value of designing quality processes early and avoiding rework
09:39 - How engineers follow standards without realizing they meet regulatory requirements
11:47 - Challenges specific to software development in medical devices
13:15 - Unique considerations for cybersecurity and data privacy
15:12 - The intersection of quality management, cybersecurity, and regulatory oversight
16:23 - Responsibility sharing between quality systems and cybersecurity frameworks
18:47 - Overlapping risk assessments for safety and security risks
20:33 - How regulatory bodies evaluate security and data privacy in submissions
22:14 - Navigating the organizational landscape: roles, silos, and collaboration gaps
23:43 - Building and integrating a systems engineering approach in medtech
26:00 - Nuanced regulatory requirements for device safety versus usability and risk
28:23 - Practical risk management strategies over over-engineering solutions
28:52 - How harm is defined in ISO 14971 and its application to cybersecurity risks
29:47 - The evolving career landscape: growth areas at the intersection of compliance and engineering
**Resources & Links:**
- [ISO 14971 Risk Management Standard](https://www.iso.org/standard/72853.html)
- [ISO 13485 Medical Devices Quality Management Systems](https://www.iso.org/standard/59752.html)
- [ISO 27001 Information Security Management](https://www.iso.org/isoiec-27001-information-security.html)
- [Design Controls in Medical Devices (FDA Guidance)](https://www.fda.gov/medical-devices/device-advice-comprehensive-regulatory-assistance/design-controls)
- [Cybersecurity in Medical Devices](https://www.fda.gov/medical-devices/cybersecurity-medical-devices)
- [EU Accessibility Act](https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32021L0525)
---
*This episode offers valuable insights for professionals navigating compliance, engineering, and quality assurance in the evolving field of medical technology. Whether you're in software, hardware, or integrated devices, understanding how to embed quality from the ground up is key to successful product launches and regulatory approval.*
