This article explains the different contexts of "scope" within a Quality Management System (QMS) under ISO 13485. The term "scope" is used in multiple areas, including the standard itself, the QMS, certification, and audits. Understanding these distinctions is essential for regulatory compliance and effective implementation.
Scope of the ISO 13485 Standard
ISO 13485, "Quality Management System – Requirements for Regulatory Purposes," begins with Clause 1 (Scope). This clause defines when the standard applies to an organization.
In general, all requirements apply unless specific activities are not performed. Typical exclusions include:
- Clause 7.3 (Design and Development) – if design activities are not performed
- Calibration – if measuring equipment is not used
- Sterilization or implantable device requirements – if not applicable
Example (IVD and Medical Devices)
An IVD manufacturer producing test kits without design responsibility may exclude Clause 7.3. A manufacturer of non-sterile devices may exclude sterilization-related requirements.
Scope of the Management System
The QMS scope defines which parts of the organization are covered. It must be documented clearly and should not exclude any process that affects product quality.
Even if a process is outside the QMS, it must still be controlled if it impacts quality (e.g., outsourced processes).
The scope should include:
- Organizational activities
- Processes and services
- Products covered under the QMS
Avoid vague statements such as "manufacturing Class I and II devices." Instead, define activities clearly.
Examples of QMS Scope
- Specific: Design, manufacture, and distribution of diagnostic imaging devices and accessories.
- Focused: Production and testing of IVD reagents for clinical laboratories.
- Precise: Manufacture and packaging of orthopedic surgical instruments for global distribution.
Key Considerations
- Customer expectations: Excluding critical processes may raise concerns.
- Strategic decisions: Scope definition is a management responsibility influenced by regulatory and business needs.
Scope of Certification
The certification scope is usually aligned with the QMS scope but may be narrower. It appears on the ISO 13485 certificate and defines covered activities.
Important distinction:
- QMS Scope: Organizational system coverage
- Product Certification Scope: Product conformity and performance
Examples
- Design and manufacture of diagnostic imaging devices
- Production and distribution of IVD test kits
- Repair and maintenance of active non-implantable medical devices
Changes to certification scope typically require an external audit.
Audit Scope
The audit scope defines the locations, processes, and activities to be evaluated.
- External audits: Align with certification scope
- Internal audits: Flexible and risk-based
Tips for Internal Audits
- Prioritize high-risk processes
- Ensure full QMS coverage over time
Practical Application: Defining Organizational Scope
In most cases, the QMS scope covers the entire organization. Exceptions include:
- Single-site scope in multi-location organizations
- Separated operations across different industries
Examples
- Medical Device Manufacturer: Design and assembly of diagnostic imaging devices
- IVD Distributor: Distribution and warehousing of diagnostic kits
- Surgical Instrument Manufacturer: Manufacture and sterilization of orthopedic instruments
Crafting a Clear Scope Statement
A scope statement should:
- Be concise and specific
- Define activities and products clearly
- Include justified exclusions
Examples
- Design and manufacture of IVD test kits for clinical laboratories
- Servicing and calibration of diagnostic imaging devices
- Production of orthopedic surgical instruments and accessories
Periodic Review of QMS Scope
The QMS scope should be reviewed periodically to ensure alignment with:
- Regulatory updates
- Organizational changes
- Product portfolio evolution
Tools for review include internal audits and management review.
A well-defined scope ensures clarity, supports compliance, and simplifies audits and certification processes.
