Software vendor qualification

Since many of the present generation’s medical devices are run by software; a practical approach is to have this software validated. This validation, also known as software vendor qualification, is a means to ensuring that the software, the heart of the medical device, is compliant with set standards. The principles of this qualification are set out in 21 CFR Part 11.

Why is software vendor qualification needed?

It is generally more economical for medical device companies to buy commercial off-the-shelf software (COTS) than having it developed in-house. Software vendor qualification is the means to ensuring this. This is not only cost-saving; it also saves manpower resources and the time taken to bring the product out into the market. When companies install software that is not built in-house; they need to have COTS that meets some regulatory requirements.

COTS could include software packages like display managers, peripheral interfaces, communications protocols or operating systems. The medical device company needs to have processes that evaluate software packages for their ability to meet intended needs. The companies also need to have processes for software vendor qualification, which will help their products meet strict regulatory requirements.

When should software vendor qualification be done?

An important question that arises with this issue is about when to do the software vendor qualification. If the software is bought from outside, it is understood that it should already have been built to meet standards. What happens once the software starts getting implemented into the company’s systems?

A thumb rule that many medical device companies follow to avoid getting cited from the FDA is this: they ensure that the vendor’s validated system demonstrates “systematic, high quality software specification, development and testing methodologies, together with documentary evidence that they have been followed”. This is the yardstick by which FDA measures software vendor qualification, because to it, any validated system that fails to demonstrate this is considered as not valid.

References:

http://ieeexplore.ieee.org/xpl/login.jsp?tp=&arnumber=263005&url=http%3A%2F%2Fieeexplore.ieee.org%2Fxpls%2Fabs_all.jsp%3Farnumber%3D263005

http://tech.groups.yahoo.com/group/21cfrpart11/message/10728

 

Contact Detail
GlobalCompliancePanel
webinars@globalcompliancepanel.com
http://www.globalcompliancepanel.com
Phone:800-447-9407
Fax:302-288-6884
43337 Livermore Common | Fremont| CA | USA | 94539

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s