QMSR in Force: What FDA Is Now Evaluating During Medical Device Inspections

The regulatory question for manufacturers is no longer whether systems align on paper, but whether those systems function as an integrated whole when evaluated under inspection conditions.

What has changed under QMSR?

QMSR replaces the prescriptive structure of the legacy Quality System Regulation with a framework built on ISO 13485:2016. Part 820 no longer restates detailed process requirements. Instead, the FDA evaluates how manufacturers apply ISO-based requirements while maintaining traceability to U.S. regulatory obligations.

This shift places emphasis on process interaction, risk-based decision making, and the effectiveness of controls across the quality system. Document alignment alone does not demonstrate compliance. Investigators assess how data moves between functions, how risks are prioritized, and whether controls operate as intended.

How does the FDA interpret a risk-based quality system?

Under QMSR, a risk-based quality system is demonstrated through execution rather than policy language. FDA evaluates how uncertainty within organizational processes is identified, how controls are selected based on risk, and how effectiveness is monitored over time.

Risk-based thinking must be evident in supplier oversight, software validation, production controls, complaint handling, training effectiveness, and postmarket activities. Investigators assess whether risk rationale is documented, whether controls are proportionate, and whether outcomes support the decisions made.

How are FDA inspections being conducted now?

FDA inspections are now conducted under Compliance Program 7382.850, which replaces the legacy Quality System Inspection Technique (QSIT) guide. Inspection scope and depth are planned based on patient and user risk, product and process complexity, prior inspection outcomes, and emerging risk signals such as recalls or adverse event trends.

Investigators no longer move through predefined subsystems. Instead, they follow issues across the quality system to understand how processes interact and whether controls are effective.

Inspection behavior comparison

What does inspection readiness look like under QMSR?

Inspection readiness under QMSR depends on how the quality system performs when evaluated as an integrated set of processes. Common inspection exposures include weak linkage between complaints and CAPA, risk management files that do not inform operational decisions, and management reviews that summarize data without driving action.

Internal audits and mock inspections aligned to the current inspection program remain among the most effective tools for identifying weaknesses. These activities should reflect how the FDA follows issues across processes, not how audits were historically structured under QSIT.

Where does the FDA expect management involvement to be evident?

Management responsibility is a central inspection focus under QMSR. FDA investigators evaluate how management reviews assess system performance, identify trends, and drive corrective action. Leadership involvement is demonstrated through decisions, resource allocation, and follow-up actions, not organizational charts or meeting attendance.

What distinguishes strong QMSR performance from minimal compliance?

Manufacturers that perform well under QMSR demonstrate integrated processes, clear risk rationale, and effective oversight. Their quality systems function cohesively under inspection, supported by complete and retrievable records. QMSR does not reward documentation volume. It rewards systems that operate effectively when scrutinized.

The inspection framework now in use makes clear that QMSR is not a theoretical alignment exercise. FDA expectations are being applied through inspection practice, and manufacturers are being evaluated on how well their quality systems operate under real conditions. Organizations that treat QMSR as a system-level change, rather than a documentation update, are better positioned to manage inspection outcomes and regulatory risk.

How NSF can help

NSF works with medical device manufacturers to build quality systems that withstand QMSR inspections. The emphasis is on execution, readiness, and system performance.

Our services include QMSR gap assessments against ISO 13485 and the Part 820 overlay, inspection readiness reviews aligned to Compliance Program 7382.850, and mock FDA inspections that follow how investigators evaluate risk, linkage, and effectiveness across processes.

We also support targeted improvements in CAPA effectiveness, management review, supplier oversight, risk management integration, and record control practices, with an emphasis on producing objective evidence that holds up during inspection.

NSF’s teams include former regulators and experienced industry practitioners who work directly with quality and leadership teams to build systems that are compliant, resilient, and operationally effective.