Expanding from Automotive and Aerospace into Medical Devices with ISO 13485

As a certified manufacturer, you already have a strong foundation: whether you hold an IATF 16949, AS9100, or ISO 9001 certification, you’ve already developed precision manufacturing capabilities for components and assemblies, quality controls, and regulatory experience that translate directly to medical device production requirements.

From here, the path forward is about leveraging your existing capabilities to earn an ISO 13485 certification, the internationally recognized standard for medical device quality management systems.

In this article we explain why ISO 13485 is crucial for entering the medical device market and what automotive and aerospace manufacturers should expect during its implementation.

ISO 13485 applies to organizations across the entire medical device lifecycle: manufacturers, suppliers, service providers, distributors, and importers. It establishes quality and safety processes from design through production, installation, and servicing.

While other quality standards focus on customer satisfaction and continuous improvement, ISO 13485 emphasizes regulatory compliance and risk management to ensure the safety and effectiveness of medical devices. Its framework covers processes to meet global medical device regulations, making it the standard of reference for regulatory agencies worldwide, including:

• European Union: ISO 13485 provides the foundation for conformity of a quality management system with EU Medical Device Regulation (MDR 2017/745) and In Vitro Diagnostic Regulation (IVDR 2017/746).
• Canada: ISO 13485 is the standard recognized by Health Canada for quality systems for medical devices. This standard is required to be implemented when applying for device licenses through the Medical Device Single Audit Program (MDSAP) certificates.
• Japan: Japan has largely embraced ISO 13485:2016 as the basis for its QMS requirements. Manufacturers with ISO 13485 certification will find compliance with Ordinance #169 is fairly straightforward.
• Australia: The Therapeutic Goods Administration (TGA) regulations require the quality management system to closely align with ISO 13485.
• Brazil: ANVISA regulates medical devices under RDC 751/2022, where a Quality Management System based on or similar to ISO 13485 is necessary to demonstrate compliance with Brazilian Good Manufacturing Practices.

The FDA too has aligned its requirements to those of ISO 13485, transitioning from the Quality System Regulation (QSR) to the Quality Management System Regulation (QMSR) with full enforcement beginning on February 2, 2026.

The following sections show how to build on your current certification to meet medical device industry requirements.

Building on your ISO 9001

Through your ISO 9001:2015 certification, you already have a solid quality management foundation. ISO 13485 adds specific requirements and regulatory focus.

Leveraging your industry certification

If you have IATF 16949 or AS9100, here’s what requirements they have in common with ISO 13485:

• Leadership and planning: Both standards expect top management to demonstrate commitment to improving the QMS and focusing on customer needs. They also require documented quality policies, objectives, and QMS planning addressing risks and opportunities.
• Resource management: Both standards require organizations to provide the necessary resources to operate processes and achieve product conformity. This includes human resources, infrastructure—e.g., facilities and equipment—, and a suitable work environment.
• Operational control: Both standards require strict control over processes from customer requirements through production and service delivery. This includes design and development management, purchasing controls, and product identification and traceability.
• Performance evaluation and improvement: Both standards mandate monitoring, measurement, and analysis of QMS performance to ensure continuous effectiveness. They also require control of nonconforming outputs and continual improvement activities including corrective actions.

There are, however, key differences you’ll need to address:

• More prescriptive documentation requirements. ISO 13485 requires more detailed documented procedures and longer record retention periods.
• Medical device-specific controls. Specific requirements include personnel health and hygiene procedures, contamination control measures, enhanced traceability for implantable devices, and formal processes for handling complaints and reporting adverse events to regulatory authorities.
• Deeper risk integration. ISO 13485 requires risk assessment integration throughout all QMS processes, with preventive actions as mandatory inputs in management reviews.

When adding ISO 13485 to your existing IATF 16949 or AS9100 certification, an important decision to make is between having separate QMSs or a single integrated one. Each option has advantages and challenges.

Separate QMS Approach

When medical device product is treated differently in terms of the process controls or is coming from an already established set of rules in a quality system, keeping these separates is an acceptable option as it provides clear boundaries and eliminates potential conflicts between internal requirements..

Integrated QMS Approach

If your operations and resources are shared, an integrated QMS may be a valid approach. The different requirements from each sector must be met. This may include a stricter rule to be recognized when handling medical device products.

• More detailed documentation. AS9100 and IATF 16949 use the flexible "documented information" approach from ISO 9001:2015, while ISO 13485 requires more detailed documented procedures.
• Increased awareness for workforce. Employees will require training to understand the different requirements between sectors and be aware of the impact of their work when handling medical device products.
• Initial investment. Incorporating more stringent requirements into an existing QMS can be time consuming and will create more documentation. It is acceptable to clearly delineate when these requirements are not applicable to the other sectors of the business. A well though out plan for the QMS will save time and reduce potential errors down the road.

As an ANAB-accredited third-party certification body for ISO 13485, NSF has deep understanding of regulatory frameworks and proven ability to assess organizations against the standard’s requirements.

Whether you're looking for a new certification body or wanting to consolidate multiple QMSs under one provider, NSF can guide you through the ISO 13485 certification process while leveraging your existing automotive or aerospace QMS.