Nothing inspires dread quite like the phrase quality management system.
For many, the term “QMS” conjures images of 5-inch D-ring binders, filing cabinets full of semi-organized manila folders, and an auditor sitting, staring, and silently judging ALL your life choices.
But a quality management system doesn’t have to be a burden – it can be a competitive advantage. At its best, it provides clarity, purpose, and—most importantly—protects patients from harm. At it’s worst……well, that’s where things get ugly.
And with FDA shifting from the long-standing Quality System Regulation to the new Quality Management System Regulation—and aligning with ISO 13485:2016—there’s never been a better time to rethink how your QMS actually works. Or doesn’t.
Whether you’re looking at the outgoing QSR or the incoming QMSR, both expect manufacturers to do the same foundational things: document processes and follow them. This includes design controls, document control, complaint handling, CAPA, training, internal audits, and supplier management (you, know, the basics every quality system should have).
The big difference? Risk-based thinking.
Traditionally, “risk” meant product risk. But in the new paradigm, risk applies to everything in your quality system, and not all processes carry the same weight. A contract manufacturer producing your finished device? High risk—meaning more oversight. A supplier selling you an off-the-shelf screw? Very low risk. Scale appropriately.
Why So Many Companies Build Quality Management Systems That…Well…Suck
One of the most common pitfalls: startups adopting big-company procedures. If you’re a five-person team, you do not need five signatures on a purchasing form or approval from departments that don’t exist. (“Please submit this to the Notification Department.” Translation: You. You are the department.)
Oversized quality systems happen when people regurgitate the ISO standard into SOPs without describing what they actually do. A good quality management system mirrors real workflow. If your team already has a practical way to qualify suppliers or issue POs, start there. Document reality—then check for gaps. Not the other way around.
Quality management system success comes from clarity and shared ownership—not dumping everything on the quality team. When individuals write or revise their own procedures (with quality reviewing for compliance), they understand and follow them. The system becomes intuitive rather than performative.
Culturally, this matters. If leadership treats quality as the “business prevention department,” the stigma seeps into the entire organization. Integration becomes impossible, and risk skyrockets. But when quality is positioned as a guide—not a cop—the system becomes a safety net, not handcuffs.
Right-Sizing, Exclusions, and the Underrated Power of Flow Charts
You don’t need procedures for activities you don’t perform. If you’re only designing devices, a production and process controls SOP is unnecessary. Define scope clearly in the quality manual. It sets the tone for auditors and prevents internal overreach.
Flow charts, too, are underutilized heroes. For teams new to medical device quality, these visual maps prevent confusion (“Where do I log this complaint again?”) and reduce the cognitive load of navigating forms, procedures, and decisions.
And since ISO 13485 is now freely available through FDA, teams can reference it directly instead of relying on third-hand interpretations.
QMS Confessions: Because We All Have Horror Stories
No conversation about QMS would be complete without a few cautionary tales.
Like the root-cause analysis that described—in dramatic narrative detail—the journey of a bug that infiltrated a cleanroom, fell into a package, and “suffocated.” Yes, this was real documentation. No, the bug did not survive to comment.
Or the company that received an FDA letter, tore it up, taped it back together with Scotch tape, and filed it as though nothing had happened. (It was the only existing copy.)
We’ve all seen things.
The Bottom Line
A quality management system doesn’t have to be a bureaucratic swamp. When built around real processes, scaled through risk-based thinking, grounded in shared accountability, and documented with clarity, it becomes a living system that supports—not suffocates—your organization.
And if nothing else, it should at least avoid becoming bug-themed creative writing.
Watch the full podcast discussion on YouTube: https://youtu.be/b947AW_N3nc
Or listen on Spotify: https://open.spotify.com/episode/42ICDmGzq69417fEpsfEoR?si=092963fb53904ecb
And read more about quality management systems here: https://www.linkedin.com/posts/michellelottraqa_medicaldevices-fda-regulatory-activity-6744971764805189632-FxIX
