Overview
ISO TR 24971:2013 - "Medical devices - Guidance on the application of ISO 14971" is a Technical Report that clarifies specific aspects of implementing ISO 14971 (medical device risk management). It supplements ISO 14971 by providing practical guidance on how to interpret and apply risk-management requirements across device design, production and post‑production activities. The report is intended to help manufacturers and other stakeholders translate international product safety and process standards into effective risk-control measures.
Key Topics
- Role of international product safety standards: How standards (for example IEC 60601 series) can be used as de-facto risk-control measures and when compliance can justify that residual risk is acceptable, unless there is objective evidence to the contrary.
- Policy for risk acceptability: Guidance on developing company policies and criteria for deciding when residual risks are acceptable.
- Production and post‑production feedback loop: Practical approach to observation, transmission, assessment and action for production and post‑market surveillance to keep the risk-management file current.
- Information for safety vs disclosure of residual risk: How to differentiate risk-control communications intended to ensure safe use (e.g., instructions and warnings) from formal disclosures about remaining risks.
- Evaluation of overall residual risk: Inputs and considerations for assessing aggregated risks after all controls are applied.
Practical implementation tips
- Start by identifying hazards and hazardous situations per ISO 14971 and then check whether relevant product safety standards address them.
- Where a standard specifies technical requirements and acceptance criteria (e.g., stability test on a 10° incline or leakage current limits in IEC 60601‑1), manufacturers may rely on conformity testing and design specs as verification of risk control.
- For hazards not covered by standards, perform the full ISO 14971 risk-estimation and evaluation cycle.
- Integrate post‑production data (complaints, vigilance reports, recalls) into the risk management file and update risk assessments and controls as needed.
Applications
- Device design validation and verification planning
- Creation of risk-management policies and acceptability criteria
- Post‑market surveillance and corrective action planning
- Labeling decisions: distinguishing between safety instructions and residual-risk disclosure
Who should use this standard
- Medical device manufacturers and risk managers
- Regulatory and quality professionals (QA/RA)
- Notified bodies and conformity assessment teams
- Usability engineers, clinical engineers and product development teams
Related standards
- ISO 14971 (risk management for medical devices)
- IEC 60601 series (medical electrical equipment) - examples cited in the report
- IEC 62304 (software life-cycle processes)
- IEC 62366 (usability engineering)
- ISO 10993 series (biological evaluation)
Keywords: ISO TR 24971:2013, ISO 14971, medical device risk management, residual risk, product safety standards, post-production surveillance, risk acceptability.
