Change Control SOP – ISO 13485, MDSAP & FDA QMSR

Change control is one of the most operationally critical processes in a medical device quality management system — and one of the areas most frequently found deficient during Notified Body audits and FDA inspections. Uncontrolled changes to products, processes, software, or quality system documentation can compromise device safety, invalidate previous validations, and trigger regulatory reporting obligations that manufacturers may not even be aware of. A robust change control process is the mechanism that prevents unintended consequences from cascading across the QMS.

This Change Control SOP package gives your quality team a complete, audit-ready framework to evaluate, approve, implement, and document changes across all QMS processes and product lines — fully aligned with ISO 13485:2016, MDSAP, and FDA QMSR (21 CFR Part 820).

What’s Included

• P09 Change Control Procedure — step-by-step instructions covering change initiation and description, impact assessment across product, process, software, and regulatory dimensions, risk-based approval workflow, implementation planning, verification of effectiveness, and record requirements
• P35 Notified Body Change Notification Procedure — dedicated procedure defining the criteria for determining when changes require prior notification to or approval by the Notified Body under EU MDR 2017/745, including significant versus non-significant change classification
• F09_1 Change Control Template — pre-formatted, editable template to document the full change lifecycle from initiation through impact assessment, approval, implementation, and closure
• F09_2 Change Control Database Template — ready-to-use Excel tracking database to manage open and closed changes, monitor implementation status, and generate trend data for management review

Who Is This For

Quality managers, regulatory affairs professionals, and design and development teams at medical device companies seeking ISO 13485 certification, preparing for MDSAP audits, maintaining EU MDR compliance, or managing FDA QMSR requirements — particularly those handling frequent product or process changes that require structured impact assessment and regulatory evaluation.

Why This SOP and Not Starting from Scratch

Developing a compliant change control procedure — including the often-overlooked Notified Body notification procedure — and all associated templates from scratch takes 8–12 hours of a regulatory professional’s time. This package is immediately usable, written by an experienced ISO 13485 Lead Auditor and former Notified Body auditor — reflecting current notified body and regulatory expectations on what a robust change control system must demonstrate at audit.

✓ Instant download after purchase ✓ Fully editable Word and Excel format ✓ Compatible with ISO 13485:2016, MDSAP, FDA QMSR, EU MDR  ✓ Used by quality teams across EU, US and Canada