Latest / Let's Talk Risk! Podcast / Deep Dive: What FDA’s QMSR Warning Letters Are Revealing

Transcript

Deep Dive: What FDA’s QMSR Warning Letters Are Revealing · Let's Talk Risk! Podcast

• 0:00
  SPEAKER_01: Imagine finding out that your contract manufacturer just changed the labeling
• 0:05
  SPEAKER_01: on your medical device to include pregnant patients and they didn't even bother
• 0:09
  SPEAKER_01: to tell you.
• 0:09
  SPEAKER_00: Right.
• 0:10
  SPEAKER_00: Which is just terrifying.
• 0:11
  SPEAKER_01: Yeah.
• 0:12
  SPEAKER_01: Or, you know,
• 0:12
  SPEAKER_01: picture a shop floor operator secretly retorquing a critical component
• 0:16
  SPEAKER_01: because it's like, Slightly out of spec.
• 0:19
  SPEAKER_01: They think they're just helping out with production units.
• 0:21
  SPEAKER_00: Well, that does all the time.
• 0:22
  SPEAKER_01: Exactly.
• 0:23
  SPEAKER_01: And meanwhile, your quality metrics up in the executive suite are showing zero defects.
• 0:27
  SPEAKER_00: Yeah, that is the reality of disconnected systems right there.
• 0:30
  SPEAKER_00: And I mean, the data we're seeing post-February 2026 makes one thing incredibly clear.
• 0:37
  SPEAKER_00: If you're trying to manage risk in isolated silos,
• 0:40
  SPEAKER_00: your quality management system is already obsolete.
• 0:43
  SPEAKER_01: Welcome in to this deep dive.
• 0:44
  SPEAKER_01: If you're leading a cross-functional team in the medical device space today,
• 0:48
  SPEAKER_01: you are likely in the thick of this monumental operational challenge.
• 0:52
  SPEAKER_01: The industry's transition to the FDA QMSR aligning with ISO 13485.
• 0:57
  SPEAKER_01: It is a massive undertaking.
• 0:59
  SPEAKER_01: It really is.
• 1:00
  SPEAKER_01: So to understand how this is actually playing out on the ground,
• 1:03
  SPEAKER_01: we're analyzing a huge stack of FDA Form 483 inspection data spanning 2025 and 2026.
• 1:10
  SPEAKER_00: And, you know,
• 1:11
  SPEAKER_00: to ground that data in reality,
• 1:13
  SPEAKER_00: we're pairing it with three highly instructive, very recent warning letters.
• 1:17
  SPEAKER_00: We've got Coven Technologies, Line Master Switch, and Dnieper Renal Solutions.
• 1:23
  SPEAKER_01: But before we dive into the nuts and bolts of this, I do want to establish our baseline today.
• 1:27
  SPEAKER_01: We're looking at these citations strictly as constructive case studies
• 1:31
  SPEAKER_01: on organizational integration, right?
• 1:33
  SPEAKER_01: Absolutely.
• 1:33
  SPEAKER_01: Because transitioning to ISO 13485 is just incredibly difficult.
• 1:38
  SPEAKER_01: It requires rewiring how an entire organization thinks.
• 1:41
  SPEAKER_01: So we aren't here to assign blame or disparage these specific companies.
• 1:45
  SPEAKER_01: The systemic vulnerabilities we're talking about,
• 1:47
  SPEAKER_01: they exist in almost every major device company right now.
• 1:50
  SPEAKER_00: They absolutely do.
• 1:51
  SPEAKER_00: I mean, when you parse the post-February 2026 inspection data,
• 1:55
  SPEAKER_00: the cetaceans are overwhelmingly clustered around one specific failure point.
• 1:59
  SPEAKER_01: Which is?
• 2:00
  SPEAKER_00: The inability to integrate risk management across the entire product lifecycle.
• 2:04
  SPEAKER_01: Yeah, let's unpack that macro picture.
• 2:06
  SPEAKER_01: Because when you look at the spreadsheet of these 483s,
• 2:09
  SPEAKER_01: it's essentially just a sea of Citations for Clause 7.1,
• 2:14
  SPEAKER_01: which covers risk management and product realization,
• 2:16
  SPEAKER_01: and also Clause 8.5.2,
• 2:18
  SPEAKER_01: which governs your kappa, your corrective and preventive action.
• 2:21
  SPEAKER_00: Yeah, it's everywhere.
• 2:22
  SPEAKER_01: So why did Clause 7.1 suddenly become the center of gravity for FDA investigators?
• 2:28
  SPEAKER_00: It stems from a fundamental paradigm shift in the regulatory architecture itself.
• 2:32
  SPEAKER_00: Under the new QMSR,
• 2:34
  SPEAKER_00: ISO 14971,
• 2:36
  SPEAKER_00: which is your core standard for medical device risk management,
• 2:39
  SPEAKER_00: that standard cannot exist in a vacuum anymore.
• 2:42
  SPEAKER_00: Its integration is now strictly enforced across multiple ISO 13485 clauses.
• 2:48
  SPEAKER_01: So it's spreading out.
• 2:49
  SPEAKER_00: Exactly.
• 2:50
  SPEAKER_00: We're talking Clause 7.1 for product realization,
• 2:52
  SPEAKER_00: Clause 7.3.9 for design change controls,
• 2:55
  SPEAKER_00: 8.2.1 for post-market feedback,
• 2:57
  SPEAKER_00: 8.3 for controlling non-conforming product, and of course, 8.5 for kappa.
• 3:02
  SPEAKER_01: Hold on.
• 3:02
  SPEAKER_01: Let me make sure I'm translating this to the real world correctly.
• 3:04
  SPEAKER_01: Are you saying the old model,
• 3:06
  SPEAKER_01: you know,
• 3:06
  SPEAKER_01: where a company pays a consultant to write a risk file to get a 510k clearance?
• 3:11
  SPEAKER_00: Yep.
• 3:12
  SPEAKER_00: The classic binder.
• 3:13
  SPEAKER_01: Right.
• 3:13
  SPEAKER_01: They just throw that binder in an R&D filing cabinet, never to be seen again.
• 3:16
  SPEAKER_01: Is that now effectively a direct violation of the new framework?
• 3:19
  SPEAKER_00: Oh, it is a massive violation.
• 3:21
  SPEAKER_00: Yeah.
• 3:21
  SPEAKER_00: Risk has to act as the central engine driving every single quality decision now.
• 3:26
  SPEAKER_01: Wow.
• 3:27
  SPEAKER_00: Yeah.
• 3:27
  SPEAKER_00: I mean, every customer complaint,
• 3:29
  SPEAKER_00: every minor supplier change,
• 3:31
  SPEAKER_00: every little manufacturing tweak on the line has to feed directly back into
• 3:36
  SPEAKER_00: that engine to update the overall risk profile.
• 3:38
  SPEAKER_01: I see the challenge because if the old compliance model was like playing whack-a-mole, right?
• 3:43
  SPEAKER_01: An auditor finds a missing signature on a training log,
• 3:46
  SPEAKER_01: you write a memo, you smack them all down.
• 3:48
  SPEAKER_00: Exactly.
• 3:48
  SPEAKER_00: Completely reactionary.
• 3:50
  SPEAKER_01: Right.
• 3:50
  SPEAKER_01: But this new QMSR model,
• 3:52
  SPEAKER_01: it requires a highly responsive feedback loop, like a central nervous system.
• 3:57
  SPEAKER_01: The problem is to operationalize that kind of interconnected system,
• 4:02
  SPEAKER_01: you have to completely destroy your departmental silos.
• 4:04
  SPEAKER_00: And destroying silos is where these companies are struggling the most.
• 4:07
  SPEAKER_00: Yeah.
• 4:07
  SPEAKER_00: Yeah.
• 4:25
  SPEAKER_01: Let's look at how this plays out in the real world.
• 4:28
  SPEAKER_01: When a company trusts an external partner maybe just a little too much,
• 4:31
  SPEAKER_01: it creates this massive supply chain blind spot.
• 4:34
  SPEAKER_01: Let's talk about COVID technologies.
• 4:36
  SPEAKER_00: Right.
• 4:36
  SPEAKER_00: This is a perfect example.
• 4:37
  SPEAKER_01: Yeah.
• 4:38
  SPEAKER_01: So they hold a 510K clearance for a device called the BDOP3.
• 4:42
  SPEAKER_01: It was cleared back in 1996 specifically for non-fetal blood flow monitoring.
• 4:47
  SPEAKER_01: But the FDA inspection found the device was being marketed and labeled
• 4:50
  SPEAKER_01: with indications for detecting fetal heart sounds.
• 4:53
  SPEAKER_00: Yeah, and the mechanism of how that happened is what makes this a textbook QMSR failure.
• 4:58
  SPEAKER_00: The label change was implemented entirely by their contract manufacturer.
• 5:01
  SPEAKER_01: Without them knowing.
• 5:02
  SPEAKER_00: Basically, yeah.
• 5:03
  SPEAKER_00: Coven did not have documented design changes,
• 5:06
  SPEAKER_00: which is a breakdown of Clause 7.3.9 for design change controls.
• 5:10
  SPEAKER_00: Nor did they conduct a new FDA 510K evaluation for this new fetal application.
• 5:15
  SPEAKER_01: We have to pause on the clinical stakes here for a second because we aren't talking
• 5:19
  SPEAKER_01: about like a cosmetic change to a plastic casing.
• 5:23
  SPEAKER_00: No, not at all.
• 5:24
  SPEAKER_01: Fetal tissue is highly vulnerable to prolonged
• 5:27
  SPEAKER_01: or inappropriate ultrasound energy compared to adult tissue.
• 5:30
  SPEAKER_00: Which leads directly to their failure under clause 7.1 for risk management.
• 5:35
  SPEAKER_00: By changing the intended use to include such a vulnerable patient population,
• 5:40
  SPEAKER_00: their entire ISO 14971 risk management report just became dangerously obsolete.
• 5:46
  SPEAKER_01: Because it wasn't looking at those specific risks.
• 5:48
  SPEAKER_00: Exactly.
• 5:49
  SPEAKER_00: The original risk file completely failed to evaluate fetal-specific hazards,
• 5:54
  SPEAKER_00: things like thermal effects and acoustic exposure.
• 5:57
  SPEAKER_00: And even more critically, it failed to address the risk of diagnostic inaccuracy.
• 6:01
  SPEAKER_01: Meaning false reassurance for an expectant mother.
• 6:03
  SPEAKER_00: Yes.
• 6:04
  SPEAKER_00: Improper use could easily cause a clinician or even a patient
• 6:08
  SPEAKER_00: to misinterpret maternal heartbeats or placental blood flow as
• 6:11
  SPEAKER_00: a healthy fetal heartbeat.
• 6:12
  SPEAKER_01: Which is terrifying.
• 6:13
  SPEAKER_00: It is.
• 6:14
  SPEAKER_00: That false reassurance delays care and can lead to severe outcomes,
• 6:18
  SPEAKER_00: up to and including fetal death.
• 6:21
  SPEAKER_00: Or conversely,
• 6:22
  SPEAKER_00: failing to detect a healthy heartbeat causes massive anxiety
• 6:26
  SPEAKER_00: and potentially unnecessary invasive clinical interventions.
• 6:30
  SPEAKER_01: And none of that was in the file.
• 6:32
  SPEAKER_00: None of these specific hazards were evaluated in the RICS file.
• 6:36
  SPEAKER_01: I have to challenge the expectations here a bit, though.
• 6:38
  SPEAKER_01: Just looking at the business reality of managing contract manufacturers,
• 6:43
  SPEAKER_01: if you're a device manufacturer with hundreds of SKUs,
• 6:46
  SPEAKER_01: suppliers scattered across five different time zones.
• 6:49
  SPEAKER_01: It's a huge web.
• 6:50
  SPEAKER_01: You simply cannot be on their shop floor every single day watching what they print on a label.
• 6:55
  SPEAKER_01: How does a supplier,
• 6:56
  SPEAKER_01: one that Coven's own procedures define as highest or critical impact,
• 6:59
  SPEAKER_01: Physically pull off a label change for a vulnerable patient population
• 7:03
  SPEAKER_01: without triggering internal alarms.
• 7:05
  SPEAKER_00: Well, it happens when procurement teams treat supplier management,
• 7:08
  SPEAKER_00: which is Clause 7.4.1,
• 7:10
  SPEAKER_00: as just a static checklist, rather than a dynamic risk management exercise.
• 7:14
  SPEAKER_01: Oh, okay.
• 7:15
  SPEAKER_00: COVID actually had a quality agreement in place.
• 7:17
  SPEAKER_00: It required the supplier to notify them of any labeling changes.
• 7:20
  SPEAKER_01: But they didn't follow it.
• 7:21
  SPEAKER_00: And because they were blind to what the supplier was doing,
• 7:23
  SPEAKER_00: they were totally blind to what their own customers were telling them.
• 7:26
  SPEAKER_00: Yes, the complaint handling was a disaster.
• 7:43
  SPEAKER_01: Right, because the FDA found 13 Returned Goods Authorizations,
• 7:47
  SPEAKER_01: or RGAs, between January 2024 and December 2025.
• 7:52
  SPEAKER_01: Customers were returning these units complaining of out-of-box failure,
• 7:55
  SPEAKER_01: no consistent waveform, and stating the device doesn't measure correctly.
• 8:00
  SPEAKER_00: Yet Coven failed to evaluate these returns as complaints under Clause 8.2.2 for feedback.
• 8:05
  SPEAKER_00: They literally just processed them administratively as returns.
• 8:08
  SPEAKER_01: Let's talk about the operational psychology there for a minute.
• 8:11
  SPEAKER_01: Customer service desks processing RGAs are typically measured
• 8:14
  SPEAKER_01: on ticket resolution time rate and customer satisfaction.
• 8:18
  SPEAKER_00: Not risk identification.
• 8:19
  SPEAKER_01: Exactly.
• 8:20
  SPEAKER_01: So you have a customer service rep just trying to process a refund quickly.
• 8:28
  SPEAKER_00: Meanwhile,
• 8:29
  SPEAKER_00: the quality team has no idea they need to talk to R&D about
• 8:32
  SPEAKER_00: a new fetal indication slapped on by procurement's external vendor.
• 8:37
  SPEAKER_01: When the intended use changed at the supplier level,
• 8:40
  SPEAKER_01: the ISO 14971 RISC file became functionally useless.
• 8:46
  SPEAKER_01: The siloed structure we just described guaranteed they would never catch the error
• 8:50
  SPEAKER_01: until the FDA walked through the door.
• 8:52
  SPEAKER_01: It was inevitable.
• 8:52
  SPEAKER_01: Okay, so we just saw how RISC hides in external supply chains.
• 8:56
  SPEAKER_01: But even if you control your vendors perfectly,
• 8:59
  SPEAKER_01: RISC can still mutate inside your own four walls due to basic physics.
• 9:03
  SPEAKER_00: Yeah, which is exactly what caught the FDA's eye at Linemaster Switch.
• 9:07
  SPEAKER_01: Right.
• 9:07
  SPEAKER_01: Linemaster manufactures foot pedal accessories used to control Class 4 medical lasers.
• 9:12
  SPEAKER_00: Which are no joke.
• 9:13
  SPEAKER_01: No, Class 4 lasers are serious surgical equipment and unintended activation
• 9:17
  SPEAKER_01: or inadequate power delivery because a foot pedal misfires.
• 9:20
  SPEAKER_01: That could be catastrophic for a surgeon or a patient.
• 9:22
  SPEAKER_00: The stakes are incredibly high.
• 9:25
  SPEAKER_00: And the FDA investigator found
• 9:26
  SPEAKER_00: a severe Clause 7.1 violation regarding risk management in product realization.
• 9:32
  SPEAKER_00: Linemaster completely failed to implement a process FMEA,
• 9:36
  SPEAKER_00: a failure mode and effects analysis,
• 9:38
  SPEAKER_00: for the assembly and processing of these specific foot pedals.
• 9:41
  SPEAKER_01: Meaning whatever risks their engineering team assumed existed in theory.
• 9:46
  SPEAKER_00: They were never validated against the physical reality of the shop floor.
• 9:50
  SPEAKER_01: And the physical reality is where this case gets fascinating to me.
• 9:53
  SPEAKER_01: Linemaster identified a recurring issue
• 9:55
  SPEAKER_01: where their foot pedal sensors were experiencing calibration drift.
• 9:59
  SPEAKER_01: And the root cause was simply temperature fluctuations in their manufacturing facility.
• 10:03
  SPEAKER_00: Which is a classic violation of Clause 6.4.1.
• 10:07
  SPEAKER_00: That dictates work environment controls.
• 10:09
  SPEAKER_01: But their attempted solution is what really highlights a failure of risk integration, right?
• 10:13
  SPEAKER_00: Exactly.
• 10:14
  SPEAKER_00: Instead of physically controlling the temperature of the work environment
• 10:17
  SPEAKER_00: or adequately validating their calibration software
• 10:20
  SPEAKER_00: under different thermal conditions,
• 10:21
  SPEAKER_00: which implicates clause 7.6 for monitoring and measuring equipment,
• 10:25
  SPEAKER_00: engineering just pushed a patch into the device firmware.
• 10:28
  SPEAKER_01: From a business perspective, I can almost hear the executive meeting where this was decided.
• 10:33
  SPEAKER_00: Oh, absolutely.
• 10:33
  SPEAKER_01: Because writing a firmware update costs maybe a few thousand dollars
• 10:37
  SPEAKER_01: in engineering time,
• 10:39
  SPEAKER_01: rebuilding a climate-controlled manufacturing facility,
• 10:42
  SPEAKER_01: that costs millions of dollars.
• 10:44
  SPEAKER_01: Isn't it just business reality that leadership is going to try the software patch first?
• 10:49
  SPEAKER_00: It might be a very common business instinct,
• 10:52
  SPEAKER_00: but from a regulatory and risk perspective, it is incredibly dangerous.
• 10:57
  SPEAKER_00: It's masking a symptom rather than curing the disease.
• 11:00
  SPEAKER_00: Yeah.
• 11:17
  SPEAKER_01: It's like your car's check engine light coming on because the radiator is failing
• 11:21
  SPEAKER_01: and the engine is overheating.
• 11:23
  SPEAKER_01: Instead of replacing the radiator,
• 11:24
  SPEAKER_01: you just put a piece of electrical tape over the dashboard light and write a line
• 11:28
  SPEAKER_01: of code so the car ignores the heat sensor.
• 11:30
  SPEAKER_00: That is exactly what they did.
• 11:31
  SPEAKER_01: You haven't fixed the environment.
• 11:33
  SPEAKER_01: You've just ensured you won't get a warning before the engine explodes.
• 11:36
  SPEAKER_00: And the downstream effects of masking that symptom became very clear when
• 11:41
  SPEAKER_00: the FDA looked at Clause 8.3.4, which deals with rework.
• 11:46
  SPEAKER_00: Investigators found
• 11:46
  SPEAKER_00: that floor operators were actively identifying nonconforming units during
• 11:50
  SPEAKER_00: a specific job.
• 11:52
  SPEAKER_01: But they weren't logging it.
• 11:53
  SPEAKER_00: No, the floor supervisor was just having the assemblers perform rework,
• 11:57
  SPEAKER_00: applying physical torque and recalibrating the units right there on the fly
• 12:01
  SPEAKER_00: without documenting it on a nonconforming material rework request form
• 12:05
  SPEAKER_00: as their own procedures explicitly required.
• 12:07
  SPEAKER_01: If I'm a QA leader sitting in an office looking at my dashboard,
• 12:11
  SPEAKER_01: my metrics probably look phenomenal.
• 12:13
  SPEAKER_01: Yields are up, defects are down, all because the rework isn't being documented.
• 12:18
  SPEAKER_01: Why do operators hide this kind of critical data?
• 12:21
  SPEAKER_00: It almost always comes down to shop floor psychology and misaligned incentives.
• 12:26
  SPEAKER_00: Operators hide rework because they're trying to meet aggressive production quotas,
• 12:29
  SPEAKER_00: or they think they're saving time, or they fear punishment for poor yields.
• 12:33
  SPEAKER_01: They think they're helping.
• 12:34
  SPEAKER_00: Right.
• 12:35
  SPEAKER_00: But management has to communicate that undocumented rework destroys
• 12:39
  SPEAKER_00: the organization's ability to manage risk.
• 12:42
  SPEAKER_00: If the quality engineers don't know the units are drifting
• 12:45
  SPEAKER_00: and requiring constant re-torquing on the floor,
• 12:48
  SPEAKER_00: they cannot possibly update the process FMEA to reflect reality.
• 12:53
  SPEAKER_01: Which leads to the inevitable collapse of the Kappa system.
• 12:55
  SPEAKER_00: Yes.
• 12:56
  SPEAKER_00: Look at the specific scar,
• 12:58
  SPEAKER_00: the supplier corrective action request,
• 13:00
  SPEAKER_00: highlighted in the Linemaster warning letter.
• 13:02
  SPEAKER_00: Six foot pedals failed the calibration verification test at a customer's facility.
• 13:07
  SPEAKER_00: Linemaster opened a scar,
• 13:08
  SPEAKER_00: but the official response sent to the customer literally showed the root cause field
• 13:12
  SPEAKER_00: as blank and the corrective action field as N.A.
• 13:15
  SPEAKER_01: Sending a blank root cause analysis to a customer who just experienced a failure on
• 13:20
  SPEAKER_01: a Class 4 laser component is staggering.
• 13:22
  SPEAKER_00: It is.
• 13:23
  SPEAKER_00: Under ISO 13485,
• 13:25
  SPEAKER_00: if your software validation and your environmental controls aren't actively speaking
• 13:29
  SPEAKER_00: to your process FMEA, your kappa will fail every single time.
• 13:33
  SPEAKER_01: Because you have no data.
• 13:34
  SPEAKER_00: You cannot investigate a root cause if you have no baseline data
• 13:37
  SPEAKER_00: of what your manufacturing environment is actually doing to the product.
• 13:40
  SPEAKER_01: So we've seen how R&D and external suppliers disconnect with COVID-19.
• 13:44
  SPEAKER_01: We've seen how the shop floor and environmental realities disconnect with Linemaster.
• 13:48
  SPEAKER_01: What happens when these disconnects become systemic?
• 13:51
  SPEAKER_00: That's the worst case scenario.
• 13:52
  SPEAKER_01: Right.
• 13:52
  SPEAKER_01: When design and process risks are consistently ignored over a period of years,
• 13:57
  SPEAKER_01: how far can a quality culture degrade?
• 13:59
  SPEAKER_00: Well, that brings us to our third source, Dnipro Renal Solutions.
• 14:03
  SPEAKER_00: This warning letter represents a total collapse of life cycle risk governance,
• 14:08
  SPEAKER_00: resulting in severe patient risk.
• 14:10
  SPEAKER_01: Let's get into it.
• 14:11
  SPEAKER_01: Nipro manufactures hemodialysis dialysate concentrate solutions.
• 14:15
  SPEAKER_01: Right.
• 14:15
  SPEAKER_01: This is life-sustaining therapy for patients whose kidneys have failed.
• 14:19
  SPEAKER_01: The dialysate is what actually cleans their blood.
• 14:22
  SPEAKER_01: The FDA found massive violations of Clause 8.3.1 regarding the control
• 14:27
  SPEAKER_01: of non-conforming product.
• 14:28
  SPEAKER_00: Massive is an understatement.
• 14:30
  SPEAKER_01: Nipro was releasing multiple lots of these thermodialysis products,
• 14:34
  SPEAKER_01: specifically their medicalite bicarbonate powder with out-of-specification
• 14:38
  SPEAKER_01: or OOS endotoxin results.
• 14:40
  SPEAKER_00: And just to put the clinical danger in perspective here,
• 14:42
  SPEAKER_00: introducing high levels of endotoxins directly into
• 14:46
  SPEAKER_00: a dialysis patient's bloodstream can cause severe pyrogenic reactions,
• 14:51
  SPEAKER_00: high fevers, chills, shock, and potentially death.
• 14:54
  SPEAKER_01: It's incredibly dangerous.
• 14:56
  SPEAKER_00: Very.
• 14:57
  SPEAKER_00: And during the inspection,
• 14:58
  SPEAKER_00: the FDA pulled the raw laboratory data, which clearly showed endotoxin failures.
• 15:04
  SPEAKER_00: Yet the official laboratory report forms were falsely signed off as passed.
• 15:08
  SPEAKER_01: Unbelievable.
• 15:09
  SPEAKER_00: And the quality department signed acceptance for the release of each slot.
• 15:12
  SPEAKER_01: How does a culture decay to the point where a lab technician or
• 15:16
  SPEAKER_01: a quality manager actually falsifies a report on a product going directly into
• 15:21
  SPEAKER_01: a vulnerable patient's bloodstream?
• 15:23
  SPEAKER_00: It really points to intense operational pressure overriding clinical safety.
• 15:28
  SPEAKER_00: When supply chain logistics,
• 15:29
  SPEAKER_00: revenue targets,
• 15:30
  SPEAKER_00: and shipping deadlines start to dictate behavior,
• 15:32
  SPEAKER_00: nonconformances are viewed as annoying administrative hurdles rather
• 15:36
  SPEAKER_00: than biological threats.
• 15:37
  SPEAKER_01: They just want to get it out the door.
• 15:38
  SPEAKER_00: Exactly.
• 15:39
  SPEAKER_00: The FDA found 13 product-related endotoxin failures
• 15:44
  SPEAKER_00: where Nipro couldn't provide any documented investigation.
• 15:47
  SPEAKER_00: Their KAPAs, governed by Clause 8.5.2, were chronically delayed and completely ineffective.
• 15:53
  SPEAKER_01: The handling of their environmental kappa was particularly alarming to me.
• 15:57
  SPEAKER_00: Oh, Kappa 25014.
• 15:58
  SPEAKER_00: Yeah, it was initiated to address severe facility deficiencies,
• 16:02
  SPEAKER_00: including corrosion and poor environmental controls in a specific room.
• 16:06
  SPEAKER_00: But rather than actually fixing the problem, they simply delayed the due date.
• 16:10
  SPEAKER_01: Just pushed it back.
• 16:11
  SPEAKER_00: Yep.
• 16:12
  SPEAKER_00: And weeks after the kappa was initiated,
• 16:14
  SPEAKER_00: the FDA investigator took a facility tour
• 16:16
  SPEAKER_00: and physically observed product residue accumulated on and suspended from
• 16:21
  SPEAKER_00: the bottle filling machine nozzles.
• 16:23
  SPEAKER_01: I mean, if you are manufacturing liquid hemodialysis solutions
• 16:26
  SPEAKER_01: and you have visible hanging residue on your filling nozzles while
• 16:30
  SPEAKER_01: an environmental kappa is open.
• 16:31
  SPEAKER_00: It's a huge red flag.
• 16:33
  SPEAKER_01: The system isn't just misfiring.
• 16:34
  SPEAKER_01: Executive governance is completely absent.
• 16:36
  SPEAKER_00: It was a systemic infrastructure failure, violating Clause 6.3.
• 16:39
  SPEAKER_00: The FDA found unaddressed leaking pipes throughout the production system.
• 16:45
  SPEAKER_00: And perhaps most incredibly,
• 16:47
  SPEAKER_00: the sole instrument used by the facility for endotoxin testing
• 16:50
  SPEAKER_00: and final product release had never been
• 16:52
  SPEAKER_01: calibrated.
• 16:53
  SPEAKER_00: A calibration schedule didn't even exist.
• 16:55
  SPEAKER_01: An uncalibrated endotoxin tester for a product that enters the blood.
• 16:59
  SPEAKER_00: Wow.
• 17:00
  SPEAKER_00: Let's tie this catastrophic Cecilia breakdown back to our main theme,
• 17:04
  SPEAKER_00: Clause 7.1 and the integration of risk management.
• 17:07
  SPEAKER_01: Right, because you have to remember that in 2025,
• 17:10
  SPEAKER_01: Nipro initiated a class,
• 17:12
  SPEAKER_01: I recall,
• 17:12
  SPEAKER_01: for microbial and fungal contamination of their medicalite liquid bicarbonate.
• 17:16
  SPEAKER_00: Which is the most serious recall.
• 17:18
  SPEAKER_01: Yes.
• 17:18
  SPEAKER_01: A class, I recall, is the FDA's most serious designation.
• 17:21
  SPEAKER_01: It indicates a reasonable probability of serious adverse health consequences or death.
• 17:25
  SPEAKER_01: But despite an active class,
• 17:27
  SPEAKER_01: I recall,
• 17:27
  SPEAKER_01: the FDA found that Nipra's risk analysis report for
• 17:30
  SPEAKER_01: that exact product had not been updated since November 2020.
• 17:33
  SPEAKER_00: Five years prior.
• 17:35
  SPEAKER_01: And that 2020 report explicitly stated that all risks are either negligible or acceptable.
• 17:40
  SPEAKER_01: That is the ultimate manifestation of the dusty binder on the shelf.
• 17:44
  SPEAKER_01: You have a class I recall for fungal contamination happening in real time.
• 17:49
  SPEAKER_01: You have leaking pipes in your facility.
• 17:51
  SPEAKER_01: You have uncalibrated testing equipment.
• 17:54
  SPEAKER_01: Hanging residue on your filling lines?
• 17:56
  SPEAKER_00: Everything is falling apart.
• 17:57
  SPEAKER_01: And your official ISO 14971 risk document says everything is fine.
• 18:02
  SPEAKER_00: Because under QMSR, risk must be a living, breathing, life cycle document.
• 18:08
  SPEAKER_00: If Nipro had been integrating risk properly,
• 18:10
  SPEAKER_00: those initial OOS endotoxin results
• 18:12
  SPEAKER_00: and those leaking pipes would have immediately triggered a risk assessment.
• 18:16
  SPEAKER_01: Right.
• 18:16
  SPEAKER_00: That would have forced a re-evaluation of the bloic safety profile long
• 18:19
  SPEAKER_00: before contaminated lots ever reached patients.
• 18:22
  SPEAKER_00: But they were operating Geez.
• 18:41
  SPEAKER_01: It is a stark reminder that when you decouple risk management from daily operations,
• 18:45
  SPEAKER_01: the entire quality system eventually collapses under its own weight.
• 18:49
  SPEAKER_01: We've covered a lot of ground today,
• 18:51
  SPEAKER_01: analyzing the Macro 483 data and diving deep into the realities at Coven,
• 18:56
  SPEAKER_01: LionMaster, and Dnipro.
• 18:58
  SPEAKER_01: If we synthesize the core takeaway from all these sources,
• 19:01
  SPEAKER_01: it boils down to one essential concept for the medical device industry.
• 19:05
  SPEAKER_00: Which is?
• 19:05
  SPEAKER_01: The transition to ISO 13485 is fundamentally about demanding cross-functional transparency.
• 19:11
  SPEAKER_00: Absolutely.
• 19:12
  SPEAKER_00: The FDA will no longer tolerate isolated compliance.
• 19:15
  SPEAKER_00: A label change implemented by a contract manufacturer in another country,
• 19:19
  SPEAKER_00: a temperature shift that causes calibration drift on your factory floor,
• 19:23
  SPEAKER_00: a failed endotoxin lab test.
• 19:25
  SPEAKER_00: These are not localized events.
• 19:26
  SPEAKER_01: They ripple out.
• 19:27
  SPEAKER_00: Yes.
• 19:28
  SPEAKER_00: Under QMSR,
• 19:29
  SPEAKER_00: every one of these signals must immediately trigger structural updates
• 19:32
  SPEAKER_00: to your ISO 14971 risk management files.
• 19:35
  SPEAKER_01: For you listening, whether you are managing R&D, supply chain strategy, or quality assurance...
• 19:41
  SPEAKER_01: The question you need to take back to your organization today is this.
• 19:45
  SPEAKER_01: Does your R&D team share the exact same risk vocabulary as your manufacturing and quality teams?
• 19:52
  SPEAKER_00: That's the million dollar question.
• 19:53
  SPEAKER_01: When a piece of equipment drifts out of calibration on the shop floor,
• 19:57
  SPEAKER_01: does your system automatically know how that impacts
• 20:00
  SPEAKER_01: the original design assumptions made five years ago?
• 20:03
  SPEAKER_01: If the answer is no, you have a critical vulnerability in your quality management system.
• 20:08
  SPEAKER_00: And the data proves that human beings operating in silos with spreadsheets
• 20:12
  SPEAKER_00: and static PDFs are profoundly struggling to manage this level
• 20:16
  SPEAKER_00: of interconnectedness.
• 20:17
  SPEAKER_01: Which leaves us with a final, slightly provocative thought to mull over.
• 20:21
  SPEAKER_01: As the FDA aggressively enforces this strict web-like integration of risk
• 20:25
  SPEAKER_01: across all clauses of the QMSR,
• 20:27
  SPEAKER_01: will this be the catalyst that forces the medical device industry
• 20:30
  SPEAKER_01: to finally adopt AI and predictive analytics?
• 20:33
  SPEAKER_00: Oh, that's an interesting point.
• 20:34
  SPEAKER_01: Will we need artificial intelligence to instantly spot these cross-functional risk patterns?
• 20:40
  SPEAKER_01: Connecting a supplier label change to a shop floor deviation before they turn into
• 20:44
  SPEAKER_01: a Form 483, or worse, a patient injury.
• 20:49
  SPEAKER_00: Given the complexity of global supply chains and the sheer volume of data required
• 20:52
  SPEAKER_00: to maintain a living risk file,
• 20:54
  SPEAKER_00: advanced analytics might actually be the only viable path forward
• 20:58
  SPEAKER_00: for true lifecycle risk governance.
• 21:00
  SPEAKER_01: Something to think about as you review your own risk files this week.
• 21:03
  SPEAKER_01: Thank you for joining us on this deep dive into the operational realities of
• 21:07
  SPEAKER_01: the QMSR transition.
• 21:08
  SPEAKER_01: Stay curious, break down those departmental silos, and we'll catch you on the next one.