Allied Health & Imaging · Independent exam preparation
Certified Medical Device Auditor (CMDA): Evidence, Systems, and Technical Decisions Study Guide
Practise audit evidence, quality-system decisions, validation, risk controls, and statistical reasoning for ASQ CMDA using its 2020 outline and current regulatory context.
By CertMedbry · Updated 30 October 2026
Learn to connect requirements with objective evidence, distinguish verification from validation, evaluate corrective actions, and interpret process data. This selective 60-concept guide follows ASQ's 2020 CMDA Body of Knowledge, current on October 30, 2026. The official outline defines the full examination scope, including topics beyond this guide. The accompanying questions and flashcards develop independent decision-making across all five domains.
Try 20 free practice questionsWhat is the exam format?
Check the question types, timing and outline before planning your revision.
Which certification and blueprint does this guide cover?
This guide covers ASQ's Certified Medical Device Auditor (CMDA), historically called Certified Biomedical Auditor (CBA), using the 2020 Body of Knowledge identified as current on October 30, 2026. ASQ's handbook preface explains the name change. The historical CBA label does not identify a separate current examination.
Medical Device Auditor Certification CMDA · The ASQ Certified Medical Device Auditor Handbook, Fourth Edition — Sample
When does the 2026 blueprint apply?
ASQ states that the 2026 Body of Knowledge takes effect November 1, 2026, beginning with the November testing window. Its domain counts are 15, 25, 38, 42, and 15, compared with 12, 28, 38, 42, and 15 under the 2020 outline. Candidates testing from that transition should use the complete 2026 outline.
Medical Device Auditor Certification CMDA · Certified Medical Device Auditor — 2020 Body of Knowledge · Certified Medical Device Auditor Body of Knowledge — 2026
How many questions are on the computer-delivered examination?
The computer-delivered CMDA examination has 145 multiple-choice questions: 135 scored and 10 unscored. ASQ describes a one-part examination in English.
How much time is available, and how is the examination delivered?
ASQ's examination page specifies 4 hours and 18 minutes of examination time within a four-and-a-half-hour computer-based appointment. Prometric is the testing partner. ASQ also describes a paper-and-pencil version with 135 multiple-choice questions and four hours of examination time. Availability of particular delivery arrangements depends on the options offered for the candidate's appointment.
Is the examination open book?
Yes. ASQ states that all examinations are open book. Reference materials and notes must remain securely bound, and references are inspected before entry. Book tabs must be attached beforehand. ASQ also publishes calculator restrictions; candidates should apply the current rules for their selected delivery arrangement.
How are the five domains weighted in this guide?
The 2020 outline assigns 12 of 135 scored questions to Auditing Fundamentals, 28 to Auditing and Inspection Processes, 38 to Medical Device Quality Management System Requirements, 42 to Technical Medical Device Knowledge, and 15 to Quality Tools and Techniques. This guide allocates its 60 concepts as 5, 12, 17, 19, and 7. Questions and flashcards each use 2, 4, 6, 6, and 2.
How should legacy QSR and QSIT terminology be studied?
Recognize those terms because they remain in the 2020 outline, while distinguishing historical terminology from current U.S. requirements. FDA's QMSR became effective February 2, 2026, incorporates ISO 13485:2016, and replaced the former QSIT inspection approach. The 2026 CMDA outline explicitly names QMSR and FDA CPG 7382.850. Apply the regulatory framework appropriate to the date in a scenario.
Certified Medical Device Auditor — 2020 Body of Knowledge · Quality Management System Regulation (QMSR) · Certified Medical Device Auditor Body of Knowledge — 2026
What professional level and practice format should learners expect?
ASQ describes a professional credential requiring five years of relevant paid experience, including one year in a decision-making role, with specified education waivers. The outline tests knowledge through levels including application, analysis, evaluation, and creation. These 20 original four-option drills are independent learning questions; their results do not predict an examination pass.
Medical Device Auditor Certification CMDA · Certified Medical Device Auditor — 2020 Body of Knowledge
CMDA is ASQ's professional medical-device auditing certification. Certified Biomedical Auditor (CBA) is its historical name. These independent learning materials address auditing competence across medical-device systems and do not confer clinical licensure or ASQ endorsement.
Outline used: ASQ 2020 CMDA Body of Knowledge, identified by ASQ as current on 2026-10-12. The assigned workbook label Certified Biomedical Auditor (CBA) maps to the renamed Certified Medical Device Auditor (CMDA), as documented in ASQ's handbook preface. The assigned slug is preserved. The published 2026 CMDA Body of Knowledge becomes effective November 1, 2026 and is forthcoming on the reference date.
60 key concepts: understand, apply and avoid the traps
Work through the questions by exam domain. Explain the answer in your own words, try the example, then check the common pitfall.
Auditing Fundamentals12/135 scored questions (8.89%)
1.How do audit purpose and audit method differ?
An audit's purpose identifies the decision it must support, such as supplier qualification, regulatory compliance, or investigation of a recurring failure. Its method describes what is examined and how, such as a product, process, or system audit conducted through documents and observations. The same purpose may require several methods. Choose evidence that answers the stated purpose rather than assuming that a familiar checklist defines the audit.
Apply it
A supplier has repeated sealing failures. The customer needs to decide whether qualification remains justified. A process audit of sealing controls, linked to system-level change control and selected product records, directly supports that decision.
Common pitfall: Calling an audit a product audit does not establish its purpose. Reviewing finished units alone can miss the process conditions responsible for recurring defects.
Certified Medical Device Auditor — 2020 Body of Knowledge · What Is Auditing?
2.Which relationships define first-, second-, and third-party audits?
Audit party describes the relationship between the auditor and the organization being audited. A first-party audit is conducted by or for the organization on its own system. A second-party audit examines another organization in a relationship such as customer and supplier. A third-party audit is conducted independently for purposes such as certification. Internal or external location alone is insufficient; an outsourced auditor can perform the organization's first-party audit.
Apply it
A manufacturer hires an independent consultant to perform its scheduled internal quality audit. Although the consultant works outside the company, the audit remains first-party because it is performed on the manufacturer's own behalf.
Common pitfall: External employment does not automatically make an audit third-party. Determine whose audit program and decision the work serves before assigning the party classification.
What Is Auditing? · Certified Medical Device Auditor — 2020 Body of Knowledge
3.How are audit responsibilities divided among participants?
The audit client requests or authorizes the audit and defines its need. The lead auditor coordinates planning, team assignments, communication, and the final audit conclusions. Team members gather and evaluate evidence within their assignments. The auditee provides access, explanations, and responsible personnel. Management of the audited organization owns corrective action. Clear ownership prevents the auditor from becoming responsible for implementing the very controls later evaluated for effectiveness.
Apply it
An audit finds uncontrolled work instructions. The lead auditor communicates the finding and required response process. The auditee assigns an owner to correct document distribution, while the audit function later evaluates implementation and effectiveness.
Common pitfall: An auditor may explain why a proposed response lacks evidence, but taking ownership of its implementation can compromise the independence of subsequent verification.
Certified Medical Device Auditor — 2020 Body of Knowledge · ISO 19011: Guidelines for Auditing Management Systems
4.When must an auditor disclose a conflict of interest?
An auditor should disclose relationships, financial interests, prior responsibilities, or other circumstances that could impair objectivity or reasonably appear to do so. Disclosure allows the responsible authority to assess reassignment or safeguards before conclusions are affected. Competence and careful work also matter: unsupported accusations, careless handling of evidence, and concealment of limitations can create professional and legal consequences. Independence supports credibility only when accompanied by due care and documented reasoning.
Apply it
An auditor assigned to evaluate supplier selection previously negotiated a paid consulting agreement with that supplier. The auditor discloses the relationship before fieldwork so the audit manager can assess independence and reassign affected work.
Common pitfall: Personal confidence in being fair does not resolve an apparent conflict. Concealing the relationship prevents others from evaluating safeguards and undermines the audit's credibility.
ASQ Code of Ethics · Certified Medical Device Auditor — 2020 Body of Knowledge
5.How should confidential information be handled during an audit?
Audit access creates a duty to protect personal and proprietary information while preserving sufficient evidence for conclusions. Collect only information relevant to the audit, restrict distribution to authorized recipients, and use approved storage and transfer methods. Record identifiers can often establish traceability without reproducing an entire sensitive record. Confidentiality does not justify hiding relevant findings from authorized parties; it determines how evidence is obtained, described, retained, and disclosed.
Apply it
A complaint file contains patient identifiers and technical failure details. The auditor records the complaint number, relevant dates, and investigation evidence in approved workpapers, avoiding unnecessary copies of patient information in a broadly distributed report.
Common pitfall: Copying complete records for convenience expands exposure without necessarily strengthening evidence. Conversely, removing every identifier can make a finding impossible to verify later.
ASQ Code of Ethics · Certified Medical Device Auditor — 2020 Body of Knowledge
Auditing and Inspection Processes28/135 scored questions (20.74%)
6.How do scope, criteria, and objectives shape an audit plan?
Objectives state what the audit must determine, scope sets its boundaries, and criteria provide the requirements against which evidence is evaluated. Planning also establishes authority, access, resources, timing, and communication arrangements. These elements must agree: a narrow departmental visit cannot support an unrestricted conclusion about the entire quality system. Risk and prior performance help allocate effort, while explicit boundaries make exclusions and limitations visible to the audit client.
Apply it
A client requests assurance about outsourced sterilization. The plan identifies applicable supplier and sterilization requirements, includes the contractor interface and release records, confirms access, and assigns technical expertise sufficient to evaluate the selected sterilization process.
Common pitfall: A schedule listing departments and meeting times is incomplete if it never identifies the audit criteria or the decision its evidence must support.
ISO 19011: Guidelines for Auditing Management Systems · Certified Medical Device Auditor — 2020 Body of Knowledge
7.Which pre-audit information determines team competence and emphasis?
Pre-audit review should connect the organization's products, processes, changes, complaints, previous findings, and regulatory obligations with the competence needed on the team. General auditing skill does not replace specialized understanding of sterilization, software, or laboratory methods. Review also reveals where more time or different evidence is needed. Select auditors for relevant knowledge, independence, communication ability, and sound judgment, then assign responsibilities that match their demonstrated competence.
Apply it
A desk review shows a newly outsourced radiation process and unresolved dose-related deviations. The audit manager adds a technically qualified team member and increases attention to supplier change communication, validation records, and release decisions.
Common pitfall: A strong general auditor cannot infer technical conformity from unfamiliar terminology. Prior audit success also does not establish competence for a newly introduced process.
Certified Medical Device Auditor — 2020 Body of Knowledge · ISO 19011: Guidelines for Auditing Management Systems
8.When should an auditor trace records forward or backward?
Forward tracing follows an input through processing and release to determine whether required controls operate along the path. Backward tracing starts with an outcome, complaint, or released device and reconstructs its supporting history. Both test connections that isolated checklist questions can miss. Sampling should deliberately cover relevant products, periods, changes, and risk conditions. A targeted sample investigates a concern, but its selection limits statistical claims about the entire population.
Apply it
Starting with a field complaint, an auditor traces backward to the finished lot, component receipt, supplier change, and acceptance record. A second trace then follows affected components forward to identify other distributed lots.
Common pitfall: Several convenient records from one shift may show local conformity while missing a known changeover problem. Do not treat convenience sampling as representative evidence.
Certified Medical Device Auditor — 2020 Body of Knowledge · ISO 19011: Guidelines for Auditing Management Systems
9.What should the opening meeting establish?
The opening meeting establishes a shared understanding of audit purpose, scope, criteria, schedule, communication channels, and practical access arrangements. It also explains any finding classification system and confirms relevant participants. This reduces later disputes caused by mismatched expectations. The meeting does not negotiate away applicable requirements or guarantee a favorable result. Unavailable records, restricted access, or changed operating conditions should be recognized early because they may affect evidence and conclusions.
Apply it
At the opening meeting, production reports that the planned process will be shut down. The lead auditor discusses alternative evidence, adjusts the schedule where possible, and identifies any observation limitation that will affect the final conclusion.
Common pitfall: Treating the meeting as a formality can leave essential access and classification rules unresolved. Agreement on arrangements does not establish conformity before evidence is examined.
Certified Medical Device Auditor — 2020 Body of Knowledge · ISO 19011: Guidelines for Auditing Management Systems
10.How do interviews produce reliable audit evidence?
Effective interviews begin with open questions about actual work, then use focused questions to clarify sequence, responsibility, exceptions, and records. Neutral wording and adequate pauses reduce pressure to give an expected answer. Ask personnel to demonstrate their process and corroborate explanations with observations or records. When a supervisor or translator is present, preserve the interviewee's opportunity to answer directly and verify that technical meaning has been communicated accurately.
Apply it
An operator says rejected units are always segregated. The auditor asks the operator to demonstrate the most recent rejection, then compares its status label, electronic disposition, and physical location with the approved procedure.
Common pitfall: Asking whether employees follow the procedure invites an uninformative yes. A confident explanation becomes stronger evidence only when the relevant practice can be corroborated.
Certified Medical Device Auditor — 2020 Body of Knowledge · ISO 19011: Guidelines for Auditing Management Systems
11.How should conflicting sources of audit evidence be reconciled?
Objective evidence may be observed, measured, documented, or otherwise verified. When sources conflict, investigate their timing, identity, completeness, and applicability rather than selecting the most convenient account. An approved procedure describes intended practice; a record documents an event; direct observation shows a particular current condition. None automatically proves every other condition. Seek enough corroboration to state what is established, what remains uncertain, and whether the concern extends beyond one instance.
Apply it
A procedure requires independent release, but an employee describes self-release and the electronic record shows one user. The auditor checks role permissions, approval history, and additional lots before defining the finding and its extent.
Common pitfall: A signed procedure cannot rebut contrary execution evidence by itself. Equally, a single unexplained screen image may need context before supporting a broad system conclusion.
What Is Auditing? · Certified Medical Device Auditor — 2020 Body of Knowledge
12.What does ALCOA reveal about record reliability?
ALCOA asks whether data are attributable, legible, contemporaneous, original, and accurate. These properties connect a result with its creator, preserve meaning, establish when work occurred, and support faithful reconstruction. A neat final worksheet can still be unreliable if original observations were discarded or entered much later without explanation. Evaluate the complete record pathway, including corrections and source data, rather than treating a signature as sufficient proof of integrity.
Apply it
An analyst records instrument readings on loose notes and transcribes them days later, then discards the notes. The auditor investigates contemporaneous capture and preservation of original data, even though the final worksheet is signed.
Common pitfall: A readable, approved summary does not automatically preserve original observations. Later transcription can obscure omissions, timing, and corrections that matter to the result's credibility.
Certified Medical Device Auditor — 2020 Body of Knowledge · 21 CFR 11.10 — Controls for Closed Systems
13.How do electronic audit trails support trustworthy records?
For closed systems subject to 21 CFR 11.10, secure, computer-generated, time-stamped audit trails record relevant creation, modification, and deletion actions. Changes must not obscure previously recorded information. Authorized access, record protection, accurate copies, and appropriate system validation complement the trail. A trail is useful only if records remain reconstructable and relevant actions can be attributed. A backup restores stored information; it does not necessarily explain who changed a result or why.
Apply it
A laboratory application overwrites failed results when a retest is entered. The auditor evaluates preservation of prior information, user attribution, and audit-trail controls rather than accepting nightly backup completion as evidence that changes remain transparent.
Common pitfall: A system log showing only successful logins does not document changes to regulated records. Backup existence and audit-trail adequacy address different control questions.
14.When should new evidence change audit priorities?
Audit effort should respond to evidence of product impact, systemic weakness, recurrence, and regulatory significance. A newly identified high-risk issue may justify additional samples, specialist support, or revised assignments. The lead auditor coordinates changes and communicates their effect on scope and schedule. Classification should follow established criteria and supported consequences, not personal alarm or a simple count of observations. Any remaining coverage limitation belongs in the report.
Apply it
While reviewing storage records, an auditor finds evidence that a temperature alarm was disabled across several product areas. The lead auditor reallocates time to assess affected inventory, escalation controls, and the extent of the disabled monitoring.
Common pitfall: Finishing every checklist line is not adequate time management when stronger evidence reveals a consequential system problem. Changes still require coordination and clear communication.
Certified Medical Device Auditor — 2020 Body of Knowledge · ISO 19011: Guidelines for Auditing Management Systems
15.What makes a nonconformity report defensible?
A defensible finding connects an applicable requirement with specific objective evidence and a clear statement of the gap. Identifiers, dates, and observed conditions make the evidence verifiable without unsupported generalization. The closing meeting confirms factual understanding and next steps; disagreement should be documented rather than concealed. Final reports require appropriate review, approval, distribution, and retention. Separate established facts from inferred consequences and explain limitations that affect the overall conclusion.
Apply it
Instead of writing poor training, an auditor cites the required qualification procedure and identifies two operators who performed the specified task before qualification was documented. The report describes the gap and the sampled records precisely.
Common pitfall: A recommendation to improve a process is not automatically a nonconformity. Without an applicable requirement and supporting evidence, a strong opinion remains an opinion.
Certified Medical Device Auditor — 2020 Body of Knowledge · What Is Auditing?
16.How should a corrective-action plan be evaluated?
A credible plan addresses immediate containment, correction of the identified problem, investigation of its cause and extent, and action to prevent recurrence. It assigns responsibility, timing, and evidence-based effectiveness criteria. Match the response to risk and the demonstrated mechanism. Retraining is appropriate only when inadequate knowledge or skill contributed to the failure. A plan that promises completion without defining what improvement will be measured cannot establish a sound basis for closure.
Apply it
A supplier proposes reminding staff after repeated use of obsolete drawings. The auditor requests evaluation of document distribution and access controls, a named implementation owner, and follow-up sampling that tests whether obsolete versions remain available.
Common pitfall: Accepting a completion date as the whole plan confuses scheduling with corrective action. Repeated reminders cannot compensate for a system that continues presenting obsolete instructions.
Certified Medical Device Auditor — 2020 Body of Knowledge · What Is Auditing?
17.When is audit closure justified?
Closure requires the evidence specified by the audit process, including acceptable implementation and appropriate verification of corrective-action effectiveness. A revised procedure demonstrates a change was documented; subsequent operating evidence shows whether the change works. Follow-up may use records, observations, or another audit according to risk. ISO 19011 supplies general auditing guidance, while MDSAP has a medical-device audit model. Neither reference substitutes for applicable requirements or the organization's defined closure criteria.
Apply it
A barcode interlock is installed to prevent label mix-ups. Before closure, the auditor reviews challenge results and representative production records showing that mismatched labels were blocked and that the interlock remained active during routine use.
Common pitfall: An implementation photograph or training attendance sheet may support completion, but neither alone demonstrates sustained prevention of the original failure under relevant operating conditions.
Certified Medical Device Auditor — 2020 Body of Knowledge · ISO 19011: Guidelines for Auditing Management Systems
Medical Device Quality Management System Requirements38/135 scored questions (28.15%)
18.How does QMSR change the interpretation of legacy audit references?
FDA's QMSR became effective February 2, 2026, incorporating ISO 13485:2016 into the U.S. device quality-system framework with FDA-specific requirements. Historical QSR terminology remains useful for understanding older records and the 2020 examination outline, but it does not establish current legal wording. FDA also changed its inspection approach. Current FDA inspection access includes management review, quality audit, and supplier audit records; assuming the former exemption still applies would misstate current expectations.
Apply it
During an October 2026 readiness review, a manager refuses access to internal audit records because an older policy cites the former exemption. The auditor identifies the outdated policy and evaluates readiness against current FDA inspection expectations.
Common pitfall: ISO 13485 certification does not by itself establish satisfaction of every FDA requirement. Likewise, historical section numbers cannot establish the current inspection-access rules.
Quality Management System Regulation (QMSR) · Quality Management System Regulation — Frequently Asked Questions
19.How should requirements be mapped across device markets?
Market access and quality-system obligations depend on jurisdiction, device characteristics, intended purpose, and organizational role. The CMDA outline includes U.S. requirements, EU MDR, Canada's regulations, and authorities such as TGA and PMDA. Canada requires a medical device licence (MDL) for Class II–IV devices; Class I devices do not require an MDL. A medical device establishment licence (MDEL) instead concerns establishment activities, generally covering importers and distributors across all classes and Class I manufacturers. These are separate licensing questions. See [Health Canada's licensing explanation](https://www.canada.ca/en/health-canada/services/drugs-health-products/medical-devices/about-medical-devices.html). MDEL exceptions include retailers, health care facilities, manufacturers importing or distributing their own Class II–IV devices, and Class I manufacturers importing or distributing solely through an MDEL holder. The exception follows the actual role and activity, as explained in [Health Canada's MDEL guidance](https://www.canada.ca/en/health-canada/services/drugs-health-products/compliance-enforcement/establishment-licences/directives-guidance-documents-policies/guidance-medical-device-establishment-licensing-0016.html).
Apply it
For a Canadian Class II launch, a U.S. 510(k) clearance file is insufficient. The auditor examines the Canadian classification rationale, a valid MDL covering the manufacturer and marketed device, and the importer's and distributor's MDELs or documented applicable exceptions. Licence status and scope should match the actual supply chain.
Common pitfall: An MDEL does not replace a required device MDL. A manufacturer's exception for its own Class II–IV devices does not automatically cover importing or distributing another manufacturer's devices.
Certified Medical Device Auditor — 2020 Body of Knowledge · Overview of Device Regulation
20.What distinguishes device classification from 510(k) review?
Device classification establishes the applicable regulatory controls based on the device and its intended use. A 510(k), when required, supports a determination of substantial equivalence to a legally marketed predicate. It is not the same pathway as premarket approval, and establishment registration or device listing is not a substitute for required marketing authorization. Audit evidence should connect the actual device configuration and claims with the applicable classification and premarket decision.
Apply it
A sales team describes a newly listed device as FDA approved solely because establishment registration is complete. The auditor compares the claim with the device's applicable premarket pathway and the authorization evidence for that configuration.
Common pitfall: Registration, listing, clearance, and approval describe different regulatory actions. Treating them as synonyms can conceal an unsupported marketing claim or a missing premarket requirement.
21.Why does an IVD audit begin with intended use?
An IVD examines human specimens to provide medical information. Intended use fixes the analyte, specimen, population, user, and setting. Under 21 CFR 809.10, applicable labeling must describe specimen collection and preparation, necessary additives or preservatives, stability-preserving storage and handling, known interference, calibration materials and range, and quality-control procedures, materials, and satisfactory performance limits. Claims for accuracy, precision, specificity, and sensitivity require summarized supporting data. EU IVDR Article 56 and Annex XIII require a documented performance evaluation combining scientific validity, analytical performance, and clinical performance. Scientific validity establishes the analyte's association with a clinical condition or physiological state; analytical performance establishes correct detection or measurement; clinical performance establishes results correlated with the relevant condition in the intended population. These distinct evidence streams support the claimed purpose. See [IVDR Article 56 and Annex XIII](https://eur-lex.europa.eu/legal-content/EN/ALL/?uri=CELEX%3A32017R0746).
Apply it
An assay supported for serum is promoted for plasma. The new matrix and collection additives can change interference, bias, precision, and analyte stability. The auditor examines specimen-specific comparisons and justified studies supporting collection conditions, storage intervals, interference, calibration and control suitability, and claimed performance. The evaluation must also justify whether existing scientific-validity and clinical-performance evidence remains applicable; an unchanged analyte association alone cannot establish acceptable performance in the new specimen.
Common pitfall: Passing routine quality controls does not establish specimen stability or exclude matrix-specific interference. Evidence supporting one specimen cannot automatically substantiate another.
Certified Medical Device Auditor — 2020 Body of Knowledge · Federal Register :: Request Access
22.Which standard fits a device quality system or laboratory?
ISO 13485 addresses quality management systems for medical devices and related services. ISO 9001 provides a broader quality-management framework. ISO/IEC 17025 addresses the competence of testing and calibration laboratories. These standards answer different questions: organizational quality-system conformity is not identical to competence for a particular laboratory activity. Evaluate the relevant certificate or accreditation scope, methods, and services instead of accepting the standard's name as universal evidence of capability.
Apply it
A manufacturer selects a calibration laboratory because it holds ISO 9001 certification. The auditor checks evidence of technical competence, including the relevant calibration scope, rather than assuming a general quality-system certificate establishes measurement capability.
Common pitfall: A certificate outside the required activity's scope cannot establish competence for that activity. Medical-device quality-system certification also does not replace applicable market authorization.
ISO 13485:2016 — Medical Device Quality Management Systems · ISO/IEC 17025 — Testing and Calibration Laboratories · Certified Medical Device Auditor — 2020 Body of Knowledge
23.How can management commitment and competence be evaluated?
Management responsibility becomes visible through defined authority, suitable resources, meaningful quality objectives, review of system performance, and action on unresolved risks. Training controls should establish competence for assigned work, not merely attendance. An auditor connects management decisions with operational outcomes: repeated overdue actions or unaddressed resource shortages may reveal a system weakness. Review should show that information was considered and decisions were followed through, rather than only that a meeting occurred.
Apply it
Management reviews repeatedly note overdue calibration caused by insufficient staffing, yet no action is assigned. The auditor traces the recurring issue to resource decisions and affected inspection activities instead of concluding that documented meetings demonstrate effective oversight.
Common pitfall: A signed attendance sheet proves participation, not task competence. Similarly, management-review minutes without decisions or follow-through may provide weak evidence of effective system oversight.
Certified Medical Device Auditor — 2020 Body of Knowledge · ISO 13485:2016 — Medical Device Quality Management Systems
24.How do design records connect decisions across development?
Design controls connect planning, inputs, outputs, reviews, verification, validation, transfer, and changes into a traceable development history. Inputs establish requirements; outputs describe the resulting design; reviews evaluate progress and unresolved issues. The auditor looks for continuity between requirements, risk controls, evidence, and production implementation. Historical files may use design history file terminology. Record titles matter less than whether the controlled evidence demonstrates that required activities and decisions occurred.
Apply it
A design review approves a housing change but leaves an unresolved cleaning concern. The auditor traces that concern into revised requirements, risk evaluation, verification or validation evidence, and the production documentation used after transfer.
Common pitfall: A final approval signature cannot fill gaps in requirement traceability. A large design file may still lack evidence that a particular unresolved risk was addressed.
Certified Medical Device Auditor — 2020 Body of Knowledge · IDE Related Topics
25.How do document control and record control differ?
Controlled documents specify how work should be performed and require approval, revision control, and appropriate availability. Records preserve evidence of what actually occurred and require identification, protection, retrieval, and retention. Historical device master records describe production specifications, while device history records document manufacture of particular units or lots. Current systems may organize equivalent information differently. Evaluate content and control rather than requiring an obsolete title or permitting uncontrolled changes to completed evidence.
Apply it
An operator uses a current electronic work instruction, but a supervisor edits a completed production record without preserving its earlier content. The auditor evaluates document availability separately from record integrity and controlled correction practices.
Common pitfall: Updating an instruction does not authorize rewriting past execution records. Conversely, retaining old records does not ensure that current instructions are available where work occurs.
Certified Medical Device Auditor — 2020 Body of Knowledge · 21 CFR 11.10 — Controls for Closed Systems
26.How should supplier controls reflect product and process risk?
Supplier control should reflect the effect of purchased products or services on device conformity and the organization's ability to detect a failure. Qualification establishes initial suitability; monitoring evaluates continuing performance. Purchasing information must communicate relevant specifications, acceptance expectations, and change arrangements. Outsourcing does not eliminate the manufacturer's responsibility for its device. A critical service with limited downstream verification generally warrants stronger evidence and oversight than a readily inspected, low-impact commodity.
Apply it
A contract processor changes a cleaning chemical without notifying the manufacturer. The auditor examines purchasing specifications, change-notification agreements, supplier monitoring, and the manufacturer's evaluation of effects on residues and device performance before accepting continued use.
Common pitfall: An approved-supplier list is only a status record. It cannot replace evidence that qualification, performance monitoring, and relevant change communication match the supplied activity's risk.
Certified Medical Device Auditor — 2020 Body of Knowledge · ISO 13485:2016 — Medical Device Quality Management Systems
27.When is supplier-provided acceptance evidence sufficient?
Acceptance evidence must demonstrate conformity to the relevant purchasing requirements through a justified combination of inspection, testing, verification, and supplier information. A certificate can be useful when its identity, methods, criteria, and reliability are established. It does not automatically cover every critical characteristic. The auditor examines why the chosen acceptance approach is adequate, whether status prevents premature use, and whether supplier performance or changes require additional verification.
Apply it
A component certificate confirms material grade but omits a critical dimension. The auditor checks the manufacturer's acceptance plan for that dimension and whether the lot remained controlled until required verification was completed before production use.
Common pitfall: A certificate bearing the correct lot number may still omit the characteristic that matters. Supplier approval alone does not demonstrate conformity of every received lot.
Certified Medical Device Auditor — 2020 Body of Knowledge · ISO 13485:2016 — Medical Device Quality Management Systems
28.How do identification, traceability, and UDI serve different purposes?
Identification distinguishes material, product, and status; traceability connects relevant history, processing, components, and distribution. UDI adds standardized device identification. Its device identifier identifies the labeler and specific version or model, while production identifiers can convey information such as lot, serial number, or dates when applicable. GUDID contains device-identifier information, not production identifiers. A UDI label therefore supports identification but cannot replace the manufacturer's complete production and distribution traceability system.
Apply it
A complaint includes a device identifier and lot number. The auditor checks whether the manufacturer can connect the lot to component receipts, processing records, release status, and distribution, rather than expecting GUDID to contain lot history.
Common pitfall: A scannable UDI does not prove complete traceability. Distinguish standardized identity from the internal records needed to reconstruct manufacture, release, and affected distribution.
UDI Basics · Certified Medical Device Auditor — 2020 Body of Knowledge
29.How is product integrity protected beyond manufacturing?
Product conformity can be lost during handling, storage, distribution, or installation even when manufacturing was acceptable. Controls should preserve required environmental conditions, packaging, identity, status, and configuration. Installation evidence must show that relevant requirements were met before use. Customer property also needs identification and protection when it is under the organization's control. Audit the handoffs between functions because undocumented responsibility at an interface can undermine otherwise adequate local procedures.
Apply it
Released devices are stored correctly at the plant but shipped through an uncontrolled warehouse. The auditor traces the specified storage conditions through distribution agreements, monitoring records, excursion handling, and release decisions for the affected shipments.
Common pitfall: A satisfactory final manufacturing inspection does not establish conformity after storage or transport. Responsibility for preserving conditions must extend through the relevant distribution and installation interfaces.
Certified Medical Device Auditor — 2020 Body of Knowledge · ISO 13485:2016 — Medical Device Quality Management Systems
30.What follows an out-of-tolerance calibration result?
Calibration establishes a relationship between instrument indications and suitable reference values, with traceability supporting confidence in those references. When equipment is found out of tolerance, simply adjusting it addresses future use but leaves past decisions unresolved. Evaluate the direction and magnitude of error, affected measurements, time since the last acceptable evidence, and possible product impact. The investigation should support disposition of potentially affected results and any necessary product action.
Apply it
A pressure gauge used for release testing reads higher than the reference during calibration. The auditor checks whether previous passing results could have overstated actual pressure and whether the manufacturer identified and evaluated potentially affected lots.
Common pitfall: A new calibration sticker restores a controlled status only for future use. It does not establish that measurements made before adjustment supported valid acceptance decisions.
Certified Medical Device Auditor — 2020 Body of Knowledge · ISO/IEC 17025 — Testing and Calibration Laboratories
31.How should nonconforming product and rework be controlled?
Nonconforming product requires identification, control against unintended use, evaluation, and an authorized disposition. Rework attempts to bring product into conformity and requires appropriate instructions, evaluation of adverse effects, and subsequent verification. A concession or other authorized disposition does not erase the original nonconformity or establish that every requirement has been met. Traceable records must connect the affected product, decision, responsible authority, performed work, and evidence supporting final status.
Apply it
A scratched component is polished under an undocumented instruction and returned to production. The auditor examines authorization, effects on dimensions and surface properties, verification after rework, and the record linking the operation to the affected units.
Common pitfall: Rework is a controlled production activity, not permission to improvise until a unit appears acceptable. Visual improvement alone may conceal a newly introduced functional problem.
Certified Medical Device Auditor — 2020 Body of Knowledge · GHTF/SG3/N99-10:2004 — Process Validation Guidance
32.How do correction, corrective action, and preventive action differ?
Correction addresses a detected nonconformity, such as replacing an incorrect label. Corrective action addresses its cause to prevent recurrence. Preventive action addresses the cause of a potential nonconformity before it occurs. Quality data from complaints, service, production, audits, and suppliers help identify the need for action. The decisive question is whether the action changes the mechanism that produced or could produce failure, with effectiveness evaluated against a defined outcome.
Apply it
A manufacturer relabels an affected batch, then adds verified line-clearance and label-selection controls after identifying the mix-up mechanism. Relabeling is correction; the controls are corrective action, whose effectiveness requires evidence from later production.
Common pitfall: Calling every repair CAPA hides the distinction between fixing a unit and removing a recurring cause. Conversely, every isolated defect does not demand identical system-level action.
Certified Medical Device Auditor — 2020 Body of Knowledge · What Is Auditing?
33.When can a service report trigger complaint and MDR evaluation?
A service record can contain information alleging a device deficiency and should enter the appropriate complaint and reporting evaluation pathways. Manufacturers must report certain deaths, serious injuries, and malfunctions under FDA MDR requirements. A malfunction may be reportable when recurrence would likely cause or contribute to death or serious injury, even if the current event caused no injury. Administrative labels such as service-only cannot override the event's substance or justify delaying a reporting assessment.
Apply it
A technician documents an intermittent shutdown during critical use, with no injury because a backup device was available. The auditor checks complaint escalation and the documented MDR malfunction assessment rather than accepting the absence of injury as closure.
Common pitfall: Successful repair does not remove an event's reporting significance. Waiting for definitive proof of causation can also be inconsistent with evaluating information that reasonably suggests reportability.
Medical Device Reporting: How to Report Medical Device Problems · Certified Medical Device Auditor — 2020 Body of Knowledge
34.How should post-market signals and field actions be evaluated?
Post-market surveillance combines complaints, service information, adverse-event reports, and other feedback to detect changes in safety or performance. Passive reports can identify signals but usually lack a reliable exposure denominator and may be incomplete or duplicated. Evaluate signals through investigation and risk management rather than calculating unsupported incidence. Corrections, removals, recalls, and reporting obligations require their own documented assessments; a field action and an MDR submission answer different regulatory questions.
Apply it
A rise in public adverse-event reports prompts a manufacturer review. The auditor looks for corroborating complaint and distribution data, investigation of the failure mechanism, updated risk evaluation, and separate assessments of reporting and any necessary field action.
Common pitfall: A larger report count does not establish a higher event rate without comparable exposure and reporting conditions. Conversely, uncertain incidence does not justify ignoring a credible signal.
Medical Device Reporting: How to Report Medical Device Problems · Certified Medical Device Auditor — 2020 Body of Knowledge
Technical Medical Device Knowledge42/135 scored questions (31.11%)
35.How do hazard, hazardous situation, and risk differ?
A hazard is a potential source of harm. A hazardous situation exists when people, property, or the environment are exposed to a hazard. Risk combines the probability of harm with its severity. Distinguishing these elements prevents a failure label from becoming the entire analysis. ISO 14971 addresses analysis, evaluation, control, and lifecycle feedback. Audit the sequence from foreseeable events to exposure and harm, including normal use and fault conditions.
Apply it
For an overheating device, the team identifies thermal energy as a hazard, patient contact with an excessively hot surface as a hazardous situation, and tissue injury as harm. The auditor checks the event sequence and control evidence.
Common pitfall: A component failure rate alone is not the probability of harm. Exposure, protective measures, and the sequence leading to injury affect the risk estimate.
ISO 14971:2019 — Application of Risk Management to Medical Devices · Certified Medical Device Auditor — 2020 Body of Knowledge
36.How should risk controls and lifecycle feedback be assessed?
Risk control requires evidence that selected measures were implemented and that they reduce risk as intended. The analysis must also consider risks introduced by the controls and the acceptability of remaining risk. ISO 14971 does not supply one universal acceptable-risk threshold; the manufacturer establishes appropriate criteria within the applicable framework. Production and post-production information can challenge earlier assumptions, so a completed development risk file must remain connected to later evidence.
Apply it
A protective software alarm is added after a field failure. The auditor checks implementation and functional evidence, evaluates whether alarm confusion creates new use risks, and traces subsequent complaints into review of the revised residual-risk assessment.
Common pitfall: A low score in a risk table does not prove acceptability when its assumptions are unsupported. Implementing a control also does not automatically establish its effectiveness.
ISO 14971:2019 — Application of Risk Management to Medical Devices · Applying Human Factors and Usability Engineering to Medical Devices
37.Which conditions make human-factors validation informative?
Human-factors validation evaluates whether intended users can perform critical tasks safely and effectively with the device interface under representative use conditions. Representative users, realistic scenarios, and an appropriate final interface matter because expert coaching can conceal use problems. Critical tasks are those whose incorrect performance or omission could cause serious harm. Observed errors and close calls require analysis of interface-related causes rather than automatic attribution to careless users.
Apply it
Engineers demonstrate a new infusion interface successfully after coaching each participant. The auditor asks for validation with representative intended users, realistic training and conditions, critical-task coverage, and analysis of errors without intervention that masks interface weaknesses.
Common pitfall: A successful demonstration by designers does not establish safe use by intended users. More training is not automatically the right response to a design-induced use error.
Applying Human Factors and Usability Engineering to Medical Devices
38.How is a biocompatibility evaluation selected?
Biological evaluation considers the finished device, including materials, manufacturing residues, contact type, and contact duration. Endpoint selection follows the nature of exposure rather than a universal test battery. Existing information, chemical characterization, and scientifically justified rationales may address some endpoints without additional animal testing. Cytotoxicity concerns cellular damage, sensitization concerns allergic response, and irritation concerns local inflammatory effects. A material or processing change can alter the evaluation even when the device's intended use remains unchanged.
Apply it
A supplier changes a surface treatment on a patient-contacting component. The auditor checks the change's effect on chemical constituents and residues, the relevant contact category, and the rationale for existing evidence or additional biological evaluation.
Common pitfall: The same base polymer does not guarantee the same biological profile after processing. Conversely, every change does not automatically require repeating every biological test.
Biocompatibility Evaluation Endpoints by Device Category · Certified Medical Device Auditor — 2020 Body of Knowledge
39.What must sterile-device packaging demonstrate?
A sterile barrier system must permit sterilization as applicable and maintain sterility until the point of use, while supporting aseptic presentation. ISO 11607-1 addresses materials, sterile barrier systems, and packaging systems for terminally sterilized devices. Audit evidence should connect material selection, package design, processing, distribution stresses, and storage to the claimed protection. Seal appearance, seal strength, and package integrity address related but different questions; one favorable result does not establish every packaging function.
Apply it
Packages retain acceptable seal strength after transport simulation but show channel leaks. The auditor treats the integrity failure as relevant to the sterile barrier claim instead of accepting the strength result as sufficient evidence for release.
Common pitfall: A strong seal can still contain a leak path. Also, a protective shipping carton and the sterile barrier perform different functions and require appropriate evidence.
ISO 11607-1:2019 — Packaging for Terminally Sterilized Medical Devices · Certified Medical Device Auditor — 2020 Body of Knowledge
40.How should shelf-life claims be supported?
Shelf life is the period during which a stored device remains within specified requirements under stated conditions. Evidence must address relevant limiting characteristics, including packaging integrity, material stability, and device performance. Accelerated aging uses assumptions about degradation and does not automatically reproduce every failure mechanism. Useful life during use can involve different stresses from unopened storage. The claimed period should follow the earliest justified limit among the characteristics necessary for conformity.
Apply it
A manufacturer extends expiration because aged pouches pass integrity testing. The auditor asks whether adhesives, batteries, and other time-sensitive device functions were also evaluated under justified aging and storage conditions before the new shelf life was approved.
Common pitfall: Package integrity alone cannot support the entire device's shelf life. Accelerated aging evidence also needs a justified relationship to the properties and failure mechanisms being assessed.
Certified Medical Device Auditor — 2020 Body of Knowledge · ISO 11607-1:2019 — Packaging for Terminally Sterilized Medical Devices
41.How do design verification, validation, and transfer differ?
Design verification asks whether outputs meet specified inputs. Design validation asks whether the device meets user needs and intended uses under appropriate actual or simulated conditions. Transfer ensures that the approved design is correctly translated into production specifications and processes. A technically accurate output can still fail users, while a suitable prototype can still be manufactured incorrectly. Traceability should show which evidence answers each question and whether changes affect earlier conclusions.
Apply it
A pump meets its specified flow accuracy on a bench but intended users misprogram it in realistic scenarios. Verification may support the accuracy requirement, while validation exposes a use problem that must be resolved before successful transfer.
Common pitfall: A passing engineering test is not automatically design validation. Likewise, successful user evaluation does not prove production instructions can consistently reproduce the approved design.
IDE Related Topics · Applying Human Factors and Usability Engineering to Medical Devices
42.Why is software validation a lifecycle activity?
Software validation builds justified confidence that software requirements and intended uses are satisfied through activities across development and maintenance. Requirements, architecture, implementation, reviews, testing, configuration management, and problem resolution contribute different evidence. Final system testing cannot exhaust every possible state or replace well-controlled development. Audit traceability from safety-related requirements to implementation and verification, and examine how unresolved anomalies, tool use, and configuration identity affect the validity of release conclusions.
Apply it
A team offers only a successful final demonstration for software controlling a manufacturing inspection. The auditor seeks approved requirements, risk-related tests, configuration identification, anomaly disposition, and lifecycle evidence supporting the software's intended inspection decisions.
Common pitfall: A demonstration can miss untested branches and abnormal conditions. A large number of executed tests also says little unless they address justified requirements and risks.
General Principles of Software Validation · Certified Medical Device Auditor — 2020 Body of Knowledge
43.How should software changes determine regression testing?
Change-impact analysis identifies affected requirements, interfaces, risk controls, data, and functions, including indirect dependencies. Regression testing then checks that previously acceptable behavior remains intact where the change could have an effect. The test scope follows justified impact and risk rather than the number of edited lines. Security-related updates also require evaluation of safety and performance interactions. Configuration control must connect the reviewed change with the exact released version and supporting evidence.
Apply it
A small update changes a shared timing library used by both display refresh and alarm delivery. The auditor expects impact analysis and regression evidence for alarm timing, despite the change request describing the update as a display correction.
Common pitfall: Testing only the visible feature can miss shared dependencies. Conversely, repeating every historical test without impact analysis may consume effort while overlooking a newly introduced risk.
General Principles of Software Validation · Certified Medical Device Auditor — 2020 Body of Knowledge
44.How should labeling remain aligned with device evidence?
Labeling communicates device identity, intended use, operating instructions, limitations, warnings, and other applicable information. Audit control must connect the approved design and risk information with labels, instructions for use, symbols, and promotional claims. A risk control that depends on user information requires evidence that the information is understandable and usable. UDI supports standardized identity, but it does not establish the adequacy of instructions or authorize an expanded performance claim.
Apply it
Marketing adds a claim that a reusable device can tolerate an additional cleaning method. The auditor traces that claim to approved reprocessing evidence, risk evaluation, labeling change control, and applicable regulatory assessment before accepting the revised materials.
Common pitfall: Promotional language is not outside labeling control merely because it appears online. A warning also cannot automatically compensate for an avoidable, poorly designed user interface.
Certified Medical Device Auditor — 2020 Body of Knowledge · Applying Human Factors and Usability Engineering to Medical Devices · UDI Basics
45.How should controlled environments and utilities be evaluated?
Environmental and utility controls should follow their effects on product quality, including contamination, moisture, temperature, and process performance. Qualification establishes suitable operation; monitoring detects departures during routine use; maintenance helps preserve capability. Airborne particle classification does not by itself demonstrate microbial or endotoxin control. Evaluate water, compressed gases, and HVAC at relevant points of use, with justified limits, sampling locations, trend review, and responses to excursions that could affect product.
Apply it
A cleanroom meets its particle classification, but compressed air contacts cleaned components and has no defined quality specification. The auditor evaluates the gas's product-contact risks, point-of-use controls, monitoring, and evidence that contamination is adequately controlled.
Common pitfall: A room classification certificate does not cover every contamination hazard or utility. Monitoring data also provide little assurance when excursions lack documented product-impact evaluation.
Certified Medical Device Auditor — 2020 Body of Knowledge · Bacterial Endotoxins/Pyrogens
46.How do terminal sterilization and aseptic processing differ?
Terminal sterilization applies a validated sterilization process to product in its final sterile barrier configuration. Aseptic processing assembles or fills separately sterilized elements while preventing recontamination. Their evidence and vulnerabilities therefore differ. Sterilization methods also vary in material compatibility and process mechanisms, including moist heat, dry heat, ethylene oxide, and irradiation. The auditor evaluates the selected process and its controls rather than treating the word sterile as evidence of a universal manufacturing approach.
Apply it
A heat-sensitive device is assembled from sterilized components in an aseptic operation. The auditor examines contamination prevention and aseptic process controls rather than expecting a final steam cycle that the device cannot tolerate after assembly.
Common pitfall: Separately sterilized parts do not guarantee a sterile finished assembly. Aseptic handling must prevent recontamination, while terminal-process evidence must cover the actual final product configuration.
47.Which evidence supports routine sterilization release?
Sterilization release depends on a validated process and evidence that the relevant routine load met established conditions. Ethylene oxide evaluation includes process parameters, challenge effectiveness, and appropriate residual controls. Irradiation evaluation connects dose delivery, product loading, and ongoing dose verification with the validated range. Sterility assurance is a process-based concept; a small finished-product sample cannot establish the absence of viable organisms throughout a lot. Changes require evaluation against the validated configuration.
Apply it
A contractor changes pallet loading for irradiation while reporting the same nominal dose. The auditor checks whether dose distribution and minimum and maximum product exposure remain supported for the changed configuration before accepting routine release records.
Common pitfall: A passing sterility test cannot rescue an unexplained process deviation. A nominal irradiation setting also does not prove that every product position received an acceptable dose.
Certified Medical Device Auditor — 2020 Body of Knowledge · GHTF/SG3/N99-10:2004 — Process Validation Guidance
48.Why does sterility not establish endotoxin safety?
Sterility concerns viable microorganisms, while bacterial endotoxins are components associated with Gram-negative bacteria that can remain after organisms are killed. A process effective for sterilization may not adequately remove or inactivate endotoxin. Consequently, contamination prevention, water quality, cleaning, and appropriate endotoxin evaluation answer a separate question from sterilization validation. The relevant controls depend on device use and exposure. Historical endotoxin guidance supports this distinction without supplying universally applicable modern limits or protocols.
Apply it
A device passes its sterilization process requirements after a water-system contamination event. The auditor separately evaluates potential endotoxin contamination, affected production, cleaning controls, and the suitability of the manufacturer's testing and product disposition rationale.
Common pitfall: A negative sterility result does not measure endotoxin. Killing microorganisms can leave pyrogenic material, so sterilization evidence cannot automatically close an endotoxin-related contamination investigation.
49.How should laboratory methods and failure investigations be assessed?
A laboratory method must be suitable for the characteristic, sample, range, and decision it supports. Evaluate sample preparation, method performance, equipment, analyst competence, controls, and data integrity. Failure analysis should preserve evidence and test plausible mechanisms rather than repeatedly testing until an acceptable result appears. ISO/IEC 17025 addresses laboratory competence, but the relevant activity and method scope still matter. A passing repeat result does not automatically invalidate an earlier failure.
Apply it
An adhesive-strength failure is dismissed after a second specimen passes. The auditor checks specimen comparability, equipment condition, preparation records, and the investigation's evidence for an assignable cause before accepting the decision to disregard the original result.
Common pitfall: Retesting can generate additional information, but repeated favorable results do not explain an unfavorable result. Method suitability and a defensible investigation remain necessary for disposition.
ISO/IEC 17025 — Testing and Calibration Laboratories · Certified Medical Device Auditor — 2020 Body of Knowledge
50.How do IQ, OQ, and PQ answer different validation questions?
Installation qualification establishes that equipment and supporting systems are installed as specified. Operational qualification challenges operating conditions and limits to establish a suitable process window. Performance qualification demonstrates consistent performance under anticipated routine conditions, including relevant materials, operators, and production variation. The 2004 GHTF guidance distinguishes these activities. Their value comes from justified protocols and acceptance criteria, not merely completing three forms. Routine changes and deviations must be assessed against the validated state.
Apply it
A sealer is correctly installed and works at one nominal setting. The auditor identifies remaining needs to challenge justified operating limits and demonstrate consistent seals under routine production conditions before the overall validation can be considered complete.
Common pitfall: Successful installation does not establish a process window. Likewise, a single nominal run cannot substitute for challenges and routine-performance evidence appropriate to the process.
51.When is process validation needed instead of relying on inspection?
Process validation is needed when the resulting output cannot be fully verified by subsequent monitoring or measurement. Destructive testing, inaccessible characteristics, or defects that become apparent only during use can make final inspection insufficient. Validation establishes and documents controlled conditions that consistently produce conforming output. It does not eliminate routine monitoring, maintenance, or change control. If full verification is feasible and performed, the rationale for that approach should still be clear and risk appropriate.
Apply it
Seal integrity testing destroys the tested package, so testing every released unit would make the product unusable. The auditor expects a justified validated sealing process with suitable routine controls, rather than reliance on a few passing samples alone.
Common pitfall: Sampling output does not automatically turn an unverifiable process into a fully verified one. Validation also cannot justify releasing product after unexplained departures from established conditions.
52.What makes reusable-device reprocessing instructions credible?
Reprocessing instructions require scientific validation that the specified cleaning and subsequent disinfection or sterilization steps work for the device's design and intended reuse. Complex features, soil retention, drying, and repeated processing can affect outcomes. Instructions must be understandable and executable by intended users with the specified equipment and materials. Cleaning and sterilization answer different questions: removing residual soil is not established simply because a later sterilization cycle meets its own process requirements.
Apply it
A reusable instrument has a narrow internal channel, but validation uses only easily cleaned external surfaces. The auditor asks whether the study represents the difficult-to-clean features, specified instructions, relevant soil challenge, and intended repeated-use conditions.
Common pitfall: A familiar hospital sterilization cycle does not validate the device's cleaning instructions. An effective method in a development laboratory may also be impractical for intended users.
Reprocessing Medical Devices in Health Care Settings: Validation Methods and Labeling
53.How should device standards be selected and kept current?
Standards should be selected for the device's technology, intended use, hazards, and target markets. IEC 60601-1 concerns medical electrical equipment safety and essential performance, while RoHS and REACH address different substance-related obligations. EU general safety and performance requirements provide a regulatory requirements framework. Audit a documented applicability rationale, edition control, and change assessment. Publication, FDA recognition, and EU harmonization are different statuses; an updated edition does not automatically have identical regulatory standing everywhere.
Apply it
Engineering adopts a newly published standard edition for a device sold in two markets. The auditor checks applicability, recognition or harmonization status where relevant, differences from prior requirements, and the documented effect on existing conformity evidence.
Common pitfall: A list of standard numbers is not an applicability assessment. Neither the newest edition nor a historical compliance report automatically establishes current conformity in every market.
Quality Tools and Techniques15/135 scored questions (11.11%)
54.How can Pareto analysis and cost of quality guide priorities?
A Pareto chart ranks categories by a chosen measure and shows their contribution to the total. The measure may be frequency, cost, or another justified quantity, so priorities can change with the question. Cost of quality distinguishes prevention, appraisal, internal failure before delivery, and external failure after delivery. Combine these views to identify concentrated losses, but retain separate consideration of severe safety risks that low frequency or low recorded cost might conceal.
Apply it
Scrap defects dominate the count, while field replacements dominate cost. The team creates separate Pareto views and classifies inspection as appraisal and field replacement as external failure, then considers safety impact before choosing its improvement priority.
Common pitfall: The tallest frequency bar is not automatically the highest-risk problem. A fixed eighty-twenty split is also not required for a Pareto chart to be useful.
55.How do problem-solving tools test a proposed root cause?
A cause-and-effect diagram organizes possible contributors, while the 5 Whys explores causal chains and Is/Is Not comparisons separate affected from unaffected conditions. These tools generate and refine hypotheses; they do not prove a cause by themselves. A scatter diagram can reveal association without establishing causation. Strong root-cause evidence explains the observed pattern, survives comparison with competing explanations, and predicts a change that can be evaluated when the proposed cause is controlled.
Apply it
Failures occur only after one changeover despite identical materials on other shifts. The team compares affected and unaffected conditions, identifies a setup difference, and tests whether correcting that difference removes the failure under a controlled challenge.
Common pitfall: Stopping at operator error often leaves the enabling system unexplained. A persuasive diagram or correlation also cannot replace evidence that the proposed mechanism produces the observed problem.
56.How do control limits differ from specification limits?
Specification limits express acceptable product requirements. Statistical control limits describe expected process behavior from suitable process data. A stable process can consistently produce unacceptable output, while an unstable process can temporarily produce results within specification. Control-chart patterns help identify special-cause behavior that a histogram may hide because time order is lost. Alert and action levels should have defined responses and justified purposes; they are not interchangeable with customer specifications or automatically valid statistical limits.
Apply it
All measured diameters meet specification, but a control chart shows a sustained upward shift after tool replacement. The team investigates the process change instead of waiting for rejected units, while preserving separate decisions about product acceptance.
Common pitfall: Within specification does not mean statistically stable. Conversely, a control-limit signal calls for investigation and does not automatically prove that every associated unit is nonconforming.
Certified Medical Device Auditor — 2020 Body of Knowledge · NIST Engineering Statistics Handbook — What Is Process Capability?
57.How do Cp and Cpk distinguish spread from centering?
Cp equals the specification width divided by six estimated within-process standard deviations. Cpk is the smaller of the upper and lower distances from the mean to a specification limit, each divided by three standard deviations. Cp describes potential fit from spread; Cpk also reflects centering. Cpk cannot exceed Cp when calculated consistently. Capability interpretation requires suitable data, process stability, and distribution assumptions; Pp and Ppk use overall variation and answer a related performance question.
Apply it
With limits 9 and 15, mean 13, and standard deviation 0.5, Cp is 2.0 and Cpk is approximately 1.33. The process spread is narrow, but the mean lies closer to the upper limit.
Common pitfall: A high Cp does not establish good centering. Translating an index into defect rates without checking stability and distribution assumptions can produce misleading assurance.
NIST Dataplot Reference Manual — CPK · NIST Engineering Statistics Handbook — What Is Process Capability?
58.How do bias and measurement variation affect decisions?
Bias is systematic disagreement with a reference value. Repeatability describes variation under the same measurement conditions, while reproducibility addresses variation across changed conditions such as operators. Stability concerns behavior over time, and linearity concerns how bias changes across the measurement range. A precise instrument can still be biased. Evaluate measurement performance relative to the tolerance and decision risk before attributing observed variation to the manufacturing process or accepting a capability calculation.
Apply it
Three inspectors obtain consistent readings individually but disagree with one another near the acceptance limit. The team evaluates operator-related reproducibility and method interpretation before changing the manufacturing process or relying on the disputed inspection results.
Common pitfall: Calibration alone does not characterize every source of measurement variation. Averaging repeated biased readings can improve apparent precision while preserving an incorrect acceptance decision.
Certified Medical Device Auditor — 2020 Body of Knowledge · ISO/IEC 17025 — Testing and Calibration Laboratories
59.How should data type and risk shape a sampling plan?
Attributes data classify outcomes, such as conforming or nonconforming; variables data measure a characteristic on a numerical scale, such as seal strength. The sampling approach must fit the data, population, decision, and consequences of error. Define selection method, sample size, acceptance criteria, and response to failure using a justified rationale. A passing sample supports a decision under the plan's assumptions; it does not prove that every unexamined unit or record conforms.
Apply it
An auditor reviews only easily accessible daytime records although the concern involves night-shift changeovers. The team revises the sampling approach to cover the relevant population and risk conditions, while distinguishing targeted investigation from statistically representative acceptance sampling.
Common pitfall: A standard sample size copied from another process may lack a valid rationale. Zero observed failures also does not establish a zero underlying failure rate.
60.How do DMAIC and lean controls sustain improvement?
DMAIC moves from defining the problem to measuring performance, analyzing causes, improving the process, and controlling the gains. Lean tools address flow and waste through methods such as standard work, 5S, pull systems, and error-proofing. Select a tool for the demonstrated mechanism: a fixture that prevents reversed assembly addresses a different problem from excess inventory. The control phase establishes ownership, monitoring, response rules, and maintained documentation so improvement survives routine operation.
Apply it
A team reduces assembly reversals with a keyed fixture after confirming the cause. It updates standard work, verifies the fixture's challenge performance, assigns maintenance responsibility, and monitors recurrence as the project moves into the control phase.
Common pitfall: Tidying a workstation is not a complete improvement strategy. A successful trial can also fade without ownership, maintained controls, and a defined response to renewed variation.
What to focus on during revision
The following are CertMedbry study suggestions. Use the official outline to check the full scope of your examination.
- Use the 2020 domain counts to prioritize study, with the greatest combined effort on quality-system requirements and technical medical-device knowledge.
- For audits, connect every conclusion to a requirement, verifiable evidence, justified extent, and a clearly stated gap.
- Separate historical QSR and QSIT terminology from QMSR and current FDA inspection expectations applicable since February 2, 2026.
- Practise discriminating pairs: verification versus validation, correction versus corrective action, sterility versus endotoxin control, and control limits versus specifications.
- Trace interfaces across suppliers, design changes, production, complaints, service, and risk management rather than studying each function in isolation.
- Use the full 2026 outline for examinations from November 1, 2026; this selective guide does not replace either official outline.
A practical preparation plan
1. Establish the applicable outline
Match your examination date to ASQ's blueprint transition. Mark every official subtopic as confident, developing, or unfamiliar, including international requirements and standards beyond these 60 concepts.
2. Build requirement-to-evidence connections
For each quality-system topic, identify the applicable requirement, expected records, a plausible failure mechanism, and evidence that would establish conformity or a defensible finding.
3. Rehearse technical distinctions
Create paired examples for design verification and validation, IQ/OQ/PQ, packaging strength and integrity, sterilization and cleaning, and software change testing. Explain the precise question each activity answers.
4. Work through integrated audit cases
Follow one hypothetical device from supplier qualification through manufacture and distribution to a complaint. Trace backward to investigate the failure and forward to identify potentially affected product.
5. Calculate and interpret
Practise Cp and Cpk calculations, identify attributes and variables data, and distinguish measurement problems from process variation. State the assumptions and decision limits before interpreting a numerical result.
6. Review errors by mechanism
Complete the 20 questions, explain why each alternative is weaker, and revisit the related concepts. Use flashcards to recall distinctions, then apply each distinction to a fresh case rather than memorizing option positions.
Use your sample score as a starting point
The free set contains 20 original practice questions. It is a small learning sample, not an official examination or a validated pass prediction. Review each explanation and its source before moving to another topic.
Start the free sampleOfficial sources and updates
- Medical Device Auditor Certification CMDA
- Certified Medical Device Auditor — 2020 Body of Knowledge
- Certified Medical Device Auditor Body of Knowledge — 2026
- The ASQ Certified Medical Device Auditor Handbook, Fourth Edition — Sample
- What Is Auditing?
- ASQ Code of Ethics
- ISO 19011: Guidelines for Auditing Management Systems
- 21 CFR 11.10 — Controls for Closed Systems
- Quality Management System Regulation (QMSR)
- Quality Management System Regulation — Frequently Asked Questions
- IDE Related Topics
- Medical Device Reporting: How to Report Medical Device Problems
- UDI Basics
- ISO/IEC 17025 — Testing and Calibration Laboratories
- ISO 13485:2016 — Medical Device Quality Management Systems
- ISO 14971:2019 — Application of Risk Management to Medical Devices
- Biocompatibility Evaluation Endpoints by Device Category
- Applying Human Factors and Usability Engineering to Medical Devices
- ISO 11607-1:2019 — Packaging for Terminally Sterilized Medical Devices
- GHTF/SG3/N99-10:2004 — Process Validation Guidance
- Bacterial Endotoxins/Pyrogens
- NIST Dataplot Reference Manual — CPK
- NIST Engineering Statistics Handbook — What Is Process Capability?
- What Is a Pareto Chart?
- What Is Cost of Quality?
- General Principles of Software Validation
- Reprocessing Medical Devices in Health Care Settings: Validation Methods and Labeling
- Overview of Device Regulation
- Terms%20in%20TC%20176%20Standards%20Alphabetical%20Listing%20V1%202022%2009%2029.pdf
- Federal Register :: Request Access
- Federal Register :: Request Access
- download
- 6.1.6. What is Process Capability?
- Federal Register :: Request Access
Confirm current eligibility, fees, scheduling and policies directly with the examination provider. CertMedbry is independent and is not endorsed by these organisations. How we handle content and corrections.