{"id":3249,"date":"2013-04-19T02:51:26","date_gmt":"2013-04-19T02:51:26","guid":{"rendered":"http:\/\/www.eisnersafety.com\/eisnersafetycom\/?p=3249"},"modified":"2013-04-19T02:51:26","modified_gmt":"2013-04-19T02:51:26","slug":"nb-med-issues-faq-on-implementation-of-en623042006-w-r-t-mdd-v1-0","status":"publish","type":"post","link":"https:\/\/eisnersafety.com\/eisnersafetycom\/2013\/04\/19\/nb-med-issues-faq-on-implementation-of-en623042006-w-r-t-mdd-v1-0\/","title":{"rendered":"NB-MED issues FAQ on Implementation of EN62304:2006 w.r.t. MDD, V1.0"},"content":{"rendered":"<p><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\">18 April 2013 \u2013 The NB-MED EN62304:2006 issues team released their\u00a0<strong><a href=\"http:\/\/www.eisnersafety.com\/wp-content\/uploads\/2013\/04\/FAQ_62304_Ver_1.0_5Apr2013.pdf\" target=\"_blank\" rel=\"noopener noreferrer\">first official version (V1.0) dated 5 April 2013 of this importnat implementation document in regards to EN 62304 with respect to the Medical Device Directive 93\/42\/EEC<\/a><\/strong>\u00a0on the NB-MED website.\u00a0 EN 62304 is the standard for MEDICAL DEVICE software \u2013 Software life-cycle processes. The document is intended to cover all three of the EU Medical Devices Directives which also include the Active Implantable Medical Device Directive 90\/385\/EC and the In-Vitro Diagnostic Directive 98\/79\/EC (refer to Q &amp; A 2.1.1). \u00a0An initial request for input from industry, notified bodies, consultants, and other stakeholders was sent out back in May 2012.\u00a0 They were hoping to get the document released by September 2012 but with so much response to the request it took another 6 months to complete this first release of the document. \u00a0<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\"><!--more-->I (as a medical device consultant, US TAG member of IEC SC 62A &amp; 62D &amp; Convener of SC62D JWG9 {IEC\/ISO\/AAMI\/CENELEC 80601-2-58} and a past Notified Body Auditor) am really pleased to see the extremely hard work that has gone into this document and also in the value that it will pass on to all the stakeholders. \u00a0There are many stakeholders that were involved in this process including Notified Bodies, NB-MED EN 62304:2006 issues team (Thank you for your hard work.), NB-MED, COCIR (European Coordination Committee of the Radiological, Electromedical and Healthcare IT Industry), Manufacturers, OEMs, Standards Developers for EN &amp; IEC &amp; other national standards bodies, Test Houses, Consultants, other countries regulatory bodies (i.e. FDA, Health Canada, etc.) and more. \u00a0By use of so many different stakeholders that submitted some of these and other questions this document has a much more consistent view on the implementation issues with the complexity of the topic of medical device software. \u00a0<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\">This document is good for learning about your specific implementation issue(s) or if you have the time I would highly recommend reading the whole document, as this will help you understand the\u00a0intricacies\u00a0of some of the situations of implementing EN 62304 with respect to the Medical Devices Directives (I\u2019m sure there are more issues but a good portion have been captured by this first version). \u00a0I believe this document would be of great help to implement similar guidance documents for many other national medical device regulatory agencies around the world for IEC 62304:2006 (or their national version of the standard).<\/span><\/p>\n<p><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\">The\u00a0<strong>Table of Contents<\/strong>\u00a0<span style=\"text-decoration: underline;\">gives a good glimpse into the realm of the issues covered<\/span>\u00a0in this document and covers the following topics. \u00a0I also provide a\u00a0<span style=\"text-decoration: underline;\">further glimpse into the document by summarizing some of the specific issues within those sections (these are the indents furthest to the right)<\/span>:<\/span><\/p>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\"><strong>Introduction (background of the purpose, rationale, the main team members, and how to provide more feedback on the document)<\/strong><\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\"><strong>Abbreviations (Section 1)<\/strong><\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\"><strong>Questions and Answers (Section 2 \u2013 Heading of sections 2.1 \u2013 2.7)<\/strong><\/span><\/li>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\"><strong>Scope of EN 62304 (Section 2.1)<\/strong><\/span><\/li>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\">Goes into various different scenarios and discusses the implication and implementation issues around these scenarios: such as SAAS, Embedded software including FPGA\u2019s (a hotly contested issue) with single chip computers, Hardware Description Languages specifying FPGAs, Stand alone software, Medical apps, Excel macros, Open &amp; closed systems, Internet or cloud based, Server based systems, Network devices.\u00a0 In addition to this list of scenarios this section also goes into questions about certification; is Validation included in this standard &amp; if not where does it get covered; what are the expectation of the Notified Bodies with regard to the standard; can you use only part of the standard; why do class A software to EN 62304; what is IEC 82304 about (software only products); among other questions.<\/span><\/li>\n<\/ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\"><strong>Placing Software as Medical Device on the Market (Section 2.2)<\/strong><\/span><\/li>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\">Explain \u2018placing medical device (in this case software or software {s\/w} as part of a system) on the market\u2019 in EU if EN 62304 is sufficient, by itself to do this; can I change my intended use and avoid these EU guidelines and regulations; Conformity Assessment routes of the MDD; other countries acceptance \/ requirement of the standard; can you sign-off on documents electronically; classification of software as a MEDICAL DEVICE; how do Notified Bodies (NB\u2019s) confirm compliance to the standard; among other questions.<\/span><\/li>\n<\/ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\"><strong>Life-cycle Processes (Section 2.3)<\/strong><\/span><\/li>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\">If s\/w development is an outsourced activity what does NB expect; does this std have an equivalent expectation to requirements such as those addressed in FDA Part 11 (Electronic Records &amp; Signatures) in the US; details on the review process at the end of each iteration when updated versions are available during the design and development of the software; does the std require a specific development process; how split up the requirements\/responsibilities of the std between the manufacturer and s\/w sub-contractor; how do the maintenance activities in the std relate to ISO 20000\/ITIL; what are the artifacts (documents) required by EN 62304; at what level does the Problem Resolution Process apply; does software refactoring require a formal change request; what to include in the Technical File to show compliance with EN 62304; how can agile processes be EN 62304 compliant; among other questions.<\/span><\/li>\n<\/ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\"><strong>Risk Assessment and Risk Management (Section 2.4)<\/strong><\/span><\/li>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\">How deal with risk control measures; when &amp; why can the safety class of a s\/w SYSTEM be reduced; how use ISO 14971 with EN 62304; explain Hazard, Cause, Sequence of Events in the context of software; when should we expect additional Software Hazard Analysis guidance within EN 62304; among other questions.<\/span><\/li>\n<\/ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\"><strong>Classification and Segregation (Section 2.5)<\/strong><\/span><\/li>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\">What is segregation and how do I prove effective; use of a specific class(es) of s\/w using COTS (commercial off-the-shelf) what criteria used; how does severity under intended use relate to s\/w safety class; is s\/w class optional; can you downgrade the classification of the system without a fully hardware protective system; does the compiler need to be classified under EN 62304; how are development platforms &amp; tools related to s\/w safety class; relation between Risk Analysis at System level &amp; S\/W Safety Classes; explain how the 3 safety classification in the std differ from the FDA\u2019s 3 levels; correlate IEC 61508 SIL levels to EN 62304 safety classifications; s\/w classification is a real issue with big implications; among other questions.<\/span><\/li>\n<\/ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\"><strong>Specifications, testing and tools (Section 2.6)<\/strong><strong><\/strong><\/span><\/li>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\">I\u2019m a manufacturer of medical devices &#8211; how do I document my requirements and tests; web-based medical s\/w \u2013 does the std have specific requirements related to digital cert\u2019s, (http or https) server requirements; in regard to the std how deal with risk analysis and functional specs; appropriate level of granularity of requirements as design input, design description; which (if any) of the tracing requirements are meant to be bi-directional; questions around deployment of the s\/w; what is required of open source code from the std; among other questions.<\/span><\/li>\n<\/ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\"><strong>SOUP (Software of Unknown Provenance) and Legacy Software (Section 2.7)<\/strong><strong><\/strong><\/span><\/li>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\">How assess &amp; qualify suppliers of SOUP s\/w, when the s\/w hasn\u2019t been developed for incorporating into a medical device; what testing &amp; documentation does EN 62304 require for SOUP to meet the std; s\/w that is either stand-alone or embedded which was designed prior to publication of EN 62304 but still being placed on the market (legacy product) \u2013 what needs to be done; if legacy s\/w needs significant change, what processes &amp; documents are required to achieve &amp;\/or maintain compliance with EN 62304 and when are changes considered significant;<\/span><\/li>\n<\/ul>\n<\/ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\"><strong>References\u00a0(No Section Number \u2013 just after Section 2.7)<\/strong><\/span><\/li>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\"><strong>Software Problem Resolution Process (Annex 1)<\/strong><\/span><\/li>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\">Helpful diagram &#8211; There are several entry points to the problem resolution process, both during development and maintenance of the software (refer to question 2.3.12).<\/span><\/li>\n<\/ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\"><strong>SOUP selection, assessment &amp; qualification (Annex 2)<\/strong><\/span><\/li>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\">Flowchart &amp; text to explain an example<\/span><\/li>\n<\/ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\"><strong>Traceability (Annex 3)<\/strong><\/span><\/li>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\">The 3 flowcharts show an overview of the dependencies which need to be traced according to EN 62304 for all 3 classes &#8211; refer to note in bottom left corner of page to know which class the flowcharts apply to (refer to question 2.6.7).<strong><\/strong><\/span><\/li>\n<\/ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\"><strong>Position paper on direct diagnosis (COCIR, 2011) (Annex 4)<\/strong><\/span><\/li>\n<ul>\n<li><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\">As the different stakeholders may interpret this term differently, COCIR and EUROM VI wanted to share their understanding of the term \u201cdirect diagnosis\u201d. (Refer to question 2.5.13)<\/span><\/li>\n<\/ul>\n<\/ul>\n<p><span style=\"font-family: arial, helvetica, sans-serif; font-size: small;\">Click on the weblink to see the\u00a0<a href=\"http:\/\/www.eisnersafety.com\/wp-content\/uploads\/2012\/05\/invitation-letter-FAQ-62304-final-copy.pdf\" target=\"_blank\" rel=\"noopener noreferrer\"><strong>initial request for questions <\/strong><\/a>that we posted on our website 26 May 2012. \u00a0To see the posting please go to\u00a0<strong><a href=\"http:\/\/www.eisnersafety.com\/do-you-know-how-to-use-en62304-med-dvc-sw-life-cycle-as-implemented-under-themdd-aimdd-doc\/\">http:\/\/www.eisnersafety.com\/do-you-know-how-to-use-en62304-med-dvc-sw-life-cycle-as-implemented-under-themdd-aimdd-doc\/<\/a><\/strong><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>18 April 2013 \u2013 The NB-MED EN62304:2006 issues team released their\u00a0first official version (V1.0) dated 5 April 2013 of this importnat implementation document in regards to EN 62304 with respect to the Medical Device Directive 93\/42\/EEC\u00a0on the NB-MED website.\u00a0 EN<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[1],"tags":[576,948,259,260,262,35,252,36,326,949,577,408,578,950,951,952,185,659,660,953,954,662,579,244,580,581,582,526,955,583,20,739,265,584,12,330,266,174,956,149,418,957,433,32,585,327,958,959,534,960,961,962],"class_list":["post-3249","post","type-post","status-publish","format-standard","hentry","category-uncategorized","tag-576","tag-90385ec","tag-9342eec","tag-9879ec","tag-active-implantable-medical-devices-directive","tag-aimdd","tag-ce-mark","tag-cenelec","tag-cocir","tag-electromedical","tag-en","tag-en-60601","tag-en-62304","tag-en-623042006","tag-en62304","tag-en623042006","tag-eu","tag-eu-active-implantable-medical-device-directive","tag-eu-aimdd","tag-eu-ivd","tag-eu-ivdd","tag-eu-mdd","tag-eu-notified-bodies","tag-eu-notified-body","tag-faq","tag-faq-document","tag-iec-62304","tag-implantable-medical-device","tag-industry-manufacturers","tag-invitation-letter","tag-ivd","tag-ivd-directive","tag-ivdd","tag-life-cycle","tag-mdd","tag-medical-device","tag-medical-device-directive","tag-medical-device-industry","tag-medical-device-software","tag-medical-devices","tag-nb-med","tag-nbrg","tag-notified-bodies","tag-notified-body","tag-qa","tag-software","tag-software-life-cycle","tag-soup","tag-standards-developers","tag-v1-0","tag-vers-1-0","tag-version-v1"],"_links":{"self":[{"href":"https:\/\/eisnersafety.com\/eisnersafetycom\/wp-json\/wp\/v2\/posts\/3249","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eisnersafety.com\/eisnersafetycom\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/eisnersafety.com\/eisnersafetycom\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/eisnersafety.com\/eisnersafetycom\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/eisnersafety.com\/eisnersafetycom\/wp-json\/wp\/v2\/comments?post=3249"}],"version-history":[{"count":0,"href":"https:\/\/eisnersafety.com\/eisnersafetycom\/wp-json\/wp\/v2\/posts\/3249\/revisions"}],"wp:attachment":[{"href":"https:\/\/eisnersafety.com\/eisnersafetycom\/wp-json\/wp\/v2\/media?parent=3249"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/eisnersafety.com\/eisnersafetycom\/wp-json\/wp\/v2\/categories?post=3249"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/eisnersafety.com\/eisnersafetycom\/wp-json\/wp\/v2\/tags?post=3249"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}