If your organization sells finished medical devices in the United States, the structure of your medical device QMS is no longer governed by the Quality System Regulation (QSR) under 21 CFR Part 820. As of February 2, 2026, the FDA’s Quality Management System Regulation (QMSR) is in effect, and inspections have already moved to the updated compliance program.
The shift is not cosmetic. It changes how you structure your quality system, how you demonstrate compliance during inspections, and how you keep teams aligned across design, production, supplier management, and post-market activities.
The QSR to QMSR transition is also a genuine opportunity. Done well, QMSR readiness reduces audit friction, closes longstanding gaps between FDA expectations and ISO 13485:2016, and positions your organization for scalable growth in international markets.
Quality Smart Solutions has put together this guide to walk you through what is changing, where manufacturers typically stumble, and how to build a quality system that holds up under scrutiny.
Key Terms to Align On Before You Start
Teams often get tripped up by language differences during the QSR to QMSR transition. Aligning on terminology early prevents confusion in training, audits, and inspection readiness. Here is a plain-language reference for the terms that come up most.
- QSR (21 CFR Part 820): The FDA’s previous quality regulation framework for medical devices, organized into subparts with prescriptive requirements.
- QMSR: The FDA’s updated regulation, effective February 2, 2026, that incorporates ISO 13485:2016 by reference with additional FDA-specific provisions.
- ISO 13485:2016: The international QMS standard for medical devices, now the core requirement set under the QMSR.
- Risk-based thinking: Using risk to determine the depth of controls, validation, supplier oversight, and CAPA prioritization across the full product lifecycle.
- Process approach: Managing your QMS as connected processes with defined inputs, outputs, owners, and measures, rather than a set of isolated SOPs.
- CAPA: Corrective and Preventive Action. Systematic investigation and remediation of nonconformities, including confirmed prevention of recurrence.
- Verification vs. validation: Verification confirms you built it right. Validation confirms you built the right thing for the intended use.
QSR vs. QMSR: What Is Actually Changing
For many manufacturers, QMSR reduces the gap between what ISO expects and what the FDA inspects. But the transition is not a simple paperwork swap. It requires that your system is executed consistently and supported by objective evidence. Four shifts define the practical change.
Global alignment becomes the default. QMSR harmonizes U.S. quality expectations with ISO 13485:2016, reducing the dual-system burden for manufacturers operating across multiple markets. A single well-built QMS can now serve both FDA and international regulatory requirements.
Stronger emphasis on a process-based QMS. Organizations must show clear process ownership, measurable performance, and tight linkages between design, purchasing, production, and post-market feedback. A collection of SOPs is not the same as a functioning quality system.
Risk is more central to every decision. Risk-based thinking must be visible in supplier controls, validation decisions, complaint trending, and change management. If risk only appears in your risk management file and nowhere else, your system is not ready.
Documentation must prove real execution. Under the updated inspection program, FDA investigators may now review management reviews, internal audit reports, and supplier audit reports. Those exceptions that existed under the QSR at §820.180(c) no longer apply. Documentation that describes your process but cannot confirm it happened is a gap.
Why Manufacturers Should Treat This as a Strategic Program
A common failure mode is rewriting procedures while leaving the underlying system unchanged. Regulatory language gets updated. Day-to-day execution does not. That disconnect is precisely what FDA inspectors are trained to find under the new risk-based inspection approach.
A successful QSR to QMSR transition strengthens how quality runs across the organization. Design and development connects cleanly to purchasing, production controls, and post-market feedback. Risk management drives real decisions, not just file maintenance. CAPA prevents recurrence and demonstrates effectiveness using data. Training proves competence, not just attendance.
When each of those elements works together, your medical device QMS becomes an operational asset rather than a compliance burden. For guidance on what this looks like for your specific device type and market, contact the Quality Smart Solutions regulatory team to discuss your situation.
Essential Steps to Build a QMSR-Compliant QMS
The following steps reflect the practical sequence Quality Smart Solutions recommends for manufacturers working through a structured transition.
1. Run a focused QMSR readiness gap assessment
Map your current procedures and records to ISO 13485 clauses and confirm how FDA-specific expectations are met. The output should be a prioritized remediation roadmap with clear owners, timelines, and evidence targets. Without this baseline, you are guessing at scope.
2. Build a process map and connect your SOPs to it
Define your core processes: Design and Development, Supplier Management, Production, Post-Market, and CAPA. Clarify inputs, outputs, interfaces, owners, and KPIs. Your QMS should tell a coherent story to an auditor from first document to last.
3. Integrate risk management across the product lifecycle
Risk should be visible in day-to-day decisions and records, not isolated to a single file. Use it to right-size supplier qualification, determine the depth of verification and validation, and set meaningful complaint trending thresholds.
4. Upgrade CAPA to be investigation-driven and evidence-rich
Strengthen problem statements, containment actions, root cause analysis, and effectiveness checks. Ensure trending is reviewed in management review with clear, documented outcomes. A CAPA process that closes records without confirmed effectiveness is among the most common FDA inspection findings.
5. Validate critical processes & software where risk demands it
Focus on special processes where output cannot be fully verified after the fact, and on software that affects product quality or data integrity. Use a proportionate approach that matches patient risk and operational impact.
6. Train for competence, not attendance
Move to role-based training with competency checks where appropriate. Document training effectiveness for high-risk roles and critical processes. Sign-off records alone are rarely sufficient evidence during an FDA inspection under QMSR.
7. Run a mock inspection using end-to-end traceability
Test your ability to trace design decisions through production and into complaints and CAPA. Confirm process ownership, objective evidence availability, and KPI use in management review. A mock inspection surfaces gaps before a real investigator does.
What a QMSR-Compliant Medical Device QMS Looks Like in Practice
A QMSR-ready organization is not one that has updated its procedures. It is one where quality is embedded in how work actually gets done.
You should expect to see a clean process map with meaningful KPIs, an ISO 13485-aligned structure that retains FDA inspection discipline, and risk management embedded in decisions rather than filed separately. CAPA prevents recurrence and stands up to scrutiny. Supplier controls are tied to product and process risk. Training is confirmed through demonstrated competence, not sign-off sheets.
Audit readiness is continuous. Under the FDA’s QMSR regulation, the updated inspection program evaluates manufacturers against six QMS areas and four additional FDA-specific requirements. Organizations that treat readiness as a year-round discipline, not a pre-inspection scramble, are consistently better positioned when investigators arrive.
FAQ: QSR to QMSR Transition
Do we need to rebuild our entire QMS from scratch?
Many manufacturers assume the worst when they hear “transition,” and the scale of the effort can feel overwhelming at first glance. In practice, a full rebuild is rarely necessary. If your organization already operates under ISO 13485:2016, you may have a strong foundation to build from. That said, a targeted gap assessment is still essential to confirm that FDA-specific QMSR expectations are met and that your evidence of execution is sufficient. A structured readiness review often reveals the gaps are narrower than expected, and a clear remediation roadmap makes the path forward manageable.
Will ISO 13485 certification guarantee FDA compliance under QMSR?
Certification alone is not enough, and assuming otherwise is a common source of inspection findings. ISO 13485:2016 certification demonstrates that your QMS meets the international standard, but FDA QMSR compliance depends on how your system addresses U.S.-specific requirements and how consistently your teams execute it day-to-day. The FDA will not accept certification as a substitute for inspection. That said, organizations with a mature ISO 13485 system have a meaningful head start, particularly in risk management, process documentation, and CAPA discipline.
Is this transition only relevant for large manufacturers?
Smaller manufacturers sometimes set this aside, assuming it is a large-organization concern. QMSR applies to all finished device manufacturers intending to commercially distribute in the United States, regardless of size. Smaller organizations often benefit most from the transition: a harmonized, process-based medical device QMS reduces duplication across regulatory markets, simplifies audit preparation, and supports scalable growth as your product portfolio expands. The compliance burden of maintaining two parallel systems is often higher than the effort of aligning to one well-structured framework.
What is the most practical first step?
Skipping straight to SOP rewrites before you have a clear picture of your gaps is one of the most common mistakes in a QMSR transition. Start with a readiness assessment that produces a prioritized plan, clear process owners, and a realistic evidence-closure timeline. That foundation gives your team a shared understanding of scope and prevents effort from being directed at the wrong areas first.
Key Takeaways
- The QSR to QMSR transition is not a paperwork exercise. It requires your quality system to work differently, not just read differently.
- A medical device QMS under QMSR must demonstrate process ownership, risk-based decision-making, and objective evidence of execution across design, production, suppliers, and post-market activities.
- ISO 13485:2016 certification is a strong starting point, but it does not on its own satisfy FDA-specific QMSR requirements. FDA inspections continue regardless of certification status.
- A QMSR gap assessment is the most practical first step. It defines scope, sets priorities, and prevents misplaced effort.
- Manufacturers that treat QMSR readiness as an ongoing operational discipline are consistently better positioned for inspections than those who treat it as a one-time project.
How Quality Smart Solutions Can Help
QMSR is a regulatory change, but readiness is an execution challenge. Quality Smart Solutions supports manufacturers through QSR to QMSR gap assessments, QMS redesign, risk management integration, CAPA program uplift, and mock inspection coaching.
The goal is not just a system that satisfies an inspector today, but a medical device QMS that scales with your business as your product portfolio and market presence grow. If your organization is preparing for the transition and wants a structured path forward, explore Quality Smart Solutions’ FDA medical device compliance services or get in touch with a regulatory specialist to discuss your specific situation.
