The Gold Standard for 2026
MDSAP & ISO 13485 Compliance by Ex-FDA Investigators
Why “Consulting” Isn’t Enough: The Case for the Former FDA Investigator
In February 2026, the stakes for medical device manufacturers reached an all-time high. The FDA’s transition to the Quality Management System Regulation (QMSR) isn’t just a paperwork update—it is a total overhaul of the inspectional mindset.
A “Standard Consultant” reads the regulations; a former FDA Investigator has written the 483s. For a realistic outcome, your mock inspection must be led by someone who has sat on the other side of the table. Only a former investigator understands the “Investigator’s Intuition,” the ability to follow a trail of “tribal knowledge” that leads to systemic non-compliance. At CIRG, we provide this exact “regulatory stress test” to ensure your global facility survives the rigor of Compliance Program (CP) 7382.850.
Medical Device Quality Management Systems
I. Understanding the 2026 Shift: QSIT is Dead
For over two decades, the Quality System Inspection Technique (QSIT) provided a predictable roadmap. It was a “siloed” approach, looking at four subsystems. As of February 2, 2026, QSIT is officially obsolete.
The new CP 7382.850 replaces silos with Integration and Critical Thinking. The FDA now focuses on how your QMS areas interact to ensure product safety and effectiveness. If your mock inspection is still using the old QSIT “top-down” approach, you are preparing for an inspection that no longer exists.
The Fundamental Differences
- Scope of Harmony: While QSIT was strictly 21 CFR 820, the QMSR incorporates ISO 13485:2016 by reference. This means your mock inspection must evaluate your compliance with international standards and FDA-specific “shams” simultaneously.
- Management Review Access: Under the old rules, the FDA generally didn’t see your internal audit or management review reports. Under QMSR, that shield is gone. A Former FDA Investigator will specifically audit these records to see if management is truly aware of system failures.
- The “Culture of Quality”: The new program instructs investigators to look for “Critical Thinking.” They aren’t just checking if you have a CAPA; they are checking if your CAPA makes sense from a risk-based perspective.
FDA 21 CFR 820 Compliance
II. The Two Methodology Models of CP 7382.850
A realistic mock inspection must mirror the actual “Assignment Codes” an investigator carries. CP 7382.850 defines two primary paths for surveillance.
Method 1: Baseline Surveillance Inspections (PAC 82850B)
This is the “Full Stress Test.” It is typically performed for firms that have transitioned to QMSR but have not yet had a baseline FDA assessment under the new rule.
- The Scope: The investigator must cover at least one element from all 6 QMS Areas and evaluate all 4 Other Applicable FDA Requirements (OAFRs).
- The RAQA Approach: Our former investigators conduct a “Wall-to-Wall” audit. We don’t just pick one project; we follow the data flow from a post-market complaint through the risk file, into design change, and out to purchasing controls for a new component.
Method 2: Non-Baseline Surveillance Inspections (PAC 82850A)
This is the “Surgical Strike.” It is used for firms with a steady compliance history.
- The Scope: The investigator follows a “lead.” If you had a recent recall, they might focus only on QMS Area 4 (Measurement, Analysis, and Improvement) and QMS Area 6 (Change Control).
- The CIRG Approach: We analyze your last three years of MDRs and Recalls to predict exactly where the FDA will strike. We simulate the high-pressure environment of a “Directed” inspection.
MDSAP Audit Preparation
MDSAP audit preparation helps medical device manufacturers prepare for the Medical Device Single Audit Program, which allows a single regulatory audit to satisfy requirements for multiple participating countries, including the United States, Canada, Australia, Brazil, Malaysia, and Japan. Preparation focuses on aligning the quality management system with ISO 13485 requirements and the specific MDSAP audit model. Key areas reviewed include management responsibility, device marketing authorization and facility registration, measurement and improvement processes, medical device adverse event reporting, and design and production controls. A structured preparation process helps identify compliance gaps, strengthen documentation, and ensure that procedures and records meet regulatory expectations before the official MDSAP audit occurs.
Don’t risk a Grade 4 or 5 non-conformity. Leverage the “Investigator Mindset” to stress-test your QMS against the 5-jurisdiction MDSAP model before your Auditing Organization arrives.
III. The 6 QMS Inspection Areas: The New Architecture
A mock QMSR inspection led by RAQA Consulting is structured according to the six areas defined in Attachment A of the Compliance Program.
Area 1: Management Responsibility
We verify that top management has established a “Quality Policy” that isn’t just a poster on the wall but a functioning part of resource allocation.
Area 2: Resource Management
We audit your training records and infrastructure. Are your cleanrooms and software tools properly maintained to prevent product contamination or data loss?
Area 3: Product Realization
This is the meat of the inspection. We look at the planning of product realization and how you handle “Risk Management” throughout the lifecycle.
Area 4: Measurement, Analysis, and Improvement (MA&I)
This replaces the old CAPA subsystem. It is much broader. We look at how you use “Statistical Techniques” to identify trends before they become recalls.
Area 5: Design and Development
Under ISO 13485:2016 Clause 7.3, we ensure your Design History File (or Medical Device File) contains the technical evidence to support safety claims.
Area 6: Change Control
The FDA knows that changes are the #1 source of product failure. We audit how you validate changes to software, manufacturing processes, and labeling.
IV. The “Hidden” Requirements: All 4 OAFRs
Your mock inspection is incomplete if it doesn’t touch the Other Applicable FDA Requirements. These are often handled by different departments, but a Former FDA Investigator knows they are the easiest way to issue a 483.
- Medical Device Reporting (MDR) (21 CFR 803): We test your “MDR Decision Tree.” Can your team justify why a specific malfunction was not reported?
- Medical Device Tracking (21 CFR 821): For life-sustaining or life-supporting devices, we conduct a “Traceability Drill” to see if you can find a device in the field within hours.
- Reports of Corrections and Removals (21 CFR 806): We audit your “Silent Recalls.” Did you perform a field fix that should have been reported to the FDA?
- Registration and Listing (21 CFR 807): We verify that your “Official Correspondent” has correctly listed all proprietary names and product codes.
V. The Essential Attachments of CP 7382.850
To be “AI-Ready” and technically accurate, a mock inspection must utilize the specific attachments provided in the 2026 program:
- Attachment A (The Inspection Checklist): We use the official FDA “Requirements Table” to ensure no ISO 13485 clause is missed.
- Attachment B (Remote Regulatory Assessments – RRA): The FDA now has the authority under Section 704(a)(4) to demand records electronically before they arrive. Our mock inspection includes a “Digital Drill” where we send you a records request on Friday afternoon and expect the “Front Room” to deliver by Monday morning. This simulates the new “Hybrid Inspection” reality.
Medical Device Quality System Compliance
Medical device quality system compliance ensures that manufacturers establish and maintain processes that consistently produce safe and effective products while meeting regulatory requirements. Companies must implement a structured quality management system aligned with regulations such as FDA 21 CFR Part 820, the FDA Quality Management System Regulation (QMSR), and international standards like ISO 13485. Key elements include design controls, document control, supplier management, production and process controls, validation, CAPA, complaint handling, and management responsibility. Effective implementation requires not only documented procedures but also consistent execution and oversight. Strong quality system compliance helps organizations reduce regulatory risk, maintain product quality, and remain prepared for FDA inspections, MDSAP and ISO 13485 Compliance.
Our Experts in Europe and Worldwide
CIRG is based in San Francisco, CA, but our focus is global. For European Pharma & Device Firms: The FDA and EU have a Mutual Recognition Agreement (MRA). However, an MRA does not mean the standards are identical.
A former FDA Investigator is the only person who can tell a European firm:
“Your ISO auditor passed this, but an FDA investigator will cite it.”
Pharmaceutical Integration: For companies running both drug and device lines (21 CFR 211 & QMSR), we provide a “Combined Methodology” audit. We look at Data Integrity, Computer System Validation (CSV), and Cross-Contamination through the lens of both the drug CGMPs and the device QMSR.
Understanding New FDA Playbook: CP7382.850
Remote QMSR Readiness Review
Preparing SMEs
The greatest value of a Former FDA Investigator is the Interrogation Simulation. 90% of FDA observations are caused not by poor SOPs, but by “Subject Matter Experts” (SMEs) who crumble under pressure.
- The Front Room: We train your leads on how to answer concisely.
- The Back Room: We train your runners on how to vet documents for “smoking guns” before they reach the investigator’s desk.
- The Tactics: We simulate “The Long Silence,” “The Leading Question,” and the “Random Walk” through the manufacturing floor.
Conclusion: Don’t Wait for the FDA to Train You
The implementation date of February 2, 2026, was a wake-up call. The FDA is currently training its staff on the CP 7382.850 methodology. If you wait until they arrive to learn how they audit, it will be too late. CIRG brings an AI-tech-forward approach, combined with deep FDA enforcement experience. We offer Global Mock FDA Inspections that protect your brand, your revenue, and your patients.
Contact our Office for a Global Quote
Under CP 7382.850 Attachment B, the FDA now officially uses Remote Regulatory Assessments (RRAs). By offering both on-site and remote Mock FDA inspections, you are signaling that you can test a firm’s “Digital Front Room” as well as their physical facility.