Blog

Timely, insightful, and relevant thoughts, opinions, and discussion on FDA software validation, 62304 compliance, medical device software standards, updates impacting medical device and HealthIT software development, and sundry subjects from our Partners and staff.

Are software engineers a commodity that managers can simply plug-n-play expecting a similar outcome? From X … Are software engineers a commodity that organizations can simply plug-n-play expecting a similar outcome? Unlike many other disciplines, software engineering allows a great deal of freedom within the design space. Two different software engineers can produce significantly… —...
Read More
Read on for some helpful questions to ask (essentially a “How-To” Guide for GUDID) when following GUDID, based on the recent FDA guidance document, “Global Unique Device Identification Database (GUDID).”   “How-To” Guide for GUDID What does the UDI rule require labelers to do? Include a unique device identifier (UDI) on device labels and packages...
Read More
Software Risk Management Series: The expectations of US regulations and for IEC 62304 compliance for software can be overwhelming. Software hazards analysis and risk management is certainly one of the more difficult tasks for developing medical devices containing software. In this post we discuss FTA and FMEA/FMECA methods. How do these methods align with specific...
Read More
Software Risk Management Series: The expectations of US regulations and for IEC 62304 compliance for software can be overwhelming. Software hazards analysis and risk management is certainly one of the more difficult tasks for developing medical devices containing software. Common questions: What activities should the development team perform? How do we capture the software analysis?...
Read More
Started a series on software risk management on X in 2024 and plan to finish it out here in the first part of 2025. Look for more to come in this series! Follow this link for more detail in the X post … #iso14971 #riskmanagement must start VERY early in the #productrealization process. Even as...
Read More
(Tampa, FL, October 9, 2024) – Crisis Prevention and Recovery, LLC is taking proactive steps to minimize impact to our clients from the landfall of Hurricane Milton in Southwest Florida.  With our corporate office in Tampa, Florida, there is a possibility of short term loss of electrical power and/or internet in the next 24 to...
Read More
Use of master files can be a convenient and strategic method for SaMD manufacturers or software suppliers to provide information necessary for a US regulatory submission without disclosing confidential and/or proprietary trade secrets to business partners. For example, a software supplier of a cloud library providing medical device functionality could submit a master file to...
Read More
I (Mike Russell) attended the neXus conference on medical device standards this year. Below are some observations and suggested takeaways from the talks I heard and the panel I was on. Remember, these are just selected highlights, not everything said 🙂 Session: Reducing Submission Rejections and Recalls with Software Standards This year’s conference added a third...
Read More
One of the cornerstones of a quality management system is the integrity of the quality system records. It should go without saying how critical it is for these records to be truthful, accurate, and genuine. Fraudulent data can lead to an unsafe medical device, or a medical device that does not fully achieve its intended...
Read More
Solving Problems Another great “soft skill” I learned from a mentor early in my career was knowing when to ask questions. You know, how long should I dig, research and investigate, before seeking the help of others? Some may gravitate toward spending too much time trying to find answers or solutions when it would have...
Read More

SoftwareCPR Training Courses:

IEC 62304 and other emerging standards for Medical Device and HealthIT Software

Our flagship course for preparing regulatory, quality, engineering, operations, and others for the activities and documentation expected for IEC 62304 conformance and for FDA expectations. The goal is to educate on the intent and purpose so that the participants are able to make informed decisions in the future.  Focus is not simply what the standard says, but what is meant and discuss examples and approaches one might implement to comply.  Special deep discount pricing available to FDA attendees and other regulators.

3-days onsite with group exercises, quizzes, examples, Q&A.

Instructor: Brian Pate

Next public offering:  June 24-26, 2025 (Boston, MA)

Multiple participants from the same company: If you register 5 or more from the same company before March 15, 2025, receive a special discounted registration of $1999 per person.  These registrations may be transferred to another person at any time. Email training@softwarecpr.com to register and secure the TEAM discount.

 

For private, in-house courses, please contact us.

Email training@softwarecpr.com for more info.

 


 

Being Agile & Yet Compliant (Public)

Our SoftwareCPR unique approach to incorporating agile and lean engineering to your medical device software process training course is now open for registration!

  • Agile principles that align well with medical
  • Backlog management
  • Agile risk management
  • Incremental and iterative software development lifecycle management
  •  Frequent release management
  • And more!

3 days virtual (Zoom) with group exercises, quizzes, examples, Q&A.

Lead Instructor: Mike Russell

Next public offerings:

  • Americas: 11-13 February 2025
  • EU/Eastern Europe/Middle East/Africa/Atlantic/eastern South America: 18-20 February 2025
  • Southern Central Northeastern Pacific: 24-26 February 2025
See our post titled: 1st Quarter 2025 Agile Compliant Courses Scheduled

 

Medical Device Cybersecurity (Public or Private)

This course takes a deep dive into the US FDA expectations for cybersecurity activities in the product development process with central focus on the cybersecurity risk analysis process. Overall approach will be tied to relevant standards and FDA guidance documentation. The course will follow the ISO 14971:2019 framework for overall structure but utilize IEC 62304, IEC 81001-5-1, and AAMI TIR57 for specific details regarding cybersecurity planning, risk characterization, threat modeling, and control strategies.

2-days onsite with group exercises, quizzes, examples, Q&A.

Instructor: Dr Peter Rech, 2nd instructor (optional)

Next public offering:  TBD

Corporate Office

15148 Springview St.
Tampa, FL 33624
USA
+1-781-721-2921
Partners located in the US (CA, FL, MA, MN, TX) and Canada.