ISO 13485 Implementation for a Growing Medical Device Manufacturer

Executive summary

A contract manufacturer moving into Class II medical device components won a contract with one condition: ISO 13485 certification within a year. They had strong manufacturing discipline but no documented quality management system, no validation program, and no internal auditors. ZLG ran the implementation end to end — gap assessment, documentation, validation framework, training, internal audits, and management review — while the client ramped production. The Stage 2 certification audit closed with a recommendation for certification and two minor findings, both closed within 30 days.

Client profile

• Industry: Medical device contract manufacturing (machined and molded components)
• Size: ~85 employees, one site, second shift added mid-project
• Starting point: ISO 9001-style habits, no formal QMS, no regulatory experience
• Driver: Customer-mandated ISO 13485 certification within 12 months

Initial challenge and baseline

The gap assessment scored the organization against every ISO 13485 requirement:

Area	Baseline state
Documented QMS	None — tribal knowledge and customer drawings
Process validation (IQ/OQ/PQ)	Not established
Document & record control	Shared drives, uncontrolled revisions
Internal audit capability	None
Trained personnel on ISO 13485	0

The honest assessment: eleven usable months, with a production ramp competing for the same people.

Project goals

1. Pass Stage 1 and Stage 2 certification audits inside the customer’s deadline.
2. Build a validation program that survives both auditor and customer scrutiny.
3. Certify four internal auditors so the system self-sustains after ZLG leaves.
4. Do all of it without missing a production milestone.

ZLG approach

We sequenced the ZLG methodology against the certification body’s audit dates, working backwards. Months 1–2: gap assessment, project plan, and process mapping drawn from how work was actually done. Months 3–6: documentation sprints by process family, validation master plan, and equipment IQ/OQ/PQ on the two critical lines. Months 6–8: role-based training, including a two-day ISO 13485 Internal Auditor course for four staff. Months 8–10: two full internal audit cycles and two management reviews — generating the operating evidence Stage 2 requires. Month 11: mock audit and Stage 2 support.

Implementation and obstacles

The production ramp collided with documentation reviews twice; we resolved it by moving reviews to structured 45-minute sessions with pre-read drafts. A bigger obstacle surfaced in validation: one legacy molding process could not meet its acceptance criteria, forcing a genuine process improvement (gate redesign) before OQ could pass — exactly the kind of finding you want before the auditor arrives, not during.

Deliverables

• Complete QMS documentation set (quality manual, 31 procedures, 60+ forms)
• Validation master plan plus executed IQ/OQ/PQ for critical processes
• Four certified internal auditors and full training records
• Two internal audit cycles, two management reviews, live CAPA log
• Mock audit report and Stage 2 day-of support

Results

Measure	Outcome
Stage 1 audit	Passed, no documentation gaps
Stage 2 audit	Certification recommended
Findings	2 minor, closed and verified in 30 days
Deadline	Met with 4 weeks to spare
Production milestones during project	All met

Client testimonial

“We expected consultants who would write binders. We got a team that redesigned a molding process because the data said so, then taught our people to audit it.” — Operations Manager, medical device contract manufacturer

Lessons learned

A deadline-driven implementation only works when the documentation describes reality — every hour spent mapping actual practice saved three in review cycles. And validation problems found early are improvements; found late, they are findings.