Identify Your Compliance Gaps Before Your First Audit — Not During It
Built for medical device manufacturers, contract manufacturers, and component suppliers navigating ISO 13485 certification and the FDA’s QMSR.
Most organizations discover their ISO 13485 gaps at the worst possible moment — during a Stage 1 audit.
A Stage 1 finding isn’t just an inconvenience. It delays your Stage 2 audit, extends your certification timeline, and in FDA-regulated environments, creates inspection exposure that didn’t exist before.
This checklist gives you a structured, clause-by-clause gap assessment you can complete in under 30 minutes — before anyone from the outside asks you to.
What You’ll Be Able to Do With This Checklist
✔ Evaluate your current QMS against ISO 13485:2016 clause requirements ✔ Identify the gaps most likely to generate Stage 1 and Stage 2 findings ✔ Assess whether your risk management program meets ISO 14971 integration requirements ✔ Evaluate your FDA QMSR bridge requirement coverage — MDR, UDI, corrections and removals, device tracking ✔ Prioritize remediation before you invest in certification ✔ Walk into your first certification audit with a clear picture of where you stand
Download the Free ISO 13485 Gap Assessment Checklist
Your checklist will be delivered immediately to your inbox. No spam — only practical compliance guidance from The Standards Navigator.
Built from 25 years of real-world quality system implementation experience across heavy industrial manufacturing, including FDA-regulated and internationally audited environments.
Who This Checklist Is For
This checklist is designed for:
- Medical device manufacturers preparing for initial ISO 13485 certification
- Currently certified organizations conducting internal gap assessments for recertification or QMSR alignment
- Contract manufacturers entering the medical device supply chain for the first time
- ISO 9001 certified organizations evaluating what additional requirements ISO 13485 adds to their existing QMS
- Quality managers and regulatory affairs professionals preparing for FDA inspections under the new Compliance Program 7382.850
If you are unsure whether your QMS meets ISO 13485 requirements — or whether your existing ISO 13485 system covers the FDA's QMSR bridge requirements — this checklist tells you exactly where to look.
What the Gap Assessment Covers
The checklist evaluates your QMS against the ten clause areas of ISO 13485:2016, plus the four FDA-specific QMSR bridge requirements that ISO 13485 does not fully address on its own.
ISO 13485 Clause Coverage:
- Clause 4 — Quality Management System (documentation, records, external documents)
- Clause 5 — Management Responsibility (quality policy, planning, management review)
- Clause 6 — Resource Management (personnel competence, infrastructure, work environment)
- Clause 7 — Product Realization (design controls, purchasing, production, servicing)
- Clause 8 — Measurement, Analysis and Improvement (internal audits, CAPA, nonconforming product)
ISO 14971 Risk Management Integration:
- Risk management plan requirements
- Hazard identification across normal and fault conditions
- Risk management file structure and completeness
- Post-production information feedback into the risk management process
FDA QMSR Bridge Requirements (February 2, 2026):
- Medical Device Reporting (MDR) — 21 CFR Part 803
- Unique Device Identification (UDI) compliance
- Corrections and Removals — 21 CFR Part 806
- Device Tracking — 21 CFR Part 821
How Audit-Ready Are You?
Use the checklist to score your current QMS:
- 0–3 gaps identified: Strong foundation — focus on documentation refinement and internal audit preparation
- 4–8 gaps identified: Moderate exposure — targeted remediation recommended before Stage 1
- 9+ gaps identified: Significant work required — certification timeline and budget should be reassessed
The most common reason ISO 13485 certification timelines extend beyond initial estimates is not the complexity of the standard — it is discovering gaps during Stage 1 that should have been identified during internal gap assessment. This checklist exists to prevent that.
The Cost of Skipping the Gap Assessment
Organizations that proceed to ISO 13485 certification without a structured gap assessment consistently encounter one or more of the following:
- Stage 1 audit findings that delay Stage 2 by 3–6 months
- Documentation built on misunderstood clause requirements — the most common cause of major nonconformances
- Risk management programs that satisfy ISO 13485 on paper but fail to integrate ISO 14971 as FDA investigators expect
- QMSR bridge requirement gaps that create FDA inspection exposure even after ISO 13485 certification is achieved
- Budget overruns from remediation work identified late in the certification process
A 30-minute gap assessment before you begin saves months of rework after you've already invested in implementation.
After the Checklist — Your Next Steps
Once you've completed the gap assessment, your path forward depends on where your gaps are:
If your gaps are primarily in documentation and procedures: The ISO 13485:2016 standard is your starting point. Purchase the official document from the ANSI Webstore and build your QMS against the actual clause requirements — not summaries. 👉 ISO 13485:2016 — ANSI Webstore — use code CC2026 for 5% off
If your gaps are in understanding what the standard requires: BSI Group's ISO 13485 training courses are built for quality managers and regulatory affairs professionals preparing for implementation and certification — and cover both standard requirements and QMSR regulatory context. 👉 ISO 13485 Training — BSI Group
If your gaps are minimal and you are ready to pursue certification: ISOQAR is a UKAS-accredited certification body with experience in ISO 13485 medical device quality management system assessments. 👉 ISO 13485 Certification — ISOQAR
Related Resources
- What Is ISO 13485? Complete Guide
- ISO 9001 vs ISO 13485 — Key Differences
- FDA QSR vs ISO 13485 — The Complete QMSR Transition Guide
- What Is ISO 14971? Risk Management for Medical Devices
- How Much Does ISO 13485 Cost?
- Buy ISO 13485 — Complete Purchasing Guide
Final Thought
ISO 13485 certification is not the goal.
A quality management system that protects patients, satisfies regulators, and gives your customers confidence in your operations — that's the goal. Certification is how you demonstrate it.
The gap assessment is where that system starts — not the audit.
The Standards Navigator — Industrial Compliance. Clearly Explained.