Top 10 QMSR Gaps Found During FDA Readiness Assessments and How a Checklist Helps
Author: Hillary Driscoll
Article Context:
- QMSR Gap Analysis in Medtech
- QMS Software Validation
- CAPA Processes
- FDA Inspection Readiness
- FDA Audit Trails
The shift from QSR to QMSR is now in full effect. The FDA has aligned 21 CFR Part 820 with ISO 13485:2016, effective Feb 2026. While this alignment eases global compliance, many MedTech companies identify significant readiness gaps in their internal assessments.
It is important to conduct a formal FDA QMSR gap analysis to identify where legacy QSR processes do not meet the new risk-based expectations. Below, we discuss the top 10 most common gaps identified in the readiness assessment and describe how a structured checklist can address them.
Top 10 QMSR Gaps in MedTech Organizations
- Lack of System-Wide Risk Management
- Management Review Records Unprepared for Inspection
- Inadequate Medical Device File (MDF) Structure
- Missing QMS Software Validation
- Combined CAPA Processes
- Weak Supplier Risk Evaluations
- Outdated Terminology and Cross-Referencing
- Incomplete Customer Feedback Systems
- Training Evidence vs. Competence
- Traceability Gaps in Design and Development
Under QSR, risk management focused on design controls. QMSR extends this to all processes, requiring documented risk-management impacts that are often missing.
The FDA will now look for demonstrable evidence of management involvement in risk-based decision making vs. simply looking for evidence that management reviews occurred. Many firms have informal records that lack the new required detail.
QMSR aligns DHF/DMR/DHR with the Medical Device File structure. Assessments find that technical files are often scattered and not cohesive as required.
While software validation of quality management systems such as eQMS, ERP, or compliant management, has always been required, Clause 4.1.6 of ISO 13485, now part of QMSR emphasizes this requirement. Many companies do not have validation strategies put in place for their eQMS, ERP system, or even complaint systems.
ISO 13485:2016 distinguishes between Corrective Action (Clause 8.5.2) and Preventive Action (Clause 8.5.3), emphasizing the need for both reactive and proactive quality activities.
While many organizations continue to operate integrated CAPA systems, readiness assessments often identify gaps where preventive actions are not clearly defined, documented, or effectively implemented.
QMSR emphasizes the need for appropriate control of suppliers, including evaluation, selection, and monitoring based on their impact on product quality and patient safety.
Readiness assessments often identify gaps where organizations apply uniform supplier qualification and auditing approaches without adequately considering risk.
A minor but significant omission lies in using obsolete QSR terminology in SOPs. Failure to use up-to-date internal company language that aligns with the QMSR/ISO standard could cause confusion during the FDA inspection-readiness audit.
QMSR places greater emphasis on collecting and using customer feedback including, but not limited to, complaints as an input to the quality management system.
While complaint handling was already required under prior FDA QSR requirements, readiness assessments often identify gaps where organizations lack formal processes to capture and analyze sources of feedback, such as post-market experience, user input, and service data.
QMSR emphasizes documented competence in addition to training records. Most companies have records of training events attended by individuals. However, they don't have records of the employee's understanding of the task.
QMSR emphasizes maintaining traceability between design outputs, design requirements, and associated risk management activities. Assessments often find gaps where risk mitigation measures are documented but not clearly linked to the relevant design requirements, design outputs, or verification activities, which can weaken the overall design control process.
How Does a Checklist Power FDA Inspection Readiness?
More than a task list, the checklist is a tactical framework aligned to both the FDA QMSR revision and the clauses of ISO 13485. It directly highlights critical gaps, enabling consistent closure across the organization helping teams verify compliance, prioritize remediation, and document actions.
Ensures Granularity: This ensures teams review specific clauses (example., Clause 7.2.3 on customer communication) that may have been overlooked under the old QSR and map to process details to uncover gaps. It promotes consistency by enabling internal auditors across sites and departments to assess compliance using the same criteria.
Prioritizes Remediation: The ability to categorize objects as "Compliant," "Partial," or "Non-Compliant" helps leadership immediately identify the resources to be remediated.
Builds the Audit Trail: Completing the gap analysis checklist provides information needed to assign ownership and timelines to address each gap, track progress, and document evidence to ensure inspection readiness. This demonstrates that the organization has actively managed the transition process.
Actionable Next Steps
When preparing for a post-2026 inspection, review the FDA's official release on the QMSR Final Rule and use resources such as a comprehensive transition guide to develop your internal assessment tool.
Conclusion
Ensuring QMSR readiness requires more than identifying gaps; it requires a clear path to address them. A structured checklist can assist organizations in closing compliance gaps, evaluating their quality systems, and staying inspection ready. If your team is preparing for FDA inspections or transitioning to QMSR, Compliance Group can help assess your current state and guide remediation efforts.
Contact us at info@complianceg.com to learn how we can support your QMSR readiness.
FAQ's
What are the most common QMSR gaps found during FDA readiness assessments?
The most common QMSR gaps found during FDA readiness assessments include incomplete documentation, ineffective risk management, inadequate design control and supplier control issues. Companies may have incomplete or ineffective CAPA systems, or they may not have adequate records in place. There may also be issues with training documentation and internal audit processes, which may result in a non-compliance finding during FDA inspections.
How does a checklist help identify QMSR gaps?
The checklist for identifying QMSR gaps is a framework for companies to assess their compliance with the regulations. The checklist helps companies ensure that all important aspects of the regulations are considered and that none are missed. This includes documentation, risk management, and process controls. The checklist helps companies identify gaps and weaknesses in these key areas before the FDA inspection.
Why do companies fail FDA readiness assessments for QMSR?
Companies often fail in the FDA readiness assessment for QMSR due to incomplete implementation of quality management systems, inadequate documentation, and insufficient internal audits. A lack of familiarity with updated QMSR requirements and inadequate employee training are also significant causes of failure in the readiness assessment. Also, inconsistent company processes and inadequate CAPA can cause major gaps in compliance, therefore risking observations during FDA inspections.
What are the top documentation gaps in QMSR compliance?
The top documentation gaps in QMSR compliance include missing or outdated procedures, incomplete design history records, and inadequate risk management documentation. There is also a lack of adequate CAPA documentation, training records, and supplier qualification files among the top documentation gaps. Inconsistent document control and record-keeping practices are also common issues that make it difficult to demonstrate compliance during an FDA inspection.
How can companies close QMSR gaps before an FDA inspection?
To address the gaps in QMSR, companies can conduct internal audits, use detailed checklists, and can also perform gap assessments that align with regulatory requirements. Updating the documentation, enhancing the CAPA system, and employee training are the important steps to be taken to address the gaps in QMSR. Companies can hire the expertise of the regulatory team to ensure the success of the FDA inspection.
What are the benefits of using a QMSR checklist for compliance?
Using the QMSR checklist is important to ensure the effective evaluation of the compliance requirements. It is helpful to improve efficiency, reduce the chances of overlooking important requirements, and promote the development of effective documentation. Using the checklist is important to improve the readiness for audits, facilitate improvement, and establish the roadmap to compliance, which is important for regulatory success.
Author:
Hillary Driscoll - IT Quality Industry Lead-Validation
Hillary Driscoll is an IT quality and compliance leader with 27+ years driving organizational change, process improvement, and regulatory readiness in the pharmaceutical and biotech industry. Her experience spans the systems development lifecycle, including business analysis, process/SOP definition, systems testing, operational support, measurement and analysis, training development, and audit/inspection support.
Submit the form below, and our expert will reach out to assist you!