Behind every safely manufactured medical device is a system, not luck. That system has a name: the quality management system, or QMS. And the world’s reference for what a medical device QMS should look like is ISO 13485. As of 2026 that standard matters more than ever in the United States, because the FDA has folded it directly into federal regulation.

What a quality management system actually does

A QMS is the network of processes, procedures, and records that ensures a company consistently designs, makes, and supports devices that are safe and effective. It is not a binder that sits on a shelf; it is how an organization plans work, controls documents, manages suppliers, handles complaints, and improves. A well-run QMS turns “we think it’s fine” into “we can prove it.”

Why ISO 13485 is the global benchmark

The ISO 13485 quality management system standard sets device-specific requirements that span the product life cycle. Its core themes include:

• Management responsibility and a clear quality policy and objectives.
• Resource and competence management, the right people, trained and qualified.
• A risk-based approach woven through processes, closely tied to ISO 14971.
• Document and record control, so the right information is current and traceable.
• Design and development, purchasing, and supplier controls.
• Production and service provision under controlled conditions.
• CAPA (corrective and preventive action) and ongoing monitoring and improvement.

The big 2026 shift: the FDA QMSR

On February 2, 2026, the FDA replaced its long-standing Quality System Regulation (21 CFR Part 820) with the Quality Management System Regulation (QMSR), which incorporates ISO 13485:2016 by reference. In other words, the international standard is now the backbone of U.S. medical device quality requirements. The FDA also adopted a new inspection program to match. For manufacturers already aligned to ISO 13485, often through the Medical Device Single Audit Program (MDSAP), the transition is an advantage rather than a burden, because one quality system can now support multiple markets at once.

ISO 13485 is not ISO 9001

It is worth clearing up a common confusion: ISO 13485 is not just ISO 9001 for devices. While they share DNA, ISO 13485 is purpose-built for a regulated industry, emphasizing risk management, traceability, and regulatory compliance over the broader business-improvement themes of ISO 9001. For medical devices, ISO 13485 is the standard that regulators expect to see.

Why it matters for compliance and careers

With the QMSR in force, fluency in ISO 13485 is now table stakes for quality and regulatory professionals in the U.S. market, not just the EU. Understanding how the pieces fit, design controls, risk management, CAPA, and supplier oversight, is among the most durable skill sets in the medical device field.

Learn the QMS the way regulators expect it

Aleph University’s Quality Management Systems for Medical Devices course teaches ISO 13485 and the QMSR in practical terms, within a broader catalog of continuing-education courses in medical devices, regulatory affairs, and quality. It pairs naturally with our guides to design controls and ISO 14971 risk management.

Ready to build real QMS expertise? Request information and a custom quote for yourself or your team.