134 - ISO62304, Software Development Process, SaMD, Closed Loop Systems, Complexities with Cloud and Better Software in MedTech with Richard Koch

Let's Combinate · 1 May 2024 · 41m

What this episode covers

Richard Koch, founder of KochSaMD, explains the complexities of developing cloud-based medical devices, using a closed-loop insulin pump system as a primary case study. He details how ISO 62304 governs software development within the broader ISO 13485 framework, emphasizing the shift from batch-based physical manufacturing to continuous, high-velocity software updates. Koch warns that tech giants like Apple and Google are disrupting the industry by leveraging their digital expertise to acquire or compete with traditional medtech firms, urging leaders to upskill in software development to survive.

Other shows on the same ground, closest first.

  • Global Medical Device Podcast · 37m

    How to Leverage IEC 62304 to Improve SaMD Development Processes

    Cathy Wilburn, Director of Quality Assurance and Compliance at The RND Group, explains how to leverage the IEC 62304 standard for Software as a Medical Device (SaMD) development. She clarifies that IEC 62304 is a voluntary, recognized consensus standard that provides a framework for software lifecycle processes rather than a prescriptive waterfall methodology, allowing for agile integration. The discussion covers mapping these processes to FDA 21 CFR 820.30 design controls, using software safety classes (A, B, C) for risk management per ISO 14971, and navigating regulatory submissions for both the US (510(k)/PMA) and EU (MDR/IVDR).

  • Global Medical Device Podcast · 40m

    The Future of Cybersecurity

    Chris Gates, Director of Product Security at Velentium and author of 'Medical Device Cybersecurity for Engineers and Manufacturers', discusses the evolving landscape of software as a medical device (SaMD) security. He critiques the FDA's recent draft guidance for lacking harmonization with global standards like ISO and EU MDR, arguing that it imposes excessive burdens without clear, workable requirements. Gates emphasizes the critical need for machine-readable Software Bill of Materials (SBOMs) and Vulnerability Exposure (VEX) documents to help Health Delivery Organizations (HDOs) manage risks effectively. He advocates for integrating cybersecurity into the core development process, using tools like MedCrip and Heimdal, to streamline regulatory approval and create a competitive advantage for manufacturers.

  • Global Medical Device Podcast · 43m

    #436: Do ISO 13485's Production Controls apply to SaMD?

    Adnan Ashfaq, founder of Simply Medica, explains how to apply ISO 13485 production controls to Software as a Medical Device (SaMD), arguing that hardware-centric clauses must be interpreted in a 'virtual manufacturing space.' He details the validation of Software of Unknown Provenance (SOUP) as purchased components, the necessity of a Software Bill of Materials (SBoM), and the integration of FDA Computer Software Assurance (CSA) guidance. The discussion covers specific ISO clauses including 7.5 (Production), 7.4 (Purchasing), 6.3/6.4 (Resources/Environment), and 7.3.8 (Design Transfer), emphasizing that agile development requires rigorous documentation to satisfy regulatory audits.

  • Global Medical Device Podcast · 40m

    [LIVE] Design Controls, Development & Risk for Software as a Medical Device (SaMD)

    Chris DuPont, CEO of Galen Data, explains how to apply medical device design controls to Software as a Medical Device (SaMD), arguing that software must be treated with the same rigor as mechanical devices. He details the development process, emphasizing the importance of independent verification, early validation through wireframes, and maintaining a living Design History File (DHF) that evolves with agile sprints. DuPont also addresses risk analysis, regulatory pathways, and how Galen Data’s platform helps clients connect devices to the cloud without building custom, expensive compliance infrastructure.

  • Global Medical Device Podcast · 51m

    Digitizing your SaMD Testing

    Rahul Kallampunathil, Vice President of Arbour Group’s Digital Compliance practice, explains the regulatory and testing requirements for Software as a Medical Device (SaMD). He distinguishes SaMD from Software in a Medical Device (SiMD) and Medical Device Data Systems (MDDS), noting that SaMD requires a full regulatory pathway while MDDS is often Class I. Kallampunathil advocates for adopting agile and DevOps methodologies with automated testing to manage the rapid iteration cycles of SaMD, contrasting this with traditional Computer Software Validation (CSV) in favor of Computer Software Assurance (CSA). He emphasizes that quality management systems must be established before product design and that post-market surveillance, including cybersecurity and platform compatibility, is critical for SaMD success.

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by Let's Combinate. The episode itself belongs to its publisher.