How to Speed Up Safety Critical Processes

The Pragmatic Embedded Podcast · 27 Jul 2021 · 33m

What this episode covers

Jeff Gable and Luca Njani discuss strategies to accelerate safety-critical development in medical devices, automotive, and aerospace without compromising quality. They argue that reducing scope for initial releases and automating documentation using modern tools like Jama and Matrix significantly shortens cycle times. The hosts emphasize that modern regulatory guidance, such as the FDA's Computer System Assurance, supports streamlined validation processes, allowing teams to iterate faster and uncover defects earlier.

Most relevant to

early-stage companies and companies scaling up

Topics

Mentioned

Companies
Bluefruit software
Also
Jeff Gable, Luca Njani, FDA, Jama, Matrix, DOORS, Gene Kim, The Devops Handbook

Other shows on the same ground, closest first.

  • Embedded.fm · 1h 09m

    67: Software for Things That Can Kill People

    Hosts Chris White and Elecia White discuss the rigorous regulatory processes for safety-critical software, drawing on their experiences with the FAA (DO-178B) and FDA (510k, PMA) for medical devices and avionics. They explain how hazard analysis determines certification levels, the necessity of extensive documentation and traceability, and the tension between agile development and waterfall compliance. The conversation highlights the ethical responsibility of engineers to push back against unsafe deadlines, the use of hardware compartmentalization (FPGAs, voting systems) to ensure safety, and the legal liabilities associated with product failures.

  • Global Medical Device Podcast · 40m

    The Future of Cybersecurity

    Chris Gates, Director of Product Security at Velentium and author of 'Medical Device Cybersecurity for Engineers and Manufacturers', discusses the evolving landscape of software as a medical device (SaMD) security. He critiques the FDA's recent draft guidance for lacking harmonization with global standards like ISO and EU MDR, arguing that it imposes excessive burdens without clear, workable requirements. Gates emphasizes the critical need for machine-readable Software Bill of Materials (SBOMs) and Vulnerability Exposure (VEX) documents to help Health Delivery Organizations (HDOs) manage risks effectively. He advocates for integrating cybersecurity into the core development process, using tools like MedCrip and Heimdal, to streamline regulatory approval and create a competitive advantage for manufacturers.

  • Global Medical Device Podcast · 1h 08m

    #326 CSA vs. CSV: Modern Validation for Modern MedTech

    Sandra Rodriguez, an analyst at Axendia, discusses the FDA's shift from Computer System Validation (CSV) to Computer Software Assurance (CSA) in medical device manufacturing. She explains how CSA flips the traditional validation pyramid by prioritizing critical thinking and risk assessment over exhaustive documentation, significantly reducing the burden on companies. The conversation covers the industry's response to the September 2022 draft guidance, the role of GAMP 5, and the evolving relationship between life science companies and technology vendors like Greenlight Guru.

  • Global Medical Device Podcast · 55m

    #335: Accelerating SaMD Development in a Compliant Agile way

    Zach Markin, CEO, and Weronika Michaluk, Digital Health Principal at HTD Health, discuss accelerating Software as a Medical Device (SaMD) development through a methodology they call 'Compliant Agile.' They explain how HTD uses its 'SaMD Chassis' accelerator to handle common non-differentiating software functions, allowing clients to focus on novel clinical value while maintaining regulatory compliance. The guests detail their selection of Greenlight Guru as their Quality Management System (QMS) because it supports flexible, agile workflows and integrates with tools like Jira, helping them achieve ISO 13485 certification and reduce time-to-market.

  • Global Medical Device Podcast · 42m

    #407: Cybersecurity in MedTech: FDA Compliance, Patient Safety & the Hidden Risks You’re Missing

    Christian Espinosa, founder of Blue Goat Cyber, explains why medical device cybersecurity must be integrated from the requirements phase to ensure patient safety, citing real-world risks like skin burns from hacked acne lasers and missed sepsis diagnoses. He details the FDA's September 2023 regulatory overhaul, which mandates Software Bill of Materials (SBOMs), static/dynamic testing, and risk assessments tied to patient harm, noting that traditional IT security vendors often fail to meet these specific medical device standards. Espinosa warns that waiting until the last minute to address security can lead to catastrophic delays, costly retrofits like disabling hardware features due to lack of secure boot support, or even abandoned projects.

The summary, chapters and topics are generated from the episode’s audio by this directory, not written by The Pragmatic Embedded Podcast. The episode itself belongs to its publisher.