{"id":5470,"date":"2021-06-16T11:00:32","date_gmt":"2021-06-16T10:00:32","guid":{"rendered":"https:\/\/medtech-ingenieur.de\/?p=5470"},"modified":"2021-08-06T14:31:54","modified_gmt":"2021-08-06T13:31:54","slug":"software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software","status":"publish","type":"post","link":"https:\/\/medtech-ingenieur.de\/en\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\/","title":{"rendered":"Software risk management according to IEC 62304 and ISO 14971 \u2013 SW FMEA \/ FMECA for medical device software?"},"content":{"rendered":"<h3><strong>References:<\/strong><\/h3>\n<p>When IEC 62304 or ISO 14971 is mentioned below, the following editions are meant: IEC 62304:2006 + A1:2015 and EN ISO 14971:2012<\/p>\n<h3><strong>Problem:<\/strong><\/h3>\n<p>We are developing software\/firmware that is part of a medical device. The software (or software system) is assigned to software safety class B or C. This assignment entails, among other things, the requirement of a software risk management process (Chapter 7) according to IEC 62304.<\/p>\n<h3><strong>Claim of this article:<\/strong><\/h3>\n<p>The following article aims to present a practical approach to documenting a software risk management process and to provide suitable methods for identifying potential software errors.<\/p>\n<h3><strong>Methods for identification<\/strong><\/h3>\n<p>As is (unfortunately) often the case, IEC 62304 does not provide any specific guidelines regarding the methodology to be used to identify potential software defects. Some companies use methods such as FMEA (Failure Mode and Effect Analysis), as these are mentioned in ISO 14971 along with risk management. But to what extent are these methods suitable for software risk management?<\/p>\n<p>&nbsp;<\/p>\n<h2><strong>Excursus: FMEA and FMECA<\/strong><\/h2>\n<p>FMEA is described as an analysis technique for the functionality of systems in IEC 60812. The technique is used across industries and is not specific to the medical device industry. More specifically, FMEA originated in the US military and is now widely used, especially in the automotive industry.<\/p>\n<p>If the FMEA is supplemented by the failure significance analysis, then it is called an FMECA (failure modes, effects and criticality analysis)<\/p>\n<p>There probably isn&#039;t one true FMEA. Every industry or company uses FMEA in its own way. However, many have in common the use of a risk priority number (RPN).<\/p>\n<p>In German-language literature, the risk priority number is composed of the following three components:<\/p>\n<ul>\n<li>B: Severity\/Significance<\/li>\n<li>E: Probability of detection<\/li>\n<li>A: Probability of occurrence<\/li>\n<\/ul>\n<p>IEC 60812 also refers to a risk acceptance assessment. This sounds familiar to us, and we&#039;ll discuss it in more detail later.<\/p>\n<p>The appendix to IEC 60812 provides examples for creating an FMEA or FMECA. This scheme is also familiar to us from ISO 14971.<\/p>\n<p><a href=\"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild5.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-5478 size-full\" src=\"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild5.png\" alt=\"\" width=\"1470\" height=\"317\" srcset=\"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild5.png 1470w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild5-300x65.png 300w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild5-768x166.png 768w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild5-1024x221.png 1024w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild5-100x22.png 100w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild5-150x32.png 150w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild5-200x43.png 200w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild5-450x97.png 450w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild5-600x129.png 600w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild5-900x194.png 900w\" sizes=\"auto, (max-width: 1470px) 100vw, 1470px\" \/><\/a><\/p>\n<h2><strong>Requirements of IEC 62304 regarding software risk management<\/strong><\/h2>\n<p>Let&#039;s now return to medical devices. IEC 62304 begins by stating:<\/p>\n<blockquote><p>&quot;Software is often an integral part of medical device technology. Ensuring the safety and effectiveness of a medical device containing software requires knowledge of what the software is intended to do and proof that the software achieves this effect without causing unacceptable risks.&quot;<\/p><\/blockquote>\n<p>IEC 62304 continues to follow the risk-based approach, which is also known in other areas (quality management systems, classification of medical devices). The methodology behind it is the software safety classification, which divides products into three classes: A, B, and C.<\/p>\n<h2><a href=\"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild4-3.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-5483 size-full\" src=\"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild4-3.png\" alt=\"\" width=\"1392\" height=\"430\" srcset=\"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild4-3.png 1392w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild4-3-300x93.png 300w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild4-3-768x237.png 768w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild4-3-1024x316.png 1024w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild4-3-100x31.png 100w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild4-3-150x46.png 150w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild4-3-200x62.png 200w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild4-3-450x139.png 450w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild4-3-600x185.png 600w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild4-3-900x278.png 900w\" sizes=\"auto, (max-width: 1392px) 100vw, 1392px\" \/><\/a><\/h2>\n<p>The depth of documentation and verification activities is determined based on the software security classification. Note: This is intended to provide an overview. This article will not delve deeper into the topic at this point; that would require a separate discussion.<\/p>\n<p>For security classes B and C, a software risk management plan is required. Both classes also require planning for the identification and prevention of common software defects.<\/p>\n<p><a href=\"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-5474\" src=\"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild1.png\" alt=\"\" width=\"310\" height=\"784\" \/><\/a><\/p>\n<h2><strong>Differentiation between IEC 62304 and ISO 14971<\/strong><\/h2>\n<p>Another important aspect: dealing with software changes. This is intentionally not discussed here.<\/p>\n<p>It can be seen that the aspects of risk management required in ISO 14971<strong>evaluation<\/strong> are not included\/required in IEC 62304.<\/p>\n<p>To get straight to the point: This is also the key reason why we consider the use of an FMEA or FMECA to be inappropriate. The use of an RPN in an FMEA is difficult to justify. If the RPN is omitted, in our opinion, there is little left to justify the use of an FMEA. Therefore, we consider it sensible to integrate the software risk analysis into the system risk analysis according to 14971. We will demonstrate how we implement this in practice shortly.<\/p>\n<p>The difficulty with the RPZ:<\/p>\n<p>As mentioned above, the RPN is determined from the severity and P1 and P2 (in some cases only P if the probability is considered combined).<\/p>\n<p>In some FMEAs, RPN values in the range of RPN = 10 * 10 * 10 = 1000 are obtained. A risk acceptance assessment of &lt; 100 and &gt;= 100 is often used. But how can this be justified? In most cases, evidence is lacking, and the rating appears arbitrary, or the rating is used to determine the maximum number of actions to be implemented, which does not fit the &quot;As Low As Possible&quot; principle.<\/p>\n<p>ISO 14971, on the other hand, provides a very good method for creating a risk matrix, as usual. The risk assessment broken down into categories of severity and probability of occurrence is based on the data available in risk management and clinical evaluation.<\/p>\n<p>This data can be:<\/p>\n<ul>\n<li>Standards<\/li>\n<li>scientific and technical data;<\/li>\n<li>Market data of similar medical devices already in use, including published incident reports<\/li>\n<li>Usability studies with typical users<\/li>\n<li>clinical data<\/li>\n<li>Results of appropriate investigations<\/li>\n<li>Appraise<\/li>\n<li>external quality assessment programs<\/li>\n<\/ul>\n<p>We also see our assessment reinforced by the explanation in the appendix of IEC 62304:<\/p>\n<blockquote><p>\u201cThe risk management of software is part of the risk management of the entire medical device and cannot reasonably be considered in isolation.\u201d<\/p><\/blockquote>\n<p>From the previous points, we conclude that all entries in an FMEA\u2014that is, potential failures and their associated causes\u2014are considered valuable, regardless of the RPN. Therefore, the FMEA serves only to identify such elements and treats them equally. No quantitative assessment is performed.<\/p>\n<p>Note: This is a subjective assessment from development projects and does not claim to question the use of FMEA in general. In some other areas, such as production, a completely different perspective is applied. Those who have had positive experiences with it in their projects and audits should stick to their strategy. However, we hope this article provides food for thought and sparks some discussion.<\/p>\n<p>&nbsp;<\/p>\n<h2><strong>Example of a possible documentation of a software risk management process<\/strong><\/h2>\n<p>The way in which documentation is carried out depends essentially on the underlying quality management system, development and software development process as well as the risk management process.<\/p>\n<p>&nbsp;<\/p>\n<h3>1. Overview of the necessary documentation in connection with SW Risk Management<\/h3>\n<p><a href=\"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild6.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-5479\" src=\"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild6.png\" alt=\"\" width=\"1017\" height=\"345\" srcset=\"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild6.png 1017w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild6-300x102.png 300w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild6-768x261.png 768w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild6-100x34.png 100w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild6-150x51.png 150w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild6-200x68.png 200w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild6-450x153.png 450w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild6-600x204.png 600w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild6-900x305.png 900w\" sizes=\"auto, (max-width: 1017px) 100vw, 1017px\" \/><\/a><\/p>\n<h3>2. Risk Management File \/ Risk Analysis Table<\/h3>\n<p><a href=\"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-5475\" src=\"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild2.png\" alt=\"\" width=\"604\" height=\"46\" srcset=\"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild2.png 604w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild2-300x23.png 300w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild2-100x8.png 100w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild2-150x11.png 150w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild2-200x15.png 200w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild2-450x34.png 450w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild2-600x46.png 600w\" sizes=\"auto, (max-width: 604px) 100vw, 604px\" \/><\/a><\/p>\n<p><a href=\"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild3.png\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-5476\" src=\"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild3.png\" alt=\"\" width=\"951\" height=\"326\" srcset=\"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild3.png 951w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild3-300x103.png 300w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild3-768x263.png 768w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild3-100x34.png 100w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild3-150x51.png 150w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild3-200x69.png 200w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild3-450x154.png 450w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild3-600x206.png 600w, https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/rm_bild3-900x309.png 900w\" sizes=\"auto, (max-width: 951px) 100vw, 951px\" \/><\/a><\/p>\n<p>The question remains how often we apply the above-mentioned scheme. Should we consider the threats for each software unit or only once for the entire software system? The answer to this question depends on the software architecture. If my system runs on a single piece of hardware and the architecture is accordingly straightforward, we would not recommend splitting software risk management across multiple components. After all, the measures are generally identical, provided the software security classes are the same.<\/p>\n<p>However, if the software system spans multiple, more complex software systems on different hardware, it is recommended to consider these components separately. After all, in such an architecture, the same software errors can result in different effects.<\/p>","protected":false},"excerpt":{"rendered":"<p>Referenzen: Wenn im Folgenden von IEC 62304 oder ISO 14971 gesprochen wird, sind folgende Ausgaben gemeint: IEC 62304:2006 + A1:2015 und EN ISO 14971:2012 Problemstellung: Wir entwickeln eine Software\/Firmware, welche Bestandteil eines Medizinprodukts ist. Die Software (bzw. das Softwaresystem) wird der Software-Sicherheitsklasse B oder C zugeordnet. Diese Zuordnung hat u.a. zur Folge das gem\u00e4\u00df IEC [&hellip;]<\/p>\n","protected":false},"author":14,"featured_media":5573,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3,14,6],"tags":[495,367,256,38],"class_list":["post-5470","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-dokumentation","category-normen","category-software","tag-iec-62304","tag-iso-14971","tag-risikomanagement","tag-software","post-wrapper","thrv_wrapper"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.4 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Software Risikomanagement nach IEC 62304 und ISO 14971 - SW FMEA \/ FMECA bei Medizinprodukt-Software? - MEDtech Ingenieur GmbH<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/medtech-ingenieur.de\/en\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Software Risikomanagement nach IEC 62304 und ISO 14971 - SW FMEA \/ FMECA bei Medizinprodukt-Software? - MEDtech Ingenieur GmbH\" \/>\n<meta property=\"og:description\" content=\"Referenzen: Wenn im Folgenden von IEC 62304 oder ISO 14971 gesprochen wird, sind folgende Ausgaben gemeint: IEC 62304:2006 + A1:2015 und EN ISO 14971:2012 Problemstellung: Wir entwickeln eine Software\/Firmware, welche Bestandteil eines Medizinprodukts ist. Die Software (bzw. das Softwaresystem) wird der Software-Sicherheitsklasse B oder C zugeordnet. Diese Zuordnung hat u.a. zur Folge das gem\u00e4\u00df IEC [&hellip;]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/medtech-ingenieur.de\/en\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\/\" \/>\n<meta property=\"og:site_name\" content=\"MEDtech Ingenieur GmbH\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/medtechIngenieur\" \/>\n<meta property=\"article:published_time\" content=\"2021-06-16T10:00:32+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2021-08-06T13:31:54+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/plan-2372176_640.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"640\" \/>\n\t<meta property=\"og:image:height\" content=\"426\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"(Gast) Carina Schmitz\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@MedtechIng\" \/>\n<meta name=\"twitter:site\" content=\"@MedtechIng\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"(Gast) Carina Schmitz\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"6 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/medtech-ingenieur.de\\\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/medtech-ingenieur.de\\\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\\\/\"},\"author\":{\"name\":\"(Gast) Carina Schmitz\",\"@id\":\"https:\\\/\\\/medtech-ingenieur.de\\\/#\\\/schema\\\/person\\\/6c289ce31072730d50cfec7df1057a8d\"},\"headline\":\"Software Risikomanagement nach IEC 62304 und ISO 14971 &#8211; SW FMEA \\\/ FMECA bei Medizinprodukt-Software?\",\"datePublished\":\"2021-06-16T10:00:32+00:00\",\"dateModified\":\"2021-08-06T13:31:54+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/medtech-ingenieur.de\\\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\\\/\"},\"wordCount\":1171,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\\\/\\\/medtech-ingenieur.de\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/medtech-ingenieur.de\\\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/medtech-ingenieur.de\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/plan-2372176_640.jpg\",\"keywords\":[\"IEC 62304\",\"ISO 14971\",\"Risikomanagement\",\"Software\"],\"articleSection\":[\"Dokumentation\",\"Normen\",\"Software\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/medtech-ingenieur.de\\\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/medtech-ingenieur.de\\\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\\\/\",\"url\":\"https:\\\/\\\/medtech-ingenieur.de\\\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\\\/\",\"name\":\"Software Risikomanagement nach IEC 62304 und ISO 14971 - SW FMEA \\\/ FMECA bei Medizinprodukt-Software? - MEDtech Ingenieur GmbH\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/medtech-ingenieur.de\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/medtech-ingenieur.de\\\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/medtech-ingenieur.de\\\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/medtech-ingenieur.de\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/plan-2372176_640.jpg\",\"datePublished\":\"2021-06-16T10:00:32+00:00\",\"dateModified\":\"2021-08-06T13:31:54+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/medtech-ingenieur.de\\\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/medtech-ingenieur.de\\\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/medtech-ingenieur.de\\\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\\\/#primaryimage\",\"url\":\"https:\\\/\\\/medtech-ingenieur.de\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/plan-2372176_640.jpg\",\"contentUrl\":\"https:\\\/\\\/medtech-ingenieur.de\\\/wp-content\\\/uploads\\\/2021\\\/05\\\/plan-2372176_640.jpg\",\"width\":640,\"height\":426},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/medtech-ingenieur.de\\\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\\\/\\\/medtech-ingenieur.de\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Software Risikomanagement nach IEC 62304 und ISO 14971 &#8211; SW FMEA \\\/ FMECA bei Medizinprodukt-Software?\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/medtech-ingenieur.de\\\/#website\",\"url\":\"https:\\\/\\\/medtech-ingenieur.de\\\/\",\"name\":\"MEDtech Ingenieur GmbH\",\"description\":\"Ingenieursdienstleister f\u00fcr Medizintechnik\",\"publisher\":{\"@id\":\"https:\\\/\\\/medtech-ingenieur.de\\\/#organization\"},\"alternateName\":\"MEDtech\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/medtech-ingenieur.de\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/medtech-ingenieur.de\\\/#organization\",\"name\":\"MEDtech Ingenieur\",\"alternateName\":\"MEDtech\",\"url\":\"https:\\\/\\\/medtech-ingenieur.de\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/medtech-ingenieur.de\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/medtech-ingenieur.de\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/logo-700x700-1.png\",\"contentUrl\":\"https:\\\/\\\/medtech-ingenieur.de\\\/wp-content\\\/uploads\\\/2024\\\/01\\\/logo-700x700-1.png\",\"width\":700,\"height\":700,\"caption\":\"MEDtech Ingenieur\"},\"image\":{\"@id\":\"https:\\\/\\\/medtech-ingenieur.de\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/medtechIngenieur\",\"https:\\\/\\\/x.com\\\/MedtechIng\",\"https:\\\/\\\/www.instagram.com\\\/medtech.ingenieure\\\/\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/37871229\\\/\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/medtech-ingenieur.de\\\/#\\\/schema\\\/person\\\/6c289ce31072730d50cfec7df1057a8d\",\"name\":\"(Gast) Carina Schmitz\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f090fe14e43c33695e80c7000a932c1a3eeff5aecbc5b0f4494513c5b16e9709?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f090fe14e43c33695e80c7000a932c1a3eeff5aecbc5b0f4494513c5b16e9709?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/f090fe14e43c33695e80c7000a932c1a3eeff5aecbc5b0f4494513c5b16e9709?s=96&d=mm&r=g\",\"caption\":\"(Gast) Carina Schmitz\"},\"description\":\"Carina Schmitz ist Ingenieurin der Medizintechnik und Consultant bei be-on-Quality GmbH. Ihre Aufgaben umfassen dabei die Betreuung von Kunden rund um Qualit\u00e4tsmanagementsysteme (ISO 13485, 21CFR820) und Zulassungsstrategien von Medizinprodukten. Durch langj\u00e4hrige Erfahrung im Bereich Verifikation und Validierung, besteht ein gro\u00dfes Verst\u00e4ndnis von Entwicklungsaufgaben und deren Prozesssteuerung. Die kontinuierliche Verbesserung von Unternehmensabl\u00e4ufen durch die qualifizierte Durchf\u00fchrung von internen Audits und Inspektionen rundet das Profil ab.\",\"sameAs\":[\"http:\\\/\\\/www.be-on-quality.com\"],\"url\":\"https:\\\/\\\/medtech-ingenieur.de\\\/en\\\/author\\\/carina\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Software risk management according to IEC 62304 and ISO 14971 - SW FMEA \/ FMECA for medical device software? - MEDtech Ingenieur GmbH","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/medtech-ingenieur.de\/en\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\/","og_locale":"en_US","og_type":"article","og_title":"Software Risikomanagement nach IEC 62304 und ISO 14971 - SW FMEA \/ FMECA bei Medizinprodukt-Software? - MEDtech Ingenieur GmbH","og_description":"Referenzen: Wenn im Folgenden von IEC 62304 oder ISO 14971 gesprochen wird, sind folgende Ausgaben gemeint: IEC 62304:2006 + A1:2015 und EN ISO 14971:2012 Problemstellung: Wir entwickeln eine Software\/Firmware, welche Bestandteil eines Medizinprodukts ist. Die Software (bzw. das Softwaresystem) wird der Software-Sicherheitsklasse B oder C zugeordnet. Diese Zuordnung hat u.a. zur Folge das gem\u00e4\u00df IEC [&hellip;]","og_url":"https:\/\/medtech-ingenieur.de\/en\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\/","og_site_name":"MEDtech Ingenieur GmbH","article_publisher":"https:\/\/www.facebook.com\/medtechIngenieur","article_published_time":"2021-06-16T10:00:32+00:00","article_modified_time":"2021-08-06T13:31:54+00:00","og_image":[{"width":640,"height":426,"url":"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/plan-2372176_640.jpg","type":"image\/jpeg"}],"author":"(Gast) Carina Schmitz","twitter_card":"summary_large_image","twitter_creator":"@MedtechIng","twitter_site":"@MedtechIng","twitter_misc":{"Written by":"(Gast) Carina Schmitz","Est. reading time":"6 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/medtech-ingenieur.de\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\/#article","isPartOf":{"@id":"https:\/\/medtech-ingenieur.de\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\/"},"author":{"name":"(Gast) Carina Schmitz","@id":"https:\/\/medtech-ingenieur.de\/#\/schema\/person\/6c289ce31072730d50cfec7df1057a8d"},"headline":"Software Risikomanagement nach IEC 62304 und ISO 14971 &#8211; SW FMEA \/ FMECA bei Medizinprodukt-Software?","datePublished":"2021-06-16T10:00:32+00:00","dateModified":"2021-08-06T13:31:54+00:00","mainEntityOfPage":{"@id":"https:\/\/medtech-ingenieur.de\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\/"},"wordCount":1171,"commentCount":0,"publisher":{"@id":"https:\/\/medtech-ingenieur.de\/#organization"},"image":{"@id":"https:\/\/medtech-ingenieur.de\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\/#primaryimage"},"thumbnailUrl":"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/plan-2372176_640.jpg","keywords":["IEC 62304","ISO 14971","Risikomanagement","Software"],"articleSection":["Dokumentation","Normen","Software"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/medtech-ingenieur.de\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/medtech-ingenieur.de\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\/","url":"https:\/\/medtech-ingenieur.de\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\/","name":"Software risk management according to IEC 62304 and ISO 14971 - SW FMEA \/ FMECA for medical device software? - MEDtech Ingenieur GmbH","isPartOf":{"@id":"https:\/\/medtech-ingenieur.de\/#website"},"primaryImageOfPage":{"@id":"https:\/\/medtech-ingenieur.de\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\/#primaryimage"},"image":{"@id":"https:\/\/medtech-ingenieur.de\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\/#primaryimage"},"thumbnailUrl":"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/plan-2372176_640.jpg","datePublished":"2021-06-16T10:00:32+00:00","dateModified":"2021-08-06T13:31:54+00:00","breadcrumb":{"@id":"https:\/\/medtech-ingenieur.de\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/medtech-ingenieur.de\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/medtech-ingenieur.de\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\/#primaryimage","url":"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/plan-2372176_640.jpg","contentUrl":"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2021\/05\/plan-2372176_640.jpg","width":640,"height":426},{"@type":"BreadcrumbList","@id":"https:\/\/medtech-ingenieur.de\/software-risikomanagement-nach-iec-62304-und-iso-14971-sw-fmea-fmeca-bei-medizinprodukt-software\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/medtech-ingenieur.de\/"},{"@type":"ListItem","position":2,"name":"Software Risikomanagement nach IEC 62304 und ISO 14971 &#8211; SW FMEA \/ FMECA bei Medizinprodukt-Software?"}]},{"@type":"WebSite","@id":"https:\/\/medtech-ingenieur.de\/#website","url":"https:\/\/medtech-ingenieur.de\/","name":"MEDtech Ingenieur GmbH","description":"Engineering service provider for medical technology","publisher":{"@id":"https:\/\/medtech-ingenieur.de\/#organization"},"alternateName":"MEDtech","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/medtech-ingenieur.de\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/medtech-ingenieur.de\/#organization","name":"MEDtech Engineer","alternateName":"MEDtech","url":"https:\/\/medtech-ingenieur.de\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/medtech-ingenieur.de\/#\/schema\/logo\/image\/","url":"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2024\/01\/logo-700x700-1.png","contentUrl":"https:\/\/medtech-ingenieur.de\/wp-content\/uploads\/2024\/01\/logo-700x700-1.png","width":700,"height":700,"caption":"MEDtech Ingenieur"},"image":{"@id":"https:\/\/medtech-ingenieur.de\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/medtechIngenieur","https:\/\/x.com\/MedtechIng","https:\/\/www.instagram.com\/medtech.ingenieure\/","https:\/\/www.linkedin.com\/company\/37871229\/"]},{"@type":"Person","@id":"https:\/\/medtech-ingenieur.de\/#\/schema\/person\/6c289ce31072730d50cfec7df1057a8d","name":"(Guest) Carina Schmitz","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/f090fe14e43c33695e80c7000a932c1a3eeff5aecbc5b0f4494513c5b16e9709?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/f090fe14e43c33695e80c7000a932c1a3eeff5aecbc5b0f4494513c5b16e9709?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/f090fe14e43c33695e80c7000a932c1a3eeff5aecbc5b0f4494513c5b16e9709?s=96&d=mm&r=g","caption":"(Gast) Carina Schmitz"},"description":"Carina Schmitz is a medical technology engineer and consultant at be-on-Quality GmbH. Her responsibilities include supporting clients with quality management systems (ISO 13485, 21CFR820) and approval strategies for medical devices. Her extensive experience in verification and validation has provided her with a thorough understanding of development tasks and their process management. Continuous improvement of company processes through the professional conduct of internal audits and inspections rounds out her profile.","sameAs":["http:\/\/www.be-on-quality.com"],"url":"https:\/\/medtech-ingenieur.de\/en\/author\/carina\/"}]}},"_links":{"self":[{"href":"https:\/\/medtech-ingenieur.de\/en\/wp-json\/wp\/v2\/posts\/5470","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/medtech-ingenieur.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/medtech-ingenieur.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/medtech-ingenieur.de\/en\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/medtech-ingenieur.de\/en\/wp-json\/wp\/v2\/comments?post=5470"}],"version-history":[{"count":16,"href":"https:\/\/medtech-ingenieur.de\/en\/wp-json\/wp\/v2\/posts\/5470\/revisions"}],"predecessor-version":[{"id":5777,"href":"https:\/\/medtech-ingenieur.de\/en\/wp-json\/wp\/v2\/posts\/5470\/revisions\/5777"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/medtech-ingenieur.de\/en\/wp-json\/wp\/v2\/media\/5573"}],"wp:attachment":[{"href":"https:\/\/medtech-ingenieur.de\/en\/wp-json\/wp\/v2\/media?parent=5470"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/medtech-ingenieur.de\/en\/wp-json\/wp\/v2\/categories?post=5470"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/medtech-ingenieur.de\/en\/wp-json\/wp\/v2\/tags?post=5470"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}