Risk Management Specialist
This skill assists Risk Management Specialists in implementing ISO 14971:2019 risk management throughout the medical device lifecycle. It provides workflows,...
Install
npx promptshop add risk-management-specialistDetails
What This Skill Does
This skill assists Risk Management Specialists in implementing ISO 14971:2019 risk management throughout the medical device lifecycle. It provides workflows, templates, and frameworks for identifying, analyzing, and controlling risks. It helps ensure product safety and regulatory compliance.
When to Use
- Planning risk management activities.
- Analyzing risks.
- Evaluating risks.
- Controlling risks.
- Managing post-production risks.
- Creating risk assessments.
Key Features
- Provides a risk management planning workflow.
- Offers guidance on risk analysis.
- Includes a risk evaluation workflow.
- Details a risk control workflow.
- Supports post-production risk management.
- Presents risk assessment templates.
Manual Installation
Manual installation View Full Skill Content The complete markdown content that gets installed Risk Management Specialist
ISO 14971:2019 risk management implementation throughout the medical device lifecycle.
Table of Contents
Risk Management Planning Workflow
Risk Analysis Workflow Risk Evaluation Workflow Risk Control Workflow Post-Production Risk Management Risk Assessment Templates Decision Frameworks Tools and References
Risk Management Planning Workflow
Establish risk management process per ISO 14971.
Workflow: Create Risk Management Plan
Define scope of risk management activities:
- Medical device identification
- Lifecycle stages covered
- Applicable standards and regulations Establish risk acceptability criteria:
- Define probability categories (P1-P5)
- Define severity categories (S1-S5)
- Create risk matrix with acceptance thresholds Assign responsibilities:
- Risk management lead
- Subject matter experts
- Approval authorities Define verification activities:
- Methods for control verification
- Acceptance criteria Plan production and post-production activities:
- Information sources
- Review triggers
- Update procedures Obtain plan approval Establish risk management file Validation: Plan approved; acceptability criteria defined; responsibilities assigned; file established
Risk Management Plan Content
| Section | Content | Evidence |
|---|---|---|
| Scope | Device and lifecycle coverage | Scope statement |
| Criteria | Risk acceptability matrix | Risk matrix document |
| Responsibilities | Roles and authorities | RACI chart |
| Verification | Methods and acceptance | Verification plan |
| Production/Post-Production | Monitoring activities | Surveillance plan |
Risk Acceptability Matrix (5x5)
| Probability \ Severity | Negligible | Minor | Serious | Critical | Catastrophic |
|---|---|---|---|---|---|
| Frequent (P5) | Medium | High | High | Unacceptable | Unacceptable |
| Probable (P4) | Medium | Medium | High | High | Unacceptable |
| Occasional (P3) | Low | Medium | Medium | High | High |
| Remote (P2) | Low | Low | Medium | Medium | High |
| Improbable (P1) | Low | Low | Low | Medium | Medium |
Risk Level Actions
| Level | Acceptable | Action Required |
|---|---|---|
| Low | Yes | Document and accept |
| Medium | ALARP | Reduce if practicable; document rationale |
| High | ALARP | Reduction required; demonstrate ALARP |
| Unacceptable | No | Design change mandatory |
Risk Analysis Workflow
Identify hazards and estimate risks systematically.
Workflow: Conduct Risk Analysis
Define intended use and reasonably foreseeable misuse:
- Medical indication
- Patient population
- User population
- Use environment Select analysis method (s):
- FMEA for component/function analysis
- FTA for system-level analysis
- HAZOP for process deviations
- Use Error Analysis for user interaction Identify hazards by category:
- Energy hazards (electrical, mechanical, thermal)
- Biological hazards (bioburden, biocompatibility)
- Chemical hazards (residues, leachables)
- Operational hazards (software, use errors) Determine hazardous situations:
- Sequence of events
- Foreseeable misuse scenarios
- Single fault conditions Estimate probability of harm (P1-P5) Estimate severity of harm (S1-S5) Document in hazard analysis worksheet Validation: All hazard categories addressed; all hazards documented; probability and severity assigned
Hazard Categories Checklist
| Category | Examples | Analyzed |
|---|---|---|
| Electrical | Shock, burns, interference | ☐ |
| Mechanical | Crushing, cutting, entrapment | ☐ |
| Thermal | Burns, tissue damage | ☐ |
| Radiation | Ionizing, non-ionizing | ☐ |
| Biological | Infection, biocompatibility | ☐ |
| Chemical | Toxicity, irritation | ☐ |
| Software | Incorrect output, timing | ☐ |
| Use Error | Misuse, perception, cognition | ☐ |
| Environment | EMC, mechanical stress | ☐ |
Analysis Method Selection
| Situation | Recommended Method |
|---|---|
| Component failures | FMEA |
| System-level failure | FTA |
| Process deviations | HAZOP |
| User interaction | Use Error Analysis |
| Software behavior | Software FMEA |
| Early design phase | PHA |
Probability Criteria
| Level | Name | Description | Frequency |
|---|---|---|---|
| P5 | Frequent | Expected to occur | >10⁻³ |
| P4 | Probable | Likely to occur | 10⁻³ to 10⁻⁴ |
| P3 | Occasional | May occur | 10⁻⁴ to 10⁻⁵ |
| P2 | Remote | Unlikely | 10⁻⁵ to 10⁻⁶ |
| P1 | Improbable | Very unlikely | <10⁻⁶ |
Severity Criteria
| Level | Name | Description | Harm |
|---|---|---|---|
| S5 | Catastrophic | Death | Death |
| S4 | Critical | Permanent impairment | Irreversible injury |
| S3 | Serious | Injury requiring intervention | Reversible injury |
| S2 | Minor | Temporary discomfort | No treatment needed |
| S1 | Negligible | Inconvenience | No injury |
See: references/risk-analysis-methods.md
Risk Evaluation Workflow
Evaluate risks against acceptability criteria.
Workflow: Evaluate Identified Risks
Calculate initial risk level from probability × severity Compare to risk acceptability criteria For each risk, determine:
- Acceptable: Document and accept
- ALARP: Proceed to risk control
- Unacceptable: Mandatory risk control Document evaluation rationale Identify risks requiring benefit-risk analysis Complete benefit-risk analysis if applicable Compile risk evaluation summary Validation: All risks evaluated; acceptability determined; rationale documented
Risk Evaluation Decision Tree
Risk Estimated │ ▼ Apply Acceptability Criteria │ ├── Low Risk ──────────► Accept and document │ ├── Medium Risk ───────► Consider risk reduction │ │ Document ALARP if not reduced │ ▼ │ Practicable to reduce? │ │ │ Yes──► Implement control │ No───► Document ALARP rationale │ ├── High Risk ─────────► Risk reduction required │ │ Must demonstrate ALARP │ ▼ │ Implement control │ Verify residual risk │ └── Unacceptable ──────► Design change mandatory Cannot proceed without control
ALARP Demonstration Requirements
| Criterion | Evidence Required |
|---|---|
| Technical feasibility | Analysis of alternative controls |
| Proportionality | Cost-benefit of further reduction |
| State of the art | Comparison to similar devices |
| Stakeholder input | Clinical/user perspectives |
Benefit-Risk Analysis Triggers
| Situation | Benefit-Risk Required |
|---|---|
| Residual risk remains high | Yes |
| No feasible risk reduction | Yes |
| Novel device | Yes |
| Unacceptable risk with clinical benefit | Yes |
| All risks low | No |
Risk Control Workflow
Implement and verify risk control measures.
Workflow: Implement Risk Controls
Identify risk control options:
- Inherent