Orcanos Café עידכונים ודרישות חדשות בתחום התוכנה למיכשור רפואי, ובנושא פיתוח תוכנה רפואית ב- Mobile Orcanos Dec. 2013

  • View
    235

  • Download
    0

Embed Size (px)

Text of Orcanos Café עידכונים ודרישות חדשות בתחום התוכנה למיכשור...

  • Slide 1

Orcanos Caf , - Mobile Orcanos Dec. 2013 Slide 2 Copyright SoftQuest Systems 2013 2 Software Development and Validation Updated Status Mike Ze evi SoftQuest Systems www.softquest.co.il email: mikez@softquest.co.il Slide 3 Copyright SoftQuest Systems 2013 3 Topics What is the issue? What is the issue? Standards and guidances Standards and guidances Verification and Validation Verification and Validation SOUP SOUP General and summary General and summary Slide 4 Copyright SoftQuest Systems 2013 Software Failures Responsible for 24% of all Medical Device Recalls Software Failures Responsible for 24% of all Medical Device Recalls The absence of solid architecture and "principled engineering practices" in software development affects a wide range of medical devices, with potentially life-threatening consequences. The absence of solid architecture and "principled engineering practices" in software development affects a wide range of medical devices, with potentially life-threatening consequences. 4 FDA Annual Report 2011 Slide 5 Copyright SoftQuest Systems 2013 FDA Annual Report 2011 The agency has come under fire in recent years for not holding manufacturers' accountable for insecure or poorly written software. The agency has come under fire in recent years for not holding manufacturers' accountable for insecure or poorly written software. "Manufacturers are responsible for identifying risks and hazards associated with medical device software (or) firmware, including risks related to security, and are responsible for putting appropriate mitigations in place to address patient safety." "Manufacturers are responsible for identifying risks and hazards associated with medical device software (or) firmware, including risks related to security, and are responsible for putting appropriate mitigations in place to address patient safety." 5 Slide 6 Copyright SoftQuest Systems 2013 Software in the Medical Device Medical Device Software can be part of the medical device itself part of the medical device itself an accessory to the medical device an accessory to the medical device the medical device itself the medical device itself 6 Slide 7 Copyright SoftQuest Systems 2013 7 FDA Software Development Standards General Principles of Software Validation, FDA, CDRH, 11/1/02 General Principles of Software Validation, FDA, CDRH, 11/1/02 Guidance for the Content of Premarket Submissions for Software Contained in Medical Devices, FDA, CDRH, 11/5/05 Guidance for the Content of Premarket Submissions for Software Contained in Medical Devices, FDA, CDRH, 11/5/05 Off-The-Shelf Software Use in Medical DevicesFDA, CDRH, 9/9/99 Off-The-Shelf Software Use in Medical DevicesFDA, CDRH, 9/9/99 Slide 8 Copyright SoftQuest Systems 2013 62304 Edition 1 Approved 2006 FDA approved it as a consensus standard CE approved as standard for software development Edition 2 Should be released Q1/2014 Interim updates for future major release Advance draft copy available Adds flow for determining Software Safety Classification Relates to validation of legacy software Miscellaneous clarifications and technical changes 8 Slide 9 Copyright SoftQuest Systems 2013 62304 Continued Capability assessment will become a separate Technical Report Capability assessment will become a separate Technical Report Assessment TR expected during 2014 Assessment TR expected during 2014 Second edition expected 2015/2016 Second edition expected 2015/2016 9 Slide 10 Copyright SoftQuest Systems 2013 60601 3 rd edition released 2005 Amendment 1 released 7/12 Known as edition 3.1 Risk management according to IEC 14971:2007 Software development lifecycle according to IEC 62304:2006 Usability engineering according to IEC 62366:2007 10 Slide 11 Copyright SoftQuest Systems 2013 Risk Management Standards ISO 14971:2007, Second edition, Medical devices Application of risk management to medical devices ISO 14971:2007, Second edition, Medical devices Application of risk management to medical devices EN 2009, EN 2012 updates EN 2009, EN 2012 updates ISO/TR 24971:2013, Medical devices - Guidance on the application of ISO 14971 ISO/TR 24971:2013, Medical devices - Guidance on the application of ISO 14971 OD-2044 Ed. 2.0, Evaluation of Risk Management in medical electrical equipment OD-2044 Ed. 2.0, Evaluation of Risk Management in medical electrical equipment 11 Slide 12 Copyright SoftQuest Systems 2013 82304-1 IEC 82304-1 Health Software IEC 82304-1 Health Software Draft status Draft copy available standalone health software (software intended to be used specifically for maintaining or improving health of individual persons, or the delivery of care) Relates to standalone health software (software intended to be used specifically for maintaining or improving health of individual persons, or the delivery of care) Should be released during 2014 12 Slide 13 Copyright SoftQuest Systems 2013 Medical Device Data Systems - MDDS 21 CFR 880.6310, Medical Device Data Systems, FDA 21 CFR 880.6310, Medical Device Data Systems, FDA Hardware or software products that transfer, store, convert formats, and display medical device data SW87:2012, Application of quality management system concepts to medical device data systems SW87:2012, Application of quality management system concepts to medical device data systems 13 Slide 14 Copyright SoftQuest Systems 2013 Agile Software Development AAMI TIR45:2012, Guidance on the use of agile practices in the development of medical device software 14 Slide 15 Copyright SoftQuest Systems 2013 80002-1 IEC TIR 80002-1:2009 Medical device software - Part 1: Guidance on the application of ISO 14971 to medical device software IEC TIR 80002-1:2009 Medical device software - Part 1: Guidance on the application of ISO 14971 to medical device software Released in 2009 Relates to the software risk analysis on the operational software in the formal risk management process 15 Slide 16 Copyright SoftQuest Systems 2013 80002-2 IEC/TIR 80002-2, Validation of software for regulated processes IEC/TIR 80002-2, Validation of software for regulated processes Draft, due to be released in 2014 Current guidance is TIR36:2007 16 Slide 17 Copyright SoftQuest Systems 2013 Mobile Medical Applications Mobile Medical Applications, FDA, CDRH, 25/9/13 Mobile Medical Applications, FDA, CDRH, 25/9/13 What is a mobile medical application? What is a mobile medical application? Mobile apps are software programs that run on smartphones and other mobile communication devices. They can also be accessories that attach to a smartphone or other mobile communication devices, or a combination of accessories and software. Mobile medical apps are medical devices that are mobile apps, meet the definition of a medical device and are an accessory to a regulated medical device or transform a mobile platform into a regulated medical device. 17 Slide 18 Copyright SoftQuest Systems 2013 Mobile Medical Applications - Continued The FDA is taking a tailored, risk-based approach that focuses on the small subset of mobile apps that meet the regulatory definition of device and that: are intended to be used as an accessory to a regulated medical device, or transform a mobile platform into a regulated medical device. Mobile apps span a wide range of health functions. While many mobile apps carry minimal risk, those that can pose a greater risk to patients will require FDA review. 18 Slide 19 Copyright SoftQuest Systems 2013 80001 Application of risk management for IT-networks incorporating medical devices Application of risk management for IT-networks incorporating medical devices IEC 80001-1:2010, Part 1: Roles, responsibilities and activities IEC 80001-1:2010, Part 1: Roles, responsibilities and activities IEC 80001-2-1:2012, Part 2-1: Step by step risk management of medical IT-networks - Practical applications and examples IEC 80001-2-1:2012, Part 2-1: Step by step risk management of medical IT-networks - Practical applications and examples IEC 80001-2-2:2012, Part 2-2: Guidance for the disclosure and communication of medical device security needs, risks and controls IEC 80001-2-2:2012, Part 2-2: Guidance for the disclosure and communication of medical device security needs, risks and controls IEC 80001-2-3:2012, Part 2-3: Guidance for wireless networks IEC 80001-2-3:2012, Part 2-3: Guidance for wireless networks IEC 80001-2-4:2012, Part 2-4: General implementation guidance for Healthcare Delivery Organizations IEC 80001-2-4:2012, Part 2-4: General implementation guidance for Healthcare Delivery Organizations 19 Slide 20 Copyright SoftQuest Systems 2013 FDA Guidances Content of Premarket Submissions for Management of Cybersecurity in Medical Devices, draft, 14/6/13 Content of Premarket Submissions for Management of Cybersecurity in Medical Devices, draft, 14/6/13 Radio Frequency Wireless Technology in Medical Devices, 14/8/13 Radio Frequency Wireless Technology in Medical Devices, 14/8/13 Global Unique Device Identification Database (GUDID) draft, 9/13 Global Unique Device Identification Database (GUDID) draft, 9/13 20 Slide 21 Copyright SoftQuest Systems 2013 Patient-Centric Integrated Clinical Environment (ICE) ASTM F2761-09 (2013), Medical Devices and Medical Systems Essential safety requirements for equipment comprising patient-centric integrated clinical environment (ICE) Part 1: General requirements for network control ASTM F2761-09 (2013), Medical Devices and Medical Systems Essential safety requirements for equipment comprising patient-centric integrated clinical environment (ICE) Part 1: General requirements for network control 21 Slide 22 Copyright SoftQuest Systems 2013 Future Software TIRs AAMI TIR on Guidance on Health Software Safety and Assurance AAMI TIR on Classification of defects contributing to unacceptable risk in health software 22 Slide 23 Copyright SoftQuest Systems 2013 Software Verification and Validation Verification provides