Implementing a structured ISO 14971 FMEA Risk Scoring process is essential for evaluating supplier modifications under ISO 13485.

When a raw material or component supplier issues a Supplier Change Notification (SCN), quality engineers face a high-stakes challenge: proving that the modification won’t introduce hidden failure modes into medical device manufacturing.

In medical device quality management under ISO 13485 and ISO 14971, relying on historical, static “Low” Risk Priority Numbers (RPN) is one of the leading causes of audit non-conformances during notified body inspections. When a supplier alters a resin grade, molding cycle time, or masterbatch additive, subtle shifts in tensile yield, cure rates, or particulate generation can completely invalidate legacy risk assumptions.

This guide provides a standardized 1–10 FMEA risk scoring scale tailored for ISO 14971 compliance, along with a 5-point evaluation checklist to audit supplier changes effectively.

---

ISO 14971 Risk Scoring Reference Scale (1–10 Definitions)

How to Execute ISO 14971 FMEA Risk Scoring for Supplier Changes

To satisfy FDA and notified body auditors, risk scoring criteria must be strictly defined, documented, and applied consistently across all Design (DFMEA) and Process (PFMEA) evaluations prior to executing risk files.

Lvl	Severity (S) — Harm / Impact	Occurrence (O) — Probability	Detection (D) — Control Effectiveness
1	No Effect — No impact on device function	Remote — < 1 in 100,000	Very High — Defect almost certain to be detected
2	Minor — Slight performance degradation	Very Low — 1 in 50,000 to 100,000	Very High — Defect very likely to be detected
3	Low — Noticeable effect but manageable	Low — 1 in 10,000 to 50,000	High — Defect likely to be detected
4	Moderate — Significant performance reduction	Low-Medium — 1 in 1,000 to 10,000	High — Defect probably will be detected
5	Medium — Serious functional impairment	Medium — 1 in 100 to 1,000	Moderate — Defect may or may not be detected
6	High — Major impact on functionality	Medium-High — 1 in 50 to 100	Moderate — Defect probably will not be detected
7	Very High — Critical functional loss	High — 1 in 10 to 50	Low — Defect unlikely to be detected
8	Severe — Potential for temporary harm	Very High — 1 in 5 to 10	Very Low — Defect very unlikely to be detected
9	Critical — Potential for serious injury	Very High — 1 in 2 to 5	Very Low — Defect almost never detected
10	Fatal / Irreversible — Death or permanent harm	Extremely High — > 1 in 2	No Detection — No control to detect defect

Supplier Change FMEA Audit Checklist (5 Critical Risk Checks)

When a supplier modifies a raw material, process parameter, or manufacturing site, use this 5-point checklist before closing out your risk review:

1. Material Grade & Additive Shift Analysis

Verify whether raw material suppliers, polymer grade additives, masterbatch pigments, or resin suppliers changed. Evaluate downstream impacts on biocompatibility, cure rates, particulate generation, and tensile yield shifts.

2. Processing Parameter & Dimensional Drift

Assess changes in injection molding cycle times, sterilization parameters, or machining tolerances. Determine if downstream receiving inspection is actually capable of detecting these subtle physical changes.

3. ISO 14971 Hazard Sequence Re-evaluation

Re-evaluate the full hazard chain: Hazard → Hazardous Situation → Harm. Update Severity, Occurrence, and Detection scores using standardized 1–10 definitions rather than guessing baseline scores.

4. Design Verification & Validation (V&V) Impact

Determine whether the supplier’s modification invalidates existing shelf-life stability data, transit testing, electrical safety, or biocompatibility test protocols.

5. Closed-Loop Documentation & Change Control

Ensure updated risk assessments are officially linked to your Change Order (ECN/DCO) package and ready for inspection during your next internal or notified body audit.

By maintaining consistent ISO 14971 FMEA Risk Scoring across all supplier changes, you keep your QMS audit-ready and fully compliant.

---

Conclusion & Next Steps

Relying on legacy FMEA scores when suppliers change raw materials creates massive audit liabilities. By standardizing your 1–10 scoring scales and executing closed-loop risk reviews, your quality team remains fully compliant under ISO 13485 and ISO 14971 requirements.

For more compliance templates and QMS toolkits built specifically for regulated medical device environments, explore the full resource library at QualityDocHub.com.

 

Surviving audit season? Check out our ‘Approved Protocol, Unapproved Reality’ mug & desk art collection at Charcoal Command Studio.