1、BSI Standards Publication Medical device software Part 3: Process reference model of medical device software life cycle processes (IEC 62304) PD IEC/TR 80002-3:2014National foreword This Published Document is the UK implementation of IEC/TR 80002-3:2014. The UK participation in its preparation was e
2、ntrusted by Technical Com- mittee CH/62, Electrical Equipment in Medical Practice, to Subcommittee CH/62/1, Common aspects of Electrical Equipment used in Medical Practice. A list of organizations represented on this committee can be obtained on request to its secretary. This publication does not pu
3、rport to include all the necessary provisions of a contract. Users are responsible for its correct application. The British Standards Institution 2014. Published by BSI Standards Limited 2014 ISBN 978 0 580 85976 2 ICS 11.040.01 Compliance with a British Standard cannot confer immunity from legal ob
4、ligations. This Published Document was published under the authority of the Standards Policy and Strategy Committee on 31 July 2014. Amendments/corrigenda issued since publication Date Text affected PUBLISHED DOCUMENT PD IEC/TR 80002-3:2014 IEC TR 80002-3 Edition 1.0 2014-06 INTERNATIONAL STANDARD M
5、edical device software Part 3: Process reference model of medical device software life cycle processes (IEC 62304) INTERNATIONAL ELECTROTECHNICAL COMMISSION U ICS 11.040.01 PRICE CODE ISBN 978-2-8322-1616-3 Warning! Make sure that you obtained this publication from an authorized distributor. PD IEC/
6、TR 80002-3:2014 2 IEC TR 80002-3:2014 IEC 2014 CONTENTS FOREWORD . 3 INTRODUCTION . 5 0.1 Background . 5 0.2 Organization of this technical report 5 1 Scope 6 2 Normative references 6 3 Terms and definitions 6 4 Medical device software life cycle processes . 7 4.1 Software development process . 7 So
7、ftware development planning . 7 4.1.1Software requirements analysis . 8 4.1.2Software architectural design . 8 4.1.3Software detailed design . 9 4.1.4Software unit implementation and verification 9 4.1.5Software integration and integration testing . 10 4.1.6Software system testing . 10 4.1.7Software
8、 release . 11 4.1.8 4.2 Software maintenance 11 Purpose . 11 4.2.1Outcomes 11 4.2.2 4.3 Software risk management 12 Purpose . 12 4.3.1Outcomes 12 4.3.2 4.4 Software configuration management . 13 Purpose . 13 4.4.1Outcomes 13 4.4.2 4.5 Software problem resolution 14 Purpose . 14 4.5.1Outcomes 14 4.5.
9、2 Annex A (informative) Development of this technical report . 16 Annex B (informative) Mapping between IEC 62304:2006 and ISO/IEC 12207:2008 18 Bibliography 28 Figure A.1 Requirements in process elements of IEC 62304:2006 and ISO/IEC 12207:2008 . 16 Figure A.2 Development of process outcomes for me
10、dical device software development PRM 17 Table A.1 Direct process mappings between IEC 62304:2006 and ISO/IEC 12207:2008 . 17 Table B.1 Mapping between process outcomes of the PRM and the requirements of IEC 62304:2006, including their safety classes, and the requirements of ISO/IEC 12207:2008 (1 of
11、 9) . 19 PD IEC/TR 80002-3:2014IEC TR 80002-3:2014 IEC 2014 3 INTERNATIONAL ELECTROTECHNICAL COMMISSION _ MEDICAL DEVICE SOFTWARE Part 3: Process reference model of medical device software life cycle processes (IEC 62304) FOREWORD 1) The International Electrotechnical Commission (IEC) is a worldwide
12、 organization for standardization comprising all national electrotechnical committees (IEC National Committees). The object of IEC is to promote international co-operation on all questions concerning standardization in the electrical and electronic fields. To this end and in addition to other activi
13、ties, IEC publishes International Standards, Technical Specifications, Technical Reports, Publicly Available Specifications (PAS) and Guides (hereafter referred to as “IEC Publication(s)”). Their preparation is entrusted to technical committees; any IEC National Committee interested in the subject d
14、ealt with may participate in this preparatory work. International, governmental and non- governmental organizations liaising with the IEC also participate in this preparation. IEC collaborates closely with the International Organization for Standardization (ISO) in accordance with conditions determi
15、ned by agreement between the two organizations. 2) The formal decisions or agreements of IEC on technical matters express, as nearly as possible, an international consensus of opinion on the relevant subjects since each technical committee has representation from all interested IEC National Committe
16、es. 3) IEC Publications have the form of recommendations for international use and are accepted by IEC National Committees in that sense. While all reasonable efforts are made to ensure that the technical content of IEC Publications is accurate, IEC cannot be held responsible for the way in which th
17、ey are used or for any misinterpretation by any end user. 4) In order to promote international uniformity, IEC National Committees undertake to apply IEC Publications transparently to the maximum extent possible in their national and regional publications. Any divergence between any IEC Publication
18、and the corresponding national or regional publication shall be clearly indicated in the latter. 5) IEC itself does not provide any attestation of conformity. Independent certification bodies provide conformity assessment services and, in some areas, access to IEC marks of conformity. IEC is not res
19、ponsible for any services carried out by independent certification bodies. 6) All users should ensure that they have the latest edition of this publication. 7) No liability shall attach to IEC or its directors, employees, servants or agents including individual experts and members of its technical c
20、ommittees and IEC National Committees for any personal injury, property damage or other damage of any nature whatsoever, whether direct or indirect, or for costs (including legal fees) and expenses arising out of the publication, use of, or reliance upon, this IEC Publication or any other IEC Public
21、ations. 8) Attention is drawn to the Normative references cited in this publication. Use of the referenced publications is indispensable for the correct application of this publication. 9) Attention is drawn to the possibility that some of the elements of this IEC Publication may be the subject of p
22、atent rights. IEC shall not be held responsible for identifying any or all such patent rights. The main task of IEC technical committees is to prepare International Standards. However, a technical committee may propose the publication of a technical report when it has collected data of a different k
23、ind from that which is normally published as an International Standard, for example “state of the art“. IEC TR 80002-3, which is a technical report, has been prepared by a Joint Working Group of subcommittee 62A: Common aspects of electrical equipment used in medical practice, of IEC technical commi
24、ttee 62: Electrical equipment in medical practice, and ISO technical committee 210: Quality management and corresponding general aspects for medical devices. It is published as a double logo standard. PD IEC/TR 80002-3:2014 4 IEC TR 80002-3:2014 IEC 2014 The text of this technical report is based on
25、 the following documents: Enquiry draft Report on voting 62A/918/DTR 62A/928/RVC Full information on the voting for the approval of this technical report can be found in the report on voting indicated in the above table. In ISO, the technical report has been approved by 14 P members out of 16 having
26、 cast a vote. This publication has been drafted in accordance with the ISO/IEC Directives, Part 2 and in accordance with ISO/IEC 24774, Systems and software engineering Life cycle management Guidelines for process description. A list of all parts of the IEC 80002 series, published under the general
27、title Medical device software, can be found on the IEC website. The committee has decided that the contents of this publication will remain unchanged until the stability date indicated on the IEC web site under “http:/webstore.iec.ch“ in the data related to the specific publication. At this date, th
28、e publication will be reconfirmed, withdrawn, replaced by a revised edition, or amended. A bilingual version of this publication may be issued at a later date. PD IEC/TR 80002-3:2014IEC TR 80002-3:2014 IEC 2014 5 INTRODUCTION 0.1 Background Software is often an integral part of medical device techno
29、logy. Establishing the safety and effectiveness of a medical device containing software requires well designed software that fulfils its purpose without causing any unacceptable risks. Following an internationally approved set of software development practices provides one way of achieving this. Thi
30、s technical report (TR) provides a framework of life cycle processes supporting the safe design and maintenance of medical device software called the process reference model (PRM). The process descriptions in this PRM are fully compliant with the requirements of ISO/IEC 24774:2010, Systems and softw
31、are engineering Life cycle management Guidelines for process description. This TR presents the PRM for medical device software development as a result of integrating requirements from IEC 62304:2006 and from the international standard of software life-cycle processes ISO/IEC 12207:2008. This TR is a
32、imed at medical device software developers who can use it for realizing the set of requirements they have to achieve to be compliant with IEC 62304:2006 in the scope of the safety class of the medical device software they are developing. Each process outcome with a corresponding safety class is a re
33、quirement in IEC 62304:2006. The process outcomes without a corresponding safety class are based only on ISO/IEC 12207:2008. These process outcomes provide additions that are beneficial when achieving the purpose of the process and could be regarded as a valuable contribution to safety-critical soft
34、ware development. The PRM may also be used to provide a common basis for different models and methods for process assessment, ensuring that the results of the assessments can be reported in a common context. Assessors who are concerned with examining medical device software processes can use the PRM
35、 as an agreed list of IEC 62304 process outcomes to inform audit check listing and reporting. The process descriptions in the PRM incorporate a statement of the purpose of the process which describes at a high level the overall objectives of performing the process, together with the set of outcomes
36、which demonstrate the successful achievement of the process purpose. These process outcomes are the software life cycle process requirements the statements of the overall goal of performing the process. In any process description, the set of process outcomes are necessary and sufficient to achieve t
37、he purpose of the process. A manufacturer of a medical device software system is required to assign a software safety class (A, B, or C) according to the possible effects on the patient, operator, or other people resulting from a hazard to which the software system contributes, described in greater
38、detail in IEC 62304:2006. The software safety classes are assigned based on severity as follows: Class A: no injury or damage to health is possible; Class B: non-serious injury is possible; Class C: death or serious injury is possible. 0.2 Organization of this technical report This TR is organized t
39、o follow the structure of IEC 62304. Annex A describes the development of the TR in greater detail. Annex B provides a mapping from IEC 62304 clauses together with their safety classes to the corresponding ISO/IEC 12207:2008 processes. The life cycle processes of the PRM for medical device software
40、development are described in terms of process name, process purpose and the corresponding process outcomes. The outcomes marked with an “ISO/IEC 12207” at the end of the outcome statement are derived from ISO/IEC 12207:2008, with no directly corresponding requirement in IEC 62304. Users of this PRM
41、who wish to examine only the IEC 62304 requirements can elect to disregard the outcomes that are based only on ISO/IEC 12207:2008. PD IEC/TR 80002-3:2014 6 IEC TR 80002-3:2014 IEC 2014 MEDICAL DEVICE SOFTWARE Part 3: Process reference model of medical device software life cycle processes (IEC 62304)
42、 1 Scope This part of IEC 80002, which is a technical report (TR), provides the description of software life cycle processes for medical devices. The medical device software life cycle processes are derived from IEC 62304:2006, with corresponding safety classes. They have been aligned with the softw
43、are development life cycle processes of ISO/IEC 12207:2008 and are presented herein in full compliance with ISO/IEC 24774:2010. The content of these three standards provides the foundation of this TR. This TR does not address: areas already covered by existing related standards, e.g. the internation
44、al standards that relate to the four standards used to build this TR (see Bibliography); FDA guidance documents; or software development tools. This TR describes the PRM for medical device software development and is limited in scope to the life cycle processes described in IEC 62304:2006. The proce
45、ss names correspond to those of IEC 62304:2006. The mappings provided in Annex B are essential for the alignment between IEC 62304:2006 (which is based on ISO/IEC 12207:1995) and ISO/IEC 12207:2008, developed to address the detailed normative relationship between the two standards. This technical re
46、port is not intended to be used as the basis of regulatory inspection or certification assessment activities. 2 Normative references The following documents, in whole or in part, are normatively referenced in this document and are indispensable for its application. For dated references, only the edi
47、tion cited applies. For undated references, the latest edition of the referenced document (including any amendments) applies. IEC 62304:2006, Medical device software Software life cycle processes ISO/IEC 12207:2008, Systems and software engineering Software life cycle processes 3 Terms and definitio
48、ns For the purposes of this document, the terms and definitions given in IEC 62304:2006 apply. NOTE To be consistent with the requirements for developing a PRM, the guidelines set forth in ISO/IEC 24774 were followed. Having a dedicated software risk management process enables the software developer
49、s to realize the set of requirements they have to adhere to when developing software for medical devices. This PRM also enables the medical device software developers to determine the requirements necessary to develop software for a specific safety class. The PRM presented in this TR includes only the software risk management requirements of ISO 14971 that are a part of IEC 62304. The software risk management terminology is therefore derived directly from ISO 14971. For the purposes of this TR, t
