QSIT vs QMSR: FDA’s New Medical Device Inspection Framework Explained
For more than two decades, the Quality System Inspection Technique – known universally in the medical device industry as QSIT – defined how FDA investigators approached inspections of device manufacturers under 21 CFR Part 820. That era ended on February 2, 2026. On that date, the FDA’s new Quality Management System Regulation (QMSR) came into force, and with it a new inspection framework under Compliance Program Manual CP 7382.850 that replaces QSIT entirely.
The change is more than a rename. QSIT and the new QMSR inspection model reflect genuinely different philosophies about how quality systems should be evaluated and what FDA investigators are actually looking for. Understanding the difference matters for every medical device manufacturer that faces – or prepares for – an FDA inspection under 21 CFR Part 820.
What QSIT was, and why it worked
QSIT was created in 1999 as a structured, efficient approach to FDA medical device inspections under the Quality System Regulation (QSR). Its logic was straightforward: break the QSR into four major subsystems – Management Controls, Design Controls, Corrective and Preventive Actions (CAPA), and Production and Process Controls – and give investigators a defined path through each one.
The structured approach gave manufacturers predictability. If you knew an inspector was conducting a Level 1 inspection, you knew which subsystems they would cover and roughly what they would ask. This allowed quality teams to prepare targeted responses, brief subject matter experts, and ensure that the relevant documentation was ready to retrieve. For all its limitations, QSIT created a shared language between manufacturers and regulators that made FDA inspections manageable.
The FDA retired QSIT alongside the QSR on February 2, 2026. It confirmed explicitly that there would be no “QSIT 2.0” – no direct successor document structured around the old subsystem model.
Why the QSR and QSIT were replaced
The driver of change was harmonisation with international standards. The new QMSR incorporates ISO 13485:2016 by reference, effectively replacing the standalone QSR requirements with the internationally recognised standard for medical device quality management systems. This means 21 CFR Part 820 is now much shorter than before – most of its text simply directs manufacturers to the corresponding section of ISO 13485.
The intent is to reduce the dual compliance burden on manufacturers who already meet ISO 13485 requirements for CE marking, MDSAP, or other international purposes, and to align FDA expectations with the global baseline. For manufacturers already certified to ISO 13485, the transition may feel relatively familiar at the level of the written requirements. The FDA inspection side, however, is a different matter – and that is where QSIT’s replacement has the greatest practical impact.
The new QMSR inspection framework: six QMS areas
Just three days before QMSR took effect, the FDA published its new Compliance Program Manual for Inspection of Medical Device Manufacturers (CP 7382.850). This single document replaces both QSIT and the previously separate compliance programs for routine 21 CFR Part 820 inspections and PMA-related inspections.
Where QSIT organised FDA medical device inspections around four subsystems, CP 7382.850 is built around six Quality Management System areas:
- Management Oversight
- Design and Development
- Production and Service Provision
- Outsourcing and Purchasing
- Change Control
- Measurement, Analysis, and Improvement
These six areas are supplemented by four categories of Other Applicable FDA Requirements:
- Complaints
- Medical Device Reporting (MDR)
- Corrections and removals
- Unique Device Identification (UDI) obligations
The structural difference matters less than what it reflects. Under QSIT, investigators followed a defined path through subsystems. Under the new QMSR inspection model, they do not follow a fixed order. Instead, they are instructed to use the manufacturer’s own risk management documentation to determine which areas to prioritise, which records to sample, and how deeply to examine each element. The FDA inspection follows the risk, not the checklist.
Risk management is now central to how FDA inspections are conducted
The most consequential shift in the new QMSR inspection model is the explicit placement of patient and user risk at the centre of every inspection decision. The compliance manual places patients and users at the heart of the model and instructs investigators to connect every finding to its potential impact on device users.
In practice, this means that risk management under ISO 14971 is no longer a background document produced for regulatory submissions. It is the roadmap that an FDA investigator will use to navigate your quality system under 21 CFR Part 820. Weak or inconsistent risk documentation does not just create a finding in itself – it signals to the investigator where to look harder across all six QMS areas.
For manufacturers accustomed to QSIT, the practical implication is significant: the depth of an FDA inspection is no longer fixed by inspection type. It expands wherever risk signals are found. A complaint record that connects to a design issue, which connects to a CAPA that has not been closed, which connects to management review records that do not reflect awareness of the problem – that chain will be followed, and each weak link becomes an observation.
Management oversight: from light-touch subsystem to inspection priority
Under QSIT, management controls were one of four subsystems, and in practice they were often among the lighter parts of an FDA inspection. Under the new QMSR framework, management oversight is the first of the six QMS areas and is treated as central to whether a quality system is genuinely functioning under 21 CFR Part 820.
This means FDA investigators may now review management review records, internal audit outcomes and follow-up actions, supplier audit results, and evidence of risk-based decision making at leadership level. The FDA’s position under QMSR is that executive management should be visibly exercising its responsibility for quality compliance through an integrated QMS – not simply signing off on documentation as a formality.
For many medical device manufacturers, this will require a shift in how management review is conducted and recorded. The record should demonstrate that leadership is actively aware of quality trends, that decisions are being made on the basis of real data, and that systemic issues are being addressed. A management review that looks like a completed checklist rather than a genuine business review is likely to draw questions under CP 7382.850.
What has not changed under QMSR
Despite the new structure, manufacturers should not expect FDA inspections to become lighter or narrower under QMSR. The familiar areas – complaints, MDR obligations, design controls, supplier controls, production processes, CAPA – remain firmly within scope under 21 CFR Part 820. What has changed is how they are evaluated.
Under QSIT, subsystems were often reviewed in relative isolation. Under the new QMSR inspection framework, the same areas are assessed in context, connected through risk management and postmarket surveillance signals. A complaint that should have triggered a corrective action but did not, a design change that was not assessed for risk impact, a supplier qualification that has not been reviewed against recent performance data – these disconnects are now more likely to be identified and more likely to result in 483 observations.
The FDA has also formalised its Remote Regulatory Assessment programme, which allows the agency to request records in advance of or in lieu of an on-site visit. This means inspection readiness under QMSR is relevant even when no physical visit is scheduled.
Practical implications for medical device manufacturers
The transition from QSIT to the new QMSR inspection framework has three immediate implications for medtech quality teams.
First, the predictability that QSIT provided is gone. Manufacturers can no longer plan for a defined sequence of subsystem reviews. FDA investigators will follow the risk story in your quality system, which means that every area of the QMS under 21 CFR Part 820 needs to be ready – not just the ones historically scrutinised in depth under QSIT.
Second, integration matters more than completeness. The organisations that will face the most difficulty under the new QMSR model are not necessarily those with the most compliance gaps, but those whose quality systems do not tell a coherent risk story. If your risk management, CAPA, change control, complaints, and management review activities function as separate processes rather than as a connected system, that disconnect will be visible.
Third, management engagement needs to be real and documented. The new compliance manual makes explicit what regulators have increasingly expected: that quality is not a function managed by the quality department in isolation, but a business discipline that leadership actively owns. Preparing for a QMSR inspection now includes preparing senior leadership for direct investigator questions about quality trends and decision making.
How Apotech can help
The move to QMSR and the new FDA inspection framework is one of the most significant changes to 21 CFR Part 820 compliance in a generation. It changes not just what medical device manufacturers need to comply with, but how they need to demonstrate that compliance under the scrutiny of a regulatory visit.
Apotech’s FDA Mock Inspections for MedTech are already aligned with CP 7382.850, testing your quality system against the six QMSR areas and the risk-based inspection approach that FDA investigators are now applying. Our FDA QMSR compliance support helps manufacturers close the gap between their existing QSR-era systems and what QMSR now requires. For companies working toward international alignment, our ISO 13485 and MDSAP services provide the broader quality system foundation that the new inspection model assumes.
To understand where your organisation stands ahead of your next FDA inspection, speak with our team.