Failure to validate computer software for its intended use in production according to established protocol. All software changes shall be validated before approval and issuance. These validation activities and results shall be documented as required by 21 C.F.R. § 820.70(i). For example, your firm failed to validate, according to established procedures, the automated mills and lathes that are used in the manufacturing of components for the PL5 2008 medical laser. Your firm installed [redacted]automated mills and one automated lathe during December, 2006 but your firm could not provide an established validation protocol for the validation of the automated systems or provide any documentation that showed the systems and their controlling software that were used in the manufacture of metal and plastic components of the PL5 Medical Laser were validated. 5. Failure to establish and maintain adequate procedures for validating the device design that includes software validation and risk analysis, where appropriate, as required by 21 C.F.R. § 820.30(g).
View the original warning letter.