2625 Winsor Dr., Eau Claire, Wisconsin 54703
Resources

Regulation & Standard Library

A working reference to the regulations, guidance documents, and standards that govern validated systems and quality operations in pharmaceutical, biotech, and medical device organizations. Entries tagged CSV / Validation Relevant are the ones our candidates and clients reference most often in validation, change control, and quality systems work.

This library links directly to primary sources — eCFR, FDA, ISPE, and ISO — rather than summarizing them, so you're always reading the current version. Standards from ISO, IEC, ASTM, and AAMI are typically sold through their issuing bodies; we link to the official landing page for each rather than a free mirror. We review this list periodically, but always confirm against the source for anything inspection- or submission-critical.

Last reviewed June 2026
Start Here

Most relevant to Validation & CSV/CSA work

If you're validating, governing, or staffing for an ERP, MES, or other quality-impacting computerized system, these are the documents that come up most.

21 CFR Part 11

CSV / Validation

Electronic records and electronic signatures. The baseline requirement for audit trails, access controls, and e-signature integrity in any validated ERP, QMS, or MES module.

View on eCFR →

FDA Computer Software Assurance (CSA) Guidance

CSV / Validation

Final guidance (Sept. 2025; updated Feb. 2026) establishing a risk-based approach to validating production and quality system software, including ERP and MES modules. Supersedes Section 6 of the 2002 General Principles of Software Validation guidance.

View on FDA.gov →

ISPE GAMP® 5 (2nd Edition)

CSV / Validation

The industry-standard risk-based framework for computerized system validation, updated in 2022 to reflect CSA, cloud/SaaS, and agile development. The most commonly referenced non-regulatory guidance in ERP validation projects.

View on ISPE.org →

21 CFR Part 820 (QMSR)

CSV / Validation

Effective February 2, 2026, Part 820 now incorporates ISO 13485:2016 by reference as the Quality Management System Regulation. ERP and eQMS modules supporting device records, complaint handling, and labeling controls fall squarely within scope.

View on eCFR →

ISO 13485:2016

CSV / Validation

Quality management system requirements for medical device organizations, now incorporated directly into 21 CFR Part 820 by reference. Defines much of the recordkeeping and document control logic that ERP and QMS validation has to satisfy.

View on ISO.org →

21 CFR Parts 210 / 211

CSV / Validation

Current Good Manufacturing Practice for drugs. Batch records, change control, and material traceability requirements that any pharmaceutical ERP or MES implementation must be validated against.

View on eCFR →

Pharmaceutical & Biotech

Regulations and guidance governing drug and biologic manufacturing, from cGMP production through controlled substances and harmonized quality standards.

FDA Regulations

  • 21 CFR Part 210CSV / Validation

    General cGMP requirements applicable to drug manufacturing.

  • 21 CFR Part 211CSV / Validation

    Detailed cGMP for finished pharmaceuticals, including batch production and control records.

  • 21 CFR Part 312

    Investigational New Drug (IND) application requirements for clinical trial shipment.

  • 21 CFR Part 314

    Submission and review process for New Drug Applications (NDAs).

  • 21 CFR Part 600

    General provisions for the manufacture and testing of biological products.

  • 21 CFR Part 11CSV / Validation

    Electronic records and signatures requirements applicable across all GxP computerized systems.

USP Standards

  • USP General Chapters

    Standards for compounding and drug substance testing, including <795>, <797>, and <800>.

  • USP Monographs

    Substance-specific tests, procedures, and acceptance criteria for individual drug ingredients.

DEA Regulations

  • 21 CFR Part 1301

    Registration requirements for manufacturers, distributors, and dispensers of controlled substances.

  • 21 CFR Part 1302

    Labeling and packaging requirements intended to prevent misuse and diversion.

  • 21 CFR Part 1306

    Prescription requirements for controlled substances, including electronic prescribing.

ICH Guidelines

  • ICH Q1A–Q14 (Quality)

    Harmonized guidance on stability testing, impurity thresholds, and risk-based quality management (Q9, Q10).

Computerized Systems & Validation Guidance

  • GAMP® 5 (2nd Edition)CSV / Validation

    ISPE's risk-based framework for computerized system validation, updated 2022 for CSA, cloud, and agile delivery.

  • FDA CSA GuidanceCSV / Validation

    Final guidance on risk-based computer software assurance for production and quality system software.

Environmental Regulations

OSHA Standards

  • 29 CFR 1910.1200

    Hazard Communication Standard for classification and labeling of workplace chemicals.

  • 29 CFR 1910.1450

    Occupational exposure standard for hazardous chemicals in laboratory settings.

Export & Import Regulations

Export Administration Regulations (EAR)

Controls governing the export and re-export of dual-use items.

FDA Import & Export Programs

Requirements for importing pharmaceuticals and related products into the United States.

Medical Device

Regulations and standards governing device quality systems, design controls, and electrical, software, and sterilization safety — including the QMSR transition now underway.

FDA Regulations

  • 21 CFR Part 820 (QMSR)CSV / Validation

    Quality Management System Regulation, effective Feb. 2, 2026, incorporating ISO 13485:2016 by reference.

  • 21 CFR Part 803

    Medical Device Reporting obligations for device-related adverse events and malfunctions.

  • 21 CFR Part 806

    Reporting requirements for device corrections and field removals.

  • FDA CSA GuidanceCSV / Validation

    Risk-based software assurance guidance for production and quality management system software.

ISO Standards

  • ISO 13485:2016CSV / Validation

    Quality management system requirements for medical devices, now incorporated into 21 CFR Part 820.

  • ISO 14971

    Application of risk management to medical devices throughout the product lifecycle.

  • ISO 14155

    Good clinical practice for the design and conduct of clinical investigations of medical devices.

  • ISO 10993-1

    Principles for the biological evaluation of medical devices within a risk management process.

  • ISO 15223-1

    Symbols for use in device labeling, packaging, and accompanying information.

IEC Standards

  • IEC 60601-1

    General requirements for basic safety and essential performance of medical electrical equipment.

  • IEC 62304CSV / Validation

    Software life cycle requirements for medical device software, closely related to validation lifecycle practice.

  • IEC 62366

    Application of usability engineering to medical devices.

IEC standards link to the IEC's search portal — titles are not individually URL-addressable on iec.ch.

AAMI Standards

  • ANSI/AAMI ST79

    Comprehensive guide to steam sterilization and sterility assurance in healthcare facilities.

  • ANSI/AAMI HE75

    Human factors engineering principles for medical device design and usability.

  • ANSI/AAMI/ISO 11137

    Radiation sterilization requirements for healthcare products.

ASTM & UL Standards

  • ASTM F1980

    Accelerated aging methods for sterile barrier packaging systems.

  • UL 2900

    Cybersecurity series for network-connectable products, including connected medical devices.

NEMA Standards

  • NEMA XR 29-2013

    Dose optimization and management standard for CT equipment (MITA Smart Dose).

Navigating QMSR, CSA, or a validation backlog?

If a regulatory transition or a system validation effort means you need experienced hands now, we can help you find them.