What Level 1 Production & Process Controls Maturity Looks Like in Medical Device Organizations

The batch record for Lot 2024-0847 has a handwritten correction on line 14. No initials, no date, no explanation. The in-process measurement on line 22 is blank — the operator told the supervisor the gauge was broken that day. The environmental monitoring log for the cleanroom shows a gap from Thursday to Monday. Nobody noticed. This is what production looks like when process controls exist on paper but not on the floor.

Level 1 production controls are not the absence of documentation. Most organizations at this level have work instructions, batch records, and quality procedures. The problem is that these documents describe a manufacturing process that does not match what actually happens during production. The work instruction says to verify torque with a calibrated wrench. The wrench has been out of calibration for three months. The batch record includes a field for recording ambient temperature. The thermometer on the wall has not had its batteries replaced since last year. The procedure says deviations must be documented on a nonconformance report. The last NCR was written four months ago, and the reject bin has material in it from last week.

This disconnect between the documented system and the actual operation is the defining characteristic of Level 1. It is not a training problem or a personnel problem. It is a systems problem. The controls were designed on paper without accounting for the reality of a production floor where gauges break, operators are pulled between lines, and the pressure to ship overwhelms the discipline to stop and document.

What the Production Floor Reveals

Walk a Level 1 manufacturing floor during second shift and the gaps become visible quickly. Work instructions at workstations are often outdated revisions — the document control system updated the master, but no one replaced the copies on the floor. Equipment settings are based on what the setup technician learned from the previous setup technician, passed along verbally because the documented parameters either do not exist or do not work reliably. Operators make real-time adjustments based on how the product looks or feels, and these adjustments are invisible to the quality system because there is no mechanism to capture them.

Process validation at this level is either absent or ceremonial. The organization may have IQ/OQ/PQ documentation for some processes, typically the ones flagged in a previous audit. But the protocols were written to confirm engineering judgments rather than to genuinely explore process boundaries. Sample sizes were chosen for convenience rather than statistical power. Worst-case conditions were not tested because the engineering team was confident the process would fail under stress. The resulting validation package satisfies no one — not the regulators who will eventually scrutinize it, and not the manufacturing team who knows the process behaves differently than the protocols suggest.

Equipment maintenance is reactive. Machines run until they fail, are repaired, and returned to production without any assessment of whether the failure affected product that was in process at the time. There are no equipment logs that track performance trends. Downtime is treated as an unavoidable cost rather than a signal that something in the process is degrading.

The Documentation Gap

Device History Records at Level 1 are incomplete in ways that create serious traceability problems. If a field complaint arrives nine months after production, the organization cannot reconstruct the conditions under which that specific unit was manufactured. Which material lot was used? What were the process parameters? Was the cleanroom within specification that day? Who performed the critical assembly step? The DHR either does not contain this information or contains information that cannot be trusted because it was recorded retroactively at the end of the shift rather than contemporaneously at each process step.

Batch records are completed as paperwork exercises rather than real-time production records. Operators fill in blanks at the end of a run, estimating values they did not actually measure. Corrections are made without following good documentation practices — single-line strikethroughs with initials and dates give way to whiteout, overwriting, and blank fields that nobody questions during the perfunctory batch record review that precedes release.

Production deviations go unrecorded because the informal culture on the floor treats them as normal variation to be managed in the moment rather than events that require documentation and investigation. The operator who encounters an unexpected condition adjusts and moves on. The supervisor who sees scrap accumulating attributes it to a bad material lot and does not write it up. The pattern of recurring problems is invisible because each individual occurrence is handled ad hoc and forgotten.

Regulatory Exposure

The regulatory risk at Level 1 is not theoretical. Process validation deficiencies are among the most frequently cited observations in FDA Warning Letters to medical device manufacturers. Under 21 CFR 820.75, processes whose results cannot be fully verified by subsequent inspection and test must be validated — and this applies to virtually every process that involves bonding, sealing, welding, sterilization, or software-controlled assembly. An FDA investigator examining Level 1 operations will generate Form 483 observations across multiple subsections, and the observations will be characterized as systemic rather than isolated.

ISO 13485 Section 7.5.2 mirrors these validation requirements. EU MDR Annex IX reinforces them within the quality management system assessment that Notified Bodies perform. For organizations selling into regulated markets, Level 1 production controls are not a maturity concern — they are an existential business risk.

The Path Forward

Moving from Level 1 to Level 2 does not require sophisticated technology or massive capital investment. It requires discipline applied to fundamentals. Inventory every production process and classify which ones require formal validation. Establish work instructions that include specific parameters, verification points, and acceptance criteria — and keep them current at the point of use. Implement a Device History Record template that captures what 21 CFR 820.184 actually requires. Create a deviation procedure that operators will actually use, which means making it fast enough and simple enough that documenting a problem is less effort than ignoring it.

Most critically, begin collecting basic production metrics: first-pass yield, scrap rate, rework rate. These numbers will be uncomfortable at first. That discomfort is the point. You cannot improve what you do not measure, and at Level 1, the absence of measurement is what allows the gap between the documented system and the actual operation to persist unchallenged.

The MedTechCMM production controls assessment identifies exactly where your Level 1 gaps create the greatest risk and which improvements will yield the largest return. Take the assessment at /assessments/production-controls.