Skip to content

Evidence request lists

IEC 60601-1 - Medical Electrical Equipment Safety

Evidence request list. 38 controls, 38 carrying auditor artefact guidance. Generated from the compliance knowledge graph on 11 September 2026. Published by The Art of Service.

Clause 1-3: Scope, References, and Terminology

60601-1.1
Scope, object, and related standards

Establishes applicability to medical electrical equipment (ME equipment) and medical electrical systems

Artefacts an auditor will ask for
  • Risk management file
  • Test report
  • Technical file
  • Instructions for use
  • Markings and labels
Where this commonly fails
  • Missing essential performance derivation
  • PEMS validation incomplete
  • Markings out of date
60601-1.2
Normative references

Referenced standards and documents for compliance with medical electrical equipment safety

Artefacts an auditor will ask for
  • Risk management file
  • Test report
  • Technical file
  • Instructions for use
  • Markings and labels
Where this commonly fails
  • Missing essential performance derivation
  • PEMS validation incomplete
  • Markings out of date
60601-1.3
Terminology and definitions

Definitions specific to medical electrical equipment including applied part, patient, and ME system

Artefacts an auditor will ask for
  • Risk management file
  • Test report
  • Technical file
  • Instructions for use
  • Markings and labels
Where this commonly fails
  • Missing essential performance derivation
  • PEMS validation incomplete
  • Markings out of date

Clause 11-14: Temperatures, Accuracy, Faults, and PEMS

60601-1.11
Protection against excessive temperatures and other hazards

Maximum touch temperatures, flammability standards, liquid overflow prevention, and biocompatibility per ISO 10993

Artefacts an auditor will ask for
  • PEMS development file
  • Temperature test record
  • Single-fault analysis
Where this commonly fails
  • Missing essential performance derivation
  • PEMS validation incomplete
  • Markings out of date
60601-1.12
Accuracy of controls and instruments

Usability engineering importance in safe medical device design and accuracy requirements

Artefacts an auditor will ask for
  • PEMS development file
  • Temperature test record
  • Single-fault analysis
Where this commonly fails
  • Missing essential performance derivation
  • PEMS validation incomplete
  • Markings out of date
60601-1.13
Hazardous situations and fault conditions

Prohibits flame emission, molten metal, and other specific hazards under single fault conditions

Artefacts an auditor will ask for
  • PEMS development file
  • Temperature test record
  • Single-fault analysis
Where this commonly fails
  • Missing essential performance derivation
  • PEMS validation incomplete
  • Markings out of date
60601-1.14
Programmable electrical medical systems (PEMS)

Firmware and software safety through development lifecycle, validation, and verification referencing IEC 62304

Artefacts an auditor will ask for
  • PEMS development file
  • Temperature test record
  • Single-fault analysis
Where this commonly fails
  • Missing essential performance derivation
  • PEMS validation incomplete
  • Markings out of date

Clause 15-17: Construction, ME Systems, and EMC

60601-1.15
Construction of ME equipment

Serviceability, impact/drop testing, cord specifications, battery requirements, and transformer construction standards

Artefacts an auditor will ask for
  • Construction drawings
  • ME system risk file
  • EMC test report
Where this commonly fails
  • Missing essential performance derivation
  • PEMS validation incomplete
  • Markings out of date
60601-1.16
ME systems

Interconnected multiple devices; documentation, separation devices, and power supply requirements for touch and leakage currents

Artefacts an auditor will ask for
  • Construction drawings
  • ME system risk file
  • EMC test report
Where this commonly fails
  • Missing essential performance derivation
  • PEMS validation incomplete
  • Markings out of date
60601-1.17
Electromagnetic compatibility (EMC)

Electrostatic discharge, radiated/conducted immunity, power line perturbations; defers to collateral standard IEC 60601-1-2

Artefacts an auditor will ask for
  • Construction drawings
  • ME system risk file
  • EMC test report
Where this commonly fails
  • Missing essential performance derivation
  • PEMS validation incomplete
  • Markings out of date

Clause 4-5: General Requirements and Testing

60601-1.4.1
General requirements

Mandates ISO 14971 risk management techniques and defines Essential Performance and Single Fault Safety principles

Artefacts an auditor will ask for
  • Risk management file
  • Test report
  • Technical file
  • Instructions for use
  • Markings and labels
Where this commonly fails
  • Missing essential performance derivation
  • PEMS validation incomplete
  • Markings out of date
60601-1.4.2
Risk management process

Requirement to apply a risk management process throughout the product lifecycle per ISO 14971

Artefacts an auditor will ask for
  • Risk management file
  • Test report
  • Technical file
  • Instructions for use
  • Markings and labels
Where this commonly fails
  • Missing essential performance derivation
  • PEMS validation incomplete
  • Markings out of date
60601-1.5.1
General requirements for testing

Testing shall be conducted under the least-favourable operating conditions as guided by Risk Management Files

Artefacts an auditor will ask for
  • Risk management file
  • Test report
  • Technical file
  • Instructions for use
  • Markings and labels
Where this commonly fails
  • Missing essential performance derivation
  • PEMS validation incomplete
  • Markings out of date
60601-1.5.2
Test conditions and environment

Specified environmental conditions and test setups for safety testing of ME equipment

Artefacts an auditor will ask for
  • Risk management file
  • Test report
  • Technical file
  • Instructions for use
  • Markings and labels
Where this commonly fails
  • Missing essential performance derivation
  • PEMS validation incomplete
  • Markings out of date

Clause 6-7: Classification, Identification and Marking

60601-1.6
Classification of ME equipment and systems

Device class (I or II), applied part type (B, BF, CF), ingress protection, sterilization, and oxygen atmosphere suitability

Artefacts an auditor will ask for
  • Classification rationale
  • Label artwork
  • Instructions for use
Where this commonly fails
  • Missing essential performance derivation
  • PEMS validation incomplete
  • Markings out of date
60601-1.7.1
Equipment identification and marking

Labeling durability, legibility, measurement units, symbols, and required marking on ME equipment

Artefacts an auditor will ask for
  • Classification rationale
  • Label artwork
  • Instructions for use
Where this commonly fails
  • Missing essential performance derivation
  • PEMS validation incomplete
  • Markings out of date
60601-1.7.2
Documents and instructions for use

Requirements for instructions for use, technical description, and accompanying documents

Artefacts an auditor will ask for
  • Classification rationale
  • Label artwork
  • Instructions for use
Where this commonly fails
  • Missing essential performance derivation
  • PEMS validation incomplete
  • Markings out of date

Clause 8-10: Protection Against Hazards

60601-1.10
Protection against radiation hazards

IR, UV, microwave, X-ray, and particle radiation protection referencing IEC 60825-1 and IEC 62471-1

Artefacts an auditor will ask for
  • Hazard analysis
  • Dielectric strength test
  • Mechanical strength test
  • Radiation safety report
Where this commonly fails
  • Missing essential performance derivation
  • PEMS validation incomplete
  • Markings out of date
60601-1.8
Protection against electrical hazards

Means of Patient Protection (MOPP) and Operator Protection (MOOP); creepage and clearance requirements

Artefacts an auditor will ask for
  • Hazard analysis
  • Dielectric strength test
  • Mechanical strength test
  • Radiation safety report
Where this commonly fails
  • Missing essential performance derivation
  • PEMS validation incomplete
  • Markings out of date
60601-1.9
Protection against mechanical hazards

Moving parts, trapping zones, emergency stops, stability, and structural integrity requirements

Artefacts an auditor will ask for
  • Hazard analysis
  • Dielectric strength test
  • Mechanical strength test
  • Radiation safety report
Where this commonly fails
  • Missing essential performance derivation
  • PEMS validation incomplete
  • Markings out of date

Collateral - EMC

60601-1-2
Electromagnetic Compatibility

Equipment meets EMC emission and immunity requirements per IEC 60601-1-2 including for the intended use environment.

Artefacts an auditor will ask for
  • EMC test plan
  • EMC test reports
  • Immunity test pass criteria linked to essential performance
Where this commonly fails
  • Immunity criteria not linked to essential performance
  • Home healthcare environment not tested

Collateral - Environment

60601-1-11
Home Healthcare Environment

Equipment for use in the home healthcare environment meets enhanced requirements for mechanical robustness, environmental conditions and lay user operation.

Artefacts an auditor will ask for
  • Home use risk analysis
  • Drop and vibration test reports
  • Lay user IFU and quick reference
Where this commonly fails
  • Voltage variation tests not done
  • Lay user IFU written at clinician level
60601-1-12
Emergency Medical Services Environment

Equipment intended for emergency medical services meets requirements for harsh environments including shock, vibration and temperature.

Artefacts an auditor will ask for
  • EMS environment risk analysis
  • Environmental qualification test reports
  • Battery operation testing
Where this commonly fails
  • Environmental conditioning incomplete
  • Battery low temperature performance not characterised

Collateral - Usability

60601-1-6
Usability Engineering

Apply a usability engineering process compliant with IEC 62366-1 with summative evaluation for use error mitigation.

Artefacts an auditor will ask for
  • Use specification
  • Use related risk analysis
  • Formative and summative evaluation reports
  • Use error log
Where this commonly fails
  • Summative evaluation not on production equivalent
  • Use errors not traced to risk controls

Construction

60601-1-15
Construction and Components

Components are selected and used within their ratings with attention to mains parts, capacitors and connectors.

Artefacts an auditor will ask for
  • Critical component list
  • Component certification (recognised)
  • Derating analysis
Where this commonly fails
  • Recognised component certificates expired
  • Derating analysis missing for capacitors

Electrical

60601-1-10
Protective Earth Connection

Class I equipment has a low impedance protective earth path verified by test.

Artefacts an auditor will ask for
  • Earth bond test report
  • Production routine test records
Where this commonly fails
  • No routine production test on earth bond
  • Earth resistance exceeds 100 mohm
60601-1-8
Alarm Systems

Alarm systems meet requirements for priority, audibility, escalation and operator response per IEC 60601-1-8.

Artefacts an auditor will ask for
  • Alarm condition list with priority
  • Audibility test report
  • Alarm system risk assessment
Where this commonly fails
  • Audibility not tested at intended use distance
  • Distributed alarm system gaps in handoff
60601-1-9
Leakage Current Testing

Earth leakage, touch current and patient leakage currents are within specified limits under normal and single fault conditions.

Artefacts an auditor will ask for
  • Leakage current test report
  • Single fault condition records
  • Test setup photos
Where this commonly fails
  • Single fault conditions not all tested
  • Test results not retained per unit type

General Requirements

60601-1-4.2
Risk Management Process

A risk management process compliant with ISO 14971 is established and maintained throughout the device lifecycle.

Artefacts an auditor will ask for
  • Risk management plan
  • Risk management file
  • Risk assessment records
  • Risk management report
Where this commonly fails
  • Risk file not updated post change
  • Risk benefit analysis absent
60601-1-4.3
Essential Performance

Identify the essential performance of the device and document acceptance criteria for loss or degradation.

Artefacts an auditor will ask for
  • Essential performance definition
  • Acceptance criteria
  • Verification test reports
Where this commonly fails
  • Essential performance undefined
  • Criteria not linked to clinical impact
60601-1-4.5
Equivalent Safety

Justify equivalent or higher safety where alternative means are used in place of specified requirements.

Artefacts an auditor will ask for
  • Equivalent safety justification
  • Comparative risk analysis
  • Test data demonstrating equivalence
Where this commonly fails
  • No documented justification
  • Equivalence based on opinion not data

Information

60601-1-16
Marking, Labelling and Documents

Equipment carries required markings and is accompanied by instructions for use and technical description.

Artefacts an auditor will ask for
  • Approved labels
  • Instructions for use
  • Technical description
  • Symbol justification per ISO 15223-1
Where this commonly fails
  • Symbols not justified
  • IFU does not match current configuration

Lifecycle

60601-1-PMS
Post-Market Surveillance Feedback

Field complaints, service data and adverse events feed back into risk management and design changes.

Artefacts an auditor will ask for
  • PMS plan
  • Complaint trend analysis
  • CAPA records linked to design changes
Where this commonly fails
  • PMS trending not feeding risk file
  • Field actions not retrospectively risk assessed

Mechanical

60601-1-7
Mechanical Hazards

Mitigate mechanical hazards including instability, moving parts, sharp edges and surfaces and acoustic energy.

Artefacts an auditor will ask for
  • Mechanical risk assessment
  • Drop and stability test reports
  • Sharp edge inspection records
Where this commonly fails
  • Tip over angle not retested after design change
  • No acoustic measurement

Production

60601-1-PROD
Production and Routine Testing

Every unit is subject to routine production tests including dielectric strength, earth bond and functional checks.

Artefacts an auditor will ask for
  • Production test plan
  • Per unit test records
  • Calibration records for test equipment
Where this commonly fails
  • Routine tests sampled rather than 100 percent
  • Calibration of high voltage testers lapsed

Security

60601-1-CYB
Cybersecurity for Networked Equipment

Network connected medical electrical equipment includes cybersecurity controls and is supported through the lifecycle.

Artefacts an auditor will ask for
  • Cybersecurity risk assessment
  • SBOM
  • Threat modeling output
  • Patch and update plan
Where this commonly fails
  • SBOM absent
  • No coordinated vulnerability disclosure channel

Software

60601-1-13
Software Lifecycle (IEC 62304)

Software of medical electrical equipment is developed under a lifecycle process compliant with IEC 62304.

Artefacts an auditor will ask for
  • Software safety classification
  • Software development plan
  • SOUP register
  • Software verification reports
Where this commonly fails
  • SOUP not inventoried
  • Safety classification not justified
60601-1-14
Programmable Electrical Medical System (PEMS)

PEMS are developed under a documented PEMS development lifecycle with risk control measures.

Artefacts an auditor will ask for
  • PEMS development plan
  • System architecture description
  • Risk control verification records
Where this commonly fails
  • No PEMS plan distinct from software plan
  • Network integration risks omitted
Assembled from the framework's own control set. Every line traces to a control in the graph, so this pack is regenerated rather than written, and stays current as the graph does.

Assembled from the framework’s own control set, so this list is regenerated rather than written and stays current as the graph does. See the IEC 60601-1 - Medical Electrical Equipment Safety framework page.