ISO 11607 Packaging Validation: What Medical Device Companies Actually Get Wrong

ISO 11607 is the global consensus standard for packaging of terminally sterilized medical devices. It is referenced by FDA guidance and by the EU Medical Device Regulation, and a defensible ISO 11607 validation is effectively a prerequisite for any submission that involves a sterile barrier system. The standard is well written and widely used — and yet the same handful of mistakes show up again and again in packaging validation files. Most of them are not testing errors. They are planning, scoping, and documentation errors that surface long after the samples have been consumed.

Treating ISO 11607-1 and ISO 11607-2 as one requirement

ISO 11607 is two standards. Part 1 covers the requirements for materials, sterile barrier systems, and packaging systems — essentially, does the package keep the device sterile through distribution, storage, and aseptic presentation. Part 2 covers validation of the forming, sealing, and assembly processes that produce the package — essentially, can you make that package reproducibly. A common mistake is to run a strong Part 1 integrity battery while leaving the Part 2 process validation thin: no installation/operational/performance qualification (IQ/OQ/PQ) of the sealer, no defined process window, no evidence that the sealing parameters used in production match the ones that produced the validated samples. A reviewer who sees integrity data but no process validation will ask where the validated package actually comes from.

Validating one configuration and claiming the whole family

Manufacturers frequently validate a single package size or configuration and then extend the claim across an entire product family without a documented rationale. ISO 11607 allows family or bracketing approaches, but only when the rationale is written down: identify the worst-case configuration (largest and smallest seal area, heaviest device, sharpest geometry, most aggressive sterilization exposure) and justify why testing it bounds the rest. Skipping the worst-case rationale is one of the most common deficiencies cited against packaging files.

Forgetting that sterilization comes first

The sterile barrier system has to survive the sterilization process before it ever sees distribution. Test articles should be sterilized using the same modality and a representative (typically maximum) cycle before aging and distribution simulation, because EO, chlorine dioxide, gamma, and steam each stress materials differently. Validating virgin, never-sterilized packages is a frequent and avoidable error. Co-locating sterilization with package testing — as Boulder Package Testing does on a shared campus with Boulder Sterilization — keeps the sterilize-then-test sequence under one chain of custody.

Confusing accelerated aging with shelf life

ASTM F1980 accelerated aging supports an interim shelf-life claim while real-time aging matures. It does not replace real-time aging. ISO 11607 expects both: accelerated data lets you release product, and real-time data confirms the accelerated model was representative. Treating accelerated aging as the final word — and never starting the real-time study — is a deficiency that only becomes visible years later when the real-time data is requested and does not exist.

Setting acceptance criteria after the data is in

Acceptance criteria for seal strength, burst, dye penetration, and visual inspection must be defined in the protocol, before testing, with a documented rationale tied to the packaging design and risk analysis. Writing the criteria after seeing the results — or having no quantitative criteria at all — undermines the entire validation. A protocol that states the methods, sample sizes, statistical rationale, and pass/fail limits up front is the single most effective defense against an auditor finding.

How to avoid them

Most of these mistakes are prevented by engaging a package testing lab during packaging design rather than at the end. A lab that helps you write the protocol — worst-case rationale, sterilize-first sequence, both aging tracks, predefined acceptance criteria, and a complete Part 2 process validation — produces a file that reviewers can follow. Boulder Package Testing builds ISO 11607-1 and ISO 11607-2 programs around these requirements so the validation holds up the first time it is reviewed.