RM3 Manual V1.0 draft ready for community review
At the June 5, 2026 IMSC panel, the RM3 working group reported that the RM3 Manual V1.0 draft was ready for broad community review and comment.
Risk Management Maturity Model
The Risk Management Maturity Model (RM3) is a collaborative industry initiative dedicated to improving risk management practices in the development and lifecycle management of medical products.
By bringing together diverse expertise from across the industry, the initiative seeks to establish a clear framework that helps organizations evaluate and strengthen their risk management capabilities.
RM3 maturity ascends through L1 Ad Hoc, L2 Defined, L3 Integrated, L4 Optimized, L5 Assured. Each level is drawn as a more complete structure than the one before it; only the final level, Assured, carries the validated green state.
To advance first principles-based best practices for Medical Product Risk Management.
Activities directly aligned with intended use, safety, and patient outcomes.
Resources focused on what matters, not redundant paperwork.
Safe and responsible advancement even when regulations lag.
Structured frameworks that demonstrate why a product is safe and effective, not just whether rules were followed.
RM3 maturity ascends through L1 Ad Hoc, L2 Defined, L3 Integrated, L4 Optimized, L5 Assured. Each level is drawn as a more complete structure than the one before it; only the final level, Assured, carries the validated green state.
The five RM3 maturity levels.
Reactive, siloed, surprises
Documented, inconsistent execution
Cross-functional, traceable, aligned
Proactive, prevention-focused, predictable
Strategic, first-principles, continuous evidence
The full model, including the first principles of risk management, the risk-informed decision architecture, and the RM3 Manual structure, is set out on the RM3 model and framework page.
Risk management drives patient-focused decisions for safety and effectiveness, not just compliance paperwork.
Anticipates and mitigates risks early to prevent harm, delays, and costly reworks.
Fed by product information, risk management drives design and development decisions across all stages of the product lifecycle.
Provides clear, compelling evidence for global regulatory approval and compliance.
Unifies teams (safety, quality, engineering, regulatory) for holistic and consistent decision-making.
Communicates risk insights and maturity through evidence and compelling narratives to build stakeholder trust.
Implements efficient and scalable practices that deliver both safety and business value.
Elevates risk management as a leadership priority, embedding it into organizational culture.
Leverages optimized processes and digital tools to ensure consistency, traceability, and actionable evidence.
Captures lessons learned and post-market evidence to continuously expand knowledge and drive improvement.
RM3 governance is organized through co-chairs, technical advisors, a core team, domain sub-teams, and general reviewers.
Solid blue paths show strategic guidance moving downward through the tiers. Dashed navy paths show evidence, technical recommendations, and review feedback returning upward. Green nodes mark selected resolved feedback.
A workshop dedicated to the First-Principles Decision Excellence & Organizational Maturity initiative. Date and location to be announced.
An RM3 panel introduced the initiative's goals, structure, progress, guiding principles, maturity domains, and initial assessment concepts, with discussion focused on patient safety, sound product decision-making, regulatory alignment, and practical use of the model.
At the June 5, 2026 IMSC panel, the RM3 working group reported that the RM3 Manual V1.0 draft was ready for broad community review and comment.
An RM3 panel at the International MedTech Safety Conference introduced the initiative's goals, structure, progress, guiding principles, maturity domains, and initial assessment concepts.
The first-principles approach to safety and effectiveness engineering was presented at the RAPS Safety Engineering Workshop on February 28, 2026.
Participate in RM3 to support first principles-based best practices for medical product risk management.
Participate in RM3