Most packaging validation programs fail because the testing wasn't streamlined and complete. These failures emerged because testing was run as separate, disconnected tasks — an aging study here, a seal test there, a distribution cycle bolted on at the end — and nobody assembled them into a single argument that a sterile barrier survives the journey from your line to the point of use.
ISO 11607 is the standard that ties those pieces together. It comes in two parts, and after running these programs for years, the teams that struggle are almost always the ones that treat the two parts as one undifferentiated requirement — or worse, treat the whole thing as a final checkbox instead of a design input.
This guide walks the full program: what Part 1 and Part 2 actually require, how accelerated aging, seal strength, and distribution simulation each contribute evidence, and how all of it connects to an FDA 510(k) submission under the current QMSR framework. The goal is to give you the end-to-end picture before you write a single protocol.
ISO 11607 Has Two Parts, and They Cover Different Things
The most useful thing to understand up front is that ISO 11607-1 and ISO 11607-2 answer two different questions.
ISO 11607-1:2019 specifies the requirements and test methods for the materials, preformed sterile barrier systems, sterile barrier systems, and packaging systems that maintain sterility of terminally sterilized medical devices until point of use (ISO 11607-1:2019). In plain terms: Part 1 is about what you designed — the materials, the barrier, and whether that design is suitable for the device, the sterilization method, and the shelf life you're claiming.
ISO 11607-2:2019 specifies the validation requirements for the forming, sealing, and assembly processes used to make those sterile barrier systems and packaging systems, including installation, operational, and performance qualification — IQ, OQ, and PQ (ISO 11607-2:2019). Part 2 is about how you make it — proving that your sealing process consistently produces a barrier that meets the Part 1 requirements.
A quick distinction that matters for scope: ISO 11607 applies to terminally sterilized devices. It does not cover aseptically processed devices or packaging for non-sterile products (ISO 11607-1:2019). If your device isn't terminally sterilized in its final package, the standard's applicability changes, and you should confirm scope before building the program.
The 2019 second edition of Part 1 also sharpened a few things worth knowing. It more clearly distinguishes the sterile barrier system from protective packaging, adds considerations for usability and aseptic presentation at the point of use, and references the companion guidance document ISO/TS 16775 (ISO 11607-1:2019). ISO/TS 16775 is a technical specification — guidance, not a normative requirement — so treat it as a help document, not a checklist you'll be audited against.
Sterile Barrier System vs. Protective Packaging
This terminology trips people up, so it's worth being precise. The sterile barrier system is the minimum package that maintains sterility — the pouch, the tray-and-lid, the header bag. The protective packaging is everything around it that protects the sterile barrier from damage during handling and distribution: the carton, the dunnage, the shipper.
Why does the distinction matter? Because your validation has to prove the sterile barrier system maintains integrity, and the protective packaging exists to make that possible through distribution. When you design your test program, you're testing the sterile barrier as the thing that must survive — and using the protective packaging as part of the system that gets it there intact.
Part 1: Designing the Sterile Barrier System
Part 1 is where you make and document your material and design decisions. The mistake I see most often is that this step gets skipped or compressed — a team picks an off-the-shelf pouch, assumes it'll work, and moves straight to testing.
The material and design questions Part 1 forces you to answer include:
- Microbial barrier. Does the material maintain a barrier to microorganisms over the claimed shelf life?
- Compatibility with the sterilization process. EO, gamma, e-beam, and steam each affect materials differently. A porous Tyvek header that's ideal for EO behaves differently under gamma.
- Compatibility with the device. Sharp edges, mass, and geometry all stress the barrier.
- Seal and closure integrity. The seals have to form reliably and hold.
- Aseptic presentation. The 2019 revision elevated this — can a clinician open the package and present the device without contaminating it?
The practical discipline is to capture these as design inputs, with rationale, the same way you document every other design decision. Packaging belongs in the design and development process, not in a separate workstream that runs after design freeze. When packaging decisions are documented as design inputs with requirements and risk analysis captured in the design record, reviewers can follow your logic. When they aren't, reviewers ask questions — and questions cost weeks.
Part 2: Validating the Forming, Sealing, and Assembly Process
Once you've established that the design is suitable (Part 1), Part 2 asks you to prove your manufacturing process makes that design repeatedly. This is the IQ/OQ/PQ work.
Installation Qualification (IQ) confirms the sealing equipment is installed and operating per specification. Operational Qualification (OQ) establishes the process window — the range of temperature, pressure, and dwell time over which the sealer produces acceptable seals, including at the edges of that window. Performance Qualification (PQ) demonstrates that, under normal production conditions, the process consistently produces sterile barrier systems that meet your acceptance criteria.
The single most important concept in Part 2 is worst-case. A validation that only tests nominal process settings is incomplete. If your sealer operates between 120°C and 160°C, validating only at 140°C tells you nothing about what happens at the boundaries. OQ exists precisely to challenge those boundaries.
ISO 11607-2:2019 also gives you a tool for managing this efficiently. Clause 5.1.5 addresses worst-case configuration, allowing sterile barrier systems to be grouped into families, with validation samples produced at worst-case manufacturing extremes (ISO 11607-2:2019, Clause 5.1.5, as summarized by the Sterilization Packaging Manufacturers Council). If you run a range of similar pouch sizes, you don't necessarily validate every size — you justify a family grouping and validate the worst-case members. The key word is justify. Family grouping is a defensible engineering decision only when you can explain why the chosen samples represent the extremes.
Accelerated Aging Under ASTM F1980
Shelf-life claims require aging data, and you can't wait the full claim period before you submit. That's why accelerated aging is on the critical path of almost every program.
Notice the word guide. F1980 does not hand you a fixed protocol. The Q10 factor and the Arrhenius aging-factor selection are left to you and must be justified per material (ASTM F1980-21). This is where most accelerated aging studies go wrong.
The model uses the Arrhenius relationship: for roughly every 10°C above the assumed storage temperature, the rate of material degradation roughly doubles. That relationship is captured in the Q10 factor. A Q10 of 2.0 is the most commonly used value and is generally defensible for medical packaging polymers — but it is an assumption, not a measured property of your specific system. Unless you have material-specific kinetic data supporting a different value, 2.0 is a reasonable starting point, and you should document that it's a starting point.
The accelerated aging factor is calculated as:
Here's the trap: 55°C and Q10 of 2.0 are defaults, not answers. The aging temperature has to be high enough to give you meaningful acceleration but low enough that you don't introduce failure modes that would never occur in real storage. Materials typical to medical device packaging generally don't tolerate accelerated aging temperatures above 60°C without warping, discoloration, or delamination. If your adhesive softens at 58°C, running at 55°C isn't simulating aging — it's inducing a failure that would never happen in a warehouse at 23°C.
The 2021 revision also brought humidity into focus. You now need to evaluate whether the polymers in your packaging system are susceptible to moisture-related degradation. Hydrolytic materials — such as nylon — may degrade differently under elevated humidity than under dry heat alone. If your system includes moisture-sensitive materials, you either control humidity during aging or you document why ambient humidity is appropriate. What you can't do is ignore the question. The absence of a humidity rationale is a documentation gap that auditors started flagging after 2021.
Accelerated Aging Is Provisional — Real-Time Confirms It
Accelerated aging is a prediction. Real-time aging is the ground truth. F1980 is explicit that accelerated data is intended to be confirmed by real-time aging (ASTM F1980-21).
FDA accepts accelerated aging as the basis for an initial shelf-life claim, which lets you submit and launch. But that acceptance is conditional — real-time aging must run in parallel and ultimately confirm the prediction. If your claimed shelf life is two years and you don't start real-time aging until late in development, you've built a two-year delay into your program. Start both studies at the same time, on post-sterilization, post-distribution samples, as early as you reasonably can.
Seal Strength and Integrity Testing
Seal testing splits into two distinct questions, and conflating them is a common error.
Seal strength is the force required to peel a seal apart. ASTM F88/F88M-21 is the standard test method for determining the seal strength of flexible barrier materials used in sterile barrier systems (ASTM F88/F88M-21). It tells you how strong the seal is and whether it's within your specification.
Seal and package integrity is whether the barrier has a breach. F88 does not, by itself, demonstrate whole-package sterile integrity — that requires integrity methods such as ASTM F1929 dye penetration or ASTM F2096 bubble leak (ASTM F88/F88M-21). A seal can be strong and still channel. A package can pass a gross integrity check and still have a marginal seal. You need both kinds of evidence.
The error I see repeatedly: a team pulls fresh samples off the line, runs F88, plots a nice distribution, sets a spec, and signs off. The seal looks strong. Then distribution simulation happens, nobody retests seal strength afterward, and the package validation proves the seal existed at the factory — not that it survives the journey.
Report the distribution of seal strength values, not just the average. The minimum is what matters, because that's the seal closest to failing. And test seal strength on both pre- and post-distribution samples. F88 on pristine samples tells you what your seal strength is. F88 on conditioned samples tells you what it does after real-world handling — and those can be very different numbers. Pair F88 with an integrity method (F1929 or F2096) on the same conditioned samples so you're answering both questions on the package as it will actually exist on a hospital shelf.
Distribution Simulation Under ASTM D4169
Distribution simulation is where packaging validation meets the physical reality of how devices move through the supply chain. ASTM D4169-22 is the standard practice for performance testing of shipping containers and systems by subjecting them to a defined sequence of distribution hazards — handling, vibration, compression, and others — selected by Distribution Cycle and assurance level (ASTM D4169-22).
The critical point: the specific Distribution Cycle and intensity level must be selected to represent your actual distribution environment. D4169 does not prescribe one cycle for any one device (ASTM D4169-22). A device that ships in a temperature-controlled truck directly from your dock to a hospital faces different stresses than one that moves through several distribution centers, crosses borders, or sits in uncontrolled cargo. The standard gives you a framework; selecting and justifying the right cycle is your responsibility.
The most common shortcut is grabbing a generic cycle that doesn't match the real supply chain. When FDA questions the adequacy of your distribution simulation, the fix usually isn't running more tests — it's going back to map your actual distribution pathway, which is work that should have informed the protocol in the first place.
One hazard that gets missed is altitude/low-pressure simulation. If your sterile barrier uses non-porous materials, low pressure during air transport can stress or rupture the barrier. And if the device has closed cavities containing air, expansion at altitude can affect device function. Worst-case thinking here prevents doubts at submission and avoids costly field issues later.
Sequence Matters: Building One Connected Program
The individual tests only mean something in the right order. Aging, seal testing, and distribution simulation are not independent line items — they're stages in a sequence, and the samples that enter aging should be the same samples that went through your process validation, sterilization, and distribution simulation.
A defensible validation sequence looks like this:
- Complete heat seal qualification (IQ/OQ/PQ) per ISO 11607-2.
- Sterilize the samples using the production sterilization method.
- Run distribution simulation (ASTM D4169, with a justified cycle).
- Place post-transit, sterilized samples into both accelerated and real-time aging.
- At the aging pull points, run seal strength (F88) and integrity testing (F1929/F2096).
The logic is that the package has to maintain sterile barrier integrity after the combined stresses of distribution and aging — not after each one independently. Samples that skip steps in this sequence produce data that doesn't reflect the real-world condition of the package, and reviewers notice when the aging samples weren't transit-tested first.
How the Validation Program Connects to a 510(k)
Every test above produces evidence that lands somewhere in your submission. The reason teams get Additional Information requests on packaging isn't usually missing tests — it's that the evidence doesn't tell a connected story.
FDA reviewers frame packaging evidence by pairing simulated aging (ASTM F1980) and/or real-time aging with seal strength testing (ASTM F88) as part of the stability and packaging expectations for a device submission (FDA presentation, Medical Device Stability, Packaging and Reusables). That pairing — aging plus seal/integrity evidence on a package that's been through distribution — is the spine of the packaging section of your submission.
It helps to see how this looks in a real protocol rather than in the abstract. In one device-specific example, the eCoin tibial nerve stimulator packaging protocol executed accelerated aging alongside a 13-month real-time aging arm, followed by seal strength testing (ASTM F88M) and seal integrity testing (ASTM F1886) (eCoin Tibial Nerve Stimulation protocol, ClinicalTrials.gov NCT03029624). That structure — accelerated aging running in parallel with real-time, then seal strength and seal integrity at the pull points — mirrors the sequence above. Two caveats on that example: it cited a superseded F1980 revision (F1980-07; the current edition is F1980-21), and the 13-month duration and acceptance criteria were that device's specific choices. Don't read them as a default FDA expectation or a universal shelf-life target. They illustrate the shape of a submission package, not a template you copy.
Where the Quality System Fits Under the QMSR
The test methods (ISO 11607, F1980, F88, D4169) are the technical backbone. The quality-system expectations sit above them, and as of February 2, 2026 that framework is the QMSR.
Under the QMSR, 21 CFR Part 820 incorporates ISO 13485:2016 by reference (21 CFR Part 820, QMSR, effective 2026-02-02). For packaging, two clauses do most of the work: process validation requirements applicable to your packaging processes are addressed by ISO 13485:2016 Clause 7.5.6, and packaging and labeling controls by ISO 13485:2016 Clause 7.5.11 alongside the retained 21 CFR 820.45 (21 CFR Part 820, QMSR; ISO 13485:2016 Clauses 7.5.6 and 7.5.11). Design evidence for the packaging system flows through design controls under ISO 13485:2016 Clause 7.3.
The practical takeaway: when you cite the framework your packaging process validation lives under, cite ISO 13485:2016 Clause 7.5.6, not the old QSR process-validation prose. The transition from the prior Quality System Regulation to the QMSR moved the QMS expectations into ISO 13485 by reference, and citing removed CFR language reads as out-of-date to anyone qualified to review your file.
Documentation Is Where Good Testing Goes to Die
The most frustrating failure mode is the one where the testing was sound, the results support the claims, and the submission still draws questions — because the documentation doesn't connect the dots.
The recurring gaps: missing rationale for acceptance criteria, thin justification for sample sizes, weak traceability between protocol, test reports, and the design record, and incomplete handling of deviations. Any one might generate a single clarifying question. Together, they create the impression that the program wasn't rigorous, even when the data is solid.
The discipline is simple and frequently skipped: write protocols as if the reviewer has no context. Justify every acceptance criterion. Document every deviation and how it was dispositioned. Make the traceability from design input to validation output explicit. If a reviewer can follow your logic without picking up the phone, you've done it right.
Bringing It Together
ISO 11607 isn't a hard standard to satisfy. Part 1 establishes that your design is suitable; Part 2 proves your process makes it repeatably. Accelerated aging gets you to market, real-time aging keeps you there, seal testing proves the barrier holds, and distribution simulation proves it survives the trip — all on the same samples, in the right sequence, documented so a reviewer can follow the argument end to end.
The teams that stumble are almost always the ones that run these pieces in isolation or start them too late in development. The path is well-lit. The standards haven't changed dramatically. The cost of getting the fundamentals wrong — and the scrutiny on packaging documentation under the QMSR — only goes up from here.
