A single hurricane exposed how fragile sterile medical product supply chains can be. When one dominant IV-fluid manufacturer's production site went offline after Hurricane Helene, hospitals across the U.S. faced shortages that took months to resolve. The January 2025 HHS/ASPE Draft Action Plan for Addressing Shortages of Medical Products cited that event directly as evidence of what happens when market concentration and single-site production dependencies collide — and the consequences fall on patients.
For OEMs sourcing sterile packaging and cleanroom assembly services, the parallel risk is immediate. Your device doesn't ship without a functioning sterile barrier system. If your contract manufacturer has one production site, one cleanroom, one validated line — you have a single point of failure.
The Regulatory Pressure Is Already Building
FDA isn't waiting for the next shortage event to push this issue. Under Section 506J of the FD&C Act, manufacturers of devices critical to public health — including those used in emergency or surgical procedures — are required to notify FDA of any permanent discontinuance or manufacturing interruption likely to cause a meaningful disruption in domestic supply during, or in advance of, a declared public health emergency under Section 319 of the Public Health Service Act. FDA also encourages voluntary supply disruption notifications outside of formally declared emergencies, signaling that proactive supply chain transparency is an agency expectation, not just a reactive obligation.
Notification is not the same as prevention. Section 506J is a notification and shortage-management mechanism — it requires manufacturers to alert FDA when a disruption is likely to cause a meaningful supply gap, particularly during or in advance of a declared public health emergency, but it does not obligate any party to prevent that disruption from occurring in the first place. The upstream answer is a contract manufacturing partner whose infrastructure is built to absorb a site-level failure before it becomes your regulatory problem. The upstream answer is a contract manufacturing partner whose infrastructure is built to absorb a site-level failure before it becomes your regulatory problem.
On the international side, EU MDR's extended economic operator accountability rules have increased scrutiny of outsourced manufacturing operations, requiring OEM manufacturers to ensure compliance throughout their supplier networks — including contract manufacturers, sterilization providers, and packaging operations. Industry trade press has highlighted vendor concentration in specialized services such as sterilization and surface coating as a specific dual-sourcing vulnerability that device OEMs should address through redundant sourcing strategies. The regulatory direction in both jurisdictions is toward greater transparency and demonstrated resilience — not just contingency planning on paper.
Why Sterile Packaging Vendors Are Structurally Fragile
The National Academies' review of medical product supply chains identified a pattern that sterile packaging buyers should recognize: low-margin producers of simple medical devices have modest financial incentives to invest in supply continuity measures, despite high societal dependence on their output. Margins on sterile packaging and kitting work are thin. A vendor operating a single cleanroom facility has little economic incentive to qualify a second site, train a parallel workforce, or maintain validated backup capacity — until a disruption forces the issue.
That's the structural problem. The vendors most likely to fail under pressure are also the least likely to have invested in the redundancy infrastructure that would prevent failure from cascading into your supply chain.
The HHS supply chain action plan explicitly recommends supply chain diversification, redundancy, and strategic stockpiling as core resilience buffers. Those are federal policy levers. Your equivalent lever is the vendor qualification criteria you apply before you sign a supply agreement.
What Multi-Site Redundancy Actually Requires
Dual-sourcing and multi-site capacity are easy to claim. Executing them for sterile device manufacturing requires specific infrastructure. When you're evaluating a contract manufacturer's redundancy architecture, the concrete questions are:
Validated capacity at multiple sites. A second facility is not a backup if its cleanroom processes haven't been validated to the same specifications as the primary site. ISO 13485:2016 requires that QMS processes — including documented records, personnel competence, environmental controls, and process validation — be implemented and maintained across every site within the certified scope. Whether those processes run under a single unified QMS or site-by-site registrations, each production location must demonstrate conformance independently during audits. Ask for validation status by site, not just by company.
ISO 14644-1 cleanroom classifications that match your product requirements. An ISO Class 7 cleanroom at one site and an ISO Class 8 at a second site are not equivalent backup options for a sterile device assembly process. The backup site's cleanroom classification and environmental monitoring data need to match or exceed what your product's risk classification requires.
Transfer readiness without re-validation delay. The scenario that kills OEM supply chains isn't the immediate shutdown — it's the 6-to-12-month delay while a backup site re-validates processes under emergency conditions. A genuinely redundant CM has pre-qualified the transfer pathway. That means the equipment, materials, process parameters, and personnel at the second site are already characterized. You're activating a validated state, not starting a new validation from scratch.
Single quality system spanning all sites. Fragmented quality systems at different sites introduce documentation gaps, audit trail inconsistencies, and CAPA closure risk. A multi-site ISO 13485 registration under a unified quality management system means the quality controls that govern your product don't change when production shifts geography.
Geographic diversity that addresses real disruption scenarios. Two cleanrooms in the same metropolitan area don't protect against regional weather events, utility failures, or local regulatory actions. Geographic separation — different states, or domestic and international sites — is the meaningful redundancy criterion.
Turning Federal Policy Into Procurement Criteria
The HHS action plan and FDA's 506J framework describe the problem at a policy level. Your supplier qualification process is where those policy-level concerns become enforceable requirements. Before qualifying a sterile packaging or cleanroom assembly vendor, your supplier audit should confirm:
- Number of independently validated production sites
- ISO 13485 registration scope (does it cover all sites, or just one?)
- FDA registration status for each facility
- Written business continuity and site-transfer procedures
- Evidence of prior successful site transfers — not just plans, but executed transfers with documented outcomes
- Capacity utilization at each site (a backup site running at 95% capacity is not a real backup)
These aren't novel requirements. They're the operational translation of what the National Academies' supply chain resilience review identifies as the gap between policy intention and manufacturer reality: high societal dependence on vendors that haven't been held to continuity standards.
LSO's Multi-Site Architecture
LSO operates ISO 13485-certified, FDA-registered cleanroom facilities across three sites: Brea, CA; Somersworth, NH; and Costa Rica. All three sites operate under a unified quality management system. That structure means a production disruption at one site — whether from natural disaster, utility failure, or regulatory action — doesn't require emergency re-qualification before production can shift. The transfer pathway is part of how we operate, not something we improvise under pressure.
For OEMs evaluating contract manufacturing partners in the context of supply chain resilience, the questions above aren't rhetorical. We can answer them specifically, by site, with documentation.
The Checklist Your Qualification Process Should Include
Before you award a sterile packaging or cleanroom assembly program to any single-site vendor, confirm:
- Multiple independently validated, FDA-registered facilities
- ISO 13485 registration covering all production sites under a single QMS
- Cleanroom classifications at each site documented against ISO 14644-1 and matched to your product requirements
- Written site-transfer SOP with evidence of prior execution
- Available capacity at backup sites — not theoretical capacity, actual available capacity
- Geographic separation meaningful enough to address regional disruption scenarios
- Voluntary FDA disruption notification procedures in place per FDA guidance
The next supply chain disruption in sterile medical device manufacturing is not a matter of if. The vendors that survive it without pulling their customers into shortage territory are the ones that built the infrastructure before they needed it.