These are statutory laws published in the Code of Federal Regulations, CFR. Primarily documented in Sec 820, they create the legal foundation for compliance. Company management should be familiar the scope and content of this material. They are also the foundation of ISO 13485.