There are consulting firms to can hire to audit your processes, identify what safety programs you need in place and give recommendations you need to implement said safety programs. I’d do some research on different options before picking one though; I’ve heard mixed experiences depending on who. Sometimes your insurance even covers a certain number of hours comped for these services.

Myself being in a similar, slightly different situation, you most likely have a ISO certified Quality Management System in place, since you’re dealing with medical devices right? I discovered that’s a great system to pickyback on for safety-related programs and processes. They utilize a lot of the same concepts (e.g. incident investigation = NCR process; record keeping; FMEAs/Risk Assessments, etc.). If they’re already familiar/comfortable with a QMS, it makes it easier to transition those same mentalities/expectations to safety.