Yeah this is how most standards go. I use to work on medical devices, and the safety requirements for them were developed by my company and the other big players in the industry, and those became the FDA standards.

The FDA just wants there to be standards, and the companies have a vested interest in making sure those standards ensure safe medical devices.