Professional Documents
Culture Documents
19.A.5 Aids
19.B.3.2 Disadvantages
19.B.4.2 Disadvantages
19.B.4.3 Procedure
19.B.4.4 Example
19.B.5.4 Documentation
19.C.3 Documentation
There is no directive that demands that GMP projects be processed in accordance with a particular
organisational system. However, practice shows that the project management methods described below
contribute to the successful execution of even extensive projects.
Objectives
Time, financial or personell constraints of the resources or other constraints
Delimitation vis--vis other plans
Project-specific organisation
Project management, then, according to DIN standard 69 901, is all the management tasks, organisations,
techniques and means used both for the processing of all projects and for the processing of an individual project.
Project management only works in the company if the following requirements are fulfilled:
Secondly, the interim results are defined, which are to be achieved in the course of the project (usually
designated as milestones). Work packages are derived from this (in man days (MD)).
Through this more detailed planning, the necessary resource scheduling (money, staff, equipment) can also be
planned in more detail.
In the third step, the work packages to the next milestone are planned in detail (work packages in hours). The
period to the next milestone is manageable and detailed planning of the project sequence is advisable. Planning
also always includes the question of which problems (e.g. resource conflicts) could occur and if they can be
prevented in this early project phase?
In sports competitions it goes without saying that interim results and half time results are taken into account in
order to figure out the consequences for the rest of the match or the competition.
In contrast to the professional team, these are amateurs whose sports activity is always in competition with their
work commitments.
The project manager in this case corresponds to the coach of an amateur team, although in many companies, as
in sport, he usually plays in the team too due to capacity issues.
As a project, by definition, is unique, the project manager must find and take a "new path" to fulfil
the task each time.
For each project, the "team" is newly established. Often external employees are also involved.
With these employees in particular, it is necessary to ensure that the performance they are being paid
for is also delivered.
In addition to the specialist tasks, the resource conflicts with the line must also be solved In the
matrix organisation.
In addition to a good technical basis (the project manager need not necessarily be a technical expert, as often
other employees are responsible for this), the most important thing is the social competence to be able to solve
conflicts through discussion and new procedures and to be able to bring about decisions.
As a new project team is set up for the project task, those involved must first learn to work together. There are
four phases of team building:
The first task in the team is to clarify technical questions and check the planning documents for completeness
and give full particulars in relation to the team:
Project start
User requirements
Technical specification
Design qualification (DQ)
Installation qualification (IQ)
Operational qualification (OQ)
Performance qualification (PQ)
Process validation
Production
At the end of each phase, a specific interim result should be achieved in terms of content. The costs and
resources consumed are compiled. The objectives and estimates for the individual milestones and to the end of
the project are redefined. Controlling measures are derived from this, e.g.
All these controlling measures are usually difficult to implement. However, it makes no sense to bury your head
in the sand and hope for a miracle. If you do this, there will be even greater damage at the end of the project
than if you ask for support in the early stages and clarify any problems that occur. The sooner problems are
identified in the course of the project, the greater the chance of solving them by the end of the project.
Here's another example from the world of sport: With a score of 5:7 in the first set in tennis, the game is not yet
lost and it still makes sense to change tactics. With a score of 5:7, 4:6 and 4:5, this is of course still possible, but
the prospects of success are much lower.
e.g. for a new-build project, the starting structure could be as follows: building shell, infrastructure, facilities,
computer systems.
Then the building shell is further subdivided into the individual rooms, etc.
This systematic procedure prevents important aspects of the project plan from being disregarded.
Schedule
This plan is based on the project structure plan. Rough planning takes place for the entire project, the times of
milestones are defined and important, time-critical deadlines, such as a trade fair, are recorded. Depending on
the scope of the project, the schedule can be compiled in the form of a bar chart using a computer-assisted
project management system or manually (e.g. with Excel).
It is important that the dependencies between the operations are also taken into account (a truss can only be
built if the external walls of a building shell are already standing) and the processes are assigned to responsible
persons. If nobody is responsible for compliance with a deadline and it is not clear to those involved that certain
tasks are to be completed before others can be started, then the schedule is not worth the time taken to compile
it.
Resource plan
This plan is closely related to the schedule. For planned activities, certain resources are required in a certain
timeframe in order to be able to meet the deadlines. As unlimited resources are not generally available - above
all from the experts - the project manager must ensure a continuous optimisation process to comply with the
deadlines using the available resources, even if there are changes in the course of the project.
Budget
The budget includes the project costs and the investments that are made as part of the project, and possibly also
the manufacturing costs of a product, which are regularly determined during a development project.
Definition of the competencies between the project manager and the line (table of who does
what)
Forms for project definition
Forms for expenditure planning, scheduling, budgeting
Forms for milestone reports
Form for project conclusion report
Structure for project documentation (user requirements, technical specification, etc.)
The type of project is another classification. Production projects are processed according to a different structure
than development projects.
The project definition is not clearly and uniquely formulated The task is "gradually" changed or
changes in the course of the project, so that no target/actual comparison is possible any more during
controlling, as the planning data was compiled under different requirements than in the actual data
record. exact target definition required
The project manager is "the" expert and therefore also mostly undertakes specialist processing
The project manager's activity, such as coordination of tasks, project planning and controlling
cannot/is not undertaken correctly. Limitation of the project manager's specialist tasks
The project employees are formally assigned to the project, but have no resources available
The conflict with the line can only be solved via corresponding management decisions
The course of the project is not correctly documented, therefore no project changes can be
traced and deviations from the plan cannot be explained Define a reporting and documentation
structure
Specialist departments guarantee punctual completion of a work package shortly before the
submission deadline, but then cannot meet the deadline The specialist department must be shown
the impact of this for the entire project. Management should intervene if this occurs frequently.
Finally, it can be said that project management is a very good form of organisation for processing complex "one-
off" interdepartmental tasks, as all those concerned are involved from an early stage and risks can be covered
that much earlier.
Summary
Project management is a good form of organisation for "one-off, interdepartmental" tasks, which only works if it is
desired by the management and if the employees are provided with the necessary structures and resources.
For a long time, such analyses were only used in high-risk industries (aerospace, nuclear engineering, etc.). In
the context of the emerging quality instruments in the 80s, methods had to be found to help increase the quality
of industrially created products. These methods made a crucial breakthrough in the automotive and
semiconductor industry and for their suppliers in the 80s and 90s. The cost pressure on these industry branches
increased drastically and the industry was required to simultaneously increase quality and reduce costs. The use
of risk analyses was a question of survival and the ability to reach the target of high quality with low costs was of
crucial importance.
In the pharmaceutical industry, the discussion of risk analyses often focuses on the costs. Yet risk analyses were
developed not to increase costs, but to save costs. These methods should therefore also be implemented in this
spirit.
Experience shows that early system analysis can lead to significant advantages for investment projects. The
form of risk analysis used is unimportant. What is crucial is an awareness of the GMP risks associated with the
selection of certain machines, apparatus and equipment. It should be a matter of course that, at the time of
ordering a technical system, the requirements of the future user should be present. These user requirement
specifications form an essential basis for the execution of a risk analysis.
Risk analyses can be applied in various task areas. It is always important to be in a position where the changes
can still be carried out cost-effectively, but where important basic conditions have already been established.
Some possible uses for risk analyses are listed in figure 19.B-3.
The following methods are interesting for use in the pharmaceutical industry:
Both definitions show that risk analysis is a procedure with which critical parameters should be determined or
evaluated.
Annex 15 also goes into the increasing importance of risk analysis where changes have been made:
"All changes that may affect product quality or reproducibility of the process should be formally requested,
documented and accepted. The likely impact of the change of facilities, systems and equipment on the product
should be evaluated, including risk analysis. The need for, and the extent of, requalification and re-validation
should be determined." (Annex 15, paragraph 44)
The ICH Q9 deals with the different forms of risk analysis in much more detail and also introduces these briefly.
With the help of a documented risk analysis, it is possible to show why certain facility functions or procedure
steps should be classified as critical or non-critical. This evaluation is then a traceable basis for qualification and
validation activities.
FMEA is a quantitative risk analysis, the result of which is a list of risks with an assigned risk value.
To date, every industry has changed certain aspects of FMEA in implementation. The introduction of FMEA in the
operational sequence of pharmaceutical companies also requires adjustments. In recent years, especially in the
evaluation system, a certain "pharmaceutical standard" has been established which must be taken into account
in the procedure described below.
Failure finding
Failure analysis
Measures to eliminate failures
Here, a failure is to be understood as a GMP risk. Thus, for example, a failure can be a leaky cable duct through
a wall in a clean room or a difficult to clean point in a coater or a ball valve in the distribution ring of a WFI
system.
If the FMEA is only used for a rough evaluation of systems, then the team discusses the entire system and
describes general GMP deficits that could be caused by the system. At this level, it is usually not necessary to
deal with the cause of failure, as this can often be very multifaceted (e.g. see figure 19.B-5).
If the FMEA is for subsystems, failure finding is carried out in significantly more detail. Individual subsystems are
examined and the causes of failure and failure implications are investigated, so that later evaluation is easier.
The most time-consuming part of the FMEA is the failure finding. All systems or subsystems must be checked for
their possible failures. Even failures that may appear hypothetical must be taken into account, as practice shows
that every failure occurs at some time.
Failure finding, in particular in the initial phase of execution of FMEAs, is time-consuming. If several similar
systems have already been analysed, then there will be many similarities also in the occurrence of failures,
which reduces the effort for this phase. Generally, failures are found by the team members who work with the
corresponding facility in practice and through the application of creativity methods (e.g. brainstorming,
brainwriting, etc.), which are not dealt with in detail here.
At this time, it is important to take into account all GMP-relevant aspects and official requirements. Official
requirements which, if not complied with, can also be classified as failures, can be derived from the bodies of
rules (e.g. CFR, EU GMP Guideline, Guides, Guidelines, etc.). However, it is also important to take into account
the state-of-the-art, as one of the official requirements is to consider the state-of-the-art in the design of technical
systems. Determining the state-of-the-art is not always easy. The IPSE Baseline Series documents are helpful.
These documents show how today's technical systems should be designed by pharmaceutical production
companies. As these documents are compiled by engineers and are agreed with the FDA, they are good
guidelines for the state-of-the-art.
If all feasible failures have been documented with cause of failure and implications of failure, these must be put
into some order. Different causes of failure often lead to the same failures and the same failures have different
implications. This too is documented in a traceable manner using the form (see figure 19.B-7).
These three defect characteristics are assigned numerical values from which the risk priority number is
determined by multiplying the three values with each other (see figure 19.B-8).
It is of fundamental importance that the three evaluations take place independently of each other. The probability
of occurrence or the probability of detection of a failure must not be included in the severity of the failure. For
example, if the implications of a failure lead to S = 5, then the number must not be reduced purely because this
failure only occurs once a year. This step is carried out in the concluding calculation of the risk priority number
RPN (see figure 19.B-8).
The scale for the numerical values can be defined by the company applying them. So, for example, to achieve a
rough classification of systems, it may be advisable to make an evaluation of 1 to 3 in each case. This way a
result can be reached more quickly and efficiently. The evaluation aids described in figure 19.B-9 to figure 19.B-
11 are a suggestion. Each company must develop evaluation aids when introducing FMEA.
The easier it is to detect the failure, the lower the risk. Therefore, the numerical value falls from 5 to 1 the higher
the probability of detection. D = 1 is thus a value that can only be achieved if a fully automatic 100%-control is
integrated in the production sequence. D = 5 means that a failure is not detected (see figure 19.B-11)
When evaluating the probability of detection, the test measures that are already planned or designed at the time
of executing the FMEA must be taken into account. This being the case, they must also be documented in the
FMEA form in connection with the evaluation.
This results in an RPN of between 1 and 125 with the above-mentioned assessment values. In addition to the
RPN, the company's risk tolerance is of great importance. That is, where the limit is set by the company for the
determination of measures. It is necessary to clarify the RPN from which measures must be initiated in order to
reduce the risk. It must also be clarified whether this should be a single limit or if there should be two limits, for
example (see figure 19.B-12).
If the set limits are exceeded, the FMEA team must define measures that will reduce the RPN.
Introduction of IQ or OQ tests
Introduction of an additional quality check
Changes to the facility to completely prevent certain failures
Introduction of an additional point in the context of preventative maintenance
When defining measures, their impact on the RPN and the previous evaluation of the individual criteria, O, S and
D are crucial. It is therefore advisable to carry out a second evaluation after the measures have been
established.
If you consider the above-mentioned examples of measures, one of the results of a detailed FMEA could be a
complete list of all necessary IQ and OQ or PQ tests. This means that this information is available from a very
early stage and the course of the project or the necessary resources can be planned more accurately. In
addition, time-consuming agreements at a later time are no longer necessary which, according to experience,
weigh heavily on the project if the necessary tests have not been defined at such an early stage.
Figure 19.B-13 Checklist for the introduction of a GMP risk analysis using the
FMEA method
Checklist for the introduction of a GMP risk analysis using the FMEA method
Project start
Appointment of project manager The project manager must have the corresponding authorities
Establishment of the project team The project team must include employees representing production,
engineering and quality assurance. Further project members must be selected
according to the project demand.
Establishment of the fields of This is where the project scope is defined, i.e. which systems are to be
consideration investigated.
Establishment of the depth of Is it a rough analysis or a detailed analysis?
consideration
Establishment of the Will aspects O, S and D be assessed with values from 1 to 5 or is another
classification system being used?
Evaluation aids for determining; These aids should ensure that different teams can achieve equivalent results.
O, S and D must be compiled
Development of principles for the Efficient processing of the GMP risk analysis is facilitated through the
GMP risk assessment existence of operational and official requirements and the state-of-the-art.
Establishment of RPN limits Have one or two limits been established and how high are they? What
happens if the limits are exceeded?
Establishment of the FMEA These will not always agree with the project team, in particular if the projects
teams are extensive.
Training of moderators At least one FMEA team member should be trained as a moderator.
Training of the FMEA team The FMEA should be trained using examples.
members
Execution of GMP risk analysis in Experiences in the first teams should be particularly well documented.
first teams
Implementation of the decided The measures must be implemented, otherwise the risk assessment is
measures meaningless
Monitoring of the measures Likewise, the implementation of the measures must be monitored.
19.B.3.1 Advantages
As a method, FMEA has many advantages which, in other industry areas, have ultimately lead to FMEA
asserting itself significantly more strongly over other risk assessments (see figure 19.B-14.)
Team approach
The composition of the group that carries out the FMEA is crucial for the success of the FMEA. An optimal result
is achieved, as people with different levels of knowledge are collaborating in the group. In order to achieve this,
the group must work out the result together, with the later user and engineering always being represented in the
group.
Comprehensive method
In contrast to other risk analysis methods, FMEA can also be used to carry out other risk analyses, e.g. safety,
environmental protection, technical risk analysis. This would make it possible to investigate and consider all risks
with this method.
19.B.3.2 Disadvantages
The disadvantages of FMEA are essentially rooted in its initial implementation, but also in the continuity
generally required for carrying out a risk analysis.
For this reason, a FMEA training course should be attended, in which the team members are familiarised with
the method and gain certainty in how to execute a FMEA. If all members of a FMEA know what they are dealing
with, FMEA meetings can be held efficiently. A training course of 0.5 - 1.5 days should be held, depending on the
level of knowledge of the employees.
In addition to the FMEA training, one member of each FMEA team should be trained as a moderator. The
moderator has the task of guiding the team to a result during the meetings. This does not mean that the
moderator develops the solution, but that he helps the team to reach the target. Therefore, the moderator must
know the method inside out and must also be able to explain it. He must always have the objective of the FMEA
in sight. Often, in cases of dispute within the team, the moderator provides a consensus.
Implementation
The initial implementation of FMEA in the company should not be rushed. The staff must first become
familiarised with the method and practice it for a long period of time before each individual can form an actual
image of the effectiveness of the method. This process takes time. Unfortunately time is rarely available in the
company.
If the implementation phase is too short, this often leads to dissatisfaction of the executives and staff. The former
are disappointed by the results and the latter are overtaxed with expectations. The implementation phase can be
shorter if the staff and teams are provided with corresponding aids, e.g. in the form of coaching or training.
Resource availability
In order to be able to hold FMEA meetings efficiently, all members must be able to participate in the discussion. If
this is not possible, it inevitably leads to losses of efficiency and the result suffers from the lack of resource
availability. Therefore, FMEA meetings must be prepared in good time and all team members must be aware of
the associated priority.
This would mean that different teams could easily obtain different results. All those involved must be aware of
this fact in order to avoid misinterpretations.
An example operating procedure for carrying out risk analysis according to the FMEA method is shown in
figure 19.B-16.
Therefore, the "company-specific risk analysis" is attributed a high level of importance. Different models of highly
simplified risk analyses are often practised, which supply less detailed results but can be processed in a shorter
period of time.
19.B.4.1 Advantages
The advantages of company-specific risk analysis are essentially its better adaptability and thus the higher level
of acceptance within the company. In addition, a resource-saving route is often chosen.
Resources saved
With company-specific risk analysis, methods can also be established that are adapted to the company's human
resources.
19.B.4.2 Disadvantages
Company-specific risk analysis also has disadvantages compared with existing methods (see figure 19.B-18)
19.B.4.3 Procedure
On the basis of the above-mentioned points, the existing risk analyses should first be intensively investigated in
the company. If no risk analysis is found that meets the internal requirements, then the development of a
company-specific risk analysis is on the cards.
However, the last resort should be doing this entirely independently. Many companies will be more than happy to
provide you with experiences they have made. Therefore, the best path to take is to first ask other companies
about their experiences and the methods they use. If this too brings you no further, the last resort is to develop a
method alone or in collaboration with another company.
An in-house development has a greater chance of acceptance if it is based on an existing method. So, for
example, FMEA can be used as a basis and converted accordingly, as shown in the following example.
19.B.4.4 Example
FMEA should be used as a basis for this example. After investigating FMEA, the following procedures should be
simplified:
Improbable
Low
Average
High
Low
Average
High
Legal and quasi-legal requirement
Due to the fact that no numerical values are determined, no risk priority number can be formed. However, there
is a clear matrix, with the help of which a risk value can be determined and the necessary measures can quickly
be deduced.
If, for example, a moderate failure is found, the function must be checked during qualification, depending on the
severity of the failure. It may even be necessary to change the design of the facilities or to incorporate additional
quality checks in the production process.
With this modification of the FMEA method, the procedure before evaluation remains the same. This means that
the potential failures and risks must first be found. The changes result in the procedure shown in figure 19.B-20.
The form for this type of risk analysis can be seen in figure 19.B-21.
HACCP focuses on hygiene, which is of crucial interest for any plant that processes food. The legislator too has
acknowledged the significance of hygiene for this area. An important milestone for this method was the legal
obligation of food processing plants to execute this method (EC Directive 93/43, Hygiene of Foodstuff). Through
the requirements of 3 of the Hygiene Regulation, this form of risk analysis became standard in the industry.
In accordance with article 3(2) of the EC Directive 93/43 Hygiene of Foodstuff, the concept of HACCP should
satisfy the following principles:
Analysis of the potential risks for food in the processes of a food company;
Identification of the points in these processes at which risks could occur for food;
Definition of which of these points are critical for food safety - the "critical points";
Establishment and execution of effective test and monitoring processes for these critical points,
and
Review of the risk analysis for food, the critical control points and the test and monitoring
processes in regular intervals and each time the processes are changed in the food company.
The pharmaceutical industry also became aware of this form of risk analysis as it became more widespread. As
the authority also responsible for food, the FDA had already taken a leading role in introducing HACCP for food
processing. However, as hygiene also plays an important role in pharmaceutical production, it is worth
considering this form of risk analysis here too.
Procedure of HACCP
In HACCP, the team approach has also proven its worth and prevailed. This means that as many task areas as
possible should be represented in the team, e.g. quality assurance, engineering, laboratory and production. A
clear and uniform definition of terms is also important. The following key terms are of importance for HACCP
(source: HACCP Guidelines, FDA):
Hazard:
"Hazard [...] means a biological, chemical, or physical property that may cause an unacceptable consumer
health risk." (HACCP Guideline, FDA, 1997)
Hazard is an event or circumstance that can influence a product in such a way that may cause a direct consumer
health risk. The hazard can be of a biological, physical or chemical nature.
to
enlarge,
click
here!
Risk:
"Risk means an estimate of the likely occurrence of a hazard." (HACCP Guideline, FDA, 1997).
A critical point is therefore a stage, step or phase, at which a detected hazard is to be eliminated through
targeted and controlled measures or reduced to an acceptable level with the clear aim of controlling the hazard.
The general procedure for HACCP is the same as for all risk analyses:
The implications for the product quality must be the main focus. The search for problem points must concentrate
on this aspect. The points in the production process at which the product quality can be negatively influenced
must be found.
Print page
to enlarge, click here!
If the system is adequately described, careful and extensive failure finding of potential failures can be carried
out. This is the first necessary condition for the success of a risk analysis, and for HACCP. With HACCP, all
individual operations throughout the production process are to be checked to see if they can exert a negative
influence on the product quality. Likewise, however, creative processes (brainstorming, brainwriting, etc.) can
also be combined with HACCP to achieve the desired result.
For failure finding, it is crucial that all negative influences on the product quality are found. These can result both
from the malfunctioning of machines, facilities or infrastructure or from human error. But the procedural
instructions and operating procedures can also provoke mistakes. Every aspect of the process under
investigation must withstand the questioning. There is no standardised catalogue of questions on which HACCP
is based. Rather, each company must find its own way or approach to find the potential failures. The FDA has
implemented a short catalogue of questions in the HACCP guideline in the food area, but unfortunately this does
not help in the pharmaceutical industry as the requirements are too rudimentary. There is therefore currently no
standardised catalogue of questions that accounts for the needs of the pharmaceutical industry.
In the established area of food processing, HACCP concentrates almost exclusively on hygiene. In the
pharmaceutical area, this narrow constraint must be expanded, as there are significantly more risks in this area
than just hygiene. For example, process management (temperatures, times, etc.), the initial weight of
substances, the functionality of control systems and aspects such as preventative maintenance exert a great
influence on product quality.
Control point
Critical control point
The following definitions are used for the control point and critical control point (source: HACCP Guidelines,
FDA):
In order to reach the evaluation of a control point or a critical control point, the following decision tree in figure
19.B-25 can be used.
However, not only the measures, but also the verification procedure must be defined, in the form of test
procedures, testing schedules or operating procedures (see figure 19.B-24). This step is crucial to be able to
keep a process in the safe range during production. Here, it is important that the parameters with which a
process can be brought back to the range that complies with the acceptance criteria, are known. Only if these
control aspects are documented and communicated can the process be controlled, even if a critical process
deviation occurs.
19.B.5.4 Documentation
As for every other risk analysis, HACCP too should be documented so that the results of the analysis are
available at a later time. The following simple table (see figure 19.B-26) has proven useful for documentation
purposes.
For documentation, the records of the discussions and above all of the decision must be as complete as
possible. This is in the interest of anyone who has to represent the results at a later time (self-inspection,
external inspection).
Summary
GMP risk analysis is a good instrument for establishing the GMP requirements in qualification and validation
projects and for monitoring their realisation. With the consistent application of FMEA, HACCP or other forms of
risk analysis, and the use of the results, the effort required for qualification/validation can be kept to the
necessary level.
The FMEA method, a company-specific risk analysis and the HACCP method are illustrated using examples, and
their advantages and disadvantages are explained.
It is especially important at the start of the project (procurement stage), to include a GMP risk analysis in the
project sequence.
Reproducing the model in practice (GMP-conform manufacture/testing) also requires the specification of
numerous requirements. The manufacture and quality control procedure should be documented in the form of
instructions. The materials to be used here must be specified. The basic conditions required for a reproducible
quality, such as suitable rooms, qualified facilities, trained personnel and the type of documentation, must be
defined (cf. figure 19.C-1).
Print page
to enlarge, click here!
Before the requirements mentioned above can be implemented in practice, their suitability for the intended
purpose must be reviewed. In the theoretical approval model, this review is carried out by the regulatory
authorities as part of the authorisation procedure. The suitability and authorisation for use in practice is
confirmed by a notice of approval to the applicant. In the pharmaceutical manufacturing company, the suitability
of apparatus/facilities and procedures must be proven with qualification/validation. In these cases, suitability and
authorisation for use in practice is confirmed with a signature on the qualification/validation report of the person
responsible.
The principle that suitable requirements are available and must be adhered to, is not only valid the first time a
medicinal product is manufactured or the first time a facility is used/a procedure comes into effect. This applies to
the whole history of a medicinal product, a procedure or a facility and is to be guaranteed in every respect
throughout.
Just like the entire batch history must be documented, requirements must also be stipulated in documents.
These may be, for example, written specifications for materials or directions for procedures.
As each requirement is expressed in a corresponding document, it is clear that each change control for the
requirements must also always involve a documentation control.
As a result of scientific/technical development, changes to the legal basic conditions or business restraints,
requirements must be redefined, modified, enhanced or cancelled again and again in practice. In turn, this
change to previously approved requirements requires a review and authorisation procedure to keep the system
in its original state of proven suitability. This is the task of the change control.
Change control programs have become recognised as essential elements of the pharmaceutical quality
assurance systems. In the glossary to Annex 15 of the EU GMP Guideline, there is a definition of the term
"change control":
"A formal system by which qualified representatives of appropriate disciplines reviewproposed or actual changes
that might affect the validated status of facilities, systems,equipment or processes. The intent is to determine the
need for action that would en-sure and document that the system is maintained in a validated state."
However, the EU GMP Guideline basically contains only a few notes about the handling of changes. Chapter
5.23 claims:
"5.23 Significant amendments to the manufacturing process, including any change in equipment or materials,
which may affect product quality and/or the reproducibility of the process should be validated."
There are also only two brief items of information in the American Code of Federal Regulations (CFR) on the
topic of "change control":
While in the USA the responsibility for the verification and authorisation of changes is the task of the quality
control unit, in the relevant EU regulations, the responsibility is not assigned. However, as the change control is
considered an essential element of the pharmaceutical quality assurance system, it is only logical to transfer the
responsibility for the functioning of the change control program to the person responsible for quality assurance
(QA representative, QA head).
Change control is not department-specific, rather the task of the whole company. This is due to the wide area of
application of change control, as described in both Annex 15 and in the PIC/S document PI 006-2.
Written procedures should be in place to describe the actions to be taken if a change is proposed to a starting
material, product component, process equipment, process environment (or site), method of production or testing
or any other change that may affect product quality or reproducibility of the process. Change control procedures
should ensure that sufficient supporting data are generated to demonstrate that the revised process will result in
a product of the desired quality, consistent with the approved specifications." (Annex 15, no. 43)
"Change control is an important element in any Quality Assurance system. Written procedures should be in place
to describe the actions to be taken if a change is proposed to a product component, process equipment, process
environment (or site), method of production or testing or any other change that may affect product quality or
support system operation." (PIC/S document PI 006, section 6.7.1)
In this way, the change control monitors all types of changes which can influence the process reliability or
product quality, evaluates them in reference to the relevant established requirements and determines the
measures necessary for implementing the change or decides that a change should not be implemented. The
change control therefore ensures that a system remains in its suitable state.
The introduction of a change control program is a managerial task which must be supported by top management
levels of a company. A corresponding statement for quality management can therefore be expected (cf. figure
19.C-2).
Many types of changes affect several regulation areas simultaneously (e.g. GMP requirements, authorisation
requirements, employment protection requirements). Because quality-relevant changes can affect several areas
of a company (e.g. research/development, regulatory affairs, manufacture, quality control, engineering,
marketing), the control must be a task for the whole company (cf. figure 19.C-3).
As a rule, it is therefore not useful to operate different parallel and independently-working inter-department
change control programs. In the past, the local processing of changes was carried out as the change control was
not then yet recognised to be a quality assurance task for the company as a whole. Some companies are still
making the mistake and work with parallel change control programs: a change control program for the EDP area,
a change control program for the regulatory affairs department and a change control program for the engineering
department. The collaboration of different departments in terms of change control is for this reason not always
guaranteed. It has therefore been the case in practice that control software was changed in the manufacturing
area, without the head of production being aware of this because he was not a member of the change control
committee for the EDP department which implemented this change autonomously.
Independent change control programs cause an unwanted attitude in the department, expressed as delimitations
of responsibility, ineffective inter-department communication and unfavourable procedure- and target-oriented
attitudes. In addition to this, it is often the case that decision procedures and documentation formats/contents are
not consistent and not well suited. This must be observed during the introduction of a change control program.
The central processing of change procedures, coordinated by the quality assurance department, has several
advantages compared with local procedures:
The main requirement for the introduction of a change control program is a high quality awareness and an
understanding for the functionality of quality assurance systems among the staff. Change control can therefore
not be assigned "from above", the significance and benefits must be communicated as part of an intensive
training. Changes which require control must be first recognised as such "on site" so that the necessary
procedures can be initiated. Only when the staff are motivated to continuously improve the quality of the product
they manufacture will they accept the change control as a suitable tool and not reject it as bureaucratic formality.
The type and scope of a change control program must comply with the individual company requirements:
In classical GMP-relevant areas, the change control serves to maintain the validated and
specified status. Validated processes and qualified facilities can be influenced in their state by changes
so that the medicinal products manufactured no longer certainly comply with specifications. The same
applies for changes to material specifications. A complete revalidation/requalification can then be
necessary. In these cases, a formalised procedure is required to evaluate the risks associated with the
change, determine the measures necessary to maintain the validation status and authorise the change
after successful revalidation.
Holders of marketing authorisations must guarantee that for changes requiring reporting or
agreement, the necessary regulatory prerequisites are first met. Contract manufacturers that do not
have their own authorisations and resulting obligations for reporting must guarantee that the contract
giver is informed of the company-internal changes that could have an influence on their application
documentation. This requires that the contract giver is included in the change control program of the
contract manufacturer. Conversely, it is frequently the holder of the authorisation that causes the
corresponding subsequent changes with the contract manufacturer because he changed his
authorisation. Change control is in this case not only a task that applies within the company, rather a
task that applies across companies. This is valid in particular for multi-national companies: changes can
affect the approval status in different countries or affect the utilities at different manufacturing sites.
In areas where medicinal products are developed, processes are optimised or clinical research
takes place, the strict obligations to report that are linked with the approval do not have to be fulfilled.
However, persons working in this area expect their work to be comprehensible. Changes in these areas
should also be evaluated and documented in accordance with a described procedure. During the
approval procedure at the latest or during inspections before the approval (pre-approval-inspection), the
development of a medicinal product or process must be consistently proved.
According to the area of consideration (e.g. approval conformity or validation status), it may be necessary to use
different change procedures as a base. This is the way many companies deal with changes to printed packaging
material (information for use, folding cartons, labels) in accordance with a special change control procedure,
because these changes occur relatively frequently in practice and the process sequences can be standardised
easily. In these cases, it should be observed that the sequences and the criteria used are not independent, but
are carefully matched to suit and coordinate with each other.
The examples (lists, flow charts) for grading the changes, as used in many companies, can and should not
replace the individual evaluation of a change, in particular the linked consideration of risk. The example in figure
19.C-4 therefore only shows one way to grade changes. Some companies use different and extensive grading
categories. Others have extensive lists of possible changes and their grades. The display of change procedures
contains large flow charts which are often complicated and hard to understand. These companies have
previously tried to show all potential types of changes and define the required sequences in diagrams. Such a
procedure is not incorrect because it shows the scope of consideration of the change control and example help
in the introduction phase for evaluation and development of changes. This can however deceive one into
thinking everything is regulated. After the introduction phase, most companies find that changes do not always fit
into a prefabricated chart and instead experience and know-how for particular cases is required.
Figure 19.C-4 Grading of changes
Changes requiring control
Not requiring
Major Minor control
(major change) (minor change)
Significance Influences product quality or Influences a unit requiring No relevance to GMP or
of change process reliability. control. authorisation
Possible Official licence Amendment No relevance
measures New approval Review to GMP or
(selection) Revalidation Documentation authorisation
Examples Change of Replacement of Change to
manufacturer: other apparatus part of the working times
synthesis route of a same design Renovations in
starting material (other Change of administration area
impurities) cleansing agent for floors Installation of
Removal of Change of air conditioner in staff
processes to another laundry for work clothing room
site (non-sterile or antibiotics Introduction of
Change in the area) electronically-readable
product composition Introduction of plant ID cards
Change to the co-sales right
process parameters
Other classifications not included in figure 19.C-4 are possible. It is not decisive which and how many change
classes a company has determined, but how it is guaranteed that changes requiring control are recognised as
such and implemented according to a defined procedure.
See the PIC/S document PI 006 for notes on grading changes. In chapter 6.7.4. there is a list of changes that
may make a revalidation necessary (cf. figure 19.C-5).
The so called "trials" cause a problem area in change control. Trials are preliminary, temporary changes which
can be permanently established or revoked after a trial period. With trials, there is a risk that these intended
temporary changes gradually become permanent changes, without a formal change control procedure being
carried out. Regardless of how long a trial is retained and whether it is withdrawn after a trial phase or be
introduced permanently, trials should be dealt with according to the same procedure as all other changes. Before
the trial phase starts, an analogous change control procedure should therefore be carried out.
Deviations should not be treated as changes, not even when deviations become changes after the failure has
been clarified. A deviation is an unplanned and undesirable deviation from a requirement. It does not correspond
with the aim and procedure of change control and should be dealt with according to a special procedure about
handling deviations.
An important function as part of the change control program is fulfilled by the change control committee (also
known as: change control team, change control panel). This permanent committee generally consists of the head
of quality assurance, who frequently also chairs, and the heads of manufacturing, quality control, sales,
regulatory affairs and the information representative. If necessary, further departments (e.g.
research/development, EDP, engineering) also become involved. The task of the committee is to evaluate
changes, determine the measures required and coordinate measures for the departments affected by the
change and the final authorisation.
A major problem, especially during the introduction phase of the change control system, is the issue of which
changes the change control committee should deal with. It is obvious that this committee cannot deal with all
changes in a company due to capacity reasons. As a matter of fact, only changes requiring control should be
processed by this committee. Firstly, these are changes relevant for the regulatory status and involve reporting
or authorisation procedures. Secondly, they are changes which could have an influence on the attributes of a
GMP-relevant system, facility, apparatus, material/product or a procedure/process. This influence may be critical
as regards the product quality/process reliability and require a revalidation/requalification or simply require the
compilation/update of documentation. The change control committee is also involved in changes for which their
implementation is often extensive and coordinating measures are necessary. The committee should also deal
with all changes whose grade or implementation is unclear or questionable.
The question of how the committee members communicate with each other is significant. Not all change control
procedures urgently require the convening of a meeting, at which many important function heads must often be
present in person. In cases which are easy to make a decision about, it is also worth considering traditional
paper-based circulation procedures (serial or parallel), e-mail agreements or common access to Intranet-based
forms.
The committee can only deal with change applications if they are actually assigned. A high involvement is
transferred to the other staff in the company. If a critical change is not evaluated as such and no formalised
change control procedure is introduced, this can cause severe problems with quality.
When a change control program has been introduced, the effectiveness of the system can be reviewed using
data which is easy to determine (cf. figure 19.C-6). The functionality of the system can be measured by taking
into account the effort and speed of change procedures, for example, or the deviations can be examined. The
effectiveness of a change control program depends on the knowledge and experiences of the staff involved. The
regular training about change control procedures is therefore extremely important. Documentation procedures
and communication sequences should be structured as simply as possible to enable rapid implementation.
Deviations are unplanned and generally unwanted changes. They are expressed in the form of internal and
external complaints, stability problems or batch recalls. If they occur, this can be an indication that the change
control program has failed. It is possible that the change to a critical process parameter or material specification
has been overlooked or a negative trend in the development of process data has not been noticed in time.
19.C.3 Documentation
"All changes should be formally requested, documented and accepted by representatives of Production, QC/QA,
R&D, Engineering and Regulatory Affairs as appropriate. The likely impact (risk assessment) of the change on
the product should be evaluated and the need for, and the extent of Re-validation discussed. The change control
system should ensure that all notified or requested changes are satisfactorily investigated, documented and
authorised." (PIC/S document PI 006, section 6.7.2)
"All changes that may affect product quality or reproducibility of the process should be formally requested,
documented and accepted. The likely impact of the change of facilities, systems and equipment on the product
should be evaluated, including risk analysis. The need for, and the extent of, re-qualification and re-validation
should be determined."
(Annex 15, no. 44)
Change control requires a written procedure (change control program) to regulate at least the points shown in
figure 19.C-7
Figure 19.C-7 Regulation content of a "change control" operating instruction
Necessary regulations of a "change control" operating instruction
What types of changes does change control take into account; for which areas does this
operating instruction apply?
Who can suggest/initiate changes?
How are changes requested (forms, methods of communication)?
How are changes graded, who is responsible for the grading?
How are the measures necessary for carrying out the change determined; who compiles the
directions required?
Who is responsible for the execution and monitoring of all necessary measures?
How is the change control committee assembled; what are the duties of the committee?
How is the change documented (format, content, storage)?
Who is responsible for authorising changes?
What are the special regulations for urgent changes?
If the change affects a manufacturing or testing process, then the qualified person must take this into
consideration when releasing the batch (cf. PIC/S document PI 006, chapter 6.7.3).
All quality-relevant changes should be documented in full and so that they are comprehensible. The records can
be archived in paper form or electronically. When storing documents, make sure that all facilities, raw data and
other documents relevant for the change are kept accessible.
Changes requiring control are generally documented in the form of a change request, in which the applicant for
the change proposes the type of grade/evaluation of the change, specifies the time frames and measures for
carrying out the change and the change is authorised or declined by the change control committee. The
documentation for the change procedure should prove that the change was evaluated (risk analysis) and the
subsequently defined measures were implemented as predetermined. When implementing the change, several
measures must often be coordinated as regards timing and contents. A clear display of the individual measures
for a project plan is useful for the coordination of complex changes.
The "change control" operating instruction in the appendix for this chapter describes the procedure of change
control and contains an application form for documenting the change procedure.
Summary:
Change control programs are an essential component of the quality assurance system.
They monitor all types of changes that influence the process reliability or product quality or may
be relevant for the marketing authorisation.
The influence of a change on a specified/validated system must be examined (risk
consideration).
For the implementation of critical changes, the change control committee coordinates all
essential measures.
Changes must generally be requested formally, implemented in accordance with a previously
defined procedure, documented and authorised by the responsible persons.
Page/pages x of y
Company Change control procedures
Document number: Version: valid from: [Enter date]
[Enter document no.] [Enter version no.] valid to: [Enter date]
File name/path:
[Enter file name/path]
Area of application:
Changes to materials, products, facilities/apparatus, processes/procedures and systems in the areas of
purchasing, manufacture, quality control, engineering, research/development, marketing authorisation, sales,
EDP, contract manufacturing and external testing places, excluding changes to printed packaging materials
Key words:
Change, procedure
Replaces version: from:
[Enter version no.] [Enter date]
Changes made since last version:
[Enter main content of changes]
Cross references:
[Valid documents: Enter document no.]
References:
EU GMP Guideline, Annex 15, PIC/S document PI-006-2, Appendix I of the regulation (EC) no. 1084/2003
Distribution list:
[Enter recipients of document]
Compiled by: Checked by: Approved by:
[Name/signature of person who [Name/signature of person carrying [Name/signature of person giving
compiled it] out check] authorisation]
on: on: on:
[Date of compilation] [Date of check] [Date
of approval]
1. Purpose of the instruction:
Internal requirements are specified in order to comply with the legal drug product provisions and the GMP
Guideline, as well as to ensure that the quality of the medicinal product complies with the approval and is
reproducible. These requirements cover the entire manufacturing process and the quality control for a medicinal
product, including the materials and facilities/apparatus used. The purpose of this instruction is to ensure that the
quality of the medicinal product, the safety of facilities/apparatus, the safety of procedures/process and
conformity with the applicable application files for marketing authorisation are maintained in the event of changes
to these requirements.
2. Definitions/abbreviations:
Deviations: unplanned and undesirable deviation from a requirement
CCC: change control committee
Change: planned deviation (extension, replacement, removal, addition) as part of a requirement
Change control: system with which qualified representatives from corresponding departments evaluate current
or planned changes in terms of their effects with regard to a specific status. The aim is to establish precautions
that are necessary to prove and document compliance with the specific status.
Facility: total of all apparatus linked together with a common purpose.
Applicant: person who is initiating a change with a change request
Apparatus: object characterised by the technical processes carried out in it.
Minor change: change which fulfils the conditions of Appendix I of Regulation (EC) no. 1084/2003 or which
affects the attributes of a system, facility, apparatus, material/product or procedure/process. Impairment of the
product quality/process reliability is not likely. Minor changes may require notification to the regulatory or
supervisory authorities.
Major change: change which cannot be classified as a minor change or which may affect the critical attributes of
a system, facility, apparatus, material/product or procedure/process. Impairment of the product quality/process
reliability is likely. Major changes may require authorisation by the relevant regulatory or supervisory authorities
and/or prior revalidation or requalification.
Process: set of interrelated methods and activities which convert an input into results.
System: total of all facilities linked together with a common purpose.
Procedure: established way of carrying out an activity.
Trial: preliminary, temporary changes which are permanently established or revoked after a trial period
3. Responsibilities:
3.1. Responsibilities for the established procedures
3.1.1. The legal medicinal product responsibility for proper planning, implementation and authorisation of
changes is borne by the head of production, the head of quality control, the sales manager and the information
representatives for their relevant area. In particular, they must ensure that:
the qualification status of the rooms and facilities that are affected by a change is maintained or
that a requalification is implemented
the validation status of the processes/procedures that are affected by a change is maintained or
that a revalidation is implemented
changes to manufacturing, analysis and labelling of a medicinal product are based on a valid
approval/registration
the documentation required for the change is compiled or updated
3.1.2. The organisational processing and documentation of change control procedures is conferred to the change
control committee (CCC). The CCC comprises those in the roles mentioned above and the head of regulatory
affairs and the QA representative. Other heads of department or experts may be called in at the wish of one of
the members. The committee has the following tasks:
Risk evaluation of the change request
Authorisation or rejection of the application
Establishing and scheduling necessary measures
3.1.3. The chairman of the CCC is the QA representative. He has the following tasks:
Calling the CCC meetings and taking minutes
Coordination of circulation procedure
Maintenance of the database of change control procedures
Formal control of the change requests
Monitoring compliance with deadlines
Archiving the completed change requests
3.2. Responsibility for the revision of this instruction
The QA representative is responsible for checking this instruction regularly to make sure it is up to date and for
revising it if necessary. He must release a new version at least every two years.
4. Procedure
4.1. Basic principles
4.1.1. GMP or approval-relevant changes must only be implemented if they have been previously requested in
writing and authorised.
4.1.2. Trials are also subject to this procedure.
4.1.3. Deviations are not subject to this procedure, but to operating instruction [enter doc. no./version no.]
"Handling deviations".
4.1.4. Changes can be requested by any staff member using the form in Appendix 1.
4.1.5. Changes of which the grade is debatable or unclear must also be requested using this procedure.
4.2. Implementation of change control procedures
4.2.1. Forms for change control procedure are issued by the QA department. If a new form is issued, a change
number is automatically allocated to the change procedure by the change database and is entered on the form.
4.2.2. The applicant should specify the object of the change and the significant reasons and circumstances of the
change in no. 1 on the change request. He should then sign and date it.
4.2.3. The heads of area affected by the change should have the opportunity to give their opinion on the intended
change, to identify any risks and to suggest necessary measures and schedules. In any case, they should be
acquainted with the planned change. This is documented in no. 2 on the change request.
4.2.4. The QA representative transfers the data required to identify the procedure into the change control
database.
4.2.5. The members of the CCC jointly carry out a risk analysis of the change request under no. 3.1, classify the
change under no. 3.2 and give their decision to authorise or reject the change application under no. 3.3.
Authorisation may be associated with a time scale. The applicant and his head of area are informed of the
decision via a copy of the completed change request.
4.2.6. A decision by the change control committee in accordance with 4.2.5 may only be made if all the
information and documents relevant to the decision are submitted. If necessary, the request may be returned to
the applicant for completion.
4.2.7. If the change is authorised, the CCC can establish a measures plan in no. 3.4 of the change request
(tasks, responsibilities, schedule). This must be completed and authorised for the change procedure to be
completed.
4.2.8. Those responsible in accordance with the measures plan shall each receive a copy of section 3.4 and shall
inform the QA representative when the established measures have been completed.
4.2.9. The QA representative shall collect all the completed measures plans, check them for successful
completion of each task and include them with the original change request. The completed change request is
archived and the result and date of the completion is entered in the change database.
4.2.10. In simple cases, in which the applicant can implement the change himself without requiring any
scheduling, an electronic copy of the request may be distributed to the CCC via the internal e-mail system
instead of at a meeting (circulation procedure). Each CCC member then gives his written vote regarding the
change request via e-mail with electronic signature. The change request and electronic voting from the CCC
member are to be archived in accordance with chapter 4.3. If there is no unanimous decision, the QA
representative calls a meeting about the request.
4.3. Documentation
4.3.1. The procedure in accordance with chapter 4.2 must be documented on the "change request" form in
Appendix 1.
4.3.2. If necessary, documents relevant to the decision should be added to the change request.
4.3.3. The change request and documents relevant to the decision must be kept indefinitely in the "quality
assurance" area of the department.
4.3.4. If necessary for capacity reasons, the paper copy of the change request and its associated documents
may be replaced with an electronic archive file.
4.4. Deviation from the procedure
4.4.1. It is permissible to deviate from the regulations in chapter 4.2 only if:
an immediate change is urgently required for operational or staff safety or
an immediate change has considerable significance for the unit, the need for it was not
foreseeable and it was not possible to comply with the formal procedure in chapter 4.2 in the time
available.
4.4.2. In the cases in chapter 4.4.1, the consent of the responsible head of area or his representative should be
sought before the change is implemented.
4.4.3. Once the change has been implemented, the procedure in chapter 4.2 must be followed at the earliest
opportunity.
5. Appendices
Appendix 1: change request form
The procedure has not been completed correctly. Deviations occurred and measures required for procedure
completion: