GxP Assessment & Categorization of Computerized System



The first stage of whether a system requires a validation is to identify whether the system has a GxP impact.

The result of the GxP Assessment and system Category checklist decided whether Validation required for computerized system.

If Outcome is “GxP Applicable” then follow Computer system validation procedure and other risk assessment for validating the system.

All systems which handle data or processes which fall under the impact of GxP or any other regulatory requirements must be validated

Determine whether the application has been validated elsewhere you in organization. The amount of work required may be significantly reduced by referring some of the deliverables in as in state or with slight changes. The details must be addressed in the change control.

If required any “Non GxP Applicable “systems that process data critical to operations of the business such as those involving financial, certain personal data etc.

Quality assurance, IT, CSV responsibility person, HOD of User department may consider the validation of such systems as a part of good business practice.


Data Integrity App

GxP Assessment of computerized system:

GxP Assessment determines whether a system requires a validation to identify whether the system has a GxP impact.

Perform GxP assessment using below questioners:

1 Is the system used to generate data used in support of a regulatory submission?

2 Is the system is used to monitor, control or supervise a GxP manufacturing or packaging process and have the potential to affect Product Quality, Safety, Identity or Efficacy?      

3 Is the system used to hold and/or manipulate clinical study data?

4 Is the system used to monitor, control or supervise packaging and labeling operations?

5 Is system used to create critical study control data?

6 Does the system hold electronic records that are or could be used in electronic form to make GxP decisions?

7 Is the system used to transmit e-data/ records to other systems for the execution of GxP activities?

8 Is the system is used for GxP analytical quality control?

9 The system manipulates data, or produces reports, to be used by GxP quality related decision authorization / approval processes, where the data supports the decision process or the electronic record constitutes the master record.?

10 Is the system is used to maintain compliance with a GxP requirement?

11 Is the system is used to monitor, control or supervise warehouse or distribution within a GxP requirement?

12 Is the system is used for GxP batch sentencing or batch records?

13 Is the system used to store GxP documents for example SOPs, Specifications, BMR      ,BPR ,DMF

14 Is the system used for GxP data backup, restore, archival or storage, data security or access / domain control?

15 Is the system used for physical access to GxP to the environment (i.e. area or location)?

16 Does the system support a GxP application i.e. LAN/WAN?


If any of the above questions are answered “Yes” then the system has a GxP impact and the system requires a level of Validation and control through the Computer Systems Validation.

If all the questions are answered “No” then the system may be deemed not to have a GxP Impact. This should be documented to support the decision not to perform formal validation. .

 

System categorization

Refer below checklist shall be used to classify the systems into one of the System Categories

1 Is the system established commercially and is used to run other programs/applications?

2 Does the system consist of software which is not directly useful for business purposes but makes the computer hardware useful? An example is the Windows Operating System?

3 Is the system used to perform basic tasks, such as recognizing input from the keyboard, sending output to the display screen, keeping track of files and directories on the disk, and controlling peripheral devices such as disk drives and printers?

4 Is the system available as a ready-made product for sale to the general public?

5 Can the system be implemented without performing any customization or configuration to it (i.e. system will be used “As-Is”)? 

6 Can the system be configured for use for a specific function without altering the basic program? In other words, can the system be tailored to meet your business requirements/needs?

7 Does the system consist of a program or group of programs specially designed for the end users?


Based on above mentioned question Application software falls into one of the categories as -

Category 1: Operating System

[Note: If the answer to question 1 to 3 is Yes, then this category is applicable]

 

Category 3: Standard Software Packages (Commercial Off the Shelf (COTS) As-Is)

[Note: If the answer to question 4 and 5 is Yes, then this category is applicable]

 

Category 4:  Configurable Software Packages (Configurable COTS)

[Note: If the answer to question 4 and 6 is Yes, then this category is applicable]   

 

Category 5: Custom (Bespoke) Software

[Note: If the answer to question 7 is Yes, then this category is applicable.]

 “Trust but Verify “ Ronald Reagan

 

Across the internet, there are millions of resources are available which provide information about Everything.

 

If you found all content under one roof then it will save your time, effort & you will more concentrated on your important activity.

Data Integrity App

Our Data integrity app will helpful for understanding what Data integrity & CSV really means & How 21 CFR Part 11, EU Annex 11 & other regulatory guidelines affects in pharmaceutical Industry.

 

Data Integrity App Include 

- Basic Data Integrity Concepts

- ERES & Its Requirement

- CSV & Its best practices 

- Mock Inspection and General Q&A

- Checklist for inspection

- Inspection Readiness

- Useful SOP’s

- Stay Regulatory Compliant.

 

“Stay One Step Ahead in Pharma IT Compliance” 


Data Integrity App Link:


https://play.google.com/store/apps/details?id=com.innovativeapps.dataintegrity

 

Try our "Data Integrity" app which helps you to better understand current regulatory agencies thinking on Data Integrity & CSV.



Comments

Post a Comment

Popular posts from this blog

What is CSV, Its Need, Purpose & Benefits in pharma Industry.

Image
History of CSV:  The concept of validation was derived from engineering principles of validation of mechanical system that has been extended to the software industry. To extend it further during mid-1970’s, Ted Byers and Bud Loftus, two Food and Drug Administration (FDA) officials first proposed the concept of validation in order to improve the quality of pharmaceuticals (Agalloco 1995).  In 1987 the FDA published a document entitled ‘FDA Guidelines on General Principles of Process Validation’.  It state that  "Process validation is establishing documented evidence which provides a high degree of assurance that a specific process will consistently produce a product meeting its predetermined specifications and quality attributes."   Feeling the necessity of Validation, FDA published a guide to the inspection of Computerized Systems in Pharmaceutical Processing, also known as the ‘bluebook’ (FDA 1983).  For MHRA this is Annex 11 of the EU GMP regulations (EMEA 19
Read more

What is Project Validation Plan (PVP) in Computer System Validation?

Image
In Earlier post we understood what is Design Specification, Its Type & Elements in Computer System Validation. Now in this article we are going to understand what is project validation plan(PVP) & What Content should include in PVP?. What is Project Validation Plan(PVP): CSV processes should be guided by a good plan that is created before the project starts. Project Validation Plan should be developed during this planning phase of the SLC Validation plan will define the objectives of the validation, the approach for maintaining validation status over the full SDLC & satisfy all regulatory policies & industry best practices (e.g., GAMP 5). It also defines roles and responsibilities along with the most important part, the Acceptance Criteria. A project validation Plan shall be created to identify and define the Validation strategy and deliverables generated as an outcome of the execution of the strategy. The PVP should be project specific and describes the appr
Read more