SUBMITTED BY
JAYA PRAKASH V
REGULATORY AFFAIRS
SVCP 218311
AGENDA
 Introduction
 Life Cycle Approach
 Life Cycle Phases
 Quality Risk Management
 Regulated Company Activities
 SupplierActivities
 INTRODUCTION
 GAMP 5 is applicable to a wide range of information
systems, lab equipment, integrated manufacturing
systems, and IT infrastructures.
 Bringing procedures in line with the dynamic Life
science industry .
 reducing the cost of compliance.
 Avoid duplication of activities (e.g. by fully integrating
engineering and computer system activities so that
they are only performed once).
 Scale all life cycle activities and associated
documentation according to risk, complexity and
novelty.
 GAMP guidance aims to achieve computerized
systems that are fit for intended use and meet
current regulatory requirements, by building upon
existing industry good practice in an efficient and
effective manner.
 The GAMP Guide contains the validation framework
and associated procedures and guidelines. It draws
together the key principles and practices, and
describes how they can be applied to determine the
extent and scope of validation for different types of
systems, ensuring that validation is scaleable.
 Facilitates the interpretation of regulatory
requirements.
 Establishes a common language and terminology.
 Promotes a system life cycle approach based on
good practice.
 Clarifies roles and responsibility.
 Focus attention on those computerised systems with
most impact on patient safety, product quality, and
data integrity .
GAMP DOCUMENTATION
STRUCTURE
Few of the Important Points
 GAMP 5 - all about risk. Increasing complexity and/or
novelty = higher risk = more effort and deliverables.
 Moving away from traditional qualification
terminology (e.g. IQ, OQ, PQ). Terminology confuses
people outside of the validation and QA
departments. Terminology is still available, but
optional.
CONT.....
 Most computerized systems now based on
configurable packages, many of them
networked.
 Validate only if there could be an impact on
patient safety, product quality, data
integrity. If none of these, no need to
validate, good engineering practice is
sufficient.
 Need to be clear on the differences
between system owner and process owner.
DRIVERS FOR GAMP-5
Life Cycle Approach Within a QMS
 defining activities in a systematic way from
understanding requirements to system retirement .
 Enables management control and a consistent
approach across systems .
 The life cycle should form an intrinsic part of the
company’s Quality Management System (QMS) .
 The QMS should enable continuous process and
system improvements based on periodic review and
evaluation, operational and performance data, and
root-cause analysis of failures .
LIFE CYCLE APPROACH
Product and Process
Understanding
 An understanding of the supported process is
fundamental .
 Focus on risk to Patient Safety, Product Quality, and
Data Integrity .
 Need to understand risks associated with a business
process before the risks associated with specific
functions of computerized systems can be assessed .
 Specification of requirements should be focused on
critical aspects .
 The extent and detail of requirement specification
should be based on the associated risk, complexity, and
novelty of the system.
LIFE CYCLE PHASES
Quality Risk Management
 Quality risk management is a systematic
process for the assessment, control,
communication, and review of risks.
 An iterative process used throughout the
entire computerized system life cycle from
concept to retirement.
 For a given organization, a framework for
making risk management decisions should be
defined to ensure consistency of application
across systems and business functions.
 Terminology should be agreed upon, particularly
regarding definitions and metrics for key risk
factors.
OVERVIEW AND BENIFITS OF
RISK MANAGEMENT
RISK ASSESSMENT
METHOD
QUALITY RISK MANAGEMENT
PROCESS
Regulated Company
Activities
 To ensure compliance
 To ensure fitness for intended use
 Achieving robust, cost effective,
compliance requires strong governance
 The activities require a defined
organizational and governance framework
 Governance is the responsibility of the
regulated company
Governance & Organisational
Management
 Identify and comply with GxP requirements
 Integrate life cycle activities into quality
management system
 Identify and assess each system
 Ensure systems compliant and fit for use
according to SOPs
 Follow a validation framework, validation plans
and reports
 Maintain compliance throughout the lifetime of a
system
System Activities for Effective
Governance
 Maintaining the system inventory.
 Impact of systems on patient safety, product quality,
data integrity.
 Defining the computerized system life cycle approach.
 Life cycle planning, supplier assessment, risk
management, specification, verification, reporting
activities and documents.
 System operation and management, operating
procedures for end users and administrators.
 Record and data management.
 Security management.
Product and Process Understanding
 An understanding of the supported process is
fundamental.
 For determining system requirements.
 As a basis for making science and risk based
decisions to assure that the system is designed
and verified to be fit for its intended use.
Regulated Company
Management
 Regulated Company Management.
 Set up the Governance Structure.
 Ensure funding for Governance.
 Ensure policies and procedures available.
 Appoint Process Owner.
 Appoint System Owner.
 Appoint Project Manager.
Supplier Activities
 Suppliers Role
 Suppliers (including internal suppliers) play an
important support role in achieving and
maintaining system compliance and fitness for
intended use
 Provide key documentation.
 Performing testing.
 Providing support e.g. change control
Stable systems designed and
developed using Good Practice
 Establish QMS.
 Establish requirements.
 Quality planning.
 Assessments of sub-suppliers.
 Produce specifications.
 Perform design review.
 Software production/ configuration.
 Perform testing.
 Commercial release of system.
 Provide user documentation and training.
 Support and maintain the system in
operations.
 System replacement and retirement
Planning in QMS
 If you want the supplier to follow your policies,
procedures and standards.
 This must be made clear in the RFP (external
supplier) and project documentation.
 Documentation must be provided.
 Supplier personnel must be trained before work
starts.
 Compliance must be assured.
 Quality Plan
 If you use the supplier’s policies,
procedures and standards
 The supplier’s practices must be assessed
for suitability, accuracy and completeness.
 Compliance must be assured throughout
the life cycle.
 Quality Plan.
 Supplier assessment.
 Supplier assessment is important
Summary
 I have presented GAMP5.
 The structure .
 Life cycle approach.
 Quality risk management.
 Life Cycle Phases.
 Regulated company activities .
 Supplier activities.
 Take a look at the document and the other
Good Practice Guides.
THANK U

Gamp 5 overview by jaya prakash ra

  • 1.
    SUBMITTED BY JAYA PRAKASHV REGULATORY AFFAIRS SVCP 218311
  • 2.
    AGENDA  Introduction  LifeCycle Approach  Life Cycle Phases  Quality Risk Management  Regulated Company Activities  SupplierActivities
  • 3.
     INTRODUCTION  GAMP5 is applicable to a wide range of information systems, lab equipment, integrated manufacturing systems, and IT infrastructures.  Bringing procedures in line with the dynamic Life science industry .  reducing the cost of compliance.  Avoid duplication of activities (e.g. by fully integrating engineering and computer system activities so that they are only performed once).  Scale all life cycle activities and associated documentation according to risk, complexity and novelty.
  • 4.
     GAMP guidanceaims to achieve computerized systems that are fit for intended use and meet current regulatory requirements, by building upon existing industry good practice in an efficient and effective manner.  The GAMP Guide contains the validation framework and associated procedures and guidelines. It draws together the key principles and practices, and describes how they can be applied to determine the extent and scope of validation for different types of systems, ensuring that validation is scaleable.
  • 5.
     Facilitates theinterpretation of regulatory requirements.  Establishes a common language and terminology.  Promotes a system life cycle approach based on good practice.  Clarifies roles and responsibility.  Focus attention on those computerised systems with most impact on patient safety, product quality, and data integrity .
  • 6.
  • 7.
    Few of theImportant Points  GAMP 5 - all about risk. Increasing complexity and/or novelty = higher risk = more effort and deliverables.  Moving away from traditional qualification terminology (e.g. IQ, OQ, PQ). Terminology confuses people outside of the validation and QA departments. Terminology is still available, but optional.
  • 8.
    CONT.....  Most computerizedsystems now based on configurable packages, many of them networked.  Validate only if there could be an impact on patient safety, product quality, data integrity. If none of these, no need to validate, good engineering practice is sufficient.  Need to be clear on the differences between system owner and process owner.
  • 9.
  • 10.
    Life Cycle ApproachWithin a QMS  defining activities in a systematic way from understanding requirements to system retirement .  Enables management control and a consistent approach across systems .  The life cycle should form an intrinsic part of the company’s Quality Management System (QMS) .  The QMS should enable continuous process and system improvements based on periodic review and evaluation, operational and performance data, and root-cause analysis of failures .
  • 11.
  • 12.
    Product and Process Understanding An understanding of the supported process is fundamental .  Focus on risk to Patient Safety, Product Quality, and Data Integrity .  Need to understand risks associated with a business process before the risks associated with specific functions of computerized systems can be assessed .  Specification of requirements should be focused on critical aspects .  The extent and detail of requirement specification should be based on the associated risk, complexity, and novelty of the system.
  • 13.
  • 14.
    Quality Risk Management Quality risk management is a systematic process for the assessment, control, communication, and review of risks.  An iterative process used throughout the entire computerized system life cycle from concept to retirement.
  • 15.
     For agiven organization, a framework for making risk management decisions should be defined to ensure consistency of application across systems and business functions.  Terminology should be agreed upon, particularly regarding definitions and metrics for key risk factors.
  • 16.
    OVERVIEW AND BENIFITSOF RISK MANAGEMENT
  • 17.
  • 18.
  • 19.
    Regulated Company Activities  Toensure compliance  To ensure fitness for intended use  Achieving robust, cost effective, compliance requires strong governance  The activities require a defined organizational and governance framework  Governance is the responsibility of the regulated company
  • 20.
    Governance & Organisational Management Identify and comply with GxP requirements  Integrate life cycle activities into quality management system  Identify and assess each system  Ensure systems compliant and fit for use according to SOPs  Follow a validation framework, validation plans and reports  Maintain compliance throughout the lifetime of a system
  • 21.
    System Activities forEffective Governance  Maintaining the system inventory.  Impact of systems on patient safety, product quality, data integrity.  Defining the computerized system life cycle approach.  Life cycle planning, supplier assessment, risk management, specification, verification, reporting activities and documents.  System operation and management, operating procedures for end users and administrators.  Record and data management.  Security management.
  • 22.
    Product and ProcessUnderstanding  An understanding of the supported process is fundamental.  For determining system requirements.  As a basis for making science and risk based decisions to assure that the system is designed and verified to be fit for its intended use.
  • 23.
    Regulated Company Management  RegulatedCompany Management.  Set up the Governance Structure.  Ensure funding for Governance.  Ensure policies and procedures available.  Appoint Process Owner.  Appoint System Owner.  Appoint Project Manager.
  • 24.
    Supplier Activities  SuppliersRole  Suppliers (including internal suppliers) play an important support role in achieving and maintaining system compliance and fitness for intended use  Provide key documentation.  Performing testing.  Providing support e.g. change control
  • 25.
    Stable systems designedand developed using Good Practice  Establish QMS.  Establish requirements.  Quality planning.  Assessments of sub-suppliers.  Produce specifications.  Perform design review.  Software production/ configuration.
  • 26.
     Perform testing. Commercial release of system.  Provide user documentation and training.  Support and maintain the system in operations.  System replacement and retirement
  • 27.
    Planning in QMS If you want the supplier to follow your policies, procedures and standards.  This must be made clear in the RFP (external supplier) and project documentation.  Documentation must be provided.  Supplier personnel must be trained before work starts.  Compliance must be assured.  Quality Plan
  • 28.
     If youuse the supplier’s policies, procedures and standards  The supplier’s practices must be assessed for suitability, accuracy and completeness.  Compliance must be assured throughout the life cycle.  Quality Plan.  Supplier assessment.  Supplier assessment is important
  • 29.
    Summary  I havepresented GAMP5.  The structure .  Life cycle approach.  Quality risk management.  Life Cycle Phases.  Regulated company activities .  Supplier activities.  Take a look at the document and the other Good Practice Guides.
  • 30.