Showing posts with label verification and validation. Show all posts
Showing posts with label verification and validation. Show all posts

Wednesday, March 23, 2016


WHY  VALIDATE? 

The simple answers:  "It's the law." "The CGMPs require it." 

The real answer:  Yes it's the law, and the CGMPs require it.  But let's look beyond such negative motivators. 

Consider the real purpose of V&V. Not to satisfy a reg or audit, tho that's what motivates many. The real purpose is to prove that whatever you're verifying and validating (V&V) does what it's required to do, why it was acquired and installed (requirements)? That requires that before you spend time on other V&V activities, you verify (inspect, test, check, qualify) that it is installed properly, i.e., all applicable manufacturer's requirements have been met (electrical voltage, current, grounding, air exhaust, air treatment, safety, environmental prep, and so on). If this isn't done first, then subsequent V&V activities are compromised. 

If some process or equipment may have been running for X years, and will be retroactively validated, it's safe to assume that it's installed properly. However, "assume" is not in the QMS (Quality Management System) vocabulary, so even with an established system, some checks must be performed (IQ), and all QMS' require documentation of that activity. You may do so and find some problems which will have to be addressed. Then you can progress with verifying and/or optimizing the settings used (DOE may be involved), whether you call it an OQ or not. Then you challenge the system repeatedly with all the extremes of allowable inputs (material, personnel, times of day, utilities fluctuations, etc) to show (whether you call it a PQ or not) that the system being V&V is robust and will virtually always deliver expected levels of quality with known and acceptable levels of variation (see recent drug process validation guidance from FDA), which will change / improve over time / lifecycle. These should be done, as needed, all or part, over the life time of the product / process / equipment involved. 

-- John E. Lincoln, J. E. Lincoln and Associates LLC; jelincoln.com      
RETROSPECTIVE  VERIFICATION  AND  VALIDATION (V&V)

Based my 30+ years experience with the FDA, "deviations" and definitions as "legacy" won't cut it with them regarding omitting a validation. The FDA does accept retrospective V&V on processes and production / test equipment, and expects the documentation to be thorough, though much of your data can be reduced by a review of the last several lots through that process / equipment. With a retrospective validation, you do what you can, but I would certainly include an IQ, OQ, and several PQs (or DHR reviews, documented, covering varying operating conditions, shifts, operators, and RM lots) as part of that. Your procedures for such V&V should be addressed in an SOP and/or a Validation Master Plan, as well. 

Software must be fully validated, and hardware / equipment can be validated to the extent that there is no 100% downstream verification (QC / inspection) performed / documented. As part of Lifecycle considerations, you are required to re-V&V or at least re-evaluate the need for additional V&V, periodically (defined in your SOP / VMP) any way, so, if not done at all up to the Current time, you would be expected to do it starting as of the present. I've never seen the FDA give a company a "pass" on validation just because it wasn't done previously, and have lost several arguments along that vein with their auditors and the relevent FDA District Office.

However, the FDA prefers prospective V&V, because, by definition, retrospective means product was built and released previously using non-V&V'd processes / equipment, in violation of the CGMPs, and hence that product is technically "adulterated" -- challenges to such by companies have ended up in court, and no matter the outcome in the court, have been extremely costly to the company in terms of share value, lost market share, public reputation, and an adversairial relationship with the Agency, and have not changed the Agency's policies to such situations.
        
True, you can reference ASTM E2500 to justify not using the terms IQ, QO, PQ, but are still expected to "verify" (qualify, inspect, check ...) proper installation (or "IQ"), proper selection (and initialization) of settings / parameters / tolerance ranges (or "OQ"), and consistent reliability / reproducibility, et al, of your equipment / processes, under allowable "worst case" conditions (all worst shift variations, RM / lot variations, power / air fluctuations ...; or "PQs"). And as evident by some forum discussions, define your terms in your documents (validate, verify, qualify, commission, FAT, SAT, etc) with your own "working definitions" under the broader (but harder to "real world" implement definitions under the CGMPs and/or ISO.  -- John E. Lincoln, J. E. Lincoln and Associates LLC; jelincoln.com