Building a “culture of compliance” is almost a cliche in GxP Quality Assurance circles. However, time and again major problems occur when we discover that a “culture of shortcuts” has set in. In this Guest Commentary veteran GxP consultants Emma Barsky and Len Grunbaum cover the basics of how to build a culture of quality and compliance from the ground up. I first met Len Grunbaum in 2004 when he was on the faculty of an Advanced GLP course for FDA field investigators. This was the last FDA training I took before leaving. I was impressed with Len’s knowledge of validation processes and we’ve kept in touch. I’m still impressed.
This will be the last post for two weeks as I go traveling for a bit. I wanted to let readers know of two important recent articles (with links at the bottom of the post.)
The first is about a report issued earlier this month by the British Academy of Medical Sciences. The report was commissioned by the British government to try to pare back some of the bureaucracy involved with clinical trials in the U.K. An article on the report by Nick Taylor in Outsourcing-Pharma there are some interesting revelations about the British regulatory agency, MHRA. I strongly recommend reading this article.
In addition, I would like to refer readers to last week’s FDA Matters for interesting issues of concern at FDA. Now, here are Len & Emma:
Guest Commentary by Emma Barsky & Len Grunbaum
Implementing a “Culture of Compliance”: Practical Steps
Establishing a “culture of compliance” is not a “paint-by-numbers” exercise; it must be injected into the DNA of a company. In our experience, many companies strive to create a “culture of compliance” but few approach it from the perspective of a mindset of “shared attitudes, values, goals and practices that characterizes an institution or organization,” which is the essence of a “culture.” The ideas that follow are intended to provide a roadmap and practical steps towards implementing a company-wide “culture of compliance” in the life science industry, across any GXP area.
1. Develop a quality policy statement and quality objectives
2. Identify and document quality criteria
Company management should identify and document the criteria for “good quality practices.” These components may include, but may not necessarily be limited to, adherence to written policies and procedures, exercising good documentation practices (e.g. initialing and dating cross-outs, using a single line to for corrections), promptly bringing any deficiencies and/or deviations to the attention of company management, documenting unplanned deviations, providing explanations/justifications when planned deviations occur and correcting them in a timely fashion.
3. Establish a robust quality baseline
Through performing internal audits and assessing CAPAs, the company’s Quality function (e.g., Quality Assurance) should identify quality-related issues based on the criteria regarding the components of “good quality practices” outlined in item number 2.
While performing the internal audits and through capturing the findings in the CAPA system, the Quality function should focus on identifying trends and themes related to non-compliance. In order to achieve this objective, the company’s CAPA system should be such that it allows the company to collect information regarding appropriate metrics to assess the success of the “culture of compliance” initiative.
Lack of compliance should be tracked not only on an issue-by-issue basis, but also across departments, individuals and operations/processes. Collecting information on these items will help to identify the root cause of the issue, which may stem from a larger issue related, but not necessarily limited to,
1. Cumbersome and, therefore, ineffective processes
2. Lack of appropriate supervision
3. Procedures that lack clarity (e.g., poorly worded documentation; lack of guidance, contradictory information)
4. Lack of documented procedures
5. Lack of an individual’s attention to detail and common sense
6. Lack of effective training
The list of potential root causes of the deficiencies encountered is limitless, but one thing always remains clear: unless quality-related issues are addressed and remedied at the root cause level, the fix to compliance issues will not be permanent, nor will the company be able to create and maintain the “culture of compliance.”
4. Maintain a robust quality baseline
Every internal audit should focus on the effectiveness of the established CAPA system. Specifically, the Quality function should determine whether:
1. The nature and impact of the deficiency on data has been properly identified
2. Effective corrective and preventive actions have been implemented
3. Appropriate follow-ups have been performed
4. The system is robust enough to trend and track quality-related issues accurately and completely
5. The system is robust enough to identify weaknesses with processes, documentation practices, personnel, etc.
The company’s Quality function should investigate all instances where the above has not been achieved for improvements within the quality system. This includes the defined metrics of the CAPA system.
In conclusion, we would like to emphasize that many factors, including but not limited to, new staff, acquisitions/mergers, new lines of business, staff reductions and/or new management have an impact on the “culture of compliance.” Therefore, in order to be successful, a “culture of compliance” should be a “living” initiative, which is constantly assessed for its effectiveness in light of changes that every company experiences during the normal course of events.
Emma Barsky
Len Grunbaum
Partners
The Practical Solutions Group, LLC
=============
Read about the Academy of Medical Research Report by Nick Taylor in Outsourcing-Pharma
UPDATE: There is a very interesting Important Notice to IRBs that is on the FDA website. Sort of a Coast IRB redux.
=============
Please join GxP Perspectives on LinkedIn at:
GxP Perspectives LinkedIn Group
See the page Guest Commentaries (at the top of the blog) for the previous article by Len & Emma on Part 11 compliance.
On FDA’s Website there are Two New Warning Letters from FDA to Clinical Investigators that show the need to effectively respond to a Form FDA 483, Inspectional Observations, with a well thought out CAPA Plan.



[...] GxP Perspectives – Blogger Carl Anderson, an 18-year-vet of the FDA, is a consultant and does mock FDA audits. Recent hit: Building a culture of compliance. [...]
Hey, I just wanted to let you know that your website is mentioned in our new blog post:
Top 40 websites (and tweeters) on the FDA
http://blog.fdazilla.com/2011/02/top-40-websites-and-tweeters-on-the-fda/
Please feel free to link/retweet away, and keep up the good work on your site!
Thanks,
Tony
Thanks Tony,
I hope readers take the time to check out Tony’s blog.