What is FDA doing about Part 11? Is the regulation for electronic records and electronic signatures still in force? – The answer is YES – What, if anything, should my company or clinical site be doing about it. Strict compliance can be very expensive- almost as expensive as no compliance at all! Here are three tips on Part 11 compliance from veteran consultants and regular GxP Perspectives contributors, Emma Barsky and Len Grunbaum. I first met Len at the last FDA training course I attended as an FDA field inspector. He is still training FDA and Industry on computerized systems. Given that FDA is focusing more and more on the automated processes and integrity of the data collected using automated means, Part 11 is more important than ever.
Carl Anderson, GxP Perspectives
GUEST COMMENTARY
Three things you need to know about 21 CFR part 11
by Emma Barsky & Len Grunbaum
Fifteen years after becoming effective, 21 CFR part 11 seems to generate as much controversy as it did when it was first implemented. At this point in time, we cannot think of another regulation that sparks as many disagreements with respect to its interpretation and generates as many discussions. Why is that?
Since the inception of the regulation as of August 1997, compliance has been, in our view, analogous to the story of Goldilocks and the Three Bears: compliance in some companies has been too hot (i.e., too restrictive and expensive); compliance in some companies has been too cold (i.e., minimal if any at all); and, compliance in some companies has been just right (i.e., cost-beneficial and based on an effective risk assessment). So, while we do not in any way want to equate compliance with the regulation to a bowl of porridge, we hereby offer three main things that you need to know about 21 CFR part 11 to help you make your compliance just right:
1. You need to know how to assess risks when it comes to 1) developing a validation approach regarding a given system and 2) implementing controls (e.g., audit trails, logical/physical security) to help ensure the trustworthiness and reliability of the records. As indicated in the Scope and Application guidance, the FDA’s “current thinking” on the subject, the agency will expect you to have a justified and documented risk assessment regarding these items. However, in order for the respective strategies and controls to be cost-beneficial in context of the potential of the system to affect product quality and safety, and record integrity, a combination of knowledge of system functionality, regulatory understanding, financial prudence and a healthy dose of common sense are required. Take one of these elements out of the equation and the resulting risk assessment will be neither practical nor useful.2. You need to know the minimum documentation that must be available to support compliance with 21 CFR part 11. Irrespective of the development model employed (e.g., waterfall, Agile/Scrum), the software delivery model employed (e.g., software-as-a-product, software-as-a-service) or data hosting model employed (e.g., internal data center, outsourced hosting), as applicable, a documentation suite that truly supports compliance should encompass the following:
• User/functional requirements, including 21 CFR part 11 requirements, to describe what the system is supposed to do;
• Technical specifications to define how the system is built and how it works, and which is the critical component in supporting effective system maintenance (e.g., troubleshooting problems, assessing the impact of planned bug fixes and enhancements);
• Development/validation SOPs, and evidence of compliance (e.g., required documentation, required approvals, developer-level and user acceptance testing), to define the process for developing and deploying a system that operates as intended and meets regulatory requirements;
• Traceability between test evidence and all requirements;
• Change control SOP and supporting change request/change control records to ensure that the system continues to operate as expected;
• Training SOP and supporting training records to support staff qualifications regarding system development, maintenance and use;
• IT infrastructure SOPs (e.g., logical/physical security, back-up and recovery, etc.) and supporting records to evidence on-going protection and availability of records.
3. You need to know that, for a given system, the quality of testing and quality of reviews are of paramount importance because they may compensate for ineffective development and/or validation SOPs. In other words, the devil (or in this case the saving angel) is in the details. Therefore, it is important that
• Testing is complete and reflective of true system risks;
• Test evidence is supportive of test results/conclusions and/or does not raise “red flags”;
• Reviews are timely and reasonable (e.g., only a realistic number of detailed test scripts should be reviewed in one day);
• Incident reports are reviewed and approved by appropriate individuals promptly.
If testing practices, testing evidence and/or testing reviews are questionable, they will constitute a serious gap from a risk-based perspective because 1) one may not be able to rely on the given system’s operation, results, etc., and/or 2) data quality and integrity may be viewed as being compromised.
While there are other aspects to 21 CFR part 11 that one should know (e.g., how to determine if 21 CFR part 11 even applies to you and, if not, how to document such a conclusion), the three items discussed above represent those areas where, in our view, compliance tends to be too hot (i.e., potential business risk in that the cost of doing business may be higher than it should be) or too cold (i.e., a potential regulatory risk in that regularity requirements may not be met which, in turn, may result in business risks based on the operational impact of FDA enforcement actions).Emma Barsky and Len Grunbaum
Partners of The Practical Solutions Group, LLC
609.683.0756
Practical Solutions
====
Join the GxP Perspectives Linkedin Group Here
Or get an email subscription (on the right sidebar)
====



Posted by GxP Perspectives 

































FDA Releases Draft Guidance for Monitoring Clinical Trials
September 4, 2011FDA Draft Guidance Offers New Methods of Monitoring Clinical Trials
In this Guest Commentary veteran monitoring specialist Lorraine Ellis gives her perspective on the new draft guidance for monitoring clinical trials.
Guest Commentary by Lorraine D. Ellis, MS, MBA
When I started monitoring, the Investigators completed CRFs from the source documents and there were few Clinical Research Coordinators (CRCs). Usually an office nurse or staff member would complete the forms when they had “free” time. Three decades later, sites, studies, and monitoring have changed significantly. Investigator sites must have significant study infrastructure (SOPs and facilities, etc) and trained/experienced staff to complete the complex trials of the 21st century. So it is significant that the 1988 Guidance document has been retired and the new guidance on monitoring describes FDA’s view on applying 21st century technology and methods to monitoring.
There are several key advances in this guidance. The guidance describes the term “centralized monitoring” for the many practices of using technology to review data off-site. This term and other FDA comments describe using “off-site” monitoring as one of the acceptable methods of monitoring data quality and study conduct. This guidance will intensify the discussions of “why do we need monitoring every 4 to 6 weeks with 100% source document verification” and “what is the best monitoring procedure for this study”. Also, FDA outlines more detailed monitoring plans as the risk based approach requires that monitoring approaches should be tailored to the trial.
Poorly Designed Protocols, CRFs, or Trial Instructions
The second half of the guidance provides information on monitoring plans and their expected content. Currently monitoring plan content and quality vary among Sponsors so this detailed section should increase monitoring plan quality and detail as it describes methods appropriate to the study. Since this guidance promotes custom monitoring plans based on variables of the study such as scope and complexity, these sections will assist Sponsors in designing and implementing those monitoring practices appropriate to the study.
"Greater Reliance on Centralized Monitoring"
Risk-Based Approach
The plan should also include: monitoring methods, communication of monitoring findings, resolution of issues, training topics, training evaluation, and monitoring plan amendments.
It will be interesting to read the comments sent to FDA in the next 90 days. Some Sponsors will say “it’s about time” monitoring will be optimizing 21st century technology. Others may struggle with the changing of the “gold standard” of monitoring. In any case, this guidance may be the catalyst the industry needs to optimize monitoring methods and effectiveness.
FDA Guidance for Industry: Oversight of Clinical Investigations– A Risk-Based Approach
Visit Lorraine’s Website
====
How to comment: Here is a two-slide powerpoint presentation on how to comment on the draft guidance document courtesy of CDRH BIMO. Thanks!
Location of Monitoring guidance FR
The Federal Register Docket Number is FDA-2011-D-0597
====
You can help out GxP Perspectives! Please let your colleagues and friends know about GxP Perspectives and the discussion on risk-based monitoring. I also encourage you to get an email subscription (on the sidebar to your right) or join the LinkedIn group (below).
Please take a short 3-question survey to help GxP Perspectives improve! Survey begins 22 SEP 2011
====
On the Blogroll: Chromosome which features an excellent post on, “The Site’s Side,” by Jae Chung, founder of goBalto, Inc., located in San Francisco. The post discusses some of the problems clinical sites face with monitors.
On The Blogroll: On Biostatistics and Clinical Trials- Finally a blog on biostatistics that I can almost read:) It is written by Dr. Deng, 邓春勤 A Medical Doctor turned into Biostatistician in Clinical Trial and Drug Development Industry
There have been some great comments on the GxP Perspectives LinkedIn group on the draft guidance document. There is also a new logo for your viewing pleasure. I invite everyone to join the GxP Perspectives LinkedIn Group and join the discussion.
====
GxP Perspectives LinkedIn Group
====
The FDA, Center for Drug Evaluation and Research (CDER) is announcing an industry workshop entitled ‘‘CDER Small Business Assistance – Clinical Trials and Electronic Submissions.” This two day event will be held in two California locations consecutively. The first workshop will be held in Los Angeles, CA, on September 26-27, 2011, followed by a second in San Francisco, CA, on September 28-29, 2011.
====
This just in: Request for Comments- Exculpatory Language Used in Informed Consent, a joint FDA and OHRP draft guidance document (September 2011)
====
GxP Perspectives has returned to twitter: @GxPPerspectives
.
Share this:
Like this: