FDA Modernization and Restructuring of the SDLC for Computer System Validation and Compliance - Webinar (Recorded)

Why Should You Attend:

You will learn about FDA’s approach to modernizing technology, and how that will benefit both the Agency and industry. We will discuss ways to modernize the System Development Life Cycle (SDLC) approach to Computer System Validation (CSV) by using automated testing tools that will result in a continuous validation of software products.

We will also discuss the important aspects of CSV and how to apply them in a new and modern technological environment.

We will also discuss FDA’s more recent push to Software Quality Assurance (SQA) and away from traditional Computer System Validation (CSV), which is based on the System Development Life Cycle (SDLC) methodology. FDA is stressing the importance of industry understanding what is required to be in compliance and thinking critically about new ways to achieve that. We will cover automated testing and continuous validation as key components of the SQA approach.

Computer system validation has been regulated by FDA for more than 30 years, as it relates to systems used in the manufacturing, testing and distribution of a product in the pharmaceutical, biotechnology, medical device or other FDA-regulated industries. The FDA requirements ensure thorough planning, implementation, integration, testing and management of computer systems used to collect, analyze and/or report data.

Electronic records and electronic signatures (ER/ES) came into play through guidelines established by FDA in 1997, and disseminated through 21 CFR Part 11 . This code describes the basic requirements for validating and documenting ER/ES capability in systems used in an FDA-regulated environment.

In the early 2000s, FDA recognized they could not inspect every computer system at every regulated company and placed the onus on industry to begin assessing all regulated computer systems based on risk. The level of potential risk, should the system fail to operate properly, needed to be the basis for each company’s approach to developing a validation approach and rationale as part of the planning process. System size, complexity, business criticality, GAMP 5 category and risk rating are the five key components for determining the scope and robustness of testing required to ensure data integrity and product safety.

FDA’s recent focus on data integrity during computer system validation inspections and audits has brought this issue to the forefront of importance for compliance of systems used in regulated industries. These include all systems that “touch” product, meaning they are used to create, collect, analyze, manage, transfer and report data regulated by FDA. All structured data, including databases, and unstructured data, including documents, spreadsheets, presentations, images, audio and video files, amongst others, must be managed and maintained with integrity throughout their entire life cycle.

So what is next for the modernization of the processes involved in compliance for FDA-regulated systems, keeping in mind the guidance documents provide thus far? The FDA is embarking on a modernization program to update their technology and processes for working with industry to assure regulated products meet FDA compliance. There are numerous programs underway, including partnerships with other agencies and industry to move forward as technology continues to improve. The FDA plans to take advantage of these technologies, just as industry is focused on the same goal. The key is making sure these are employed in a way that promotes public health, providing more improved FDA-regulated products with fewer negative side effects and issues. Plans will also enable FDA to work with industry to move products to market faster, further improving public health.

We will explore the best practices and strategic approach for evaluating the current processes involved in assuring computer systems used in the conduct FDA-regulated activities are modernized and streamlined. Cloud computing, Software as a Service (SaaS), automated computer system testing and mobile devices are just part of the mix we can expect to explode in the near term.

Finally, we will provide an overview of industry best practices, with a focus on data integrity and risk assessment that can be leveraged to assist in all your GxP work.