Scribd Logo
Upload

Welcome to Scribd!

  • 156 views

    GMPAnnex 11 Checklist

    Uploaded by

    osamakamel1
    This document is an EU GMP Annex 11 checklist that assesses compliance with requirements for computerized systems used in manufacturing. It addresses requirements in several areas: personnel and training; validation; system description and design; data entry, editing, and security; changes and maintenance; backup and recovery; and outsourcing of computer services. For each requirement, it indicates whether the application complies and if quality action is required, with space for comments. The checklist is intended to help ensure that computerized systems are properly controlled to meet GMP standards.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PDF, TXT or read online from Scribd

    GMPAnnex 11 Checklist

    Uploaded by

    osamakamel1
    156 views11 pages
    This document is an EU GMP Annex 11 checklist that assesses compliance with requirements for computerized systems used in manufacturing. It addresses requirements in several areas: personnel and training; validation; system description and design; data entry, editing, and security; changes and maintenance; backup and recovery; and outsourcing of computer services. For each requirement, it indicates whether the application complies and if quality action is required, with space for comments. The checklist is intended to help ensure that computerized systems are properly controlled to meet GMP standards.

    Original Title

    GMPAnnex11checklist

    Copyright

    © Attribution Non-Commercial (BY-NC)

    Available Formats

    PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    This document is an EU GMP Annex 11 checklist that assesses compliance with requirements for computerized systems used in manufacturing. It addresses requirements in several areas: personnel and training; validation; system description and design; data entry, editing, and security; changes and maintenance; backup and recovery; and outsourcing of computer services. For each requirement, it indicates whether the application complies and if quality action is required, with space for comments. The checklist is intended to help ensure that computerized systems are properly controlled to meet GMP standards.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    156 views11 pages

    GMPAnnex 11 Checklist

    Uploaded by

    osamakamel1
    This document is an EU GMP Annex 11 checklist that assesses compliance with requirements for computerized systems used in manufacturing. It addresses requirements in several areas: personnel and training; validation; system description and design; data entry, editing, and security; changes and maintenance; backup and recovery; and outsourcing of computer services. For each requirement, it indicates whether the application complies and if quality action is required, with space for comments. The checklist is intended to help ensure that computerized systems are properly controlled to meet GMP standards.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PDF, TXT or read online from Scribd
    Download as pdf or txt
    of 11

    EU GMP Annex 11 checklist

    Version: Author: Date:

    1 Sigfrid Dusci 08/28/09

    EU GMP Annex 11 - checklist


    Personnel
    Requirement It is essential that there is the closest co-operation between key personnel and those involved with computer systems. Persons in responsible positions should have the appropriate training for the management and use of systems within their field of responsibility which utilises computers. This should include ensuring that appropriate expertise is available and used to provide advice on aspects of design, validation, installation and operation of computerised system. Does the application comply with the requirement? Is QA action required? Comments

    3 3

    UE GMP Annex 11 - checklist


    Validation
    Requirement The extent of validation necessary will depend on a number of factors including the use to which the system is to be put, whether the validation is to be prospective or retrospective and whether or not novel elements are incorporated. Validation should be considered as part of the complete life cycle of a computer system. This cycle includes the stages of planning, specification, programming, testing, commissioning, documentation, operation, monitoring and modifying. Does the application comply with the requirement? Is QA action required? Comments

    EU GMP Annex 11 - checklist


    System
    Requirement Attention should be paid to the siting of equipment in suitable conditions where extraneous factors cannot interfere with the system. A written detailed description of the system should be produced (including diagrams as appropriate) and kept up to date. It should describe the principles, objectives, security measures and scope of the system and the main features of the way in which the computer is used and how it interacts with other systems and procedures. The software is a critical component of a computerised system. The user of such software should take all reasonable steps to ensure that it has been produced in accordance with a system of Quality Assurance. The system should include, where appropriate, built-in checks of the correct entry and processing of data. Does the application comply with the requirement? Is QA action required? Comments

    5 5

    UE GMP Annex 11 - checklist


    Requirement Does the application comply with the requirement? Is QA action required? Comments

    Before a system using a computer is brought into use, it should be thoroughly tested and confirmed as being capable of achieving the desired results. If a manual system is being replaced, the two should be run in parallel for a time, as a part of this testing and validation. Data should only be entered or amended by persons authorised to do so. Suitable methods of deterring unauthorised entry of data include the use of keys, pass cards, personal codes and restricted access to computer terminals. There should be a defined procedure for the issue, cancellation, and alteration of authorisation to enter and amend data, including the changing of personal passwords. Consideration should be given to systems allowing for recording of attempts to access by unauthorised persons.

    EU GMP Annex 11 - checklist


    Requirement When critical data are being entered manually (for example the weight and batch number of an ingredient during dispensing), there should be an additional check on the accuracy of the record which is made. This check may be done by a second operator or by validated electronic means. The system should record the identity of operators entering or confirming critical data. Authority to amend entered data should be restricted to nominated persons. Any alteration to an entry of critical data should be authorised and recorded with the reason for the change. Consideration should be given to building into the system the creation of a complete record of all entries and amendments (an "audit trail"). Does the application comply with the requirement? Is QA action required? Comments

    7 7

    UE GMP Annex 11 - checklist


    Requirement Alterations to a system or to a computer program should only be made in accordance with a defined procedure which should include provision for validating, checking, approving and implementing the change. Such an alteration should only be implemented with the agreement of the person responsible for the part of the system concerned, and the alteration should be recorded. Every significant modification should be validated. For quality auditing purposes, it should be possible to obtain clear printed copies of electronically stored data. Data should be secured by physical or electronic means against willful or accidental damage, in accordance with item 4.9 of the Guide. Stored data should be checked for accessibility, durability and accuracy. If changes are proposed to the computer equipment or its programs, the above mentioned checks should be performed at a frequency appropriate to the storage medium being used. Does the application comply with the requirement? Is QA action required? Comments

    EU GMP Annex 11 - checklist


    Requirement Data should be protected by backing-up at regular intervals. Back-up data should be stored as long as necessary at a separate and secure location. There should be available adequate alternative arrangements for systems which need to be operated in the event of a breakdown. The time required to bring the alternative arrangements into use should be related to the possible urgency of the need to use them. For example, information required to effect a recall must be available at short notice. The procedures to be followed if the system fails or breaks down should be defined and validated. Any failures and remedial action taken should be recorded. A procedure should be established to record and analyse errors and to enable corrective action to be taken. Does the application comply with the requirement? Is QA action required? Comments

    9 9

    UE GMP Annex 11 - checklist


    Requirement When outside agencies are used to provide a computer service, there should be a formal agreement including a clear statement of the responsibilities of that outside agency (see Chapter 7). When the release of batches for sale or supply is carried out using a computerised system, the system should allow for only a Qualified Person to release the batches and it should clearly identify and record the person releasing the batches. Does the application comply with the requirement? Is QA action required? Comments

    10

    10

    You might also like