CSV Vs CSA Very Useful
CSV Vs CSA Very Useful
TO
COMPUTER SYSTEM ASSURANCE (CSA)
A MUCH NEEDED PARADIGM SHIFT
Raktim Dey
Manager-Validations
Granules India Limited
LETS FAMILIARIZE WITH THE TERMINOLOGIES
The conventional approach of Computer system validation has gradually become a bottle
neck over the course of years to actually consider a Software validated. The reason being
the CSV requires huge volume of documents and Tests , most of which are not even related
to the actual functionalities of the software.
The conventional CSV approach is more of a flamboyant approach where the primary
activity centered around gathering evidence for auditors rather than the assurance of the
quality of systems being validated.
Conventional CSV approach incur a heavy cost on validation activity for a company,
doing extra work that are not even critical and need no extensive validation studies.
The CSV approach creates barriers to pursuing automation due to time, cost, use of
automated testing tools, and the need for extensive documentation. Additionally, the
risk assessment process has evolved into a very complex process which is time consuming
and burdensome and focus on gathering evidence for auditors.
Also, more test cases and test scripts the more possibilities of error by the testers.
COMPUTER SYSTEM ASSURANCE- A PARADIGM SHIFT (CONTD.)
As the CSV approach became a Bottle neck for Industry validating a Computerized system
and the focus was shifting from producing a Quality product to a huge set of documentation
just for evidence to auditors, Computer System Assurance (CSA) came into existence.
CSA came as a paradigm shift from generating huge data, documents, confusion to a
more logical, to the point and delivering a quality product, approach.
CSA focuses on critical thinking and to the point analysis and abbreviated evaluation in
order to ensure the focus is in the right place i.e. delivering Quality Product. Leveraging
targeted testing to achieve results. Documentation remains important, however, the larger
focus is on testing and on those areas that are critical to patient safety and product quality.
COMPUTER SYSTEM ASSURANCE- A PARADIGM SHIFT (CONTD.)
By using CSA concepts, companies can execute more testing with less documentation
based on risk associated with requirement.
CSA is based on a “Risk Based Approach”- Do what is necessary , when necessary through
a Risk assessment. The following are the CSA approaches but not limited:
Leverage Vendor Documentation- Functionalities that are not critical ( related to Patient
safety/ Business Continuity / Financial Loss) can be leveraged from execution during
validation of the Software, if the vendor demonstrate a strong QMS and technical upkeep.
Scripted Testing : Basis to a Risk rating , the critical steps can be validated through well
defined test scripts with additional challenges to prove the robustness of a critical step (can
be done by executing negative testing along with positive testing)
Unscripted Testing: Basis to a Risk rating , the non-critical steps can be verified through
non scripted testing only. Just execute the particular steps and check whether that step is as
per the desired acceptance criteria.
COMPUTER SYSTEM ASSURANCE (CSA) - RISK ASSESSMENT
APPROACH