The validation proves with documentation that computer systems used in industrial production adequately fulfill their automatic functions and contribute to ensure the traceability of produced batches and meets GMP regulations. Every computer system that has a direct or indirect relation to the production of the medicine, product for health or impact on traceability, must be validated, because it is a GxP system.
The first important activity of the Computer Systems Validation professional is to gather all the available documentation about the system which is object of the study.
The study of the existing documentation to survey the risk scenarios is extremely important to know the particularities of the system to be validated and to meet cGMP guidelines. However, after some systems have been validated by the professional, some risk scenarios are invariably presented, such as the system behavior facing power outage, study of access profiles, access security, quality of electronic record produced by the system including audit trail, application of electronic signatures, etc.
It is important to emphasize that Functional Risk Assessment must be done by a multidisciplinary team due to the need of adopting mitigation measures for the risks which result in "medium" and "high" levels. The acceptance of these mitigation measures must be agreed among the team aiming to really be functional, whether they are adopting new work procedures or improvements in the system. The measures to be adopted become the validation strategy and they are the main points where GxP validation should focus.
For the Functional Risk Assessment, the participation of the system supplier or developer is recommended. When this is not available, a professional can be hired with knowledge in this type of system that is being assessed.
In addition to contributing for data quality and data integrity, the GMP validation lifecycle is valuable because it allows:
GAMP5® is a Good Automated Manufacturing Practice guide, the 5th version of 1st edition was released in 2008. Recently, in 2022, they published the 2nd edition of the guide. Since then, it has revolutionized the Validating Computer Systems method.
The guide is a set of "inspiration" for Computer Validation professionals and has as its central axis the risk-based validation strategy ("A Risk-Based Approach to Compliant GxP Computerized Systems").
Note: although each company has its specificity, there are several standard processes within a type of system, for example purchasing processes within an ERP, which are common to different companies. Taking this opportunity, FIVE has developed a paperless e-validation methodology to optimize efforts and ensure compliance.