Good Manufacturing Practice (GMP)
Maintaining good quality control practices throughout the entire manufacturing process requires robust GMP development, a drive toward product and process understanding, and pre-established, comprehensive written procedures that are consistently reviewed and updated.
Good manufacturing practice (GMP) is established by regulators to ensure that pharmaceuticals are safe and effective for the patients that rely on them.
21 CFR Parts 210 and 211
In the United States, requirements governing finished pharmaceutical quality are described in the Current Good Manufacturing Practices (CGMPs) regulations established by FDA and published in the Code of Federal Regulations (Title 21 of the CFR, parts 210–211 for most finished pharmaceuticals).
FDA also publishes guidance to further describe recommended practices for complying with the CGMP regulations. The agency states that “CGMPs provide for systems that assure proper design, monitoring, and control of manufacturing processes and facilities. Adherence to the CGMP regulations assures the identity, strength, quality, and purity of drug products by requiring that manufacturers of medications adequately control manufacturing operations” (1).
In Europe, GMPs are defined by the European Commission in EudraLex–Volume 4–Good Manufacturing Practice (GMP) guidelines (2), which were first published in 1989.
EudraLex states that quality management is “a system of marketing authorizations [that] ensures that all medicinal products are assessed by a competent authority to ensure compliance with contemporary requirements of safety, quality, and efficacy” (2).
To harmonize GMPs and other quality requirements worldwide, the International Council for Harmonization (ICH) works with international regulators and industry to develop common guidelines across the industry to ensure consistent quality expectations worldwide.
“At its core, CGMP is a science- and risk-based focus on assuring drug quality. As described in ICH Q10, Pharmaceutical Quality System, an overall attitude to drive meaningful and continuous improvements from the quality unit and other manufacturing employees is essential” (3), FDA told Pharmaceutical Technology.
The global nature of the pharmaceutical supply chain requires regulatory agencies to inspect and govern GMPs at manufacturing facilities. These inspections sometimes result in actions by regulators (e.g., FDA 483s, warning letters, import bans, and court actions) against companies that fail to follow GMPs.
Common CGMP deficiencies cited by FDA in warning letters sent to pharmaceutical companies inspected during the past year include failures to ensure product sterility, ensure data integrity, create quality control units, and develop and follow written procedures (4–7).
“Companies should vigilantly encourage GMP practices that reflect the most current and robust methods of processing and control, and with a focus on providing a quality product to US consumers,” says FDA.
“The approach to successful CGMP is not merely a check-box approach where a single obstacle can be identified, nor is it meant to be unchanged throughout the life of a product or a CGMP facility. Using a holistic and quality risk management approach, a manufacturer can select and study specific products and processes with the goal of continual improvement of product quality and quality systems and widespread optimization.”
So how do companies ensure they are “vigilantly” following GMPs and avoid the wrath of regulators? The answer appears to be found in a company’s “quality culture” and in the development, writing, and following of written procedures. Performing pharmaceutical manufacturing according to GMPs involves a dedication to quality throughout development and manufacturing processes.
“Corporate management plays a vital role in this endeavor by establishing a commitment to quality, which includes providing sufficient resources and oversight for manufacturing operations. There are many elements to successful implementation of CGMPs but measuring and monitoring quality indicators and managing change are key among them,” says FDA.
According to Susan Schniepp, distinguished fellow at Regulatory Compliance Associates, becoming GMP certified throughout all processes and procedures involves a combination of personnel training, keeping tools and equipment updated, having a strong quality unit, and developing a quality culture at all levels of the company.
“How the company goes about achieving this objective is what is critical. Traditional training may not be enough. There should be constant on-the-job training and oversight on a continual basis. Upgrading tools and equipment, especially computer-driven programs, needs to involve IT departments and adhere to the current data integrity concepts,” says Schniepp.
“No one element will be able to sustain GMPs. All the elements work together to establish a culture where sustaining GMPs is a priority.”
Chris Moreton of FinnBrit Consulting agrees. “Too often, in my experience, certain factions in an organization think that quality is someone else’s responsibility. There may be an organizational chart that shows where the quality unit sits in an organization, but ‘quality’ (including GMP) is everyone’s responsibility within an organization; from the most senior to the most junior and vice versa.”
Management is key in creating a quality culture, says Moreton. “If the staff see the managers taking an interest and checking on things on a daily basis, the staff will respond, and they will try harder to get things right.”
A commitment to staying current with regulatory expectations is a must, according to Schniepp, and she warns that complacency is the biggest obstacle to maintaining GMPs.
“Once a process or procedure is established and functional, there does not seem to be the impetus to update and revise it as regulatory interpretation and understanding changes. This leaves the process or procedure compliant to outdated standards,” Schnieep says.
Companies must also learn from prior mistakes, according to Mark Lynch, vice-president of Strategic Compliance. “It’s best to take the lessons learned from product experience and apply them to the culture overall so those lessons only need to be learned once. Those experiences should be continuously applied on the product level, and also used to make improvements to standard operating procedures (SOPs), policies, personnel, and technology.”
Problem solving is another technique that must be honed, according to Lynch. “Companies must also pay continuous attention to problem identification, solution, and improvement. Refinement of problem-solving techniques contributes to organizational learning.”
Enforcing quality procedures through a policy that ties failure to follow procedures with grounds for dismissal and using internal audits to detect improper performance are options to ensuring a quality culture, according to Lynch. “It is also important that tools are a regular topic of discussion with operators to capture improvements and assure consistency.
Additionally, sufficient supervisory presence and oversight are key both for monitoring purposes, and to be sure operators can raise questions and get the support they need. Finally, it’s best practice to put a GMP standard reporting mechanism in place that does not require identification, so employees feel comfortable flagging an issue without fear of blame,” he says.
Companies who do not consistently maintain GMPs may find themselves under additional scrutiny by regulators for repeat offenses. A variety of FDA warning letters have pointed out repeat CGMP violations at companies and/or a particular facility (8, 9).
FDA reports that the agency, “… strives to provide clear guidance to companies proactively and in its enforcement actions. Where repeated violations have been found at the same facility or among different facilities of the same firm, we highlight those violations so that they may be addressed adequately.
A focus on a commitment to quality is essential to correcting repeated violations, as are adequate corrective actions and procedures. While we generally encourage a focus on overall quality, there are times when we encourage firms to take specific actions, which are included in our warning letters as well as in applicable guidance documents and regulations.”
Repeated offenses may be a failure to look at the big picture and apply solutions across all systems and/or products, according to Schniepp. “Companies think in terms of solving the individual citation but fail to take that answer for change to a global look at fixing other processes and procedures that might be susceptible to the same observation. Tunnel vision when responding to warning letters has a great potential to result in repeat observations,” says Schniepp.
FDA Warning Letter
“Some of these ‘repeat mistakes’ are found to be FDA violations of the same section of the regulations but stem from a different problem. Investigators tend to use repeat findings as a way to point to simplified trends that make one issue appear to be really bad, rather than the complex combination of issues that it truly is,” Lynch says.
“Some companies lack the staff, procedures, capability, and time to fully investigate and solve problems, so they pick something (e.g., a personnel error), close the investigation, and move on to release product, and the same issue reappears because it wasn’t solved.”
Risk management and general cost increases can be another factor to repeated offenses, according to Moreton. “Often cost and/or short-term shareholder interests are used as an excuse to avoid some measures [to long-term change] … People complain that quality costs money, but if they really want to see how expensive things can be, they should try a consent decree.”
The lack of written procedures and/or a quality unit is another frequent infraction identified in warning letters. From October 2016 through September 2017, FDA issued more than 400 FDA 483 observations for a lack of written procedures or written procedures that were not fully followed (10).
Written procedures are key to a robust quality program, according to FDA and industry experts. FDA believes that the “most effective quality assurance (and compliance) strategies begin with robust internal procedures to adequately design and maintain a robust operation, and that can quickly identify and correct manufacturing problems when they occur.”
GMP Best Practices
What are best practices for developing written procedures for GMPs? While the agency does not endorse one particular approach to developing written quality procedures, FDA notes that these procedures should “be written to effectively communicate to the users of the procedure.
FDA recommends that the style and format of procedures be accessible to users, as well as ensuring adequate coverage of its purpose. We recommend that the effectiveness of a procedural training program be evaluated to ensure that personnel learn and can follow the procedures as intended.”
The trend in a GMP compliance failure to have written procedures is disturbing, according to Schniepp. She suggests that outsourcing quality, especially for start-up companies, may add to this problem. She questions whether outsourcing companies have the processes and procedures in place to handle new products.
A robust sharing of information between client and contract manufacturing organization is also key, including product and process understanding. “We need to also remember that new products, particularly in the biotech segment of the industry are novel in nature so the old way of doing business may not be applicable. Whatever the reason the industry must focus effort on making sure there are GMP lab processes, procedures, and written instructions in place that support the release of product,” Schniepp stresses.
Having all parties involved in the GMP labeling development of written quality procedures is necessary. “Including everyone affected by the procedure and writing the procedure with their input will result in streamlined and efficient procedures, which will be easier to maintain in the long run,” says Schniepp.
Standard Operating Procedure
Standard operating procedures (SOPs) written by people not familiar with the specific operation can cause disconnects, according to Lynch. “The best way to assure adequate SOPs is to sit down with people most familiar with operations and map out the process steps and handoffs. This can be incorporated graphically using [swim lane diagrams] and similar tools like Visio (Microsoft) and include them as part of the document.”
“In my opinion, in order to ensure that quality procedures are effective, it is necessary to involve those who know the process or operation being documented,” Moreton agrees. “This may mean sitting down with the operator and finding out exactly what is being done and how, not what management thinks should be done and how they think the operation(s) should be carried out.”
According to Schniepp, procedures should be mapped out, committed to paper, reviewed periodically, and updated as necessary. “Companies need to remember that their processes and procedures are not carved in stone and need to be changed to stay compliant with the operations being performed and the current interpretation of regulations,” says Schniepp. New technologies and new product types may necessitate an update to procedures.
Companies should be careful to not try and fit technology or product advances into current procedures but should instead take the time to review their processes and procedures and update them appropriately in responses to these advancements, she says.
FDA Process Validation
Consistent review of GMP procedures is important, especially if a change in equipment, facility, or regulatory requirements has occurred, experts note. “Written procedures should be reviewed and updated as often as needed. However, if a process and procedure is being updated frequently then it probably wasn’t very well written in the first place,” says Schniepp.
“This being said, procedures that are fairly stable should be validated at least every two years to make sure they are still current and reflective of FDA regulatory expectations.” When developing written procedures, says Lynch, “each process and procedure should be tailored to its specific purpose, so they don’t include unnecessary steps that add time to the process without applicable value to the procedure at hand.”
Companies often lack the documentation that will help operators understand the entire GMP process, says Lynch. “The most important concept to remember when writing procedures is to include the detailed instructions for the operation or processes being defined by that procedure and not include extra explanatory or extraneous information that has no bearing on the operation or process being defined,” agrees Schniepp.
In warning letters, FDA commonly suggests the hiring of a third-party GMP consultant to help companies address their GMP deficiencies. Schniepp says these consultants can provide a “fresh perspective” when resolving GMP issues. “A new and fresh approach is valuable because the consulting firm has no preconceived ideas and can offer new insight to what may seem to be an old and uncorrectable problem,” says Schniepp.
These consultants can be helpful even when not suggested by regulators “because they are looking at the quality with eyes not steeped in the corporate culture,” according to Moreton. Consultants also have knowledge and GMP expertise the company does not have.
“[Consultants] can offer a variety of approaches and suggestions for remediating current problems as well as offering solutions to maintain and improving systems moving forward. One of the most important aspects to consider when hiring a consulting firm is to make sure they not only have the expertise, but they also have the time to devote to fixing the problem,” says Schniepp.
Manufacturing & Industrial Consultant
When hiring a GMP consultant, Moreton suggests companies look at the experience of the contractor as a whole as well as the qualifications of the individual consultants “to ensure there is a good fit with the contractee’s needs.”
Lynch warns, however, that pharmaceutical companies should not rely too much on outside help. “Consultants can help companies get back on track if companies lack the resources internally. However, eventually companies have to sustain compliance themselves. Third-parties should provide expertise in the needed area and technology and have demonstrated success.
Then, they should be able to teach and mentor personnel for improved behaviors and provide flexible models to fit company operations and culture. Usually, this is more than one-time training, but a program of measurement and support over time.”
Vol. 42, No. 7
About RCA’s Pharmaceutical Services
Regulatory Compliance Associates (RCA)® has helped thousands of pharmaceutical companies meet regulatory, compliance, quality assurance, and remediation challenges. With more than 20 years of experience with FDA, Health Canada, EU and global regulatory agencies worldwide, RCA offers leading pharmaceutical consultants that can help you navigate through the challenges associated with evolving industry regulations.
Our team of over 500 seasoned FDA, Health Canada and EU compliance consultants and regulatory affairs experts can understand the complexities surrounding the pharmaceutical industry and the unique inner workings of the regulatory process.
Whether you’re in the product planning, development or pharmaceutical lifecycle management stage or need a remediation strategy for a compliance crisis, RCA® Inc. will guide you through every step of the regulatory process and create a customized approach depending on your product and your pharma company’s individual needs. Our clients include:
- Companies new to FDA, Health Canada or EU regulations and the pharmaceutical industry
- Start-up organizations with novel submissions to 510(k) submissions from multi-national corporations
- Investment firms seeking private equity due diligence for pre-acquisition and post-deal research
- Law firms seeking expertise in the remediation of warning letters, consent decrees, 483’s or import bans
Regulatory affairs is Regulatory Compliance Associates® Inc.’s backbone and we fully understand the complexities of the pharmaceutical and biopharmaceutical industries. Our expertise spans all facets and levels of Regulatory Affairs, from Regulatory Support for New Products to Life Cycle Management, to other services like Outsourced Regulatory Affairs, Submissions, Training, and more.
As your partner, we can negotiate the potential assessment minefield of pharmaceuticals with insight, hindsight, and the clear advantage of our breadth and depth of knowledge and experience. We offer the following four regulatory affairs services for pharmaceutical companies.
- New Product Support
- Product Lifecycle
- Other Regulatory Services
The regulations process surrounding pharmaceutical companies can be tricky for even the most experienced industry veteran to understand, and just one misstep could mean significant and lasting consequences for your business. At RCA® Inc., we offer the experience and resources necessary to guide you in quality compliance.
- Regulatory Agency Response
- Preparation and Training
- Inspection Readiness
Regulatory Compliance Associates® Inc.’s Quality Assurance services include assessments, strategy, implementations, staff augmentations, and identification of quality metrics to ensure continuous improvement, aligning with your business needs and goals. Our consultants are quality experts with experience spanning major corporations and start-ups. We know firsthand how to achieve, maintain, and improve quality, and we excel in transferring this knowledge to your organization.
- 21 CFR Part 11
- Data Integrity
- Manufacturing Support
- Facility Support
Regulatory Compliance Associates® Inc. has significant experience and a proven approach to managing FDA Warning Letters, Consent Decrees, Remediation and other serious regulatory situations. We know how to partner with executive, legal, and communication teams, and will assist management with a response that will be accepted by the regulatory agency and be realistic to execute.
We can develop a comprehensive proof book of documented objective evidence demonstrating the corrective actions taken to remediate non-compliant issues. In addition, RCA can help prepare a comprehensive strategy to assist in your remediation efforts, drive continuous improvement, and maintain compliance with the regulations.
- Regulatory Action
- Warning Letter
- 483 Observation
- Oversight Services
Regulatory Compliance Associates® (RCA) provides healthcare consulting services to the following industries for resolution of compliance and regulatory challenges:
We understand the complexities of running a life science business and possess areas of expertise that include every facet of R&D, operations, regulatory affairs, quality, and manufacturing. We are used to working on the front lines and thriving in the scrutiny of FDA and globally-regulated companies.
As your partners, we can negotiate the potential minefield of regulatory compliance and regulatory due diligence with insight, hindsight, and the clear advantage of our unique expertise and experience.
- Founded in 2000
- Headquartered in Wisconsin (USA)
- Expertise backed by over 500 industry subject matter experts
- Acquired by Sotera Health in 2021
To begin the RCA® scoping process today, please enter your information in the blue form below and click the submit button at the bottom of the webpage.