white paper

Risk Managed Supplier Quality

About RCA
Regulatory Compliance Associates® Inc. (RCA) provides worldwide services to the pharmaceutical, biologic, sterile compounding, biotechnology, and medical device industries for resolution of compliance and regulatory challenges.

Please complete the form to access the white paper.


Risk Managed Supplier Quality

A risk managed approach to the global supply chain is more important than ever for life science manufacturers. The medical device consultants process is often easier said than done. Four medical device quality leaders came together to share their experiences in implementing risk managed supplier quality, driving superior outcomes and leading change in their organizations.

It has been half a decade since ISO 14971 listed the device requirements for a risk management system. Since then, manufacturers have been struggling to implement this approach into the Quality Management System (QMS) and enhance supplier quality. As the industry continues to be challenged with supplier quality, Regulatory Compliance Associates® Inc. (RCA) brought together four industry leaders to discuss best practices. RCA is a consulting firm focused on quality and compliance within FDA-regulated industries.

RCA Moderator Miller:

What is changing in supplier quality?

We used to focus on supplier qualification, incoming inspections and certifications of compliance. Now, with the vertical integration of suppliers, supplier quality has become much more complex and more regulated as the FDA now requires registration of Tier 1 suppliers.

RCA Moderator Miller:

How are device manufacturers responding to the challenges?

Anderson: A few years back when supply chain contamination within pharmaceuticals was making front page news, life science quality organizations focused on the GMP elements such as audits, quality agreements and incoming inspections. These are all good things but did not always make a huge impact on the quality coming in the door.

Today, many manufacturers are using more of a risk managed approach to managing supplier quality. This approach addresses each supplier situation individually by evaluating the areas of greatest risk to the manufacturer, developing plans to mitigate risk and focusing on areas which provide the greatest bang for the buck.

RCA Moderator Miller:

How do you see risk management playing out in your supply chain organizations?

Estrada: It is becoming more complex. We have all seen the globalization of the supply chain and the growth of outsourcing. For many of us, supplier quality used to mean managing raw components and now it can mean managing outsourced finished goods. Some suppliers own the entire production process and the device manufacturers are merely distributors who supply their label.

Implementing Risk Managed Supplier Quality - Risk Managed Supplier Process

Anderson: Many companies with a large supplier base are focused on compliance and trying to take care of everything. This results in diluting resources and missing what is most important. For example, many individuals felt the entire supply chain should be audited. For a large company to audit the entire vendor base, it could mean doing 50,000 to 70,000 audits per year, with each costing $5000 and taking an entire man-day. That is not realistic. A risk-based approach to supplier quality adds value because you focus on efforts where risk is greatest.

You also have to incorporate business risk as well as compliance. Today that could mean ensuring continuity of materials, environmental issues and child safety concerns versus a straight GMP compliance lens. Each organization needs to define its risk drivers and levels in order to develop a corresponding program to mitigate those risks.

Each organization needs to define its risk drivers and levels in order to develop a corresponding program to mitigate those risks.

RCA Moderator Miller:

How do you prioritize risks? How does this theory play out in practice?

Iwicki: RCA sponsored a paper on the topic of risk management within the global supply chain featured in Pharmaceutical Technology. This paper outlined a prioritization schema for typical GMP elements such as patient risk, volume of product manufactured, quality data like complaints and supplier history. Combined with supplier FMEA (Failure Mode Effects Analysis), risk can be assessed and supplier control plans can be established.

In doing a business-based risk management, I also look at factors such as high risk of failure or uniqueness of the supplier. For example, earlier in my career I had a sole supplier for whom we could not identify a back-up alternative. With this high risk, we escalated the control plan for this supplier.

RCA Moderator Miller:

What can we learn from other industries?

Anderson: It is no secret that the automotive and aerospace industries are further along the supplier quality learning curve than the life science industry. This is due, in part, to necessity as these industries have been challenged by eroding margins and the unsustainable cost of poor quality.

In particular the automotive industry has raised the bar in which manufacturers partner with their suppliers to drive both greater efficiencies and higher quality. They have largely accomplished this by focusing on technical variation and true process capability within the supply chain.

RCA Moderator Miller:

How does this work in life science?

Implementing Risk Managed Supplier Quality - Enhancing Key Supplier Relationships

Anderson: Manufacturers need to understand their key supplier’s process, what is critical to quality and ensure a good process capability. It means thinking of your key supplier as an extension of your own manufacturing process.

Iwicki: It starts with supplier qualification. In the past, we looked at this as a process where engineering and purchasing screened suppliers, handing a short list off to quality engineering and supplier quality for approval. This can lead to suboptimal quality. The better approach is to include quality engineering and supplier quality upfront in vendor selection.

Anderson: As you are evaluating the supplier manufacturing process, you need to bring in technical knowledge as well as a review of the quality system. Truly partnering with your supplier means you understand their process just like you would understand your own.

Estrada: Essentially you are overseeing the supplier’s quality management system not just managing a supplier.

Anderson: We had an example with batteries which were passing our incoming voltage acceptance tests but we were experiencing some product failures post market. When our engineer was working with the supplier, he noticed that storage temperatures were exceeding 120 degrees which is known to shorten battery life. This may not have been detected in a typical GMP audit.

Estrada: Our industry tends to do a good job on the mechanics of quality such as risk management, FMEA, fault tree analysis and so on; but we tend to see problems in the handoffs.

Iwicki: One common problem in handoffs is clear communication of final specification requirements to the supplier. The manufacturer and supplier typically have early conversations and the supplier may not see the final requirements specification in print until just before they are asked to produce actual production volumes. This can uncover tolerances which are too tight for large scale production. Since the supplier has already invested time and effort and does not want to lose the manufacturer’s business, they may agree to the risk-managed supplier quality requirements up front then figure out later how to actually meet them.

Estrada: All too often the yield rate is low because the manufacturing transfer is not critically examined until deviations are experienced in the first supplier run.

Implementing Risk Managed Supplier Quality - Focal Points_ TIPS FROM THE EXPERTS

Iwicki: I see growing importance of process control with variable measurement data so you can see when something is starting to deteriorate. It is much more efficient than acceptance sampling which only tells you if there’s a catastrophic failure on hand.

Iwicki: The evaluation process of a new supplier needs to go beyond the initial approval of the supplier at a point in time, and if / when requirements change, a candid reappraisal must occur on both sides before approval is given for full production volumes. Adding to Matt Anderson’s statement about the supplier’s manufacturing process being an extension of the manufacturer’s, the same is true about the manufacturer’s design control process and its extension to key suppliers.

Estrada: To sum it up, the cross functional team on the manufacturer’s side and the suppliers need to be talking early and throughout the project to avoid these handoff issues. Early investment in the supplier relationship can pay dividends in avoiding potential problems.

Early investment in the supplier relationship can pay dividends in averting future potential problems.

RCA Moderator Miller:

How does this shift to supplier partnering impact your culture?

Anderson: Establishing deep relationships with suppliers significantly alters the business climate. Now we work together on shared goals. In the past, our focus on audits and quality agreements were not real friendly to suppliers. They did not build the relationship. Rather we tend to use quality agreements as a legal document to punish when the supplier made a mistake.

Iwicki: I see organizations placing more importance on sustaining supplier relationships over time. It is so much easier to continually improve quality with a trusted supplier than continually seek and onboard new suppliers.

As personnel change out on both sides of the manufacturer and supplier, the replacement personnel need to understand the culture and respect the prior relationships. The culture should be about quality above cost, not cost above quality.

RCA Moderator Miller:

How do you instill a culture of cross-functional teamwork?

Estrada: This is a leadership issue and must come from the top. Quality is a team sport, and everyone at Zimmer understands that. As functional leaders we lead by example and our departments understand we all play on the same team.

Implementing Risk Managed Supplier Quality - Building Cross-Functional Teams

Cross-functional training and exposure builds upon this foundation. Our trainers are subject matter experts (SMEs), so they have immediate respect with the trainees. When you do not have SMEs, you take early adopters and train them to be trainers.

Another best practice we have seen in the military is co-location where pilots and servicemen work in the same environment. I saw this work well at Abbott Diagnostics where Quality, R&D and Quality Engineering were co-located. They did a remarkable job with design transfer into manufacturing. Maybe it is because risk-managed supplier quality is in real-time and the team meets more informally. With work teams located all around the globe, we have seen SharePoint and other collaboration tools bring cross-functional areas together.

RCA Moderator Miller:

How does this impact your staffing considerations?

Iwicki: Experience matters. The supplier quality area is attracting more tenured personnel instead of being known as the jump-off point for new hires. The focus is on staff who understand the true supplier quality instead of trying to get a feather in their cap for nitpicking the suppliers. I see many organizations pair up the new hires with experienced staff.

Estrada: We seek cross-functional team players and continue to cross-train. For example, the purchasing personnel are trained by the quality organization in the areas of GMP, change control, obsolescence and areas for the elevation of issues. Our purchasing team has become more “big picture” in their thinking. It is not just about the pursuit of a low price; It is about cost, quality and delivery.

RCA Moderator Miller: The experts agree organizational risk-managed supplier quality focuses on the areas which most benefit from your attention. It also streamlines your quality management from the insurmountable task of scrutinizing every supplier with the same intensity. By engaging a cross-functional team approach to supplier quality, manufacturers develop better understanding of their suppliers which likely leads to improved quality and enhanced efficiencies.


About RCA’s Pharmaceutical Services

Regulatory Compliance Associates (RCA)® has helped thousands of pharmaceutical companies meet regulatory, compliance, quality assurance, and remediation challenges. With more than 20 years of experience with FDA, Health Canada, EU and global regulatory agencies worldwide, RCA offers leading pharmaceutical consultants that can help you navigate through the challenges associated with evolving industry regulations.

Our team of over 500 seasoned FDA, Health Canada and EU compliance consultants and regulatory affairs experts can understand the complexities surrounding the pharmaceutical industry and the unique inner workings of the regulatory process. 


Client Solutions

Whether you’re in the product planning, development or pharmaceutical lifecycle management stage or need a remediation strategy for a compliance crisis, RCA® Inc. will guide you through every step of the regulatory process and create a customized approach depending on your product and your pharma company’s individual needs. Our clients include:

  • Companies new to FDA, Health Canada or EU regulations and the pharmaceutical industry
  • Start-up organizations with novel submissions to 510(k) submissions from multi-national corporations
  • Investment firms seeking private equity due diligence for pre-acquisition and post-deal research
  • Law firms seeking expertise in the remediation of warning letters, consent decrees, 483’s or import bans


Regulatory Affairs

Regulatory affairs is Regulatory Compliance Associates® Inc.’s backbone and we fully understand the complexities of the pharmaceutical and biopharmaceutical industries. Our expertise spans all facets and levels of Regulatory Affairs, from Regulatory Support for New Products to Life Cycle Management, to other services like Outsourced Regulatory Affairs, Submissions, Training, and more.

As your partner, we can negotiate the potential assessment minefield of pharmaceuticals with insight, hindsight, and the clear advantage of our breadth and depth of knowledge and experience. We offer the following four regulatory affairs services for pharmaceutical companies.

  • New Product Support
  • Product Lifecycle
  • Other Regulatory Services


Compliance Assurance

The regulations process surrounding pharmaceutical companies can be tricky for even the most experienced industry veteran to understand, and just one misstep could mean significant and lasting consequences for your business. At RCA® Inc., we offer the experience and resources necessary to guide you in quality compliance.

  • Assessments
  • Audits
  • Regulatory Agency Response
  • Preparation and Training
  • Inspection Readiness


Quality Assurance

Regulatory Compliance Associates® Inc.’s Quality Assurance services include assessments, strategy, implementations, staff augmentations, and identification of quality metrics to ensure continuous improvement, aligning with your business needs and goals. Our consultants are quality experts with experience spanning major corporations and start-ups. We know firsthand how to achieve, maintain, and improve quality, and we excel in transferring this knowledge to your organization.

  • 21 CFR Part 11
  • Data Integrity
  • Manufacturing Support
  • Facility Support



Regulatory Compliance Associates® Inc. has significant experience and a proven approach to managing FDA Warning Letters, Consent Decrees, Remediation and other serious regulatory situations. We know how to partner with executive, legal, and communication teams, and will assist management with a response that will be accepted by the regulatory agency and be realistic to execute. We can develop a comprehensive proof book of documented objective evidence demonstrating the corrective actions taken to remediate non-compliant issues. In addition, RCA can help prepare a comprehensive strategy to assist in your remediation efforts, drive continuous improvement, and maintain compliance with the regulations.

  • Regulatory Action
  • Warning Letter
  • 483 Observation
  • Oversight Services


About RCA

Regulatory Compliance Associates® (RCA) provides FDA inspection consulting services to the following industries for resolution of compliance and regulatory challenges:

We understand the complexities of running a life science business and possess areas of expertise that include every facet of R&D, operations, regulatory affairs, quality, and manufacturing. We are used to working on the front lines and thriving in the scrutiny of FDA, Health Canada, MHRA and globally-regulated companies.

As your partners, we can negotiate the potential minefield of regulatory compliance and regulatory due diligence with insight, hindsight, and the clear advantage of our unique expertise and experience.

  • Founded in 2000
  • Headquartered in Wisconsin (USA)
  • Expertise backed by over 500 industry subject matter experts
  • Acquired by Sotera Health in 2021


About Sotera Health

The name Sotera Health was inspired by Soteria, the Greek goddess of safety, and reflects the Company’s unwavering commitment to its mission, Safeguarding Global Health®.

Sotera Health Company, along with its three best-in-class businesses – Sterigenics®Nordion® and Nelson Labs®, is a leading global provider of mission-critical end-to-end sterilization solutions and lab testing and advisory services for the healthcare industry. With a combined tenure across our businesses of nearly 200 years and our industry-recognized scientific and technological expertise, we help to ensure the safety of over 190 million patients and healthcare practitioners around the world every year.

We are a trusted partner to more than 5,800 customers in over 50 countries, including 40 of the top 50 medical device companies and 8 of the top 10 pharmaceutical companies.


To begin the Regulatory Compliance Associates® scoping process today, please enter your information in the blue form below and click the submit button at the bottom of the webpage. 



Our website uses cookies to give you the best possible experience.

By continuing to use this site, you agree to the use of cookies.
Privacy Policy