Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 1
ICH Q9 QUALITY RISK MANAGEMENT
Quality
Quality
Risk Management
Risk Management
ICH Q9
ICH Q9
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 2
ICH Q9 QUALITY RISK MANAGEMENT
Purpose of this part
 To guide through the content of the ICH Q9 document
 Provide some considerations, possible interpretations
and where appropriate examples
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 3
ICH Q9 QUALITY RISK MANAGEMENT
ICH Q9: Quality Risk Management (QRM)
 Document is available on the ICH Webpage
www.ich.org
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 4
ICH Q9 QUALITY RISK MANAGEMENT
Table of contents
1. Introduction
2. Scope
3. Principles of Quality Risk Management
4. General Quality Risk Management Process
5. Risk Management Methodology
Annex I: Risk Management Methods and Tools
6. Integration of QRM process
into Industry and Regulatory operations
Annex II: Potential Applications for QRM
7. Definitions
8. References
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 5
ICH Q9 QUALITY RISK MANAGEMENT
1. Introduction
Risk Management
Quality Risk Management
Quality Systems
Harm
Severity
Stakeholder
Product Life Cycle
GMP Compliance
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 6
ICH Q9 QUALITY RISK MANAGEMENT
This guideline provides
principles & examples of tools
of quality risk management that can be applied to
different aspects of pharmaceutical quality.
2. Scope
These aspects include development, manufacturing,
distribution, and the inspection and submission/review
processes throughout the lifecycle
of drug substances, drug (medicinal) products,
biological and biotechnological products
ICH Q9
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 7
ICH Q9 QUALITY RISK MANAGEMENT
2. Scope
 Drug substances,
 Drug (medicinal) products,
 Biological and biotechnological products
Including the selection and use of
> Raw materials
> Solvents
> Excipients
> Packaging and labelling materials
> Components
CONSIDERATIONS
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 8
ICH Q9 QUALITY RISK MANAGEMENT
3. Principles of Quality Risk Management
Two primary principles:
The evaluation of
the risk to quality
should be based on
scientific knowledge
and ultimately link
to the protection
of the patient
The level of effort,
formality and
documentation
of the quality risk
management process
should be commensurate
with the level of risk
ICH Q9
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 9
ICH Q9 QUALITY RISK MANAGEMENT
4. General Quality Risk Management Process
Systematic processes
designed to
coordinate, facilitate and improve
science-based decision making
science-based decision making
with respect to risk to quality
ICH Q9
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 10
ICH Q9 QUALITY RISK MANAGEMENT
4. A General
Quality
Risk
Management
Process
Team
approach
Risk Review
Risk
Communication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate
Quality Risk Management Process
Output / Result of the
Quality Risk Management Process
Risk
Management
tools
ICH Q9
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 11
ICH Q9 QUALITY RISK MANAGEMENT
4. General Quality Risk Management Process
Decision makers:
Person(s)
with competence and authority
to make a decision
 Ensuring that
ongoing Quality Risk Management processes operate
 Coordinating
quality risk management process
across various functions and departments
 Supporting
the team approach
Management
responsibility
ICH
Q9
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 12
ICH Q9 QUALITY RISK MANAGEMENT
4. General Quality Risk Management Process
Team approach
 Usually, but not always, undertaken by interdisciplinary
teams from areas appropriate to the risk being
considered e.g.
> Quality unit
> Development
> Engineering / Statistics
> Regulatory affairs
> Production operations
> Business, Sales and Marketing
> Legal
> Medical / Clinical
> &… Individuals knowledgeable of the QRM processes
CONSIDERATIONS
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 13
ICH Q9 QUALITY RISK MANAGEMENT
Risk Review
Risk
Comm
unication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Manageme
nt
tools
4. General Quality Risk Management Process
When to initiate and plan a QRM Process
 First define the question which should be answered
(e.g. a problem and/or risk question)
> including pertinent assumptions identifying
the potential for risk
 Then assemble background information and/ or data
on the potential hazard, harm or human health impact
relevant to the risk
> Identify a leader and necessary resources
> Specify a timeline, deliverables and
appropriate level of decision making
for the QRM process
ICH Q9
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 14
ICH Q9 QUALITY RISK MANAGEMENT
Should risks
be assessed?
Are there clear rules
for decision making?
e.g. regulations
Yes
“no RM“
Risk assessment not required
(No flexibility)
Follow procedures
(e.g. Standard Operating Procedures)
Document results,
decisions and actions
When to apply Quality Risk Management?
CONSIDERATIONS
Based on K. Connelly, AstraZeneca, 2005
1. What might go wrong?
2. What is the likelihood (probability)
it will go wrong?
3. What are the consequences (severity)?
No or
justification needed
Can you answer
the risk assessment
questions?
Yes
“informal RM“
Initiate Risk assessment
(risk identification, analysis & evaluation)
Run risk control
(select appropriate measures)
Agree on a team
(small project)
Select a Risk Management tool
(if appropriate e.g. see ICH Q9 Annex I)
No
“formal RM“
Carry out the
quality risk management process
Document the steps
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 15
ICH Q9 QUALITY RISK MANAGEMENT
Risk Review
Risk
Comm
unication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Manageme
nt
tools
4. General Quality Risk Management Process
 Risk Identification
What might go wrong?
 Risk Analysis
What is the likelihood (probability) it will go wrong?
 Risk Evaluation
What are the consequences (severity)?
Note: People often use terms
“Risk analysis”, “Risk assessment” and
“Risk management” interchangeably
which is incorrect!
Risk Assessment
3 fundamental
questions
ICH Q9
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 16
ICH Q9 QUALITY RISK MANAGEMENT
Risk Review
Risk
Comm
unication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Manageme
nt
tools
4. General Quality Risk Management Process
“What might go wrong?”
 A systematic use of information
to identify hazards
referring to the risk question or problem
> historical data
> theoretical analysis
> informed opinions
> concerns of stakeholders
Risk Assessment: Risk Identification
ICH Q9
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 17
ICH Q9 QUALITY RISK MANAGEMENT
Risk Review
Risk
Comm
unication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Manageme
nt
tools
4. General Quality Risk Management Process
“What is the likelihood it will go wrong?”
 The estimation of the risk
associated with the identified hazards.
 A qualitative or quantitative process of
linking the likelihood of occurrence and
severity of harm
 Consider detectability if applicable
(used in some tools)
Risk Assessment: Risk Analysis
ICH Q9
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 18
ICH Q9 QUALITY RISK MANAGEMENT
4. General Quality Risk Management Process
Risk Assessment: Risk Analysis
Often data driven
Keep in mind:
Statistical approach may or may not be used
 Maintain a robust data set!
 Start with the more extensive data set and reduce it
 Trend and use statistics (e.g. extrapolation)
 Comparing between different sets requires compatible
data
 Data must be reliable
 Data must be accessible Risk Review
Risk
Communication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Management
tools
CONSIDERATIONS
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 19
ICH Q9 QUALITY RISK MANAGEMENT
Risk Review
Risk
Comm
unication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Manageme
nt
tools
4. General Quality Risk Management Process
“What is the risk?”
 Compare the identified and analysed risk
against given risk criteria
 Consider the strength of evidence
for all three of the fundamental questions
> What might go wrong?
> What is the likelihood (probability) it will go wrong?
> What are the consequences (severity)?
Risk Assessment: Risk Evaluation
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 20
ICH Q9 QUALITY RISK MANAGEMENT
4. General Quality Risk Management Process
Risk Assessment: Risk Evaluation
A picture of the life cycle
Probability Detectability Severity
past today future
Data
refers
to
time
Impact
Can
you
find
it?
= Risk Priority Number
x x
• Frequency
of
“occurences”
driven by
the number
of trials
• Degree
of belief
CONSIDERATIONS
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 21
ICH Q9 QUALITY RISK MANAGEMENT
Risk Review
Risk
Comm
unication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Manageme
nt
tools
4. General Quality Risk Management Process
Risk Control: Decision-making activity
 Is the risk above an acceptable level?
 What can be done to reduce or eliminate risks?
 What is the appropriate balance
between benefits, risks and resources?
 Are new risks introduced as
a result of the identified
risks being controlled?
ICH Q9
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 22
ICH Q9 QUALITY RISK MANAGEMENT
4. General Quality Risk Management Process
Risk Control: Residual Risk
 The residual risk consists of e.g.
> Hazards that have been assessed and
risks that have been accepted
> Hazards which have been identified but
the risks have not been correctly assessed
> Hazards that have not yet been identified
> Hazards which are not yet linked to the patient risk
 Is the risk reduced to an acceptable level?
> Fulfil all legal and internal obligations
> Consider current scientific knowledge & techniques Risk Review
Risk
Communication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Management
tools
CONSIDERATIONS
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 23
ICH Q9 QUALITY RISK MANAGEMENT
Risk Review
Risk
Comm
unication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Manageme
nt
tools
4. General Quality Risk Management Process
Risk Control: Risk Reduction
 Mitigation or avoidance of quality risk
 Elimination of risks, where appropriate
 Focus actions on severity and/or probability
of harm; don’t forget detectability
 It might be appropriate to revisit the
risk assessment during the life cycle
for new risks or increased significance
of existing risks
ICH Q9
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 24
ICH Q9 QUALITY RISK MANAGEMENT
Risk Review
Risk
Comm
unication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Manageme
nt
tools
4. General Quality Risk Management Process
Risk Control: Risk Acceptance
 Decision to
> Accept the residual risk
> Passively accept non specified residual risks
 May require support by (senior) management
> Applies to both industry and competent authorities
 Will always be made on a case-by-case basis
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 25
ICH Q9 QUALITY RISK MANAGEMENT
4. General Quality Risk Management Process
Risk Control: Risk Acceptance
 Discuss the appropriate balance between
benefits, risks, and resources
 Focus on the patients’ interests and
good science/data
 Risk acceptance is not
> Inappropriately interpreting
data and information
> Hiding risks from management /
competent authorities Risk Review
Risk
Communication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Manageme
nt
tools
CONSIDERATIONS
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 26
ICH Q9 QUALITY RISK MANAGEMENT
What is an “acceptable risk”?
Risk Control: Risk Acceptance
Who has to accept risk?
 Decision Maker(s)
> Person(s) with the competence and authority
to make appropriate and timely
quality risk management decisions
 Stakeholder
> Any individual, group or organization
that can …be affected by a risk
> Decision makers might also be stakeholders
> The primary stakeholders are the patient, healthcare professional,
regulatory authority, and industry
> The secondary stakeholders are
patient associations, public opinions, politicians
(ICH Q9, definition)
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 27
ICH Q9 QUALITY RISK MANAGEMENT
4. General Quality Risk Management Process
A Risk
Acceptance process
1/3
Risk Review
Risk
Communication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Manageme
nt
tools
EXAMPLE
Finish baseline for
risk acceptance decision
risk identification, risk analysis,
risks evaluation, risks reduction
Risk reduction step
finished
Yes
Stakeholders
involved as appropiate?
Revisit
risk assessment step
All identified
risks assessed?
No
Yes
No
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 28
ICH Q9 QUALITY RISK MANAGEMENT
4. General
Quality
Risk
Management
Process
A Risk
Acceptance
process
2/3
Risk Review
Risk
Communication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Manageme
nt
tools
EXAMPLE
Evaluate measures
on severity, probability, detectability
Check needed resources
e.g. employee, money
Measures / Actions
appropriate?
No
Yes
Revisit
risk reduction step
Other hazards
caused?
Yes
Is a risk
reducible?
No
Measures/
actions needed?
Yes
No
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 29
ICH Q9 QUALITY RISK MANAGEMENT
4. General Quality Risk Management Process
A Risk Acceptance process 3/3
Risk Review
Risk
Communication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Manageme
nt
tools
EXAMPLE
Accept the
residual risk?
Ready for communication
Accept risk
Sign off documentation
Is a risk
reducible?
Yes
Advantage
outweighs risk?
Yes No
Yes
No
Risk not acceptable
Sign off documentation
Revisit
risk assessment step
No
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 30
ICH Q9 QUALITY RISK MANAGEMENT
Risk Review
Risk
Comm
unication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Manageme
nt
tools
4. General Quality Risk Management Process
 Bi-directional sharing of information
about risk and risk management
between the decision makers and others
 Communicate at any stage of the QRM process
 Communicate and document
the output/result of the QRM process appropriately
 Communication need not be carried out
for each and every individual risk acceptance
 Use existing channels as specified in
regulations, guidance and SOP’s
Risk Communication
According to ICH Q9
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 31
ICH Q9 QUALITY RISK MANAGEMENT
Risk Review
Risk
Comm
unication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Manageme
nt
tools
4. General Quality Risk Management Process
 Exchange or sharing of information, as appropriate
 Sometimes formal sometimes informal
> Improve ways of thinking and communicating
 Increase transparency
Risk Communication
CONSIDERATIONS
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 32
ICH Q9 QUALITY RISK MANAGEMENT
Quality risk management
Industry
operation
- Submissions
- Manufacturing
Regulators
operation
- Reviews
- Inspections
Communication
facilitates trust
and understanding
CONSIDERATIONS
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 33
ICH Q9 QUALITY RISK MANAGEMENT
Risk Review
Risk
Comm
unication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Manageme
nt
tools
Risk review: Review Events
 Review the output / results of the QRM process
 Take into account new knowledge and experience
 Utilise for planned or unplanned events
 Implement a mechanism to review or monitor events
 Reconsideration of risk acceptance decisions,
as appropriate
4. General Quality Risk Management Process
ICH Q9
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 34
ICH Q9 QUALITY RISK MANAGEMENT
Risk Review
Risk
Comm
unication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Manageme
nt
tools
5. Risk Management Methodology
One method
“all inclusive”?
Cartoon: © Zurich Insurance Inc.
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 35
ICH Q9 QUALITY RISK MANAGEMENT
Expectations on methods and tools
 Supports science-based decisions
 A great variety are listed but other existing or
new ones might also be used
 No single tool is appropriate for all cases
 Specific risks do not always require the same tool
 Using a tool the level of detail of an investigation will
vary according to the risk from case to case
 Different companies, consultancies and competent
authorities may promote use of different tools based
on their culture and experiences
CONSIDERATIONS
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 36
ICH Q9 QUALITY RISK MANAGEMENT
Contributing items to manage quality risks
 System Risk (facility & people)
> e.g. interfaces, operators risk, environment,
components such as equipment, IT, design elements
 System Risk (organisation)
> e.g. Quality systems, controls, measurements,
documentation, regulatory compliance
 Process Risk
> e.g. process operations and quality parameters
 Product Risk (safety & efficacy)
> e.g. quality attributes:
measured data according to specifications
CONSIDERATIONS
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 37
ICH Q9 QUALITY RISK MANAGEMENT
Risk Review
Risk
Comm
unication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Manageme
nt
tools
5. Risk Management Methodology
 Supports a scientific and practical approach to
decision-making
 Accomplishing steps of the QRM process
> Provides documented, transparent and
reproducible methods
> Assessing current knowledge
> Assessing probability, severity and
sometimes detectability
ICH Q9
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 38
ICH Q9 QUALITY RISK MANAGEMENT
Risk Review
Risk
Comm
unication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Manageme
nt
tools
5. Risk Management Methodology
 Adapt the tools for use in specific areas
 Combined use of tools may provide flexibility
 The degree of rigor and formality of QRM
> Should be commensurate with the complexity and /
or criticality of the issue to be addressed and
reflect available knowledge
 Informal ways
> empirical methods and / or
internal procedures
ICH Q9
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 39
ICH Q9 QUALITY RISK MANAGEMENT
Risk Review
Risk
Comm
unication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Manageme
nt
tools
Annex I: Risk Management Methods and Tools
 Provides a general overview of
and references for some of the primary tools
 Might be used in QRM by industry and regulators
 This is not an exhaustive list
 No one tool or set of tools is applicable to every
situation in which a QRM procedure is used
 For each of the tools
> Short description & reference
> Strength and weaknesses
> Purely illustrative examples
ICH Q9
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 40
ICH Q9 QUALITY RISK MANAGEMENT
Risk Review
Risk
Comm
unication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Manageme
nt
tools
Overview: Some tools and their key words
 Failure Mode Effects Analysis (FMEA)
> Break down large complex processes into manageable steps
 Failure Mode, Effects and Criticality Analysis (FMECA)
> FMEA & links severity, probability & detectability to criticality
 Fault Tree Analysis (FTA)
> Tree of failure modes combinations with logical operators
 Hazard Analysis and Critical Control Points (HACCP)
> Systematic, proactive, and preventive method on criticality
 Hazard Operability Analysis (HAZOP)
> Brainstorming technique
 Preliminary Hazard Analysis (PHA)
> Possibilities that the risk event happens
 Risk ranking and filtering
> Compare and prioritize risks with factors for each risk
CONSIDERATIONS
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 41
ICH Q9 QUALITY RISK MANAGEMENT
Risk Review
Risk
Comm
unication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate Quality
Risk Management Process
Output / Result of the Quality
Risk Management Process
Risk
Manageme
nt
tools
5. Risk Management Methodology
 Supporting statistical tools
> Acceptance Control Charts (see ISO 7966)
> Control Charts (for example)
 Control Charts with Arithmetic Average and
Warning Limits (see ISO 7873)
 Cumulative Sum Charts; “CuSum” (see ISO 7871)
 Shewhart Control Charts (see ISO 8258)
 Weighted Moving Average
> Design of Experiments (DOE)
 Pareto Charts
> Process Capability Analysis
> Histograms
> Use others that you are familiar with….
ICH Q9
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 42
ICH Q9 QUALITY RISK MANAGEMENT
5. Risk Management Methodology
Q9 does not provide
“drivers licences”
CONSIDERATIONS
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 43
ICH Q9 QUALITY RISK MANAGEMENT
6. Integration into
Industry and Regulatory Operations
 Foundation for “science-based” decisions
 Does not obviate industry’s obligation
to comply with regulatory requirements
 May affect the extent and level
of direct regulatory oversight
 Degree of rigor and formality commensurate with
the complexity and/or criticality of the issue
 Implement QRM principles when updating
existing guidelines
ICH Q9
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 44
ICH Q9 QUALITY RISK MANAGEMENT
Annex II: Potential Applications for QRM
This Annex is intended to identify potential uses of quality
risk management principles and tools by
industry and regulators.
However, the selection of particular risk management tools
is completely dependent upon specific facts and
circumstances.
These examples are provided for illustrative purposes and
only suggest potential uses of quality risk management.
This Annex is not intended to create any new expectations
beyond the current regulatory requirements.
ICH Q9 Introduction to Annex II
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 45
ICH Q9 QUALITY RISK MANAGEMENT
Annex II: Potential Applications for QRM
Quality risk management as part of
 Integrated quality management
> Documentation
> Training and education
> Quality defects
> Auditing / Inspection
> Periodic review
> Change management / change control
> Continual improvement
Competent
authorities
Industry
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 46
ICH Q9 QUALITY RISK MANAGEMENT
Annex II:Potential opportunities
for conducting quality risk management
 Industry operations
> Development
> Facilities, equipment and utilities
> Materials management
> Production
> Laboratory control and stability testing
> Packaging and labelling
Competent
authorities
Industry
Competent
authorities
Quality risk management as part of
 Regulatory operations
> Inspection and assessment activities
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 47
ICH Q9 QUALITY RISK MANAGEMENT
QUALITY SYSTEM
ICH Q9
Quality Risk
Management
PRINCIPLES PATIENT PROTECTION
EFFORT
PR
O
C
E
S
S
ASSESSMENT
C
O
N
T
R
O
L
COMMUNICATION
IDENTIFICATION
ANALYSIS
EVALUATION
REDUCTION
ACCEPTANCE
REVIEW EVENTS
ACCEPT (RESIDUAL RISK)
I
N
T
E
R
D
I
S
C
I
P
L
I
N
A
R
Y
T
E
A
M
S
WHAT`?
PROBABILITY
SEVERITY
CRITERIA
Failure Mode, Effects & Criticality Analysis
TOOLS
INFORMAL
HACCP
HAZOP
FMEA
FMECA
FTA
PHA
Hazard Analysis & Critical Control Points
Preliminary Hazard Analysis
Fault Tree Analysis
Failure Mode Effect Analysis
Hazard Operatibility Analysis
QUALITY Mgt.
INDUSTRY
REGULATORY
DOCUMENTATION
TRAINING
AUDITING
CHANGE CONTROL
MATERIALS
PRODUCTION
Q
U
INSPECTION
ASSESSMENT
APPLICATION
RISK
PROBABILITY OF HARM
SEVERITY
CAUSE OF DAMAGE
CAUSE OF HARM
H
A
Z
A
R
D
Peter Gough, Stephan Roenninger,
ICH Q9 : Quality Risk Management - an update
Regulatory Affairs Journal, 16, 2005, 91-93
Bill Paulson, ICH Q9 Provides Implementation
Framework for Quality Risk Management
Gold Sheet, 39, May 2005
© J. Arce, F. Hoffmann-La Roche
Content
prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 48
ICH Q9 QUALITY RISK MANAGEMENT
Use the right “risk” expression
Use the right “risk” expression
please!
Risk Review
Risk
Communication
Risk Assessment
Risk Evaluation
unacceptable
Risk Control
Risk Analysis
Risk Reduction
Risk Identification
Review Events
Risk Acceptance
Initiate
Quality Risk Management Process
Output / Result of the
Quality Risk Management Process
Risk
Management
tools

More Related Content

PPT
Q9_Content.ppt
PDF
Q9 content july 2006
PPT
Q9_Tools_-_overall_notes.ppt
PPT
Q9_Background.ppt
PPT
Q9_Background.ppt
PPT
Q9_Executive_Summary.ppt
PPT
Q9_Applications_-_overall_notes.ppt
PDF
QRM .pdf
Q9_Content.ppt
Q9 content july 2006
Q9_Tools_-_overall_notes.ppt
Q9_Background.ppt
Q9_Background.ppt
Q9_Executive_Summary.ppt
Q9_Applications_-_overall_notes.ppt
QRM .pdf

Similar to Q9.ppt_Quality Risk Management Guideline (20)

PPT
Q9_Development.ppt
PDF
Quality Risk Management_ Integrated Quality Management .pdf
PPT
Q9_History.ppt
PDF
ICH Q9 Quality Risk Management
PPT
Breakout.ppt
PPT
06_Breakout_D-Quality_Risk_Management-Key_Messages.ppt
DOCX
Quản lý rủi ro chất lượng trong GMP EU
PPTX
ICH Guideline – Q9
PPTX
Quality risk management
PDF
International conference-harmonisation-technical-requirements-registration-ph...
PDF
Closing Messages
PDF
ICH Q9R1_Step_4_Presentation_2023_0314_final.pdf
PPTX
Quality risk management
PDF
ICH Q9.pdf
PPT
Q9_Lab_Control_and_Stability_Studies.ppt
PDF
Quality Risk Management 2 brief note
PDF
Guidance On Developing Safety Performance Indicators For Industry Oecd
PPT
Quality Risk Management Dr.A. Amsavel
PPT
Quality Risk Management - Dr.A. Amsavel
PPTX
ichguidelines-200529100336.pptx
Q9_Development.ppt
Quality Risk Management_ Integrated Quality Management .pdf
Q9_History.ppt
ICH Q9 Quality Risk Management
Breakout.ppt
06_Breakout_D-Quality_Risk_Management-Key_Messages.ppt
Quản lý rủi ro chất lượng trong GMP EU
ICH Guideline – Q9
Quality risk management
International conference-harmonisation-technical-requirements-registration-ph...
Closing Messages
ICH Q9R1_Step_4_Presentation_2023_0314_final.pdf
Quality risk management
ICH Q9.pdf
Q9_Lab_Control_and_Stability_Studies.ppt
Quality Risk Management 2 brief note
Guidance On Developing Safety Performance Indicators For Industry Oecd
Quality Risk Management Dr.A. Amsavel
Quality Risk Management - Dr.A. Amsavel
ichguidelines-200529100336.pptx
Ad

Recently uploaded (20)

PPTX
Nancy Caroline Emergency Paramedic Chapter 7
PPTX
Nancy Caroline Emergency Paramedic Chapter 17
PPTX
OSTEOMYELITIS and OSTEORADIONECROSIS.pptx
PDF
health promotion and maintenance of elderly
PDF
Back node with known primary managementt
PPT
12.08.2025 Dr. Amrita Ghosh_Stocks Standards_ Smart_Inventory Management_GCLP...
PPTX
HIGHLIGHTS of NDCT 2019 WITH IMPACT ON CLINICAL RESEARCH.pptx
PPTX
guidance--unit 1 semester-5 bsc nursing.
PPTX
Nancy Caroline Emergency Paramedic Chapter 15
PPTX
Nancy Caroline Emergency Paramedic Chapter 8
PDF
Essentials of Hysteroscopy at World Laparoscopy Hospital
PPTX
Nancy Caroline Emergency Paramedic Chapter 14
PPTX
Acute renal failure.pptx for BNs 2nd year
PDF
chapter 14.pdf Ch+12+SGOB.docx hilighted important stuff on exa,
PPTX
GCP GUIDELINES 2025 mmch workshop .pptx
PPTX
Nancy Caroline Emergency Paramedic Chapter 1
PPTX
Hospital Services healthcare management in india
PDF
Medical_Biology_and_Genetics_Current_Studies_I.pdf
PPTX
Nancy Caroline Emergency Paramedic Chapter 18
PDF
_OB Finals 24.pdf notes for pregnant women
Nancy Caroline Emergency Paramedic Chapter 7
Nancy Caroline Emergency Paramedic Chapter 17
OSTEOMYELITIS and OSTEORADIONECROSIS.pptx
health promotion and maintenance of elderly
Back node with known primary managementt
12.08.2025 Dr. Amrita Ghosh_Stocks Standards_ Smart_Inventory Management_GCLP...
HIGHLIGHTS of NDCT 2019 WITH IMPACT ON CLINICAL RESEARCH.pptx
guidance--unit 1 semester-5 bsc nursing.
Nancy Caroline Emergency Paramedic Chapter 15
Nancy Caroline Emergency Paramedic Chapter 8
Essentials of Hysteroscopy at World Laparoscopy Hospital
Nancy Caroline Emergency Paramedic Chapter 14
Acute renal failure.pptx for BNs 2nd year
chapter 14.pdf Ch+12+SGOB.docx hilighted important stuff on exa,
GCP GUIDELINES 2025 mmch workshop .pptx
Nancy Caroline Emergency Paramedic Chapter 1
Hospital Services healthcare management in india
Medical_Biology_and_Genetics_Current_Studies_I.pdf
Nancy Caroline Emergency Paramedic Chapter 18
_OB Finals 24.pdf notes for pregnant women
Ad

Q9.ppt_Quality Risk Management Guideline

  • 1. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 1 ICH Q9 QUALITY RISK MANAGEMENT Quality Quality Risk Management Risk Management ICH Q9 ICH Q9
  • 2. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 2 ICH Q9 QUALITY RISK MANAGEMENT Purpose of this part  To guide through the content of the ICH Q9 document  Provide some considerations, possible interpretations and where appropriate examples
  • 3. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 3 ICH Q9 QUALITY RISK MANAGEMENT ICH Q9: Quality Risk Management (QRM)  Document is available on the ICH Webpage www.ich.org
  • 4. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 4 ICH Q9 QUALITY RISK MANAGEMENT Table of contents 1. Introduction 2. Scope 3. Principles of Quality Risk Management 4. General Quality Risk Management Process 5. Risk Management Methodology Annex I: Risk Management Methods and Tools 6. Integration of QRM process into Industry and Regulatory operations Annex II: Potential Applications for QRM 7. Definitions 8. References
  • 5. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 5 ICH Q9 QUALITY RISK MANAGEMENT 1. Introduction Risk Management Quality Risk Management Quality Systems Harm Severity Stakeholder Product Life Cycle GMP Compliance
  • 6. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 6 ICH Q9 QUALITY RISK MANAGEMENT This guideline provides principles & examples of tools of quality risk management that can be applied to different aspects of pharmaceutical quality. 2. Scope These aspects include development, manufacturing, distribution, and the inspection and submission/review processes throughout the lifecycle of drug substances, drug (medicinal) products, biological and biotechnological products ICH Q9
  • 7. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 7 ICH Q9 QUALITY RISK MANAGEMENT 2. Scope  Drug substances,  Drug (medicinal) products,  Biological and biotechnological products Including the selection and use of > Raw materials > Solvents > Excipients > Packaging and labelling materials > Components CONSIDERATIONS
  • 8. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 8 ICH Q9 QUALITY RISK MANAGEMENT 3. Principles of Quality Risk Management Two primary principles: The evaluation of the risk to quality should be based on scientific knowledge and ultimately link to the protection of the patient The level of effort, formality and documentation of the quality risk management process should be commensurate with the level of risk ICH Q9
  • 9. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 9 ICH Q9 QUALITY RISK MANAGEMENT 4. General Quality Risk Management Process Systematic processes designed to coordinate, facilitate and improve science-based decision making science-based decision making with respect to risk to quality ICH Q9
  • 10. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 10 ICH Q9 QUALITY RISK MANAGEMENT 4. A General Quality Risk Management Process Team approach Risk Review Risk Communication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Management tools ICH Q9
  • 11. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 11 ICH Q9 QUALITY RISK MANAGEMENT 4. General Quality Risk Management Process Decision makers: Person(s) with competence and authority to make a decision  Ensuring that ongoing Quality Risk Management processes operate  Coordinating quality risk management process across various functions and departments  Supporting the team approach Management responsibility ICH Q9
  • 12. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 12 ICH Q9 QUALITY RISK MANAGEMENT 4. General Quality Risk Management Process Team approach  Usually, but not always, undertaken by interdisciplinary teams from areas appropriate to the risk being considered e.g. > Quality unit > Development > Engineering / Statistics > Regulatory affairs > Production operations > Business, Sales and Marketing > Legal > Medical / Clinical > &… Individuals knowledgeable of the QRM processes CONSIDERATIONS
  • 13. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 13 ICH Q9 QUALITY RISK MANAGEMENT Risk Review Risk Comm unication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Manageme nt tools 4. General Quality Risk Management Process When to initiate and plan a QRM Process  First define the question which should be answered (e.g. a problem and/or risk question) > including pertinent assumptions identifying the potential for risk  Then assemble background information and/ or data on the potential hazard, harm or human health impact relevant to the risk > Identify a leader and necessary resources > Specify a timeline, deliverables and appropriate level of decision making for the QRM process ICH Q9
  • 14. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 14 ICH Q9 QUALITY RISK MANAGEMENT Should risks be assessed? Are there clear rules for decision making? e.g. regulations Yes “no RM“ Risk assessment not required (No flexibility) Follow procedures (e.g. Standard Operating Procedures) Document results, decisions and actions When to apply Quality Risk Management? CONSIDERATIONS Based on K. Connelly, AstraZeneca, 2005 1. What might go wrong? 2. What is the likelihood (probability) it will go wrong? 3. What are the consequences (severity)? No or justification needed Can you answer the risk assessment questions? Yes “informal RM“ Initiate Risk assessment (risk identification, analysis & evaluation) Run risk control (select appropriate measures) Agree on a team (small project) Select a Risk Management tool (if appropriate e.g. see ICH Q9 Annex I) No “formal RM“ Carry out the quality risk management process Document the steps
  • 15. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 15 ICH Q9 QUALITY RISK MANAGEMENT Risk Review Risk Comm unication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Manageme nt tools 4. General Quality Risk Management Process  Risk Identification What might go wrong?  Risk Analysis What is the likelihood (probability) it will go wrong?  Risk Evaluation What are the consequences (severity)? Note: People often use terms “Risk analysis”, “Risk assessment” and “Risk management” interchangeably which is incorrect! Risk Assessment 3 fundamental questions ICH Q9
  • 16. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 16 ICH Q9 QUALITY RISK MANAGEMENT Risk Review Risk Comm unication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Manageme nt tools 4. General Quality Risk Management Process “What might go wrong?”  A systematic use of information to identify hazards referring to the risk question or problem > historical data > theoretical analysis > informed opinions > concerns of stakeholders Risk Assessment: Risk Identification ICH Q9
  • 17. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 17 ICH Q9 QUALITY RISK MANAGEMENT Risk Review Risk Comm unication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Manageme nt tools 4. General Quality Risk Management Process “What is the likelihood it will go wrong?”  The estimation of the risk associated with the identified hazards.  A qualitative or quantitative process of linking the likelihood of occurrence and severity of harm  Consider detectability if applicable (used in some tools) Risk Assessment: Risk Analysis ICH Q9
  • 18. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 18 ICH Q9 QUALITY RISK MANAGEMENT 4. General Quality Risk Management Process Risk Assessment: Risk Analysis Often data driven Keep in mind: Statistical approach may or may not be used  Maintain a robust data set!  Start with the more extensive data set and reduce it  Trend and use statistics (e.g. extrapolation)  Comparing between different sets requires compatible data  Data must be reliable  Data must be accessible Risk Review Risk Communication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Management tools CONSIDERATIONS
  • 19. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 19 ICH Q9 QUALITY RISK MANAGEMENT Risk Review Risk Comm unication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Manageme nt tools 4. General Quality Risk Management Process “What is the risk?”  Compare the identified and analysed risk against given risk criteria  Consider the strength of evidence for all three of the fundamental questions > What might go wrong? > What is the likelihood (probability) it will go wrong? > What are the consequences (severity)? Risk Assessment: Risk Evaluation
  • 20. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 20 ICH Q9 QUALITY RISK MANAGEMENT 4. General Quality Risk Management Process Risk Assessment: Risk Evaluation A picture of the life cycle Probability Detectability Severity past today future Data refers to time Impact Can you find it? = Risk Priority Number x x • Frequency of “occurences” driven by the number of trials • Degree of belief CONSIDERATIONS
  • 21. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 21 ICH Q9 QUALITY RISK MANAGEMENT Risk Review Risk Comm unication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Manageme nt tools 4. General Quality Risk Management Process Risk Control: Decision-making activity  Is the risk above an acceptable level?  What can be done to reduce or eliminate risks?  What is the appropriate balance between benefits, risks and resources?  Are new risks introduced as a result of the identified risks being controlled? ICH Q9
  • 22. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 22 ICH Q9 QUALITY RISK MANAGEMENT 4. General Quality Risk Management Process Risk Control: Residual Risk  The residual risk consists of e.g. > Hazards that have been assessed and risks that have been accepted > Hazards which have been identified but the risks have not been correctly assessed > Hazards that have not yet been identified > Hazards which are not yet linked to the patient risk  Is the risk reduced to an acceptable level? > Fulfil all legal and internal obligations > Consider current scientific knowledge & techniques Risk Review Risk Communication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Management tools CONSIDERATIONS
  • 23. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 23 ICH Q9 QUALITY RISK MANAGEMENT Risk Review Risk Comm unication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Manageme nt tools 4. General Quality Risk Management Process Risk Control: Risk Reduction  Mitigation or avoidance of quality risk  Elimination of risks, where appropriate  Focus actions on severity and/or probability of harm; don’t forget detectability  It might be appropriate to revisit the risk assessment during the life cycle for new risks or increased significance of existing risks ICH Q9
  • 24. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 24 ICH Q9 QUALITY RISK MANAGEMENT Risk Review Risk Comm unication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Manageme nt tools 4. General Quality Risk Management Process Risk Control: Risk Acceptance  Decision to > Accept the residual risk > Passively accept non specified residual risks  May require support by (senior) management > Applies to both industry and competent authorities  Will always be made on a case-by-case basis
  • 25. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 25 ICH Q9 QUALITY RISK MANAGEMENT 4. General Quality Risk Management Process Risk Control: Risk Acceptance  Discuss the appropriate balance between benefits, risks, and resources  Focus on the patients’ interests and good science/data  Risk acceptance is not > Inappropriately interpreting data and information > Hiding risks from management / competent authorities Risk Review Risk Communication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Manageme nt tools CONSIDERATIONS
  • 26. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 26 ICH Q9 QUALITY RISK MANAGEMENT What is an “acceptable risk”? Risk Control: Risk Acceptance Who has to accept risk?  Decision Maker(s) > Person(s) with the competence and authority to make appropriate and timely quality risk management decisions  Stakeholder > Any individual, group or organization that can …be affected by a risk > Decision makers might also be stakeholders > The primary stakeholders are the patient, healthcare professional, regulatory authority, and industry > The secondary stakeholders are patient associations, public opinions, politicians (ICH Q9, definition)
  • 27. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 27 ICH Q9 QUALITY RISK MANAGEMENT 4. General Quality Risk Management Process A Risk Acceptance process 1/3 Risk Review Risk Communication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Manageme nt tools EXAMPLE Finish baseline for risk acceptance decision risk identification, risk analysis, risks evaluation, risks reduction Risk reduction step finished Yes Stakeholders involved as appropiate? Revisit risk assessment step All identified risks assessed? No Yes No
  • 28. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 28 ICH Q9 QUALITY RISK MANAGEMENT 4. General Quality Risk Management Process A Risk Acceptance process 2/3 Risk Review Risk Communication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Manageme nt tools EXAMPLE Evaluate measures on severity, probability, detectability Check needed resources e.g. employee, money Measures / Actions appropriate? No Yes Revisit risk reduction step Other hazards caused? Yes Is a risk reducible? No Measures/ actions needed? Yes No
  • 29. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 29 ICH Q9 QUALITY RISK MANAGEMENT 4. General Quality Risk Management Process A Risk Acceptance process 3/3 Risk Review Risk Communication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Manageme nt tools EXAMPLE Accept the residual risk? Ready for communication Accept risk Sign off documentation Is a risk reducible? Yes Advantage outweighs risk? Yes No Yes No Risk not acceptable Sign off documentation Revisit risk assessment step No
  • 30. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 30 ICH Q9 QUALITY RISK MANAGEMENT Risk Review Risk Comm unication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Manageme nt tools 4. General Quality Risk Management Process  Bi-directional sharing of information about risk and risk management between the decision makers and others  Communicate at any stage of the QRM process  Communicate and document the output/result of the QRM process appropriately  Communication need not be carried out for each and every individual risk acceptance  Use existing channels as specified in regulations, guidance and SOP’s Risk Communication According to ICH Q9
  • 31. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 31 ICH Q9 QUALITY RISK MANAGEMENT Risk Review Risk Comm unication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Manageme nt tools 4. General Quality Risk Management Process  Exchange or sharing of information, as appropriate  Sometimes formal sometimes informal > Improve ways of thinking and communicating  Increase transparency Risk Communication CONSIDERATIONS
  • 32. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 32 ICH Q9 QUALITY RISK MANAGEMENT Quality risk management Industry operation - Submissions - Manufacturing Regulators operation - Reviews - Inspections Communication facilitates trust and understanding CONSIDERATIONS
  • 33. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 33 ICH Q9 QUALITY RISK MANAGEMENT Risk Review Risk Comm unication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Manageme nt tools Risk review: Review Events  Review the output / results of the QRM process  Take into account new knowledge and experience  Utilise for planned or unplanned events  Implement a mechanism to review or monitor events  Reconsideration of risk acceptance decisions, as appropriate 4. General Quality Risk Management Process ICH Q9
  • 34. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 34 ICH Q9 QUALITY RISK MANAGEMENT Risk Review Risk Comm unication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Manageme nt tools 5. Risk Management Methodology One method “all inclusive”? Cartoon: © Zurich Insurance Inc.
  • 35. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 35 ICH Q9 QUALITY RISK MANAGEMENT Expectations on methods and tools  Supports science-based decisions  A great variety are listed but other existing or new ones might also be used  No single tool is appropriate for all cases  Specific risks do not always require the same tool  Using a tool the level of detail of an investigation will vary according to the risk from case to case  Different companies, consultancies and competent authorities may promote use of different tools based on their culture and experiences CONSIDERATIONS
  • 36. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 36 ICH Q9 QUALITY RISK MANAGEMENT Contributing items to manage quality risks  System Risk (facility & people) > e.g. interfaces, operators risk, environment, components such as equipment, IT, design elements  System Risk (organisation) > e.g. Quality systems, controls, measurements, documentation, regulatory compliance  Process Risk > e.g. process operations and quality parameters  Product Risk (safety & efficacy) > e.g. quality attributes: measured data according to specifications CONSIDERATIONS
  • 37. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 37 ICH Q9 QUALITY RISK MANAGEMENT Risk Review Risk Comm unication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Manageme nt tools 5. Risk Management Methodology  Supports a scientific and practical approach to decision-making  Accomplishing steps of the QRM process > Provides documented, transparent and reproducible methods > Assessing current knowledge > Assessing probability, severity and sometimes detectability ICH Q9
  • 38. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 38 ICH Q9 QUALITY RISK MANAGEMENT Risk Review Risk Comm unication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Manageme nt tools 5. Risk Management Methodology  Adapt the tools for use in specific areas  Combined use of tools may provide flexibility  The degree of rigor and formality of QRM > Should be commensurate with the complexity and / or criticality of the issue to be addressed and reflect available knowledge  Informal ways > empirical methods and / or internal procedures ICH Q9
  • 39. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 39 ICH Q9 QUALITY RISK MANAGEMENT Risk Review Risk Comm unication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Manageme nt tools Annex I: Risk Management Methods and Tools  Provides a general overview of and references for some of the primary tools  Might be used in QRM by industry and regulators  This is not an exhaustive list  No one tool or set of tools is applicable to every situation in which a QRM procedure is used  For each of the tools > Short description & reference > Strength and weaknesses > Purely illustrative examples ICH Q9
  • 40. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 40 ICH Q9 QUALITY RISK MANAGEMENT Risk Review Risk Comm unication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Manageme nt tools Overview: Some tools and their key words  Failure Mode Effects Analysis (FMEA) > Break down large complex processes into manageable steps  Failure Mode, Effects and Criticality Analysis (FMECA) > FMEA & links severity, probability & detectability to criticality  Fault Tree Analysis (FTA) > Tree of failure modes combinations with logical operators  Hazard Analysis and Critical Control Points (HACCP) > Systematic, proactive, and preventive method on criticality  Hazard Operability Analysis (HAZOP) > Brainstorming technique  Preliminary Hazard Analysis (PHA) > Possibilities that the risk event happens  Risk ranking and filtering > Compare and prioritize risks with factors for each risk CONSIDERATIONS
  • 41. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 41 ICH Q9 QUALITY RISK MANAGEMENT Risk Review Risk Comm unication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Manageme nt tools 5. Risk Management Methodology  Supporting statistical tools > Acceptance Control Charts (see ISO 7966) > Control Charts (for example)  Control Charts with Arithmetic Average and Warning Limits (see ISO 7873)  Cumulative Sum Charts; “CuSum” (see ISO 7871)  Shewhart Control Charts (see ISO 8258)  Weighted Moving Average > Design of Experiments (DOE)  Pareto Charts > Process Capability Analysis > Histograms > Use others that you are familiar with…. ICH Q9
  • 42. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 42 ICH Q9 QUALITY RISK MANAGEMENT 5. Risk Management Methodology Q9 does not provide “drivers licences” CONSIDERATIONS
  • 43. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 43 ICH Q9 QUALITY RISK MANAGEMENT 6. Integration into Industry and Regulatory Operations  Foundation for “science-based” decisions  Does not obviate industry’s obligation to comply with regulatory requirements  May affect the extent and level of direct regulatory oversight  Degree of rigor and formality commensurate with the complexity and/or criticality of the issue  Implement QRM principles when updating existing guidelines ICH Q9
  • 44. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 44 ICH Q9 QUALITY RISK MANAGEMENT Annex II: Potential Applications for QRM This Annex is intended to identify potential uses of quality risk management principles and tools by industry and regulators. However, the selection of particular risk management tools is completely dependent upon specific facts and circumstances. These examples are provided for illustrative purposes and only suggest potential uses of quality risk management. This Annex is not intended to create any new expectations beyond the current regulatory requirements. ICH Q9 Introduction to Annex II
  • 45. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 45 ICH Q9 QUALITY RISK MANAGEMENT Annex II: Potential Applications for QRM Quality risk management as part of  Integrated quality management > Documentation > Training and education > Quality defects > Auditing / Inspection > Periodic review > Change management / change control > Continual improvement Competent authorities Industry
  • 46. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 46 ICH Q9 QUALITY RISK MANAGEMENT Annex II:Potential opportunities for conducting quality risk management  Industry operations > Development > Facilities, equipment and utilities > Materials management > Production > Laboratory control and stability testing > Packaging and labelling Competent authorities Industry Competent authorities Quality risk management as part of  Regulatory operations > Inspection and assessment activities
  • 47. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 47 ICH Q9 QUALITY RISK MANAGEMENT QUALITY SYSTEM ICH Q9 Quality Risk Management PRINCIPLES PATIENT PROTECTION EFFORT PR O C E S S ASSESSMENT C O N T R O L COMMUNICATION IDENTIFICATION ANALYSIS EVALUATION REDUCTION ACCEPTANCE REVIEW EVENTS ACCEPT (RESIDUAL RISK) I N T E R D I S C I P L I N A R Y T E A M S WHAT`? PROBABILITY SEVERITY CRITERIA Failure Mode, Effects & Criticality Analysis TOOLS INFORMAL HACCP HAZOP FMEA FMECA FTA PHA Hazard Analysis & Critical Control Points Preliminary Hazard Analysis Fault Tree Analysis Failure Mode Effect Analysis Hazard Operatibility Analysis QUALITY Mgt. INDUSTRY REGULATORY DOCUMENTATION TRAINING AUDITING CHANGE CONTROL MATERIALS PRODUCTION Q U INSPECTION ASSESSMENT APPLICATION RISK PROBABILITY OF HARM SEVERITY CAUSE OF DAMAGE CAUSE OF HARM H A Z A R D Peter Gough, Stephan Roenninger, ICH Q9 : Quality Risk Management - an update Regulatory Affairs Journal, 16, 2005, 91-93 Bill Paulson, ICH Q9 Provides Implementation Framework for Quality Risk Management Gold Sheet, 39, May 2005 © J. Arce, F. Hoffmann-La Roche
  • 48. Content prepared by some members of the ICH Q9 EWG for example only; not an official policy/guidance July 2006, slide 48 ICH Q9 QUALITY RISK MANAGEMENT Use the right “risk” expression Use the right “risk” expression please! Risk Review Risk Communication Risk Assessment Risk Evaluation unacceptable Risk Control Risk Analysis Risk Reduction Risk Identification Review Events Risk Acceptance Initiate Quality Risk Management Process Output / Result of the Quality Risk Management Process Risk Management tools