Nothing in a drug plant may change on one person's say-so. A new supplier, a revised procedure or a moved alarm limit first goes through change control, the quality system's record of what will change and why. The impact assessment is the part where a team works out everything that change touches, from batch records to barcode rules to approvals in other countries, so the quality unit, the independent group that approves or rejects each change, can decide with the whole picture in front of it.
This guide is for anyone who raises, assesses, approves or inspects a change under GMP, good manufacturing practice, the rules for how medicines are made: quality assurance (QA) leads and change board chairs, process and production engineers, validation, quality control (QC), regulatory teams, site quality heads, and the leaders deciding whether to automate the work. No background needed.
Imagine you are the QA operations lead at Northwind Bio, a biotech with an antibody plant in Leiden. You chair the change board, the group of reviewers that meets on Thursdays to vote on changes, and you sign every change classed as Major.
On Friday, October 2, 2026, an engineer named Omar raises change CC-26-1184. The plant grows its cells in 2,000 L plastic bags called bioreactor bags. The bag supplier has cut next year's allocation by 40%, so Omar wants to test and approve a second supplier. Section 4 of his form says what he thinks it touches: two procedures and one filing with the US regulator. It is on Thursday's agenda.
When the full assessment is done, the list runs to 31 items in nine areas. The procedure for inspecting deliveries knows only one supplier's label. Step 4.2 of a production recipe rejects the new barcode. The supplier's study of chemicals the plastic can release stops at 21 days, and the harvested liquid can sit in the bag for 30.
What the request listed
Procedures
2
Filings
1, in the US
Systems
none
Total
3 items
What the change touches
Documents
8
Filings
10, across markets
Systems
3
Total
31 items
3 items on the form31 items in nine areasTwo filings came only from past changes.
No document names those two filings. A 2024 filter change needed a Japan notification, because the Japan approval names materials and leaves suppliers out. A 2025 tubing change missed a UK filing and was caught four months after it went live.
A careful impact assessment catches, before the board meets, the recipe step, the study gap and the two filings that would otherwise surface after the first batch.
GMP change control: what a change touches, who approves it and what inspectors look for
What the work is, the rules as they stand in November 2026, the records it reads, the arithmetic, the common failures and what the public data shows, explained without selling anything. If you are new to quality assurance, start here.
01 · In plain words
Why a second bag supplier can touch thirty-one things in a drug plant
A medicine has to come out the same every time, so a drug plant is built to resist surprises. Its machines are qualified, meaning proved to work correctly. Its processes are validated, which means someone proved they give the right result again and again. Its people are trained on written procedures, and each batch has a record of who did what. The approval a country grants describes much of this in writing.
Then something has to change. A supplier cuts its allocation. A better test arrives. A computer system reaches the end of its life. All of that proof was built around the old way, so a change can quietly make part of it untrue. A procedure now names the wrong supplier. A recipe step rejects a new barcode. A validation study stops short of the new conditions. A registration in another country still describes the old material.
So every plant runs change control, also called change management or management of change: a formal record that says what will change and why, and that nothing happens until the right people agree. Inside it sits the impact assessment: the work of listing everything the change touches, so each thing can be fixed, tested or filed before the first batch is made the new way. FDA, the US drug regulator, describes the purpose in six words in its quality guidance: "managing change to prevent unintended consequences."1
The hard part is that nobody can see the whole plant. The engineer who raises a change knows the equipment. Quality control (QC) knows the methods. Regulatory affairs knows the filings. Validation knows which recipe step is hard-coded. So the form starts with what its author knows, and the rest has to be found. What gets missed tends to appear later, as a batch held at the door or a filing that arrives months late.
Five steps of a bag supplier change, from the form to the effectiveness check
The owner raises the changeOmar, an engineer, asks to qualify a second bag supplier and lists three things it touches.
The team assesses the impactDocuments, systems, equipment, specifications, products, filings, stability, suppliers and training: 31 items.
Quality approves, usually at a boardReviewers vote, conditions are written down and the QA chair signs before anything starts.
The plant makes the changeFourteen tasks in the example. Eleven of them must finish before the first batch.
Someone checks that it workedAn evaluation after go-live confirms the change did what it should and harmed nothing.
Step 2 is the subject of this guide. The company, people and figures in this example are fictional.
What newcomers to GMP change control get wrong: searches, "not affected", inaction and approval
A keyword search can miss the filing that matters
If a country's approval describes a bag by its material, a search for the supplier's name finds nothing there. In the example only a past change reveals the need.
"Not affected" is a finding that needs evidence
The International Council for Harmonisation (ICH), whose drug guidelines FDA and EU regulators adopt, asks for a "high degree of assurance there are no unintended consequences".2 A row marked not affected should say what was checked and what it showed.
Doing nothing is also a risk to assess
ICH Q12 asks a team to consider "the potential impact if the intended change is not implemented".3 In the example, keeping one supplier means 40% fewer bags next year.
Approval is the middle of the work
EU rules ask for an evaluation after implementation.4 Inspections by MHRA, the UK medicines regulator, cited that one requirement 66 times in 2018, per one published analysis.5
Change control, impact assessment, quality unit and effectiveness check defined
Change control
The formal record and process for a proposed change: what, why, the risk, who approved it, and what follows.
Impact assessment
The list of everything the change touches, with what must happen to each item. Annex 15 of the EU's GMP rules names the areas to cover.6
Quality unit
The independent group that approves or rejects. FDA's rule calls it the quality control unit; most companies call it QA.7
Effectiveness check
The evaluation after go-live that confirms the objective was met and product quality took no harm.2
Nine areas of the plant a GMP change impact assessment has to search
In shortEU GMP Annex 15 gives the list: product quality, the quality system, documents, validation, regulatory status, calibration, maintenance and "any other system". In practice a team works through about nine areas and reads six or more record systems. For each item it writes down a disposition, meaning what must happen to it, and the evidence behind that.
Annex 15, the EU's chapter on qualification and validation, says quality risk management should be used to evaluate planned changes "to determine the potential impact on product quality, pharmaceutical quality systems, documentation, validation, regulatory status, calibration, maintenance and on any other system to avoid unintended consequences".6 PIC/S, the international group of GMP inspectorates, adds two questions many forms leave out: the impact on "other products, processes, systems or sites", and on "other change proposals that may be ongoing at the same time".8
Market filings and documents hold most of what one bag supplier change touches
The 31 items in the example, by area. The request listed 3 of them.
Market filings10
Documents8
Systems3
Equipment3
Products2
Suppliers2
Specifications1
Stability1
Training1
Fictional example from this guide
Show the numbers
Area
Items
Market filings
10
Documents
8
Systems
3
Equipment
3
Products
2
Suppliers
2
Specifications
1
Stability
1
Training
1
The nine areas, where each one hides and who owns the answer
Three system names recur here. ERP (enterprise resource planning) holds materials and purchasing. MES (manufacturing execution system) runs recipes and electronic batch records. LIMS (laboratory information management system) holds lab specifications and results. Among the teams, MSAT is manufacturing science and technology, and regulatory CMC files changes to the chemistry, manufacturing and controls part of an approval.
Area
What you look for
Where the answer sits
Who owns it
Documents
Procedures, work instructions, forms and master batch records that name the thing changing
Document management system
Document owners, QA
Systems
ERP material masters, MES recipe steps, LIMS specifications, and any field rule that hard-codes the old value
Validated system inventory, configuration records
Validation, IT quality
Equipment
Qualification reports that assumed the old part, testers with a recipe for one material
Equipment register, qualification reports
Validation, engineering
Specifications
Raw material, in-process and release limits, test methods, approved supplier fields
Specification library, LIMS
QC
Products
Every product made with the part or on the line, including the ones you expect to be unaffected
ERP where-used, bills of materials
Supply, MSAT
Market filings
What each approval says about the thing changing, and what each country requires
Registration system, dossiers, rule books
Regulatory CMC
Stability
Commitments that a changed batch must join, and any effect on expiry dates
Stability protocols
QC
Suppliers
Audits, quality agreements, change notification terms, the supplier's own study data
Supplier quality files
Supplier quality
Training
Who must retrain on each revised document before they may work under it
Learning management system
Area managers, QA
Four kinds of finding an impact assessment records
Listed
What the owner knew
The items on the form. They still need checking, because an owner can be wrong about what is affected.
Found
What the records prove
A passage in a procedure, a field in a recipe, a row in a registration. Each one should quote the source so a reviewer can check it in seconds.
Learned
What past changes needed
Items no current document names, known only because a similar change ran into them. ICH Q12 calls for use of "existing process performance and product quality knowledge".3
Cleared
What was checked and is fine
Often the most useful row at inspection: the release specification, say, with the reason its criteria do not depend on the bag.
Nine in ten of the example's items came from outside the request
Where the 31 items came from in the bag supplier change
31items
Found in the records26
Listed by the owner3
Learned from past changes2
Fictional example from this guide · Three more were checked and cleared, so 34 items were reviewed in all.
Show the numbers
Part
Value
Found in the records
26
Listed by the owner
3
Learned from past changes
2
03 · The rules and their dates
ICH, EU GMP and 21 CFR 211: the change control rules in force in November 2026
Status as of November 2026
In shortUS law, in 21 CFR Part 211 of the Code of Federal Regulations, names the quality unit and written changes. EU GMP asks for prospective evaluation, a risk-based assessment and a check afterward. ICH Q9(R1), Q10 and Q12 explain how to do it well. Since 2021 inspectors have had a PIC/S checklist, and the European Medicines Agency (EMA) said in March 2026 that inspectors in the European Economic Area (EEA) will pilot it between 2026 and 2027. EU Chapter 1 and Annex 15 are being amended; neither amendment is final.
ICH, EU and PIC/S change control texts span 26 years, and the newest moves are inspections and EU amendments
Nov 2000ICH Q7
Active ingredients: a formal change control system and a quality unit that approves.
June 2008ICH Q10
The quality system model: change management at section 3.2.3.
Jan 2013EU GMP Chapter 1
Prospective evaluation, approval before implementation and an evaluation after.
Oct 2015EU GMP Annex 15
Section 11 on change control, with the list of areas to assess.
Nov 2019ICH Q12
Established conditions, lifecycle documents and twelve principles of change management.
July 2021PIC/S PI 054-1
A checklist for inspectors, usable by manufacturers. No new requirements.
Jan 2023ICH Q9(R1)
Formality, subjectivity and product availability added to quality risk management.
2026 to 2027EEA pilot
Inspectors try PI 054-1 at selected sites. Applications close December 31, 2026; inspections may run until March 1, 2027.
Q4 2026 targetChapter 1
Draft consulted on from September to December 2025. Final text due to the Commission, a target with no adoption date.
April 2028 planAnnex 15
Concept paper consulted on in 2026. EMA plans a draft in December 2026 and Commission publication in April 2028.
What each rule says about a change, in its own words
Rule
Status
What it says about change
21 CFR 211.100(a)
In force. 2025 CFR edition, the newest on govinfo.
Written production and process control procedures, "including any changes, shall be drafted, reviewed, and approved by the appropriate organizational units and reviewed and approved by the quality control unit."15
21 CFR 211.180(e)
In force.
Records kept so that data can be used "for evaluating, at least annually, the quality standards of each drug product to determine the need for changes".16
21 CFR 211.22(c), 211.160(a), 211.68(b)
In force.
The quality unit approves or rejects procedures and specifications; a change to a specification or test procedure goes to it too; changes to records on computer systems come "only by authorized personnel".7,17,18
ICH Q10, section 3.2.3
Final ICH text (Step 4), June 4, 2008. Adds nothing beyond regional GMP where it overlaps; the rest is optional, by its own words.
Effort "commensurate with the level of risk"; evaluation against the marketing authorization (the approval to sell); expert teams; "prospective evaluation criteria"; a check after implementation.2
ICH Q9(R1)
Adopted January 18, 2023. FDA final May 2023. EU legal effect July 26, 2023.19,20
Annex II lists change management, including "the impact of the changes on the availability of the final product".10
ICH Q12, Appendix 2
Adopted November 20, 2019. FDA final May 2021; FDA's implementation note still a draft.21,22
Twelve principles, from "full understanding of the scope of the change" to verifying effect after implementation.3
EU GMP Chapter 1
In operation since January 31, 2013. Draft revision consulted on September 3 to December 3, 2025; final text to the Commission targeted Q4 2026; not final.14,12,23
1.4(xii): "prospective evaluation of planned changes and their approval prior to implementation taking into account regulatory notification and approval where required". 1.4(xiii): an evaluation after. 1.10: the product quality review covers changes and variations.4
EU GMP Annex 15, section 11
In operation since October 1, 2015. Revision at concept paper stage: draft planned December 2026, Commission publication planned April 2028; not final.13,23
Written procedures for a change to "a starting material, product component, process, equipment, premises, product range, method of production or testing, batch size, design space"; risk-based assessment; supporting data reviewed "prior to final approval"; effectiveness.6
ICH Q7, section 13
Final ICH text (Step 4), November 10, 2000.
For active ingredients: classify changes, revise "all documents affected", evaluate the first batches, notify dosage form makers.9
A checklist on proposals, risk assessments, planning and effectiveness. It says it adds no new GMP requirement.8
Part 211 is written for finished drugs. For active ingredients, FDA reads current good manufacturing practice (CGMP) under section 501(a)(2)(B) of the Federal Food, Drug, and Cosmetic Act, as its 2018 letter on a valsartan process change shows, and ICH Q7 is the guide.24,9 Device makers work under their own quality system rules, which this guide leaves aside.
US rules name the quality unit; ICH and EU texts spell out risk, filings and the check afterward
Our reading of the sources15,7,2,4,6,9,8 · US filing duties sit in 21 CFR 314.70 and 601.12, outside Part 211. FDA's warning letters also ask for a check of change effectiveness.
Show the numbers
Evaluate first
Quality approves
Effort fits risk
Check filings
Check afterward
21 CFR 211.100, 211.22
Implied
Stated
Silent
Silent
Silent
ICH Q7, section 13
Stated
Stated
Implied
Silent
Stated
ICH Q10, 3.2.3
Stated
Implied
Stated
Stated
Stated
EU GMP Chapter 1
Stated
Implied
Silent
Stated
Stated
EU GMP Annex 15, 11
Stated
Implied
Stated
Stated
Stated
PIC/S PI 054-1
Stated
Implied
Stated
Stated
Stated
What is moving. Chapter 1: a draft revision went out for consultation from September 3 to December 3, 2025, and EMA's inspectors' work plan for 2026 to 2028 sets Q4 2026 as the target for giving the Commission a final text, "to incorporate elements of ICH Q9(R1)".14,12
Annex 15: the same work plan also says Q4 2026, but EMA's concept paper gives a later timetable, with a draft for consultation in December 2026, endorsement in November 2027 and Commission publication in April 2028. The revision would extend the annex, including its change control text, to active substance makers and reflect Q9(R1).12,13
EudraLex Volume 4, the EU's published GMP rule book, read November 3, 2026, still lists the 2013 and 2015 versions.23 Write your procedure to the current text, and read Q9(R1) now, because both revisions follow it.
04 · Who approves a change
The quality unit approves each change: what US and EU rules require of the signature
In shortIn the US, the quality control unit must review and approve changes to procedures and specifications. In the EU, responsible persons approve under the quality system, and a Qualified Person confirms the impact was evaluated before releasing a batch. No rule we read requires a board. Many plants use one because it brings the experts together.
The rule that makes change control a legal matter in the United States is short. Procedures, "including any changes", are drafted and approved by the units that use them "and reviewed and approved by the quality control unit".15 A separate section gives that unit the "responsibility for approving or rejecting all procedures or specifications impacting on the identity, strength, quality, and purity of the drug product".7 ICH Q7 says the same for active ingredients.9
European text is framed around the system. Annex 15 says changes "should be authorised and approved by the responsible persons or relevant functional personnel in accordance with the pharmaceutical quality system".6 Annex 16 then asks the Qualified Person, who certifies each batch, to confirm that "the impact of any change to product manufacturing or testing has been evaluated".25
Raises and justifiesChange ownerStates what changes and why, what is known and the benefit. Does not approve their own change.
Contribute expertiseValidation, QC, regulatory, productionAssess their own area and write the conditions. ICH Q10 calls these "expert teams".2
Approves or rejectsThe quality unitDecides, signs and answers for it. Usually a QA lead or the chair of a change board.
The quality unit decides at two points: before the change starts and before it closes
A typical path for a major change, with who acts at each step
1Proposal
What changes, why, expected benefit and the risk of not changing.
Change ownerDay 0
2Classification
Critical, major or minor, under a written rule.
QATriage
3Impact and risk assessment
Each function lists what it must do, with evidence.
ExpertsMost of the time
4Approval
Conditions written down, supporting data reviewed.
Quality unitBefore any action
5Implementation
Tasks done, filings made, people trained.
OwnersWeeks to months
6Effectiveness and closure
Objective met, no harm to quality, lessons captured.
What changes, why, expected benefit and the risk of not changing.
Change owner
Day 0
Classification
Critical, major or minor, under a written rule.
QA
Triage
Impact and risk assessment
Each function lists what it must do, with evidence.
Experts
Most of the time
Approval
Conditions written down, supporting data reviewed.
Quality unit
Before any action
Implementation
Tasks done, filings made, people trained.
Owners
Weeks to months
Effectiveness and closure
Objective met, no harm to quality, lessons captured.
Quality unit
After first batches
Does a pharmaceutical change control board have to exist?
No text read for this guide requires a board. Annex 15's glossary describes "a formal system by which qualified representatives of appropriate disciplines review proposed or actual changes".6 PIC/S expects "relevant subject matter experts and appropriate internal/external stakeholders" in proposal and approval.8
A board meeting is one way to do that. Most plants write down which changes need it. A common split: QA alone for minor changes and a quorum of QA, regulatory and validation for major ones. MHRA's 2016 deficiency examples include a site with "no definition of which moderate level change controls would require a risk assessment and regulatory affairs review and which would not".26
Changes at contract manufacturers and suppliers
A change often starts outside your walls. FDA's quality agreements guidance tells owners and contract facilities to agree which changes each must report and approve, and it lists "components and/or their suppliers", manufacturing processes, test procedures and major equipment.27 ICH Q12 says the organization responsible for batch release "should be aware of all relevant changes".3 ICH Q7 tells active ingredient makers to notify their customers of changes that can affect quality.9
05 · How much rigor a change deserves
Major, minor and the formality between them under ICH Q9(R1)
In shortICH Q9(R1), adopted in January 2023, treats formality as a sliding scale set by uncertainty, importance and complexity. It says resource limits cannot justify less formality. It also warns that risk scores can be subjective, and adds a new risk to weigh: losing supply of the medicine.
Most plants sort each change as critical, major or minor. PIC/S describes this as common practice and says a simple low-risk change may need only an impact assessment, while complex or significant ones need formal risk assessments that "more substantially address what might go wrong".8 ICH Q7 allows the same sorting, "depending on the nature and extent of the changes".9
The 2023 revision of ICH Q9 gives the reasoning. Formality "is not a binary concept". Three things decide how much to apply: uncertainty, meaning lack of knowledge about hazards; importance of the decision to product quality; and complexity of the process. One sentence deserves a place in every change procedure: "Resource constraints should not be used to justify the use of lower levels of formality in the quality risk management process."10
Importance and uncertainty, more than project size, set how formal an assessment should be
Example changes placed by judgment; yours will differ
Importance to product quality →
Formal, with existing data
Most formal: experts, studies, written risk assessment
Simple impact assessment
Investigate first, then decide
New product-contact materialSecond supplier, same materialAlarm limit movedSoftware version upgradeHold time extendedTypo in a form
Uncertainty: how little you know →
Illustrative · replace with your own numbers
Show the numbers
Item
Uncertainty: how little you know (0–1)
Importance to product quality (0–1)
New product-contact material
0.72
0.75
Second supplier, same material
0.42
0.62
Alarm limit moved
0.20
0.28
Software version upgrade
0.55
0.35
Hold time extended
0.62
0.55
Typo in a form
0.10
0.10
Subjectivity: why two reviewers can score one change differently
Q9(R1) says subjectivity "can impact every stage" of risk management, and that it arrives through bias, "when risk questions are inadequately defined, and when tools have poorly designed risk scoring scales". It asks teams to address assumptions and to use "relevant data and sources of knowledge".10 That is an argument for a written evidence trail. A reviewer who has read the three most similar past changes starts from fact. Section 7 shows the arithmetic going wrong.
The risk of not changing, and the risk to supply
Q9(R1) adds a section on product availability, and its annex lists change management as a place to "evaluate the impact of the changes on the availability of the final product".10 PIC/S asks for "potential risks with the current state (until changes are implemented)" and "interim controls" until then.8 For a supplier change forced by an allocation cut, these lines belong at the top of the form, because the change is itself the mitigation.
FDA's 2019 task force on drug shortages said that a "failure to implement such updates and improvements can lead to quality problems that result in drug shortages".28Section 10 gives its figure.
A classification is a decision to review. PIC/S asks that classifications be "appropriate and based on the level of risk".8 A plant that sorts nearly everything as minor should expect the question. Count the share of your changes in each class by year, and count how many minor changes later needed something a major one would have caught.
06 · Where ICH Q12 fits
ICH Q12 inside the quality system: lifecycle documents and where each region stands
Status as of November 2026
In shortICH Q12 lets a company agree which details of its approval are binding, so more changes stay in the quality system. That raises the stakes on change control, because Q12's flexibility depends on it. The US recognizes the tools, with its implementation note still a draft. The EU recognized lifecycle documents only from January 15, 2026, and treats them as optional.
Filing categories and each country's clock are the subject of a separate guide on CMC change impact assessment: in the US, a 30-day supplement (CBE-30) against a prior approval; in the EU, Type IA, IB and II. This guide stops at the point where the quality system asks the question. ICH Q10 frames it: "There should be an assessment to determine whether a change to the regulatory filing is required under regional requirements", and even inside a design space, "all changes should be evaluated by a company's change management system".2
ICH Q12 defines established conditions as "legally binding information considered necessary to assure product quality", where any change "necessitates a submission".3 A product lifecycle management (PLCM) document lists them with their reporting categories. Its practical effect on change control is that the same change can need no filing for one product and a filing for another, depending on what each approval made binding. In the EU, an approval is a marketing authorization, and a filed change to it is a variation.
The EU moved from refusing lifecycle documents to allowing them in six years
Nov 2019ICH adopts Q12
Established conditions, change protocols and the lifecycle document.
Mar 2020EU note
A PLCM document "cannot be currently recognised in the EU".
May 2021FDA publishes
Q12 as final guidance, and a draft on how it applies to FDA products, marked not for implementation.
Jan 15, 2026EU reverses
New variations guidelines apply. EMA's Q&A makes the PLCM document an optional tool, filed by Type II variation.
2026 to 2027EEA pilot
A site may volunteer without filing a Q12 variation.
"The legally binding elements of the dossier", and a change to them triggers a variation "whether or not addressed in the PLCM".30
Why weak change control can cost you Q12's flexibility
ICH Q12
Flexibility can be restricted
If deficiencies "have an impact on the effectiveness of change management in the PQS, it may result in restrictions on the ability to utilise flexibility in this guideline".3 The PQS is the pharmaceutical quality system.
PIC/S
Maturity supports the benefits
PIC/S says "maturity in change management may support maximal benefits" from those flexibilities.8
EMA's Q&A
A prerequisite for a PLCM document
The sites in scope are shown to meet GMP, and each site's quality system is effective in relation to change management.30
The EEA pilot EMA announced in March 2026 looks at this directly. Inspectors review a site's change management, and the page ties the review to planned lifecycle variations. A site with no routine inspection planned gets a standalone inspection of half a day or one day. Applications close December 31, 2026, and inspections may run until March 1, 2027.11
A lifecycle document applies only where it was approved, which is why the assessment reads each approval. We found no MHRA text on lifecycle documents as of November 3, 2026, so ask MHRA how one would be treated for a UK product. Sample facts on this point in Part B are fictional.
07 · One change worked through
The arithmetic of one change: items missed, study coverage, risk scores and a first-batch date
In shortFour small calculations run through most major changes: how much the request missed, whether a supplier's study covers your process, how far a risk score can be trusted, and what date everything supports. Here they are on the fictional bag supplier change.
How much did the request miss?
items not on the form ÷ items touched = 28 ÷ 31 = 90%
One change proves nothing about your plant, and this one was picked for its reach. The useful number is your own average. Take 20 closed changes, count what the original form listed and what the closed record ended up with, and divide. We found no public benchmark to compare it with. Also count items added after approval, because those are the expensive ones.
Does the supplier's extractables study cover your process?
Extractables are chemicals a solvent can pull out of plastic in a lab. Leachables are what comes out in real use. A supplier's study covers conditions it chose, so someone must lay those beside your process. In the example, the study ran up to 21 days at 25 °C and 40 °C. The cell culture runs 16 days at 36.5 °C, inside that. The harvest, the liquid collected from the culture, can then sit in the bag for up to 30 days at 2 to 8 °C, colder but longer.
The study covers the culture and falls nine days short of the harvest hold
Days in the bag against the longest day in the supplier's study
Your processSupplier study
Culture at 36.5 °C16 days21 days
Harvest hold at 2 to 8 °C30 days21 days
Fictional example from this guide · Colder conditions usually extract less, so 21 days may be enough. That is a QC judgment, and it goes on the record as one.
Show the numbers
Your process
Supplier study
Culture at 36.5 °C
16 days
21 days
Harvest hold at 2 to 8 °C
30 days
21 days
How far can you trust a risk score?
A common tool multiplies severity, occurrence and detectability, each scored 1 to 5. Take the recipe step that rejects a new barcode. Two reviewers, same facts:
Reviewer
Severity
Occurrence
Detection
Score
Result, with the action line at 30
A, thinks the batch simply stops
3
5
1
15
Low: no test needed
B, worries about a manual override
4
3
3
36
High: regression test
Illustrative numbers. Q9(R1) warns about "poorly designed risk scoring scales" and says scores "should be based on an appropriate use of evidence, science and knowledge".10 Write the reason next to each score, and define each scale point in words. A regression test re-runs checks to show that what worked before still works.
What date does everything support?
Add the tasks that must finish first and take the longest path. In the example, approval on October 8, 2026 and eleven required tasks put the first batch on November 20, six weeks later.
The filing clock then limits where that batch may go. A CBE-30 is a US filing, called a supplement, labeled "Changes Being Effected in 30 Days". Product may be distributed no sooner than 30 days after FDA receives it.31 If FDA received it on November 6, a changed lot could ship to the US from December 6, though the batch was released earlier.
The extractables check is the longest task before the first batch
Weeks from October 12, 2026 in the example, with the first batch at about week 5.6
Must finish before the first batchRuns after the first batch or alongside
Revise documents
ERP, LIMS and MES
Equipment qualification addendum
Supplier audit and quality agreement
Extractables check
Training for 56 people
File in each market
Comparability batches
Oct 12Oct 26Nov 9Nov 23Dec 7
Fictional example from this guide
Show the numbers
Activity
From
To
Revise documents
0
2.6
ERP, LIMS and MES
0
3.4
Equipment qualification addendum
1
3.6
Supplier audit and quality agreement
0
2.6
Extractables check
0
4.6
Training for 56 people
2
3.6
File in each market
2
4.6
Comparability batches
5.6
8
08 · How assessments fail
How change controls fail, in FDA's and MHRA's own words
In shortTeams change things outside the system, never ask what a change could create, leave the quality impact unmeasured, skip validation, forget the people, miss a filing or never check the result. FDA's warning letters and MHRA's inspection examples describe each one. These letters state FDA's findings at the time they were issued.
Failure
Why it happens
What the public record says
The change never enters the system
It feels small or urgent, and a batch is waiting
"You changed the manufacturing process … without revalidation and outside of your change management system."32 MHRA, 2016: "Changes were implemented outside of the company's Change Control procedure."26
Nobody asks what the change could create
Review stays on the stated goal, such as yield or cost
"Failure to evaluate the potential effect that changes in the manufacturing process may have on the quality of your API."24 API means active ingredient.
The quality impact is left unmeasured
A fix in the moment during a batch
"You fail to evaluate the quality impact of changes you made outside your change control system", and the firm did not assess the scope for other products.33
Validation is skipped
Each function assumes another has it, or argues it is not needed
"You did not perform a process validation study after implementing a new production step."34 The same letter says validation decided smoke studies, which show airflow, were unnecessary after a barrier modification, "despite your engineers proposing" them.34
People are left behind
Training is not tied to the change
A firm "failed to manage the significant change" to a visual inspector qualification procedure "through formal change control or a timely requalification plan".35
A filing is missed
Regulatory is consulted late, or for some changes only
MHRA, 2016: procedures for prospective evaluation "taking into account regulatory notification" fell short.26 We found no public count of missed filings.
Nobody checks the result
The record closes when the tasks do
MHRA, 2016: "There is no post implementation review of the effectiveness of change control actions."26 FDA asks for "provisions for determining change effectiveness" in letters from 2019, 2024 and 2026.36,33,32
The case every QA team knows. In its letter of November 29, 2018, FDA said a Chinese maker approved a valsartan process change in November 2011 "to improve the manufacturing process, increase product yield, and lower production costs", but "failed to adequately assess the potential formation of mutagenic impurities".
FDA wrote that, according to the firm's own ongoing investigation, a substance redacted in the letter is required for NDMA, a probable human carcinogen, to form in that process, and that NDMA was identified in valsartan active ingredient made there. It added that the firm "failed to evaluate the need for additional analytical methods" before approving.24 Seven years passed between the change and the letter.
The like-for-like trap
A team calls a part "identical" and skips the form. A 2010 article in Pharmaceutical Technology retells a 2003 warning letter about replacement pump pistons that were slightly longer, which it says generated metal particles and led to a recall.37 That is the article's account; the original letter was not read for this guide. The lesson holds: only an evaluation can show that a replacement is like for like.
Filing misses threaten supply and licenses; skipped studies threaten the product itself
Which consequence each failure most directly risks
LowSomeHigh
Product qualitySupply dateRegulatory statusInspection findingOutside the systemHighSomeSomeHighImpurity or effect not assessedHighSomeSomeHighValidation skippedHighSomeSomeHighTraining left behindSomeSomeLowHighSystem rule missedSomeHighLowSomeFiling missedLowHighHighHighNo effectiveness checkSomeLowLowHigh
How often FDA and MHRA cite change control, and why no count captures all of it
In shortFDA publishes the Form 483 citations issued from its system, by year, with no change control code, so any count is a proxy. Our count of four rows worded around changes held at 3 to 4 of every 100 drug citations from fiscal 2019 to 2025, and most of it concerns who may change computer records. MHRA's data shows change control among its citations too. A trade analysis counted 1,577 observations over ten years.
A Form 483 is the list of observations an FDA investigator hands a site at the close of an inspection. FDA publishes spreadsheets of the citations issued from its system, and says they are not a comprehensive listing, because some forms are prepared by hand. In fiscal 2025 (October 2024 to September 2025) the Frequency column on the Drugs tab adds up to 2,837 citations (our sum), and the summary tab shows 713 drug Forms 483. FDA separately reports 1,248 drug quality assurance inspections that year.38,39
Our count, and how to rerun it. FDA's sheets list citations by regulation. They have no change control code, and no row on the Drugs tab from fiscal 2019 to 2025 uses the words "change control". So we chose four 21 CFR 211 rows whose FDA text speaks of changes and summed their Frequency column:
211.68(b) "Computer control of master formula records"
211.180(e) "Records reviewed annually"
211.160(a) "Lab controls established, including changes"
211.100(a) "Changes to Procedures Not Reviewed, Approved"
Fiscal 2025: 87 + 18 + 8 + 2 = 115, of 2,837. We left out rows where the word means something else (gloves, a chemical change in a product) and the PET drug row 212.20(c), with 3 citations. FDA does not publish this figure. The selection is ours, and it is a proxy: the largest row is about who may alter computer records.38
Our count reached 115 citations in fiscal 2025, level with 2019 and near 4 in every 100 throughout
Four 21 CFR 211 rows in FDA's Form 483 spreadsheets, Drugs tab, by fiscal year (our count, method above)
116FY19
55FY20
43FY21
85FY22
76FY23
89FY24
115FY25
Our reading of the sources38 · As a share of all drug citations: 3.1%, 3.6%, 3.8%, 4.0%, 3.6%, 3.6%, 4.1%. FDA's sheet leaves out manually prepared Forms 483.
Show the numbers
Period
Value
FY19
116
FY20
55
FY21
43
FY22
85
FY23
76
FY24
89
FY25
115
Controls over who may change computer records make up three in four of our count
Fiscal 2025 citations, by the rule FDA's wording names (our count, method above)
211.68(b): only authorized people change records on computers87
211.180(e): annual review for needed changes18
211.160(a): lab controls, including changes8
211.100(a): changes to procedures not reviewed and approved2
211.68(b): only authorized people change records on computers
87
211.180(e): annual review for needed changes
18
211.160(a): lab controls, including changes
8
211.100(a): changes to procedures not reviewed and approved
2
Why our Form 483 count can miss change control findings
An investigator can write a change failure under whichever section fits the facts. By our sum, the most cited section in fiscal 2025 was 211.22(d), quality unit procedures not written or not followed, with 243 citations. Next came 211.192, investigations, with 236 across its rows. One row under 211.100(a), absence of written procedures, had 162.38 Any of those can carry a change control story, and a reader cannot tell which from the spreadsheet.
Redica, a trade data firm that classifies the text of the observations, reported 1,577 change control observations in human drug GMP over the ten years to July 2022.40
What MHRA inspectors cite at dosage form sites
1,259
quality system deficiencies in MHRA's 2016 data (38 critical, 449 major, 772 other), the top group, from 324 inspections.26
MHRA, 2016 dosage form data, our sum
66
citations of the Chapter 1 line requiring an evaluation after any change, in 2018 inspections.5
Unger's analysis of MHRA data, January 2020
21
citations of Annex 15's line on using risk management to evaluate planned changes, in the same data.5
Unger's analysis of MHRA data, January 2020
What an inspector will ask, from the PIC/S checklist
PI 054-1 applies to GMP inspections of medicine and active ingredient makers, and PIC/S says manufacturers may use it "as a guide to help define their internal change management procedures".8 Its four parts make a fair self-audit:
Proposals
Why, and who decided
The trigger and evidence. For a rejected change, the reason and how the continuing risk is managed. The collective effect of several open changes.
Risk assessments
Formality to fit
Risks and benefits to the product and to other products and systems. Current and needed controls. Classifications based on risk.
Planning
Criteria set in advance
Data needed and effectiveness criteria "pre-defined". Interim controls. Approval documented. Filings updated. Other parties told.
Review
Did it work?
Objectives met, residual risk managed, unintended effects handled, monitoring continued and lessons shared.
10 · What a missed impact risks
How a missed impact hurts patients, supply and the next filing
In shortThe worst case is an impurity nobody looked for. More often it is a late batch, a late filing or a finding at inspection, and over time a loss of regulatory flexibility. We found no published cost of a missed impact, so section 18 shows how to measure yours.
Patients
A process change can create what the old tests never looked for. In the 2018 letter FDA tied NDMA in valsartan to a change approved in 2011.24 Patient safety is why the rules exist.
Supply
A recipe that rejects the new label stops the batch. In the fictional example, a similar late find held a first batch by nine days. Q9(R1) treats availability as a risk to manage.10
The license
Product shipped under a change a country has not accepted sits outside that approval. Under US rules, FDA can order a stop after a 30-day supplement if it disapproves.31
Flexibility
Under ICH Q12, deficiencies affecting change management "may result in restrictions" on using its tools.3 Weak control now can mean more filings later. Section 6 has the text.
Quality and manufacturing problems sat behind most shortages FDA studied
62 in 100
of 163 drugs that went into shortage from 2013 to 2017 did so after supply disruptions tied to manufacturing or product quality problems. A slow or failed change can be part of such a problem, and so can a change made badly.
Source28 · This figure covers all such disruptions, and FDA does not break out change control.
Show the numbers
Measure
Value
of 163 drugs that went into shortage from 2013 to 2017 did so after supply disruptions tied to manufacturing or product quality problems. A slow or failed change can be part of such a problem, and so can a change made badly.
62 of 100
What FDA's remedies ask for after a change control finding
FDA's letters show what it wants once it has found a problem. A fix to one change rarely satisfies. The agency asks about the system.
One 2026 letter asks for "a comprehensive, independent assessment of your change management system", covering "your procedures to ensure changes are justified, reviewed, and approved by your QU", the quality unit.32
Another letter asks for "a description of the steps that must be taken in your change management system before introduction of new manufacturing equipment or a new product".34
A third judged a response inadequate because it "did not include a systemic review of your change management program".36
11 · How many changes a plant carries
How many changes a drug plant or a biologic carries: the few published counts
In shortPublished counts are rare and each measures something narrower than a plant's real volume. A study of TNF-alpha medicines, which are biologics (drugs made from living cells), found seven regulator-visible changes a year per product. Eighteen global companies counted more than 145,000 post-approval changes needing prior approval, across 156 countries in three years. We found no public figure for days per assessment or share found late.
7/yr
post-approval manufacturing changes on average for each TNF-alpha medicine on the EU market, from EMA documents to May 2021.41
Alsamil and colleagues, 2022
145,000+
post-approval changes for 156 countries, collected by 18 global companies from 2019 to 2021, counting only changes that needed a regulator's approval first. Agencies took from a few months to years, in some cases over five.42
Vinther and colleagues, 2024; we read the abstract
30–175/mo
changes in a pharmaceutical facility, depending on type and size. An estimate by the authors, with no method given, and now 16 years old.37
Johanning and colleagues, 2010
Originator biologics carry over four times the changes of biosimilars, at about the same yearly rate
Mean post-approval manufacturing changes per product, TNF-alpha medicines on the EU market to May 2021
Originators (range 112 to 175)137 changes
Biosimilars (range 0 to 133)30 changes
Source41 · Yearly rates were about equal, 7.0 a year. These are changes visible in EMA's documents. A plant's own change controls also include changes that never reach a regulator. An originator is the first approved product; a biosimilar is highly similar to it.
Show the numbers
Product type
Mean changes
Originators (range 112 to 175)
137 changes
Biosimilars (range 0 to 133)
30 changes
About one change in eight carried high risk to product quality
Share of the 801 changes in the same study, by the authors' risk class
What we could not find published. We found no public figure for days per impact assessment, share of impacts found late, first-pass approval at change boards, change control backlog, or the market for change control software. What turned up was single-company case studies and vendor stories. If someone quotes a benchmark, ask for the dataset. Section 18 shows how to measure each in a week.
12 · Inside a supplier change
What hides inside a supplier change: materials, labels, MES recipes and training
In shortA "same material, new supplier" change reaches further than most. The material may differ in ways a certificate does not show, the barcode may break a system rule, the tester may hold a recipe for one film, and everyone trained on the old procedure has to retrain. Each has its own rule to read.
Supplier and material changes reach the most areas, which is why they get missed
How often each kind of change usually reaches each area, by judgment
RarelySometimesUsually
DocumentsSystemsEquipmentSpecsFilingsStabilityTrainingNew supplier, product contactUsuallyUsuallySometimesUsuallyUsuallySometimesUsuallyProcess parameterUsuallySometimesRarelySometimesUsuallySometimesUsuallyHold time extendedUsuallySometimesRarelySometimesUsuallyUsuallySometimesSpecification tightenedUsuallyUsuallyRarelyUsuallyUsuallySometimesSometimesSoftware upgradeUsuallyUsuallyRarelyRarelyRarelyRarelyUsuallyAlarm limitSometimesSometimesUsuallyRarelyRarelyRarelySometimes
Illustrative · replace with your own numbers
Show the numbers
Documents
Systems
Equipment
Specs
Filings
Stability
Training
New supplier, product contact
Usually
Usually
Sometimes
Usually
Usually
Sometimes
Usually
Process parameter
Usually
Sometimes
Rarely
Sometimes
Usually
Sometimes
Usually
Hold time extended
Usually
Sometimes
Rarely
Sometimes
Usually
Usually
Sometimes
Specification tightened
Usually
Usually
Rarely
Usually
Usually
Sometimes
Sometimes
Software upgrade
Usually
Usually
Rarely
Rarely
Rarely
Rarely
Usually
Alarm limit
Sometimes
Sometimes
Usually
Rarely
Rarely
Rarely
Sometimes
Extractables, leachables and USP chapter 665 for plastic parts
A bioreactor bag touches the product for weeks, and a new film means a new chemical profile. USP, the United States Pharmacopeia, publishes General Chapter 665, which covers plastic components and systems used to make drug products and biologics. USP moved its official date to May 1, 2026, in part to consult on whether to make it an applicable chapter.43
USP's page for the chapter says it "is informational and not compendially applicable unless otherwise specified by regulators and enforcement bodies".44 We read that page's preview and USP's notices, not the full chapter, and as of November 3, 2026 we found no later USP notice or FDA statement that changes this. Vendor pages that call the chapter mandatory go beyond those words, so ask your compendial lead how your regulators treat it.
What FDA's table says about supplier and single-use changes
FDA's June 2021 guidance for biologics shows how fine these distinctions run.45
Prior approval column
Stainless steel to a disposable bioreactor
FDA's table lists this move in its prior approval column.45
On FDA's receipt
A new container supplier, same material
A change in the supplier of a disposable primary container, "with no change in the construction material", may be distributed once FDA receives the supplement.45
No row
A second bag supplier, same material
The team has to argue from the regulation's three-level test: substantial, moderate or minimal potential for an adverse effect.31
When an ERP, MES or LIMS field hard-codes the old supplier
Plant systems carry business rules that nobody remembers until they fire.
MES
One barcode format
A recipe step that accepts only one.
ERP
One approved vendor
A material master that lists only one.
LIMS
One reference spectrum
An identity test keyed to only one.
FDA's rule requires "appropriate controls … to assure that changes in master production and control records or other records are instituted only by authorized personnel".18 Annex 11 says any change to a computerized system, "including system configurations", happens only "in a controlled manner in accordance with a defined procedure".46 A useful finding names the step: "MES impacted" gives validation nothing to test.
How much to test is a risk-based judgment, and GAMP 5, ISPE's industry guide, is the usual reference for it.47 FDA's Computer Software Assurance guidance, final on February 3, 2026, is written for medical device production and quality system software, so a drug plant may learn from its thinking without it being a rule for that plant.48
Why a revised procedure means retraining before the first batch
A revised procedure leaves everyone on the old version until they retrain. FDA's 2026 letter on a visual inspector qualification procedure described inspectors continuing critical visual inspections for about three months after the revision without meeting the new standard.35 List who must retrain as part of the impact, and treat it as a condition of the first batch. A separate guide covers procedure revisions and training.
13 · AI in change control
Where AI helps a change impact assessment, and the line draft Annex 22 would draw
Status as of November 2026
In shortAI suits the finding: reading thousands of records for what a change touches and quoting them. People keep the judgment and the signature. We found no regulator text written specifically about AI in change control, and no published accuracy study. Draft EU GMP Annex 22 is the rule to watch, since as drafted it would keep generative AI out of critical GMP uses.
Automate the searching and comparing; keep the decisions with named people
Steps in an impact assessment, by how much reading they take and how much judgment they need
Judgment needed →
People decide, with facts handed to them
People decide, AI gathers the evidence
Simple rules are enough
Good fit for automation
Approve the changeSet the test scopePropose a filing categoryFind affected documentsMatch past changesBuild the task plan
Draft. Consultation July 7 to October 7, 2025. Not listed in EudraLex on November 3, 2026. EMA's target for final text is Q4 2026.23,12
Section 1 says generative AI and large language models (LLMs) "should not be used in critical GMP applications".49 EMA's June 2026 workshop report records comments favoring a route for them and no revised text.51 Decide with your quality head whether a tool feeding a change decision is a critical use, and document that.
The January 2011 text applies: change and configuration under a defined procedure.46
FDA draft on AI for regulatory decisions
Draft, January 2025.
It does not address AI for "operational efficiencies (e.g., internal workflows, resource allocation, drafting/writing a regulatory submission)" that do not affect patient safety, drug quality or study reliability.50 A tool that feeds a quality decision may fall on the other side of that line. If unsure, ask.
FDA and EMA guiding principles
January 2026. Ten guiding principles.
They cover the whole drug life cycle, including manufacturing.52
Industry references for GxP (good practice rules such as GMP) computerized systems, including AI-enabled ones. Neither is a regulation.
EU AI Act
Delay in force July 27, 2026: Annex III to December 2, 2027; Annex I to August 2, 2028.55
Ask your counsel about the classification. An internal plant tool is not obviously high-risk, and that is a legal reading for them to make.
Data integrity for AI-found impacts: ALCOA+, Part 11 and citations
An AI-built list of impacts fed into a GMP decision is a record. MHRA's guidance uses ALCOA, for attributable, legible, contemporaneous, original and accurate, and says the "+" adds complete, consistent, enduring and available with "no difference in expectations".56 21 CFR Part 11, FDA's rule on electronic records and signatures, asks for secure audit trails and signatures that show their meaning, in sections 11.10(e) and 11.50.57 For AI, that means three things on each finding:
Source
It quotes its source
A reviewer can read the passage the finding rests on.
Model
It shows the model version
The record says which version wrote it.
Person
It records who accepted it
A named person stands behind the item.
These are duties on the company using the system. No product can be certified for them.
Four limits to test before a change board trusts an AI list
A past change shows what happened then. A similar change that needed no filing in 2021 may need one under 2026 rules. Each suggestion should still point to current text.
A confidence score is the system's own estimate. Test it against changes where you know the answer.
Missed items stay invisible. An AI list looks complete, and people may stop looking. Measure recall, the share of real impacts it found, by hiding known items in past changes.
Records outside the index do not exist for it. Local dossiers on a laptop will not appear. Say what was searched on every assessment.
14 · How teams do it today
How QA, validation, QC and regulatory assess a GMP change today
In shortA change owner fills in a form in the quality system. QA routes it to four to six reviewers, each with their own systems. By our estimate, most of the elapsed time is waiting for people and searching for documents; we found no public measure. The ways of doing it vary from paper and shared drives to a module in a quality management system (QMS), with consultants brought in for large programs.
Who takes part in a pharmaceutical change control
QA
QA lead or change board chair
Owns the process and signs. Cares that nothing is missed, that the record will survive an inspection, and that the board's time goes on real decisions.
CO
Change owner: MSAT, production, engineering or supply
Raises the change and carries the tasks. Cares about the date. Often writes the form from what can be seen upstream.
VA
Validation lead
Decides what to requalify and test. Cares about knowing the exact recipe step or field.
QC
QC lead
Owns specifications, methods and stability. Cares about supplier data covering the real process.
RA
Regulatory CMC lead
Decides what each market needs. Cares about hearing early, and about what each approval says.
QP
Qualified Person, in the EU
Certifies each batch and must confirm the impact of changes was evaluated.25
SH
Site head of quality
Usually the buyer. Answers for the system at inspection and for its effectiveness at management review.
A major change passes through about six hand-offs before anyone votes
The manual path, with an estimated time for each step
1Form raised
Owner writes what it touches from memory.
Change ownerDay 0
2Triage and routing
QA classes it and picks reviewers.
QADay 1
3Documents and batch records
Search by supplier and part number.
Document ownersDays 2 to 3
4Systems and equipment
Ask who knows what the recipe hard-codes.
ValidationDays 3 to 5
5Filings
Open each dossier and rule book.
Regulatory CMCDays 5 to 8
6Pack for the board
Pieces assembled into one assessment.
QADay 9
Illustrative · replace with your own numbers
Show the numbers
Step
What happens
Who
Time
Form raised
Owner writes what it touches from memory.
Change owner
Day 0
Triage and routing
QA classes it and picks reviewers.
QA
Day 1
Documents and batch records
Search by supplier and part number.
Document owners
Days 2 to 3
Systems and equipment
Ask who knows what the recipe hard-codes.
Validation
Days 3 to 5
Filings
Open each dossier and rule book.
Regulatory CMC
Days 5 to 8
Pack for the board
Pieces assembled into one assessment.
QA
Day 9
Filing categories and the search for documents and systems take most of the nine days
Estimated split of one major change assessed by hand, across four to six reviewers (working days)
Reading the request and writing it upDocuments and formsSystems and equipmentSpecs and stabilityFiling categories
9 working days1.5 days2 days2 days1 day2.5 days
Illustrative · replace with your own numbers · An estimate, since we found no public figure. Time your own.
Show the numbers
Reading the request and writing it up
Documents and forms
Systems and equipment
Specs and stability
Filing categories
9 working days
1.5 days
2 days
2 days
1 day
2.5 days
Paper, a QMS module or consultants: the usual set-ups for change control
Paper and shared drives
Forms and email
Cheap to start, and still found at smaller sites. Finding past changes means someone remembers them.
QMS module
Workflow and signatures
Routes tasks, holds the signature and the audit trail. It records what reviewers write. It rarely reads the plant's records to say what a change touches.
Outside help
Consultants, for peaks
Remediation after a finding, site transfers and backlog work. Useful for a period, and the knowledge often leaves with them.
Part B · See it working
One bag supplier change at a fictional biotech, run through Botminds Change Control Impact Assessment
Part A described the work without naming a product. This part shows how Botminds does it, for Northwind Bio, a fictional company with an antibody plant in Leiden. Every company, person, number, procedure, registration and rule on these screens is sample data.
15 · The bag supplier change, start to finish
CC-26-1184 from a three-item request to a signed plan with a first batch on November 20
In shortThis is the example from the top of the page, inside the product. Omar's request lists three items. Dana, the QA lead, presses one button, and agents, AI helpers that each do one job, grow it into an impact tree, a branching map of everything the change touches, with 31 cited items. Two of them come only from past changes. Dana accepts the high-confidence items, named people take the three low ones, the board votes, she signs, and the plan follows.
1
The request lists three items
Omar Haddad, an MSAT engineer, raised CC-26-1184 on October 2: qualify Tessmer Single-Use as a second 2,000 L bioreactor bag supplier for Veltrimab and Dravenzo drug substance (the active ingredient), because Wrenmoor Bioprocess cut its 2027 allocation by 40%. It is a Major change, set for Thursday's board. Section 4 of his request names SOP-USP-031, SOP-USP-044 and a US CBE-30 for Veltrimab.
The screen shows exactly that: the change at the center and three dark leaves. The right side already lists the three most similar closed changes.
The request as written. Three items from the owner, and the most similar closed changes from 6,830 in the sample.
2
Agents search in parallel
Dana presses "Grow the impact tree". The Change Reader turns the request into what changes, where and for which products. Four agents then search at once: 2,412 procedures and forms, 318 validated systems and 604 equipment items, 1,904 specifications, and 412 registration dossiers across 38 markets. Branches appear as they work.
Branches appear as they work. Each leaf's color says where it came from: the owner, the sources, past changes, or checked and not affected.
3
Thirty-one items, in nine areas
When the sample run ends, the tree holds 8 documents, 3 systems, 3 equipment items, 1 specification, 2 products, 10 market filings, 1 stability commitment, 2 supplier items and 1 training curriculum for 56 people. Of these, 26 were found in the sources, 3 came from the owner and 2 from past changes. Three more were checked and cleared.
The impact tree. The screen this solution is built around. The amber banner names the two filings the owner did not list.
4
A filing no document names: Japan
The Past-Change Comparer ranks 6,830 closed changes and reads the top three. CC-24-0611, a second sterilizing filter supplier for Veltrimab and 81% similar, needed a Japan minor change notification: Japan's approval matters name the membrane material, and the request had not listed Japan. Veltrimab's Japan approval reads "polyethylene-based bag", so a search for the supplier's name misses it.
The item sits at 71% confidence, so it is marked "your call" for Lena Ortiz, the regulatory CMC lead.
The Japan branch and its proof. Sample text from a fictional approval. Whether it needs a notification or a partial change is the person's call.
5
The filing a past change missed: the UK
CC-25-0219, a second tubing set supplier for Dravenzo and 78% similar, needed no filing in the US or EU under the product's lifecycle document. In this sample, the UK approval had not taken that document. The UK Type IB was found four months after implementation, at renewal, and filed late with a deviation. The comparer adds the same branch here, citing the past change. It can only add. It never removes a branch another agent found.
The UK branch. A sample result, set in 2025. In the real EU, a lifecycle document is optional, comes by Type II variation, and has been possible only since January 15, 2026; a change to binding elements still triggers a variation (section 6). We found no MHRA text on these documents.
6
Recipe step 4.2 and the barcode it would reject
Every branch opens the passage that proves it. Recipe VLT-DS-USP v12, step 4.2, accepts only one barcode format, so it would reject Tessmer's GS1-format barcode labels. How wide to run the regression test is Validation's decision, so at 78% the item goes to Sam Patel. The most similar change, CC-25-0732 at Cork (94%), found this rule and the incoming-inspection procedure only after approval. Its first batch was nine days late.
One branch, its proof. The field rule, quoted from the sample inventory, with Accept and Not affected beside it.
7
The study that stops at 21 days
The Tessmer film's study ran up to 21 days at 25 °C and 40 °C. Procedure SOP-QC-207 asks for worst-case conditions, and the harvest can sit in the bag for 30 days at 2 to 8 °C. At 62% the question goes to the queue of Priya Ranvelle, the QC lead, who puts it this way: "Does 21 days at 40 °C tell me anything about 30 days at 2 to 8 °C?"
The gap, with both passages. Supplier conditions beside the company's own procedure, each sample text.
8
The board votes, with conditions in each reviewer's words
Omar agrees. Lena agrees with a shipping restriction per market. Sam agrees with a risk-based regression test of the bag-lot step and the batch record print. Priya agrees on condition that extractables coverage of the harvest hold is confirmed before the first GMP batch. Quorum for a Major change is QA, Regulatory CMC and Validation.
The change board. Votes on the left, conditions and the decision on the right. Rejecting or sending back is one click away.
9
The quality unit signs
Dana signs with her password and the meaning "Approved as change board chair". The three open calls go with the decision as conditions, each to its owner, to settle before the first GMP batch: the recipe to Sam, Japan to Lena, the film data to Priya.
The signature. The signer, the meaning and what the signature covers, on one screen. A control that supports your compliance with Part 11; the duty stays yours.
10
Fourteen tasks and a release hold
The planner turns accepted items into 14 tasks with owners and dates, each linked to the branch that created it. Eleven must finish before the first batch: documents, the raw material specification, ERP, MES and LIMS, the equipment addendum, the Tessmer audit and quality agreement, the extractables check and training. The first batch on Tessmer bags can be released on November 20, six weeks after approval.
A Tessmer-bag Veltrimab lot still may not ship to the US until 30 days after FDA receives the CBE-30, or to Brazil before approval.
The plan. Click a task and it shows the branch that created it. The red line is the first batch on the new bags.
12,480 sources narrow to 43 passages, 31 items and 3 decisions only a person can make
What one assessment reduces for the reviewer, in the sample
Sources searched12,480
Passages cited43
Items touched31
Calls for a person3
Fictional example from this guide
Show the numbers
Stage
Count
Sources searched
12,480
Passages cited
43
Items touched
31
Calls for a person
3
16 · Every other screen
Filing grid, impact matrix, activity record and dashboard QA teams use every week
In shortThe tree is one view of the same evidence. The matrix suits a reviewer working through a list, the grid suits regulatory CMC, the activity record suits an inspector, and the changes and implementation pages suit whoever runs the board.
The impact matrix. Same items by area, each with a disposition, a confidence and a source. "Accept all at 85% or more" leaves the three low items for a person.
Draft filings by product and market. 24 cells, each a draft until Lena confirms. Category names and the no-filing result for Dravenzo are sample data. In the real EU, a change to binding elements still needs a variation (section 6); see the CMC guide for real classes.
A cleared item keeps its evidence. Release specifications: "None names the bioreactor bag or its supplier."
The activity record. People and agents listed apart, in order. The stage bar above it runs on to the effectiveness check and closure.
Every change across four plants. Class, stage, clock and a nine-square fingerprint of what each change touches.
A smaller change, a smaller tree. A hold time extension touches 8 items. No past change came close enough, and the screen says so.
Implementation across changes. Tasks from every approved change, with what is holding each first batch.
What the agents read. Read-only copies from six systems of record, and how often each record has fed a change.
How change control is running. Sample data set at the design targets. The nine-day line is an estimate, since we found no public benchmark.
Your procedure as settings. Confidence line, quorum, who approves Minor changes, and rules in plain words.
Fourteen of the 24 market cells split evenly between notify-and-wait and implement-then-tell
Draft categories on the filing grid, for two products across twelve markets, in the sample
Notify and wait7
Implement, then tell7
Not registered there5
Prior approval2
No filing2
Your call1
Fictional example from this guide
Show the numbers
Draft category
Cells
Notify and wait
7
Implement, then tell
7
Not registered there
5
Prior approval
2
No filing
2
Your call
1
17 · Who proposes, who signs
Who proposes and who approves a change: seven agents cite, and the quality unit signs
In shortEach agent does one job and states what it may not do. None changes a record in your quality system, a system setting or a registration. People accept the branches, confirm each filing, vote and sign. Everything is on the activity record, along with the design targets to test in a pilot.
Change Reader
Turns the request into what changes, where and for which products, and notes what the owner already named.
Limits Never edits the QMS record. Flags a vague description back to the owner.
Document Finder
Searches procedures, work instructions, forms and master batch records for what the change makes wrong, and who is trained on each.
Limits Quotes the passage for every item. Proposes Revise, Follow or Not affected; a person decides.
System & Equipment Matcher
Matches the change to ERP, MES and LIMS configuration and qualified equipment, down to the step, with a proposed test scope.
Limits The scope is a proposal for Validation. Changes no system.
Spec, Product & Stability Checker
Checks specifications, methods, products and stability commitments, including those that are not affected.
Limits Records the evidence for every "not affected".
Registration Checker
Reads each registration and your country rule books, and drafts the filing category for each product and market.
Limits Every category is a draft until Regulatory CMC confirms. Below 80% it says "your call".
Past-Change Comparer
Ranks closed changes by similarity and adds what they needed that this change lacks, in amber.
Limits Adds only with the past change that proves it. Never removes a branch. Every addition is reviewed.
Impact Writer & Planner
Writes the cited assessment for the board, and after approval turns accepted items into a plan.
Limits Creates tasks only from accepted items. The release hold always includes supplier qualification and training.
Dana accepts and signs, Lena confirms filings, the board votes
Accepts the branches, then signsQA, the quality unitAccepts or clears each item, chairs the board and signs with an electronic signature and its meaning. QA alone approves Minor changes, if your procedure says so.
Confirms every filingRegulatory CMCConfirms or changes each product and market category. This setting cannot be turned off.
Vote and set conditionsThe change boardQA, Regulatory CMC and Validation form the quorum for Major changes, and QC can be added. The owner takes part and does not count toward the quorum.
Items at or above the confidence line, 85% by default, can be accepted together by a person. Items under it go to a named person and are never accepted in bulk. At signing, open calls become conditions. These are controls that support your compliance with your own quality system. The product is never "compliant" or "validated" on its own: you qualify it for your intended use. Botminds' credentials are SOC 2 Type II audited and information security managed to ISO 27001.
Draft EU GMP Annex 22 applies to this decision. These agents use large language models. The draft, not final on November 3, 2026, says such models "should not be used in critical GMP applications" and that in other uses qualified people answer for the output.49 The solution's design matches the second idea: agents read and propose, and people answer for every item. Whether that use is critical is for your quality head to decide and document, and to revisit when the final text appears.
The five people on the bag supplier change, in their own words
Fictional, from the sample data
DO
Dana Okafor · QA operations lead, change board chair, Plant 3 in Leiden
Chairs Thursday's board and signs every Major change.
"I don't want to find the missing filing after the first batch ships."
OH
Omar Haddad · MSAT engineer, change owner
Raises supplier and process changes.
"I listed what I knew. I didn't know the MES only reads one label."
LO
Lena Ortiz · regulatory CMC lead
Confirms the filing category for each market.
"Japan names the material. A keyword search will never find it."
SP
Sam Patel · validation lead
Sets the test scope for systems and equipment.
"Name the recipe step. 'MES impacted' gives me nothing to test."
PR
Priya Ranvelle · QC lead
Owns specifications, methods and extractables.
"Does 21 days at 40 °C tell me anything about 30 days at 2 to 8 °C?"
The records the agents read, and the cited tree, decision and plan they return
From your systems
Change requests and closed change controls from the QMS
Procedures, forms and master batch records
Validated system inventory and equipment register
Specifications, bills of materials, stability protocols
Registrations, lifecycle documents
Training matrix
From your team
Country rule books, as approved versions
Your classification rules and quorum
Rules in plain words, such as "a product-contact material always opens an extractables item"
Agents read, find, compare and draftEvery record the change touches, across plants and markets
QA accepts the branches
Every branch cited
Outputs
Cited impact tree and matrix across nine areas
Items added from similar past changes, in amber
Draft filing category by product and market
Signed board decision with conditions
Task plan with a release hold, back in the QMS
Activity record for inspectors
Connecting the QMS, document, ERP, MES, LIMS and registration systems
The solution reads copies from your quality management system, document library, registration information system, validation inventory, ERP and training system, and tasks go back to the QMS. Agents read; they change records only through a person. It serves several plants and many markets, with roles, separation of the owner from the approver, and an export of the full record for audit.
Design targets and a sample result to test in your own pilot
1.4 days
median from triage to a complete, cited impact assessment, against an estimated nine working days by hand.
Design target; measure it
2 filings
the owner missed, added from similar past changes and cited, in the bag supplier change.
Sample run; measure yours
87%
of changes approved at the first board, none sent back for information.
Design target; measure it
Part C · Are you ready to automate?
Testing the case for automating GMP change control: late finds, payback, readiness and a pilot on closed changes
You run change control, or you sit on a change board, or you answer for the quality system at inspection. This part is written for you: what late finds cost today, what automation could return, whether your site is ready, and what to ask any vendor, including us.
18 · What late finds cost
Held batches, late filings and reviewer days: the price of a late-found impact
In shortWe found no published figure for this cost, so start from your own records, and this section shows how to read them in a week. The public figures frame the stakes: how many citations touch the subject and how much supply depends on it.
115
of 2,837 drug citations on FDA Forms 483 in fiscal 2025, by our count of four rows worded around changes. Change failures written under other rows are not in it; section 9 gives the method.38
Our count from FDA's spreadsheets
1,577
change control observations in human drug GMP over the ten years to July 2022, by one data firm's classification.40
Redica Systems, July 2022
62%
of 163 drugs in shortage from 2013 to 2017 followed supply disruptions tied to manufacturing or quality problems.28
FDA Drug Shortages Task Force
One major assessment could fall from about nine days to a 1.4-day design target
Reviewer days for one major change
By hand (an estimate)With automation (design target)
Days to a complete, cited assessment9 days1.4 days
Illustrative · replace with your own numbers · Neither figure is a measurement of your site. Time five of your own, and measure the target in a pilot.
Show the numbers
By hand (an estimate)
With automation (design target)
Days to a complete, cited assessment
9 days
1.4 days
Twenty closed change controls will show you what late finds cost
Cost
Where it hides
How to find your number in a week
Reviewer days per major change
Four to six people searching their own systems between other work
Ask each reviewer on your last five major changes, and add it up
Items missing from the request
The gap between the original form and the closed record
Compare both for 20 closed changes, and divide
Items found after approval
Added tasks, late revisions, amended plans
Count post-approval additions in the same 20
Held first batches
A batch waits for a procedure, a recipe or a test
Planned against actual first-batch date, with the reason, for the same 20
Late or missed filings
Found at renewal, at annual report or by an affiliate
Search the deviation log for filing or registration mismatch
Changes sent back by the board
One more week in the queue, often for one missing fact
Share of major changes not approved at first review, from board minutes
Inspection findings
Observations written under other headings
Read your last three inspection reports for changes outside the system or no effectiveness check
Unraised changes, repeat misses and board hours no budget line shows
The change nobody raisesA slow, painful process teaches people to avoid it, or to call a change minor.
The same miss, twiceTwo sites learn the same lesson a year apart, because closed records are never read.
Board time spent on factsAn hour spent establishing what a change touches, with little left to weigh whether to do it.
Knowledge that walks outThe one validation engineer who knows what step 4.2 hard-codes.
Regulatory flexibilityWeak change management can limit use of ICH Q12's tools, and you pay in filings for years.
19 · Your return
The return on change control automation: reviewer days released and fewer held first batches
In shortPut in your own numbers. The calculator values reviewer days released and, separately, what fewer held batches are worth. Every default is an assumption to replace, and the share you redeploy matters most.
Reviewer days, late finds, send-backs: six levers and how to count each
Reviewer time
Days spent on judgment
Reviewers start from cited items in place of a blank search.
major changes × days saved × hours a day × hourly cost × share redeployed
First batch
Fewer late finds
Items reach the plan before approval, so a batch does not wait for them.
late finds avoided × days held × value of a day
Board
Fewer send-backs
Complete packs mean approval at the first meeting.
send-backs avoided × days per round
Filings
Late filings caught
Each product and market is checked on every change.
catch rate, measured by hiding known misses in past changes
Knowledge
Lessons reused across sites
A lesson from one plant reaches the next plant's change.
repeat findings per year, before and after
Inspections
Evidence to hand
The passage, decision and signer for each item.
hours spent assembling each inspection request
Your break-even on major changes, with your own reviewer cost and held-batch days
This guide cites no wage survey for these roles, so the hourly rate is a loaded cost (pay plus overhead) to replace. Every input marked illustrative is an assumption.
Your volumeReviewer days per major changeHeld first batchesYour cost
Illustrative yearly value
Assessment time today, valued$0
Reviewer time released and redeployed$0
Fewer held first batches$0
After your yearly cost$0
Reviewer days released a year0
Major changes a year to cover your cost, on time alone0
Formulas, per year, with an 8-hour day: Assessment time today = changes × days today × 8 × hourly cost Time released = changes × (days today − days with automation) × 8 × hourly cost × share ÷ 100 Held batches = late finds avoided × days held × value of a day After your cost = time released + held batches − yearly cost Break-even changes = yearly cost ÷ (days saved × 8 × hourly cost × share ÷ 100)
Value of a day depends on the change: supply protected, cost saved, capacity added. Agree it with the business sponsor, and set it to zero to see the case on reviewer time alone. Released time counts as value only when you decide what it is for: more changes per reviewer, a shorter board queue, or deeper work on the hard changes.
Days saved per change decide how many major changes pay for the tool
Major changes a year to cover $250,000, at $95 an hour and half of saved time redeployed
Saves 7.6 days a change87 changes
Saves 5 days a change132 changes
Saves 2 days a change329 changes
Illustrative · replace with your own numbers
Show the numbers
Days saved per change
Changes a year
Saves 7.6 days a change
87 changes
Saves 5 days a change
132 changes
Saves 2 days a change
329 changes
A multi-plant company assessing hundreds of major changes clears the first line on time alone. One site with 40 major changes a year probably does not, and should weigh held batches and filing risk or stay with simpler tools.
Start here20 · Readiness check
Can your closed changes, records and procedures support automation? A QA head's scorecard
In shortPick the answer closest to your site today. Eight questions score 0 to 2, and the last is for reflection. The meter adds up your score as you go, and each question says why it matters and what a strong answer sounds like.
1
Change volume
How many major changes does your site or network assess a year?
Why it mattersVolume turns reviewer days into capacity, and the case for software rests on it.
A strong answer"About 300 across three plants, counted from the QMS, and we know the split by class."
2
Your baseline
Do you know reviewer days per change, items missing from requests, and items found after approval?
Why it mattersWe found no public benchmark, so your own baseline is the only proof of improvement.
A strong answer"Eleven days, a third of items missing from the form, and one late find in every four."
3
Closed change records
Can someone search closed change controls, across sites, with what each one needed?
Why it mattersLearning from past changes needs closed records with real content, including what was found late.
A strong answer"Five years in one QMS, with closure summaries, and deviations linked."
4
Documents and specifications
Are procedures, batch records and specifications in a controlled system, as readable text?
Why it mattersA passage can only be quoted if it can be read. Scans can be read too, and files on a local drive cannot.
A strong answer"All current versions in one system. Older batch record templates are scans, with an owner."
5
System and equipment inventory
Do you hold an inventory of validated systems, with recipe and configuration records someone can read?
Why it mattersHard-coded rules hide here, and "MES impacted" is no use to Validation.
A strong answer"Inventory is current, and recipe exports go to a controlled folder after every release."
6
Registrations and rule books
Can you pull every active registration, its approved text and each country's rules?
Why it mattersFilings are where a missed impact becomes a license problem.
A strong answer"One registration system, approved text indexed, rule books versioned with an owner."
7
Procedure and classification
Does your procedure define classes, who approves each, quorum and effectiveness criteria?
Why it mattersThese become settings, and PIC/S PI 054-1 is what inspectors may hold them against.
A strong answer"Yes. We mapped our procedure to PI 054-1 last year and closed three gaps."
8
Quality's position on AI
Has your quality head decided how an AI tool may feed a GMP decision, in light of draft Annex 22?
Why it mattersWithout a written position, the pilot stalls at the first audit question.
A strong answer"AI gathers and cites; a named person decides each item. We've classed the use, and we'll revisit when Annex 22 is final."
9
For reflection: the inspector's question
If an inspector picked one closed change from last year and asked what you checked and found unaffected, and how you knew the change worked, how long would it take you to show it?
0–6
Explore
Build the baseline first: read 20 closed changes, map your procedure to PI 054-1 and get a current system inventory. Start narrow, such as a search of documents for each new change.
7–11
Ready to pilot
Run a measured pilot on 30 to 50 closed changes where you know what was found late, plus live changes at one plant. Compare what was found, missed and added.
12–16
Ready to implement
Plan the rollout by plant, connect the QMS and the record systems, qualify the tool for your intended use, and agree the rules for your board.
21 · Questions for any vendor
Testing a change control software vendor on evidence, recall and who decides
In shortAsk every vendor the same questions, us included. The answers show whether a tool routes forms or reads your plant, what evidence you keep, how you would measure it on your own changes and how it fits draft Annex 22.
A
Finding what a change touches
A1
Does it read our documents, system records and registrations, or does it route a form to reviewers?
Why it mattersA workflow records what people found. A tool that reads the records may also find what they missed, and you can test that claim.
Strong answer · warning sign
Shows items found from your records in a trial.
"Reviewers enter impact in structured fields."
A2
Does every item quote the passage it rests on, with document, section and version?
Why it mattersA reviewer has to check it in seconds, and an inspector later.
Strong answer · warning sign
One click to the passage, on current versions.
A summary without a source.
A3
How does it record what it checked and found not affected?
Why it mattersICH Q10 asks for assurance about unintended consequences.
Strong answer · warning sign
A row with reason and evidence.
Silence about anything not found.
B
Measuring it on your own changes
B1
What is its recall on our closed changes, with known late finds hidden from it?
Why it mattersMissed items are the risk, and they stay invisible unless you test for them.
Strong answer · warning sign
A test on your records, with results by area.
An accuracy figure with no dataset.
B2
How often does it add an item that is wrong, and what does that cost a reviewer?
Why it mattersA long list full of noise trains people to skim.
Strong answer · warning sign
Precision reported with recall.
Recall alone.
B3
What do its confidence numbers mean, and did you check them against results?
Why it mattersA threshold decides what people look at.
Strong answer · warning sign
Calibration on your data, reviewed by the board.
"The model is 95% accurate."
C
Who decides, and the record that shows it
C1
Can the system approve, close or change anything without a named person?
Why it mattersUS rules name the quality unit. EU rules name responsible persons.
Strong answer · warning sign
No. Roles separate owner and approver.
"Auto-approve low risk" with no written rule.
C2
Is your product "GxP compliant" or "Part 11 certified"?
Why it mattersNo product can hold these. They apply to how you use a system.
Strong answer · warning sign
"Controls that support your compliance, with evidence for your qualification."
A certificate.
C3
How do you see draft Annex 22 for this use, and what changes if it is finalized as written?
Why it mattersThe draft names generative AI and LLMs in critical GMP uses.
Strong answer · warning sign
States model type, role and your options plainly.
"It does not apply to us."
D
Keeping it working in your plant
D1
What happens to the assessment when you update a model?
Why it mattersA model update is itself a change to control.
Strong answer · warning sign
Advance notice, version on each result, re-test set.
Silent updates.
D2
Which of our systems does it read, how fresh are its copies, and what does it write back?
Why it mattersA stale copy gives a wrong answer that looks right.
Strong answer · warning sign
Sync time on the screen; write-back only through a person.
Vague "integrations".
D3
How is data kept separate, and who can see other plants' changes?
Why it mattersPast changes are valuable across sites, and some may be restricted by partner or product.
Strong answer · warning sign
Role-based access, per site, with an export for audit.
One shared index for everyone.
22 · A pilot plan
Test it on changes you already closed: a ten-week pilot that ends in a recall number
In shortStart on closed changes where you already know the answer, so you can score recall against a known answer. Then shadow live changes at one plant, with the board still working as it does today. Quality owns the pass line, written down before the first run.
Ten weeks: test on the past first, then shadow live changes without replacing anyone
Your teamVendor
Write the pass line, pick 30 to 50 closed changes
Connect records for one plant
Run on closed changes, known misses hidden
Score recall, precision and passage accuracy
Shadow live changes beside the board
Decide, with quality's written position
Week 0246810
Illustrative · replace with your own numbers
Show the numbers
Activity
From
To
Write the pass line, pick 30 to 50 closed changes
0
1.5
Connect records for one plant
0
3
Run on closed changes, known misses hidden
3
5
Score recall, precision and passage accuracy
4.5
6
Shadow live changes beside the board
5.5
9
Decide, with quality's written position
9
10
Recall, precision and reviewer days: scoring a change control pilot
Measure
How
Agree before you start
Recall on hidden late finds
Items found after approval on closed changes, kept out of the input
The lowest share you would accept, by area
Precision
Share of proposed items a reviewer accepted
How much noise reviewers will tolerate
Passage accuracy
Sample of citations opened and read by a second person
A very high line: a wrong citation breaks trust
Reviewer days
Same people, timed on live shadow changes
Your baseline from section 18
First-pass board approval
Share not sent back for information
Baseline from board minutes
Confidence calibration
Acceptance rate by confidence band
Where to set the line for a person's call
The full working-session questions: nine questions in three groups
Bring QA, change owners, validation, QC, regulatory CMC and IT quality into one room.
A
Scope of the pilot
A1
Which change types come first: supplier, process, system?
Why it mattersSupplier changes reach furthest.
Strong answer · warning sign
Named types, with counts.
"All of them."
A2
Which closed changes have well-recorded late finds?
Why it mattersThey are your test set.
Strong answer · warning sign
A list of 30 or more.
"We don't record those."
A3
Which markets and registrations are in scope?
Why it mattersFiling items need the approved text.
Strong answer · warning sign
Named, with text in hand.
Assumed available.
B
Quality's position
B1
Is this a critical GMP use under draft Annex 22, as you read it?
Why it mattersIt sets what you can do with the output.
Strong answer · warning sign
A written view, signed.
Left to IT.
B2
How will you qualify the tool for its intended use?
Why it mattersThat duty stays with you.
Strong answer · warning sign
A risk-based plan under GAMP 5.
"The vendor did it."
B3
What must change in your change control procedure?
Why it mattersInspectors read the procedure first.
Strong answer · warning sign
A draft revision before go-live.
No change planned.
C
After the pilot
C1
Who owns the rule books and the plain-language rules?
Why it mattersThey go stale without an owner.
Strong answer · warning sign
A named person and a review date.
"The vendor keeps them."
C2
What do released reviewer days go to?
Why it mattersOtherwise the benefit disappears.
Strong answer · warning sign
Named: backlog, effectiveness checks.
Unstated.
C3
How will you keep testing recall after go-live?
Why it mattersRecords, rules and models all change.
Strong answer · warning sign
A yearly test set in periodic review.
Once at go-live.
23 · Frequently asked questions
Major vs minor, Annex 15, 21 CFR 211.100 and effectiveness checks: the change control FAQ
In shortQuestions QA teams and buyers search for, each answered on its own.
What is a change control impact assessment?
A change control impact assessment is the part of GMP (good manufacturing practice) change control that lists everything a proposed change touches: documents, systems, equipment, specifications, products, filings, stability, suppliers and training. Each item gets a disposition and evidence. The quality unit uses it to approve or reject the change, and the items become the implementation plan.
What does ICH Q10 require for change management?
Section 3.2.3 of ICH Q10 asks for quality risk management with effort in proportion to risk, evaluation against the marketing authorization, evaluation by expert teams, and an evaluation after implementation. ICH Q10 is a model and says it adds nothing beyond regional GMP where the two overlap. Regional rules such as EU GMP Chapter 1 carry the same ideas.
What does EU GMP Annex 15 say about change control?
Section 11 of EU GMP Annex 15 asks for written procedures covering changes to materials, components, processes, equipment, premises, methods and batch size. Quality risk management evaluates the impact on product quality, the quality system, documents, validation, regulatory status, calibration and maintenance. Supporting data is reviewed before final approval, and effectiveness is evaluated afterward where appropriate.
What does 21 CFR 211.100 require for changes?
Section 211.100(a) says written production and process control procedures, including any changes, are drafted, reviewed and approved by the appropriate units and reviewed and approved by the quality control unit. Section 211.22(c) gives that unit responsibility for approving or rejecting procedures and specifications. Section 211.180(e) requires at least annual evaluation to determine the need for changes.
What is the difference between a major and a minor change?
Plants set their own classes, usually critical, major and minor, in a written procedure based on risk to product quality. Major changes typically need a formal risk assessment and a board; minor changes may need only an impact assessment and QA approval. PIC/S PI 054-1 asks that classifications be appropriate and based on the level of risk.
Who approves a change in a pharmaceutical plant?
The quality unit approves or rejects. In the US, 21 CFR 211.100(a) and 211.22(c) say so directly, and ICH Q7 says the same for active ingredients. In the EU, Annex 15 says responsible persons or relevant functional personnel approve under the quality system, and a Qualified Person confirms the impact of changes was evaluated before certifying a batch.
Is a change control board required by GMP?
We found no GMP text that requires a board. The rules ask for qualified people from the appropriate disciplines and for quality approval, and a board is a common way to bring them together. Whichever way you do it, write down which changes need which reviewers, because inspectors look for that definition.
What is a change control effectiveness check?
An effectiveness check is an evaluation after implementation that confirms the change met its objective with no harm to product quality. ICH Q10, EU GMP Chapter 1 and Annex 15 all ask for one, and PIC/S PI 054-1 wants the criteria set in advance. FDA's warning letters ask for provisions to determine change effectiveness, and MHRA has cited the lack of it.
What is PIC/S PI 054-1?
PI 054-1 is a recommendation from PIC/S, the international group of GMP inspectorates, in force since July 15, 2021, on how inspectors evaluate risk-based change management. It covers proposals, risk assessments, planning and implementation, and effectiveness, and says it adds no new GMP requirement. EMA says EEA inspectors will pilot it in selected GMP inspections between 2026 and 2027, and manufacturers may use it to shape their own procedures.
How does ICH Q9(R1) affect change control?
ICH Q9(R1), adopted January 18, 2023, treats formality as a scale set by uncertainty, importance and complexity, and says resource constraints should not justify less of it. It warns that risk scores can be subjective, and adds product availability as a risk to manage. The EU plans to carry it into Chapter 1, with a Q4 2026 target for final text, and into Annex 15, with publication planned for April 2028. Neither is final.
Does every GMP change need a regulatory filing?
No. Many changes stay within the quality system, yet each one should be evaluated for filing impact. ICH Q12 lets a company agree which details are binding, so more changes stay internal where that is approved. Each country has its own categories, and our CMC change impact assessment guide explains them.
How long should a change control take?
We found no public benchmark for days per impact assessment or per change control. Published figures cover regulatory approval: a paper from 18 companies reports agencies taking from a few months to years, in some cases more than five, to approve a change. Measure your own days from raised to approved and from approved to first batch, split by class.
Can AI assess the impact of a GMP change?
AI can search records, quote passages, compare past changes and draft a plan, and its recall has to be measured on your own changes. A person should accept each item and the quality unit should approve. Draft EU GMP Annex 22 says generative AI and large language models should not be used in critical GMP applications, so write down your position with your quality head.
Is change control software certified for GxP or 21 CFR Part 11?
No product can be certified for GxP (the good practice rules such as GMP), Part 11 or Annex 11. These rules apply to how you use a system, so a vendor can offer controls that support your compliance, such as audit trails, electronic signatures with their meaning and role separation, along with evidence for your qualification. Botminds' credentials are SOC 2 Type II audited and information security managed to ISO 27001.
24 · One-page summary
Nine steps, the rules in force and 14 terms: GMP change control on one page
Print this page
In shortThe whole guide on one screen: the method, the rules as of November 2026, the readiness scale and the terms.
The method
Read the change: what, where, which products, and the risk of not doing it.
Class it by risk under a written rule.
Search all nine areas, and quote a passage for each item.
Read the closest past changes, and add what they needed.
Clear what is unaffected, with the reason.
Send low-confidence items to a named person. Filing categories go to regulatory CMC.
The quality unit approves or rejects, with conditions, before anything starts.
Plan tasks from accepted items, with a release hold.
Check effectiveness against criteria set in advance. Capture the lesson.
Readiness: score 0–2 on eight questions: 0–6 explore · 7–11 pilot · 12–16 implement.
As of November 2026: EU GMP Chapter 1 final text targeted Q4 2026 and Annex 15 publication planned April 2028, neither final · EEA pilot of PI 054-1 runs 2026 to 2027 · EU allows lifecycle documents since January 15, 2026 · FDA's Q12 implementation note still a draft · draft Annex 22 and revised Annex 11 not final.
14 terms
Change control
The formal record and process for a proposed change.
Impact assessment
The list of everything a change touches, with what must happen to each.
Quality unit
The independent group that approves or rejects, usually QA.
Disposition
What must happen to an item: revise, follow, test, file or none.
Effectiveness check
Evaluation after go-live that the change worked and did no harm.
Formality
How much rigor and documentation a risk decision gets.
Established condition
A binding description in an approval; changing it needs a submission.
PLCM document
A lifecycle document listing established conditions and their categories.
Form 483
The list of observations an FDA investigator hands a site.
Qualified Person
The EU role that certifies each batch for release.
MES
Manufacturing execution system: runs recipes and electronic batch records.
Extractables
Chemicals a solvent pulls from a material in a lab test.
Leachables
Chemicals that come out of a material in real use.
Release hold
Tasks that must finish before the first changed batch may be released.
25 · Sources
Sources
Accessed November 2026. Regulatory status statements are as of November 2026. Warning letters are FDA's own copies, cited only for what each letter says.
FDA, Quality Systems Approach to Pharmaceutical CGMP Regulations, guidance, September 2006, section on change control. fda.gov
ICH, Q12 Technical and Regulatory Considerations for Pharmaceutical Product Lifecycle Management, adopted November 20, 2019, section 3.2.1, chapter 6 and Appendix 2. database.ich.org
European Commission, EudraLex Volume 4, Part I, Chapter 1: Pharmaceutical Quality System, in operation since January 31, 2013, sections 1.4(xii), 1.4(xiii), 1.8(ii) and 1.10(v) and (vi). health.ec.europa.eu
B. Unger, The 10 Most-Cited MHRA GMP Inspection Deficiencies By Annex/Chapter, Pharmaceutical Online, January 31, 2020 (MHRA data for 2018 inspections). pharmaceuticalonline.com
European Commission, EudraLex Volume 4, Annex 15: Qualification and Validation, in operation since October 1, 2015, section 11 and glossary. health.ec.europa.eu
21 CFR 211.22, Responsibilities of quality control unit, 2025 edition. govinfo.gov
PIC/S, PI 054-1, How to Evaluate and Demonstrate the Effectiveness of a Pharmaceutical Quality System in relation to Risk-based Change Management, in force July 15, 2021. picscheme.org
ICH, Q7 Good Manufacturing Practice Guide for Active Pharmaceutical Ingredients, Step 4, November 10, 2000, section 13. database.ich.org
ICH, Q9(R1) Quality Risk Management, adopted January 18, 2023, sections 5.1, 5.3 and 6.1 and Annex II. database.ich.org
European Medicines Agency, Pharmaceutical quality system (PQS) effectiveness pilot project, first published March 26, 2026, read November 3, 2026. ema.europa.eu
European Medicines Agency, 3-year work plan for the GMDP Inspectors Working Group, 2026 to 2028, targets for Chapter 1, Annex 11, Annex 15 and Annex 22. ema.europa.eu
European Medicines Agency, Concept paper on the revision of Annex 15, EMA/INS/GMP/163466/2026, consultation February 9 to April 9, 2026, section 4 timetable, as corrected. ema.europa.eu
European Commission, Stakeholders' consultation on EudraLex Volume 4, Chapter 1, September 3 to December 3, 2025, status closed, read November 3, 2026. health.ec.europa.eu
21 CFR 211.100, Written procedures; deviations, 2025 edition (revised as of April 1, 2025). govinfo.gov
FDA, Q9(R1) Quality Risk Management, final guidance, May 2023, docket FDA-2022-D-0705. fda.gov
European Medicines Agency, ICH Q9 Quality risk management, scientific guideline page: Q9(R1) legal effective date July 26, 2023. ema.europa.eu
FDA, Q12 Technical and Regulatory Considerations for Pharmaceutical Product Lifecycle Management, final guidance, May 2021, docket FDA-2018-D-1609. fda.gov
FDA, ICH Q12: Implementation Considerations for FDA-Regulated Products, draft guidance, May 2021, docket FDA-2021-D-0166, marked not for implementation; page current September 10, 2021. fda.gov
European Commission, EudraLex Volume 4, list of chapters and annexes, read November 3, 2026. health.ec.europa.eu
FDA, warning letter to Zhejiang Huahai Pharmaceutical, MARCS-CMS 566685, November 29, 2018, item 2. fda.gov
European Commission, EudraLex Volume 4, Annex 16: Certification by a Qualified Person and Batch Release, in operation since April 15, 2016, section 1.7.15. health.ec.europa.eu
FDA, Contract Manufacturing Arrangements for Drugs: Quality Agreements, guidance, November 2016, section on change control. fda.gov
FDA, Drug Shortages: Root Causes and Potential Solutions, Drug Shortages Task Force, 2019, updated February 21, 2020. fda.gov
European Commission and European Medicines Agency, Note on EU implementation of ICH Q12, EMA/CHMP/ICH/78332/2020, March 4, 2020. ema.europa.eu
European Medicines Agency, Questions and answers on the use of Product Lifecycle Management (PLCM) document, EMA/CHMP/QWP/7093/2026, adopted January 19, 2026, in effect January 15, 2026. ema.europa.eu
21 CFR 601.12, Changes to an approved application, 2025 edition. govinfo.gov
FDA, warning letter to Bentley Laboratories LLC, MARCS-CMS 732028, September 17, 2026, items on 21 CFR 211.192 and 211.100(a). fda.gov
FDA, warning letter to Cosmetic Solutions, LLC, MARCS-CMS 670486, May 31, 2024. fda.gov
FDA, warning letter to Jabil Inc., MARCS-CMS 731037, August 27, 2026. fda.gov
FDA, warning letter to Pine Pharmaceuticals, LLC (an outsourcing facility), MARCS-CMS 728537, August 7, 2026. fda.gov
FDA, warning letter to Jubilant Generics Limited, MARCS-CMS 569799, March 6, 2019. fda.gov
H. Johanning, J. Y. Lee and C. Hemmingsen, Change management: common failures and a checklist for improvement, Pharmaceutical Technology, May 1, 2010. pharmtech.com
FDA, Inspection Observations, Form FDA 483 citation spreadsheets for fiscal 2019 to 2025 (Drugs tab; row totals and the four-row figure are our count, method in section 9); page current December 16, 2025. fda.gov
FDA, Report on the State of Pharmaceutical Quality, fiscal year 2025, June 25, 2026. fda.gov
Redica Systems, Redica Responds: How Many Change Control 483s Over the Last Ten Years?, July 20, 2022. redica.com
A. M. Alsamil, T. J. Giezen, T. C. Egberts and colleagues, Nature and timing of post-approval manufacturing changes of tumour necrosis factor alpha inhibitor products, Eur J Pharm Sci 175:106227, August 1, 2022 (abstract, PMID 35636657). pubmed.ncbi.nlm.nih.gov
A. Vinther, E. Ramnarine, T. Gastineau and colleagues, Approaches to Design an Efficient, Predictable Global Post-approval Change Management System that Facilitates Continual Improvement and Drug Product Availability, Therapeutic Innovation and Regulatory Science 58(3):433-442, May 2024 (abstract read, PMID 38369639). pubmed.ncbi.nlm.nih.gov
USP, General Chapter 665, Notice of Intent to Revise, February 25, 2022, with the Revision Bulletin of April 29, 2022 setting the official date of May 1, 2026. uspnf.com
USP-NF, General Chapter 665, Plastic Components and Systems Used to Manufacture Pharmaceutical Drug Products and Biopharmaceutical Drug Substances and Products, public preview, read November 3, 2026; the full chapter was not read. doi.usp.org
FDA, Chemistry, Manufacturing, and Controls Changes to an Approved Application: Certain Biological Products, guidance, June 2021, appendix rows. fda.gov
European Commission, EudraLex Volume 4, Annex 11: Computerised Systems, revision January 2011, section 10. health.ec.europa.eu
ISPE, GAMP 5 Guide, 2nd Edition: A Risk-Based Approach to Compliant GxP Computerized Systems, July 2022. ispe.org
FDA, Computer Software Assurance for Production and Quality Management System Software, final guidance, February 3, 2026, supersedes September 24, 2025; written for medical device production and quality systems. fda.gov
European Commission and PIC/S, draft EU GMP Annex 22: Artificial Intelligence, consultation July 7 to October 7, 2025, section 1. picscheme.org
FDA, Considerations for the Use of Artificial Intelligence to Support Regulatory Decision-Making for Drug and Biological Products, draft guidance, January 2025. fda.gov
European Medicines Agency, report of the multistakeholder workshop on artificial intelligence guidance development (Annex 22), workshop of June 30, 2026, EMA/156789/2026. ema.europa.eu
FDA and European Medicines Agency, Guiding Principles of Good AI Practice in Drug Development, January 2026. fda.gov
European Medicines Agency, Reflection paper on the use of artificial intelligence in the medicinal product lifecycle, EMA/CHMP/CVMP/83833/2023, September 9, 2024. ema.europa.eu
ISPE, GAMP Guide: Artificial Intelligence, July 2025. ispe.org
European Commission, AI Act page: amending regulation in force July 27, 2026; Annex III rules to December 2, 2027 and Annex I rules to August 2, 2028. digital-strategy.ec.europa.eu
21 CFR Part 11, Electronic records; electronic signatures, sections 11.10 and 11.50, 2025 edition. govinfo.gov
Next step
See it on your own closed change controls.
Explore the solution, or bring a sample of closed change controls with what was found late, and we will grow each one into an impact tree with you and compare it with what happened.
We use essential cookies to make this site work, and cookieless, anonymised analytics to understand how it's used. "Accept all" also turns on Google Analytics, which sets cookies. Privacy policy