The pharmaceutical and life sciences sectors in the UK use experience and instinct for risk assessment through Failure Mode and Effects Analysis (FMEA) when they assign risk scores. The current regulatory framework, together with quantitative risk management principles, now requires organizations to implement data-driven methods. The recent ICH Q9(R1) update requires organizations to conduct risk assessments based on evidence, which will decrease risk assessment subjectivity and enable organizations to achieve standardized and traceable FMEA risk assessment results.
The ICH Q9(R1) Update
The new ICH Q9(R1) guidelines require organizations to assess risk through historical data and process knowledge and metrics instead of using subjective judgment. The QRM data-driven process enables companies to evaluate FMEA risks through measurable criteria rather than using intuitive methods. The system improves regulatory compliance while it maintains operational consistency throughout manufacturing and quality processes.
Defining “Severity” Accurately
The FMEA process requires its users to establish severity levels as one of its essential components. Traditional approaches to estimating severity levels produce inaccurate results because they rely on personal experience, which creates bias toward either underestimation or overestimation. The combination of historical defect data with batch failure rates and regulatory findings enables organizations to implement quantitative risk management systems. The process of assessing severity requires accurate results because they determine which high-impact failure modes should receive priority for risk assessment and mitigation strategy development.
Leveraging Historical RPNs
Historical Risk Priority Numbers (RPNs) function as essential reference points which organizations use to assess their current operational systems. Organizations can discover risk assessment patterns through FMEA risk scoring data analysis while they check their existing assumptions and measure various scoring systems. This method decreases risk assessment subjectivity while it maintains uniformity between different teams and enables ongoing development, which meets ICH Q9(R1) standards.
The “Risk Review” Cycle
The ICH Q9(R1) standard requires organizations to implement continuous risk assessment processes. Organizations must conduct ongoing review processes for risk analysis because risk scores need updates through fresh information, actual work activities and compliance violations. The process uses multiple rounds of testing to build effective security measures, which help organizations make informed decisions through current evidence. The companies establish strong regulatory-compliant FMEA documentation through their practice of using data to guide their operations instead of relying on personal judgment.
FAQs
- Can we still use “Low/Medium/High”?
Yes, to the categorical descriptors, they can be made use of, but for each classification, it will have to be a concatenation with some quantitative data. - How do we handle the lack of data for new processes?
The process requires historical data, which serves as a reference point for assessment, the application of modeling techniques, and the use of conservative assumptions to create updated scores once actual operational data becomes accessible. - What is the role of the “Detection” score in FMEA?
Detection evaluates the likelihood of identifying a failure before it impacts the product or patient. The process serves as an essential tool for determining which mitigation approaches should receive higher priority.
