Available online on 15.02.2025 at http://jddtonline.info
Journal of Drug Delivery and Therapeutics
Open Access to Pharmaceutical and Medical Research
Copyright © 2025 The Author(s): This is an open-access article distributed under the terms of the CC BY-NC 4.0 which permits unrestricted use, distribution, and reproduction in any medium for non-commercial use provided the original author and source are credited
Open Access Full Text Article Review Article
Quality Risk Management: Degree of formality, Formal and Informal QRM
Manish Pathodiya *
Sr. Manager, Corporate Quality Assurance, INTAS Pharmaceuticals Lid, Ahmedabad, India
|
Article Info: _______________________________________________ Article History: Received 04 Nov 2024 Reviewed 17 Dec 2024 Accepted 13 Jan 2025 Published 15 Feb 2025 _______________________________________________ Cite this article as: Pathodiya M, Quality Risk Management: Degree of formality, Formal and Informal QRM, Journal of Drug Delivery and Therapeutics. 2025; 15(2):124-128 DOI: http://dx.doi.org/10.22270/jddt.v15i2.6978 _______________________________________________ *Address for Correspondence: Manish Pathodiya, Sr. Manager, Corporate Quality Assurance, INTAS Pharmaceuticals Lid, Ahmedabad, E-mailL mpathodiya@gamil.com |
Abstract _______________________________________________________________________________________________________________ The International Council for Harmonization’s (ICH) Q9 (R1): Quality Risk Management (QRM) guideline made effective from May, 2023. ICH Q9’s revision provides guidance on QRM for the pharmaceutical industry and regulatory environment. It aims to improve decision-making by offering a systematic approach that complements existing quality practices and guidelines. The document emphasizes that understanding formality in quality risk management can optimize resource usage and support risk-based decision-making by reflecting the level of importance, uncertainty, and complexity of the decision.5 QRM is the process of appropriately managing risks to product quality throughout the product's life cycle in order to optimize its benefit–risk balance. It is a systematic process for the assessment, control, communication and review of risks to the quality of the medicinal product. The level of effort, formality and documentation of the quality risk management process should be commensurate with the level of risk. The overall approach for determining how much formality to apply during QRM activities should be described within the quality system. In addition, subjectivity can directly affect the effectiveness of risk management activities and the decisions made. Therefore, it is important that subjectivity is managed and minimized.1,6 Keywords: Quality Risk Management (QRM), Degree of Formality, Uncertainty, Importance, Complexity, Formal risk assessment, Informal risk assessment, QRM Techniques, QRM Tools, ICH |
|
|
|
Identify the “Degree of formality” as Low or High based on Uncertainty, Importance and Complexity. |
|
Low “Informal QRM” |
|
High “Formal QRM” |
|
Perform Risk assessment (Use simple techniques e.g. Flow charts, Check sheets, Process mapping and Cause and Effect Diagrams for Risk identification, analysis & evaluation)
|
|
Identify Risk controls/ Mitigation plans (Select appropriate measures)
|
|
Form a QRM Team and identify Decision makers
|
|
Select a Risk Management tool (As appropriate e.g. FMEA, FMECA, FTA, HACCP, HAZOP and PHA for Risk identification, analysis & evaluation) |
|
Document results, decision and actions |
|
If Risk to be assessed |
Introduction
Figure I: Decision path to select the type of QRM
The Degree of formality4 of QRM i.e. Low or High should be decided based on available knowledge and level of uncertainty, importance and complexity of the issue to be addressed. The selection of types of QRM i.e. Informal and Formal should be decided based on the degree of formality. 1,2,3
Before initiating QRM, risk-based decision-making approach should be applied to select the type of QRM. Refer Figure-I Decision path should be followed to select the type of QRM.
Uncertainty: Uncertainty refers to the lack of knowledge about hazards, harms, and associated risks. The level of uncertainty associated with a particular area being assessed for risk determines the level of formality required to manage potential risks. 1,2,3 Effective knowledge management can reduce uncertainty, allowing accumulated and new information to be used to support risk-based decisions throughout the product lifecycle. Evaluation of Uncertainty should be done as below Table – I.
Table I: Uncertainty Rating
|
Uncertainty Rating |
Criteria |
|
High |
· Lack of knowledge about hazards, harms, and associated risks · Unable to easily answer the below QRM fundamental questions - - What can go wrong? - What are the consequences (Severity)? - What is the likelihood (Probability of occurrence) it will go wrong and how easy is it to detect them (Detectability)? Example – New dosage form/ plant/ site introduction, Critical/ Major deviation/ non-conformity, OOS etc. |
|
Medium |
· Limited knowledge about hazards, harms, and associated risks · No past experience about the hazards, harms, and associated risk Example - New product/ site introduction in existing facility, similar kind of critical/ major deviation/ non-conformity observed but in different dosage form/ product etc. |
|
Low |
· Good knowledge about hazards, harms, and associated risks · Easily answer the below QRM fundamental questions - - What can go wrong? - What are the consequences (Severity)? - What is the likelihood (Probability of occurrence) it will go wrong and how easy is it to detect them (Detectability)? Example – Repetitive minor deviation/ non-conformity/ OOS etc. |
Importance: Importance refers to the significance of the risk-based decision in relation to product quality. The higher the importance of the decision, the more formality should be applied, and the greater the need to reduce the level of uncertainty associated with it. 1,2,3 Evaluation of Importance should be done as below Table II.
Table - II: Importance Rating
|
Importance Rating |
Criteria |
|
High |
High degree of importance in relation to product quality Example – Critical deviation/ non-conformity/ Market complaint, OOS, Major change control etc. |
|
Medium |
Medium degree of importance in relation to product quality Example - Major deviation/ non-conformity/ Market complaint etc. |
|
Low |
Low degree of importance in relation to product quality Example - Minor deviation/ non-conformity/ Market complaint, Minor change control etc. |
Complexity: Complexity refers to the level of intricacy of a process or subject area involved in QRM. The higher the complexity, the more formality should be applied to ensure product quality. 1,2,3 Evaluation of Complexity should be done as below Table – III.
Table III: Complexity Rating
|
Complexity Rating |
Criteria |
|
High |
Highly complex process or subject to understand Example – Introduction of new product with complex manufacturing process, Major change control with impacting multiple cross-functional procedure/ systems, Critical deviation/ non-conformity/ Market complaint, OOS impacting multiple cross-functional procedure/ systems etc. |
|
Medium |
Medium complex process or subject to understand Example - Change control with impacting cross-functional procedure/ systems, introduction of new product with known manufacturing process, Major deviation/ non-conformity/ Market complaint impacting multiple cross-functional procedure/ systems etc. |
|
Low |
Low complex process or subject to understand Example - Minor deviation/ non-conformity/ Market complaint, Minor change control etc. |
Higher levels of uncertainty, importance, or complexity may require more formal QRM approaches to manage potential risks and support effective risk-based decision-making. 4 However, regardless of how much formality is applied, the robust management of risk is the goal of the process. The quantitative Degree of Formality can be determined with multiplication of Uncertainty, Importance and Complexity.4
Based on the above assessment of uncertainty, importance and complexity of the issue/ subject to be addressed and to support effective risk-based decision-making, the Formal QRM should be performed when there is a high degree of importance associated with the decision, and when the level of uncertainty and/ or complexity is high.1,2,3 Example of situations defined below to initiate the Formal QRM (not limited to) –
Informal QRM can be performed when there is a high degree of importance associated with the decision, but the degree of uncertainty and/or complexity is lower.1,2,3 Example of situations defined below where Informal QRM can be initiated wherever required (not limited to) –
Informal QRM is less structured process as compared to Formal QRM process. The structure and requirement of documentation for both type of QRM is defined as below Table - IV .
Table IV: Structure and requirement of Informal QRM and Formal QRM process1,2,3,5
|
Informal QRM |
Formal QRM |
|
· QRM to be performed embedded with risk assessment and risk control activities. · Use simple techniques e.g. Brainstorming, Flow charts, Check sheets, Process mapping and Cause and Effect Diagrams for Risk identification, analysis & evaluation4 · No QRM tools used in some or all parts of the process. · No cross-functional team necessary. · No standalone QRM reports generated. The outcome of the quality risk management process i.e. risk controls/ mitigation plans is usually documented in the relevant parts of the quality system. |
· All parts of the quality risk management process (risk assessment, risk control, risk review and risk communication) are explicitly performed, and stand-alone quality risk management reports or related documents which address all aspects of the process to be generated and are documented. · A cross-functional team and Decision makers should be assembled with experienced and knowledgeable personnel. · QRM tools to be used (as appropriate) e.g. FMEA, FMECA, FTA, HACCP, HAZOP and PHA for Risk identification, analysis & evaluation, are used in some or all parts of the process. · Document identified risk controls/ mitigation plans and risk evaluation post implementation of mitigation plans. |
The cross-functional team should be formed in case of Formal QRM which includes experts from appropriate areas (e.g. product development, business development, engineering, regulatory affairs, production, sales, marketing, supply chain, legal, statistics and clinical) in addition to individuals who are knowledgeable about the QRM process.
One or Two members of QRM team should be identified as Decision makers. The Decision makers should have the responsibility to:
The output of a risk assessment is either a quantitative estimate of risk (Formal QRM) or a qualitative description (Informal QRM) of a range of risk.
During Informal QRM, risk can be expressed using qualitative descriptors, such as “high”, “medium”, or “low”, which should be defined in as much detail as possible. Simple techniques (as defined in Table IV) such as Brainstorming, Flow charts, Check sheets, Process mapping and Cause and Effect Diagrams can be used either individually or in combination for Risk identification, analysis & evaluation. The selection of a techniques should be commensurate with the level of risk and applicable area/ situation.
During Formal QRM, quantitative risk management tools (as defined in Table IV) such as FMEA, FMECA, FTA, HACCP, HAZOP, PHA are used either individually or in combination to measure the risk combining multiple levels of severity, detectability and probability into an overall estimate of relative risk. A "risk score" is used to further define descriptors in risk ranking. The QRM techniques used in Informal QRM can also combine with QRM tool for effective Formal QRM. The selection of a tool should be commensurate with the level of risk and applicable area/ situation.
Statistical tools can also support and facilitate quality risk management. They can enable effective data assessment, aid in determining the significance of the data set(s), and facilitate more reliable decision-making.
Summary
The degree of formality in QRM is a crucial as it promotes consistency, transparency, and documentation of risk assessments and decision-making processes. It also supports accountability and traceability, which are vital in regulated pharmaceuticals industries, where regulatory compliance is utmost priority. In addition, formal QRM approach can enhance collaboration among various stakeholders, such as quality, production, and regulatory affairs. Ultimately, formality in QRM can improve the quality and safety of pharmaceutical products by ensuring that the process is conducted in a rigorous and systematic manner.
Conflict of Interest: The authors declare no potential conflict of interest with respect to the contents, authorship, and/or publication of this article.
Source of Support: Nil
Funding: The authors declared that this study has received no financial support.
Informed Consent Statement: Not applicable.
Data Availability Statement: The data supporting in this paper are available in the cited references.
Ethics approval: Not applicable.
References