Pharmaceutical Quality System under ICH Q10: Connecting Processes Effectively

One model connects the operational quality processes

ICH Q10 section 1.5 names three objectives: to deliver products with the required quality attributes, to establish and maintain a state of control, and to facilitate continual improvement. Formally closing individual records is not enough to achieve this. Information from manufacturing must feed into assessments, decisions, and, where applicable, changes. ^[1]

EU GMP Chapter 1 describes the pharmaceutical quality system and the responsibility of management. Section 1.2 positions ICH Q10 as a complementary model; applying it to development strengthens the link to manufacturing. Describing the system in a quality manual or equivalent documentation makes its scope, processes, and responsibilities clear. ^[3]

For a German manufacturer, AMWHV § 3 requires a documented quality management system whose effectiveness is reviewed. It must be appropriate to the nature and scope of the activities and be actively supported by management and staff. How it is designed in detail depends on the applicable requirements and the specific operation. ^[4]

Four system elements form a feedback loop

ICH Q10 section 3.2 distinguishes four elements: process performance and product quality monitoring, CAPA, change management, and management review of process performance and product quality. Knowledge management and quality risk management support these elements. They are neither additional lifecycle stages nor additional entries in the same list of four. ^[1]

A single finding can affect several elements. The diagram therefore does not prescribe a sequence for every case. Monitoring can trigger an investigation directly; a management review can provide additional resources for an action that is already under way.

Management is responsible for the system’s effectiveness

Under ICH Q10 section 2.1, ultimate responsibility for an effective quality system lies with senior management. This includes clear authority, adequate resources, and effective communication and escalation paths. Tasks can be delegated; responsibility for the system’s effectiveness cannot. EU GMP Chapter 1, sections 1.5–1.7, link this leadership responsibility to regular review and a documented description of the system. ^{[1] [3]}

In practice, it must be clear who assesses a finding, approves an action, is responsible for its implementation, and escalates an unresolved problem. Where objectives conflict, a defined decision path is needed. A delivery priority does not answer an open quality question.

A useful test is: Can a responsible person return an inadequately handled case and initiate the necessary investigations? If time, authority, or expertise is persistently lacking, this is a matter for management. Adding mandatory fields alone does not fix the problem.

Knowledge and risk determine the depth of investigation

Knowledge management under section 1.6.1 gathers and uses product and process knowledge across the lifecycle. This can include development findings, transfer reports, manufacturing data, investigations, and experience with changes. What matters is whether the knowledge is available for the next assessment and correctly linked to what it concerns. ^[1]

Quality risk management under ICH Q9(R1) helps determine an appropriate level of effort and formality. A known situation that is under control can be handled differently from an unclear impact on materials. Assumptions, data gaps, and the significance of the decision remain visible throughout.

For root cause analysis, this means that methods structure the investigation, while the conclusion requires reliable information. A plausible explanation does not become established knowledge by being included in a diagram. The quality system must also be able to carry forward preliminary results and open questions.

RM-427 shows whether handovers actually work

In the fictitious RM-427 seal finding, the quality system connects the individual processes: deviation management clarifies the finding and the affected material, CAPA follows up on the substantiated procedural deficiency, and change control manages the transition of SOP-WE-12 from V3 to V4. The V3 snapshot is retained. The physical cause of the damage remains open; the version change replaces neither the material decision nor the QP certification of the finished product. What matters is whether each handover delivers the information needed for the next step.

The system’s tasks change over the lifecycle

ICH Q10 section 3.1 distinguishes pharmaceutical development, technology transfer, commercial manufacturing, and product discontinuation. Product and process understanding is built during development. During transfer, this knowledge must reach the receiving organization so that it can implement a suitable manufacturing and control strategy. In commercial manufacturing, performance is monitored and understanding is expanded based on actual results. ^[1]

The significance of feedback changes accordingly. An observation during development can influence process design; a comparable finding in routine operations can require an investigation and a controlled change. The lifecycle stage and the applicable requirements are therefore part of the context for the decision.

Product discontinuation does not automatically end all quality tasks. Under section 3.1.4, for example, retention of documentation and samples, as well as continued product assessment and reporting, must still be addressed in accordance with regulatory requirements. The system defines who takes over these tasks after manufacturing ends and how the required information remains accessible.

Outsourced activities remain part of the system

ICH Q10 section 2.7 addresses outsourced activities and purchased materials. The pharmaceutical company remains responsible for ensuring that appropriate controls are in place. Before the collaboration begins, the partner’s suitability and competence are assessed, and responsibilities and communication processes are defined. Performance and relevant improvements are then monitored. ^[1]

For RM-427, an external investigation could provide information on the packaging or the material. The assignment must make clear what is being investigated and what question needs to be answered. A report on a different container or a different protective function may answer the specific question only in part. These limits must be considered in the organization’s own assessment.

When the service provider changes, the organization checks which data, methods, and ongoing tasks are affected. Simply taking over a closure status does not transfer any process knowledge. Open questions require an agreed handover to responsible persons who can be reached.

Management review leads to decisions and follow-up assignments

Section 3.2.4 considers process performance and product quality; Chapter 4 extends this to the review and improvement of the quality system itself. This includes quality objectives, performance indicators, internal and external factors, and the results of previous reviews. The review can be organized across several levels of management. ^[1]

For RM-427, a simple count of closed records would say little. Questions about overdue investigations, recurring handover problems, unconfirmed CAPA effectiveness, or changes with unexpected consequences are more revealing. Metrics need a defined meaning, a reference period, and a traceable data source.

A falling number of reports can indicate an improvement, but it can also be the result of changes in how events are recorded. Figures are therefore considered together with qualitative findings and any changes in what is recorded. ICH Q10 does not set universal targets or a single meeting frequency for all organizations.

For a recurring handover weakness, the organization could, for example, monitor the proportion of initial reports that can be fully assessed. It defines in advance which information each report requires and which cases are included in the evaluation. A sample of the underlying records shows whether the metric reflects the actual process. This example is the organization’s own design choice, not a metric prescribed by ICH Q10. The purpose of the evaluation is to inform a decision about the process.

The outcome consists of specific decisions, for example additional investigation capacity, changes to the training approach, or a renewed review of an ineffective action. Responsibility, expected result, and follow-up are recorded. At the next review, it must be evident whether the decision was implemented and what effect it had.

420+ connects execution, evidence, and follow-up tasks

420+ can link findings, material references, and processing status to the documented execution. In the RM-427 case, this makes it possible to trace what information was available and which follow-up tasks resulted from it. Expert assessment remains the responsibility of the persons in charge.

Versioned instructions and the retained SOP snapshot make the timeline clear: the original procedure remains understandable under V3, while an approved V4 is introduced for its intended use. Evidence of the change and of qualification can be assigned to the respective step.

Roles, independent second-person review, deadlines, and escalations are configurable defaults. The organization sets them to fit its processes and requirements. For management review, the organization describes the data actually recorded and their limitations; a software function does not certify the effectiveness of the entire quality system.

Frequently asked questions about ICH Q10

Is ICH Q10 an additional GMP certification?

The guideline describes a model for the pharmaceutical quality system. It does not provide for a certificate of its own and supplements the applicable regional GMP requirements. ^[1]

Which four elements belong to the model?

Process performance and product quality monitoring, CAPA, change management, and management review. Knowledge management and quality risk management support these elements.

Does a small company need the same system as a large corporation?

Section 1.7 calls for a design appropriate to the company’s size and complexity. Clear responsibilities, the necessary controls, and verifiable effectiveness are still required.