Pharmaceutical Quality Systems Flashcards
Supply chain scenario structure
- Determine the Nature of the Question:
Ascertain whether the query pertains to a standard process or involves complex challenges (CC). - Gather Product and Supply Chain Information:
Identify product specifics, including:
Controlled Drugs (necessitating a Home Office license).
Biological products (subject to independent batch testing by national laboratories).
(SMLGC-AQT-WISPD)
- Supply Chain MAP: Detailed visual representation outlining the flow of materials and products across all sites, from API manufacturing to final product distribution.
- MA: Verify Inclusion of All Sites in the Marketing Authorization (MA): Ensure that every manufacturing, packaging, testing, and certification site is explicitly listed in the MA.
- Confirm Authorizations, Licenses, and GMP Certifications:
For each site, verify possession of appropriate credentials:
API Site: Manufacturing authorization and, if applicable, API registration, CEP, ASMF, GMP.
Manufacturing and Testing Sites: Manufacturing and Importation Authorization (MIA), GMP.
Packaging Sites: Relevant authorizations for packaging operations, GMP.
QP Certification Site: MIA, GMP
Storage Facilities (optional): WDA (included in the Release site MIA)
Contract Lab for importation testing (optional): GMP cert (included in the Release site MIA)
- QTA:
Implement written agreements with all sites, clearly delineating responsibilities and ensuring adherence to GMP standards. - Audit Reports and QP Declarations:
Obtain and assess recent audit reports for each site.
Secure QP declarations for APIs and QP declarations for imported medicinal products (IMPs) from manufacturing sites, confirming GMP compliance. - Written Confirmation for APIs:
For APIs sourced from third countries (outside UK/EU), acquire written confirmation from the competent authority of the exporting country, verifying GMP compliance equivalent to EU standards. - Importation Testing:
If manufacturing occurs in third countries without a MRA, ensure importation testing is conducted within the UK/EU to confirm compliance with MA specifications. (include bulk; intermediate) - Sampling Arrangements:
Establish procedures for:
Representative Sampling: Ensuring samples accurately reflect the batch.
Reference Samples: basically EU/UK site unless MRA (written agreement required)
Retention Samples: Storage at the release site, in line with Annex 19 of the EU GMP Guide. - PQR arrangement:
Schedule regular PQRs to evaluate the consistency of the manufacturing process and product quality across all sites. - Stability Programme (On-going): Ensure continuous stability testing is conducted, with data accessible to the QP to verify product integrity throughout its shelf life.
13.Documentation check:
Maintain and review essential documents, including:
- Batch records (copy).
- CoA.
- CoC.
- Temperature records during distribution.
Supply Chain NSF method
1.
Scenario 1: You work as a QP, manufacturing site changes from UK to Turkey, API site changes from EU to China.
- Question regarding: Type of product, formulation, location of PKG, QC, Releasing sites, Storage site, Market)
- CC open and impact assessment on Licence, GMP, and Patient
- MA licence variation, Type 2 as API (but need discussion with regulatory affairs).
2.1. Expect to see manufacturing licence from competent authorities (China and Turkey)
2.2. EU GMP certificate or equivalent
2.3. Audit reports and QP declaration for new API and mfg sites
2.4. No written confirmation required (China-Turkey)
2.5. expect to see importation testing at UK site, sampling, reference and retention sample storage location (UK), as Turkey not MRA).
2.6. QTA in place
3.API site specific
3.1 CEP/ASMF
3.2 technology/Analytical Method transfer (if any singing isn’t gap)
3.3 Impuriry profile
3.4 Nitorosaminrinrisk assessment
3.5 Ongoing stability programme active - API-FG site specific
4.1 technology/analytical method transfer
4.2. New stability batch with new API
Scenario2: API from India, manufactured and packed in Germany, stored and released in UK for UK market – what would you require?
0: PKG site? UK Release site has storage department? Type of product (CD/Biological)
1. Supply chain map
2. MA: all sites listed on the MA
3. Licence: appropreate mfg/testing licence from competent authorities
4. GMP: Each site has EU GMP or equivalent certificate
5. Written confirmation between India (non-white list) - Germany (EU)
6. Importation test: Not required as MRA
7. Audit reports for each aite available and QP dec for API
8. PQR accessible for QP for each site
9. Sampling inline with Annex 16; 21, reference sample at German QC (written agreement, QP accessible) site or UK MIA site, retention sample at UK release site as per annex 19.
10. On going stability study for api and finished product active
11. API site-CEP/ASMF, Risk assessment for Nitorosamin
12. QTA in place
13. Documents for daily QP duties- CoA, CoC, Temperatire log during transit, copy of batch documents available
MIA QP perspective; MA QP perspective; talk through the method transfer process; in depth conversation (impurities, method transfer, API registration, validations, key documents, licence variation etc.)
Scenario2 follow up: What is an RPi – what would they require?
RPI- responsible person import. At WDA site, RPI is responsible for check imported commercial product has been certified by EU QP as well as check the transit condition.
Scenario2 follow up: What the requirements of if product was being released for German market instead?
- EU QP certification
- FMD requirements: safety features(tamper evident and cerialisation) EU market
Scenario2 follow up: Question regarding serialisation, if the batch was commissioned. Would I accept and release in regard to the WF?
No - UK FMD requirements have been repealed byWF 2024.
Thus the batch has to be quarantined until the batch is decommissioned by EU site through EMVS = European Medicines Verification System.
Auditing a generics CMO – what would I review/ request prior to the audit?
Discuss SMF and PQR:
SMF, PQR, recent External audit reports, product lists for risk based approach for audit.
What are the contents of a PQR?
Finished product - EU GMP chapter 1 (ICH Q7 for API)
Review/trending of
1. failed batches
2. IPC results and QC test
3. significant Deciations, OOS/OOT
4.Major change control
5. major CAPA and efrectiveness
6. Recall and complaints
7. MA, licence variations
8. utilities, equipment qualification
9. On-going stability programme
10 TA
11 quality of startingmatrial including packaging materials
What are the contents of a SMF
- Address
- Product name
- PQS
- Facility and equipment
- Personnel, organizational chart
- Documentation
- Manufacturing method, validation, cleaning
- QC analytical method
- Outsourced activities
- Complaint and recall system
- Self inspection programme
- Appendix: contract lab, storage place
What guidance would you use to audit?
For finished product:
EU GMP chapter 1-9
Annexes as per the formulation
PIC/S aid memories
For API:
ICH Q7
Scenario3: API China, product India, packaging (primary and secondary) plus testing Germany. German site certifies for EU market. UK product sent to storage site – what do you need as a QP?
As part of my answer I mentioned that the German QP could certify and product could be brought into UK via WDA and RPI
- Confirm Product type, formulation, UK release site
- Supply chain map
- List all sites inMA
- All sites have appropriate manufacturing/Testing/Packaging/Release license from individual competent authority, such as MIA in German and UK and licence cover importation activity
- All sites have EU. GMP or equivalent certificate
- All sites audit report available and QP dec been done for API site
- QTA for all sites in place
- No written conformation required as API-MFG sites are India
- Importation testing at German site and product import from India. No importation testing required at UK site as EU is approved country.
- Sampling arrangement as annex 16 and 21, reference sample kept at German QC (with written agrement) or UK MIA site, retention sample at UK releasing site.
- API site: CEP certificate, Nitrosamine risk assessment
- Documents for daily QP duties: CoA, CoC, transport log, copy of batch documents for API; finished product batches.
- Confirm UK product pkg without serialization/decommissioned
- UK pkg with UK Only label in place
- PQR arrangement
- On going stability programmed for both API and FP
Scenario3 follow up: What checks the RPI do?
When importing medicinal products from the EU into Great Britain, the Responsible Person (import) (RPi) must perform several critical checks to ensure compliance with UK regulations. These responsibilities are detailed in the MHRA’s guidance on acting as an RPi . 
Key checks include:
1. Verification of QP Certification:
• Confirm that each batch has been certified by a Qualified Person (QP) in accordance with Article 51 of Directive 2001/83/EC. 
• Acceptable evidence includes:
• A batch certificate confirming QP certification.
• A copy of the ‘control report’ as per EU GMP Annex 16.
• A statement of certification confirming compliance with Article 51.
• Documentation from internal systems indicating batch certification.
• Confirmation that the final manufacturing step was performed by an authorised manufacturer in a listed country.
• Verification that the medicine was purchased from an authorised wholesaler after being placed on the market in the listed country.
2. Independent Batch Release Certification for Biological Products:
• For biological medicines requiring independent batch release, ensure that a certificate from the National Institute for Biological Standards and Control (NIBSC) or a Mutual Recognition Agreement (MRA) partner is available. 
• Acceptable evidence includes:
• A statement from the marketing authorisation holder confirming batch certification by NIBSC or an MRA partner.
• A copy of the batch certificate issued by NIBSC or an MRA partner.
• Confirmation from NIBSC that a batch certificate has been issued.
3. Supply Chain Security:
• Ensure that the imported product:
• Is not subject to a recall.
• Has not been reported as stolen.
• Is available within the licensed supply chain of the listed country.
• Maintain compliance with Good Distribution Practice (GDP) requirements for supplier qualification as set out in GDP 5.2. 
Scenario3 follow up: What would change if this was an IMP supply chain?
QP cert (Confirm batch certified in EU)
Supply chain (Confirm GMP & licence of manufacturing site
)
CTA & Ethics approval (Trial authorized; QP site matches CTA)
Written agreements (Sponsor-UK MIA(IMP), Sponsor-EU MIA(IMP), UK-Storage)
S (shipment/storage condition)
Reference Retention sample (written agreement must define in the Written agreement as well as timely access by MHRA )
When importing Investigational Medicinal Products (IMPs) into Great Britain from countries on the ‘approved country for import’ list (such as EU/EEA countries), the UK Manufacturing and Import Authorisation for IMPs (MIA(IMP)) holder must establish an oversight process to ensure compliance with UK regulations. This process is overseen by a Qualified Person (QP) and involves several critical checks: 
1. Verification of QP Certification:
* Confirm that each batch of IMP has been certified by a QP in the listed country before release for use in UK clinical trials. 
2. Supply Chain Documentation:
* Maintain comprehensive details of the manufacturing and distribution supply chain. 
* Ensure that the certifying site in the listed country holds the appropriate licenses and current Good Manufacturing Practice (GMP) certificates for the IMP dosage forms and associated activities. 
3. Clinical Trial Authorization Compliance:
* Have access to the UK clinical trial application form and any amendments to confirm the site responsible for final certification of the finished IMP. 
* Ensure that the clinical trial is authorized by the MHRA before the IMP is made available to investigators. 
4. Written Agreements:
* Establish clear written agreements outlining responsibilities and information provision between: 
* The sponsor and the UK MIA(IMP) holder responsible for import oversight.
* The sponsor and the listed country MIA(IMP) holder.
* The UK MIA(IMP) holder and any Great Britain storage and distribution hubs, if applicable.
5. Shipment and Storage Verification:
* Verify details of each IMP shipment to Great Britain, including recipient information, ensuring shipments are only made to approved trial sites as detailed in the UK trial application. 
* Review any deviations from stated storage conditions during shipment, along with decisions and rationales provided by the sponsor and certifying QP. 
6. Reference and Retention Samples:
* While additional samples are not specifically required to be stored in Great Britain, their storage location should be documented and accessible to the QP named on the UK MIA(IMP).
Scenario3 follow up: If the storage site had its own WDA would it also need to be listed on your license?
Short Answer (for QP Viva):
Yes — if the storage site is involved in QP certification (e.g. storing uncertified product prior to QP release), it must be listed on the MIA.
If the batch is already QP certified in the EU, and the UK storage site is only storing certified finished goods, then a WDA(H) is sufficient and the site does not need to be listed on the MIA.
⸻
Detailed Explanation:
- When must a storage site be listed on the MIA?
Per MHRA guidance and EudraLex Volume 4, a storage site must be listed on the MIA if it:
• Stores uncertified product (i.e. before QP certification)
• Forms part of the GMP chain
• Is used as part of QP certification/release activities
If the site is performing GMP-related functions (e.g. holding IMPs or finished goods prior to certification), it must be listed on the MIA/MIA(IMP).
⸻
- When is a WDA(H) sufficient?
If the site is:
• Only storing QP-certified (released) commercial product
• Only distributing released product within the UK
• Not involved in QP release or any manufacturing/testing
Then a WDA(H) is sufficient, and the site does not need to be listed on your MIA.
⸻
MHRA Guidance References:
a. MHRA Guidance – ‘Guidance for Importers’ (QP Oversight model)
“If a site is used for the storage of uncertified batches, it must be listed on the MIA and covered by the QP certification process.”
b. MHRA GDP and GMP guidance (2021–2023 updates):
“If a storage facility is used as part of the GMP supply chain for certification purposes, it must be included on the MIA. Storage of released product under WDA(H) does not require inclusion on the MIA.”
c. EU GMP Annex 16 (Section 1.5):
“The QP should have access to all relevant records and sites involved in batch processing and storage prior to certification.”
R & D site moving to your MIA site. What is your concern? follow up: Thinking about the storage site – what would you expect of a PQS for WDA?
- CC open
- Description of change and identify facility/equipment to share
- Risk assessment with ICH Q9
- Impact assessment for licence. GMP and patient ( product)
- Contamination control strategy and mitigation actions, such as segregation, effectiveness check.
Follow up question:
1. QMS (deviation, RCA, CAPA, cc system)
2. Personnel (organizational chart, training program etc)
3. Storage place enough capacity, not sorted on the floor, clean and tidy, temperature monitoring in place, PPM for facility and equipment in place
4. Documentation control (version control, senior approval)
5. Suppler/customer authorization system in place.
6. Recall/customer complaint system in place
7. Self inspection program active and current
Scenario 4: API in Brazil, Bulk manufactured in Japan, Packed and Release in UK. Will you consider accepting the bulk testing for your release.
- QC testing site? Type of Med (IMP/CD/Biological)? Formulation (as Japan is MRA, if within SCOPE?)?
1.Confirm Supply Chain Map (BRZ white, JP MRA) - All sites are listed in the MA
- All sites have appropriate licence for the activities
- All sites have EU GMP or equivariant
5.All sites QTA in place - All site Audit Report available
- QP dec been done for API in BRZ
- WC not required as API white list & not UK imported
- Importation Testing for Bulk not required as Japan is MRA country (If within MRA scope).
- Confirm sampling represent of the whole batch, reference sample can be stored in Japan (MRA) but need written agreement, and Retention sample kept at Releasing site (UK).
- Additional document check: API site - CEP/ASMF, Nitrosamine risk assessment
- PQR arrangement (API&FP)
- On-going Stability Test
- Documents for QP routine check: CoA, Temperature Log, Copy of Batch documents for API & FP
- Other Delegatable Duties: TSE, PQS etc
Scenario 4 follow up: What is the MRA with Japan?
what are the products excluded for batch testing acceptability from Israel?
What about the other countries?
JAPAN: Can omit importation testing excluding ATMP, Medical Gas, Human Blood
ISRAEL: Medical Gas, Homeopathic, Blood, ATMP
- Australia
Advanced Therapy Medicinal Products - Canada
Medicinal products derived from human blood or blood plasma
Advanced Therapy Medicinal Products - Israel
Medicinal gases
Homeopathic products
Medicinal products derived from human blood or blood plasma
Advanced Therapy Medicinal Products - Japan
Medicinal gases
Medicinal products derived from human blood or blood plasma
Advanced Therapy Medicinal Products - New Zealand
Advanced Therapy Medicinal Products - United States of America
Vaccines
Advanced Therapy Medicinal Products
Medicinal products derived from human blood or blood plasma
Scenario 5: API in China, Bulk manufactured in Spain, Bulk packed and released in NI.
You are a virtual QP, please tell me what you need in place to certify the batch?
0:type of product (CD/Biological/IMP)? QC site?
Market?
1. Supply Chain Map to ensure location - APi (3rd), Bulk&Test(EU), pkg&release(uk)
2. those sites listed MA
3. All sites have appropreate licence and cover the mfg, testing and importation activities for the product
4. All sites have GMP cert or equivalent
5. Audit reports available
6. QP dec has done for APi aite
6.1 CEP/ASMF, Nitrosamine risk assessment
7. QTA in place for all aite
8. Writren conformation with each API batch
9. No importation testing required as bulk importing from EU (approved country)
10. Sampling arrangement, reference sample spn (written agreement) or NI site and retention sample at NI site.
11. PQR arrangement
12. On going stability study
13. If exported EU, WDA listenrelease aite MIA + EU QP eligibility +FMD requirements. If UK market, UK only label.
14. Secure IT system ensure QP access to all information for QP certification such as coa for api and FP, transportation temperature log, copy of batch records
15. Ensure system for remote certification such as sop, staff training, define the process of QP release register, control measure to prevent product released without qp release as per MHRA inspectrate blog and annex 16.
16. Ensure QP physically site visit regularly.
Scenario 5 follow up: Where would you find guidance on QP remote certification?
MHRA inspectrate blog
Scenario 5 follow up: Your company has sourced a second API supplier, now based in Brazil. What do you do?
1.CC open
2. Impact:
- Licence variation for MA - type 2 confirming regulatory affairs
- check the api supplier has appropreate api registration.
Check CEP cer
3. GMP impact: GMP cert or equivalent
4. Audit and qp declaration
5.Nitrosamin risk assessment
6. No written confirmation required as BRZ whitel list
7. Put new batch on - going stability programme woth the new API
Scenario 5 follow up: You have been notified that your API supplier has changed their solvent in their manufacturing process. What are your concerns?
0:
-was it controlled by CC? Was the change notified in advance as per QTA? - do we have batch with the new API at our site or already released? If any at aite, quarantine.
- any impact on MA , need variation?
-What is class of the solvent as in ICH Q3C?
- impurity profile?
- stability data any different?
- nitrosamineisk asseent done?
- impact on finished product - any difference + need our new bacth with the new solvent API?
- Change Control Management
• Confirm that the change has been handled under a formal change control by the API manufacturer.
• Check whether you were notified through the QTA (if in place).
• Evaluate whether the change has been communicated to the MAH and whether regulatory variation is required.
⸻
- Solvent Classification (ICH Q3C)
• Identify the new solvent and classify it under ICH Q3C:
• Class 1: Known carcinogens — typically not acceptable
• Class 2: Toxic solvents — require tight control
• Class 3: Low toxic potential — less impact
• Assess whether residual solvent limits need to be updated in the API specification.
⸻
- Impurity Profile and Control
• Has the solvent change affected the impurity profile?
• Check for new impurities, higher levels, or solvent-related degradants.
• Review analytical data and updated CoAs.
• Confirm if method revalidation was required or performed.
⸻
- Stability Data
• Assess whether the change impacts API stability.
• Request comparative stability data before and after the solvent change, especially if the new solvent has different reactivity or volatility.
⸻
- Impact on Finished Product
• Determine whether the change could impact the critical quality attributes (CQAs) of the finished product.
• Assess potential downstream effects on:
• Dissolution
• Assay/potency
• Appearance or degradation profile
• Check if finished product re-validation or equivalence studies are needed.
⸻
- Regulatory Filing Impact
• Confirm if the change is considered a variation under the Marketing Authorisation (MA).
• Likely a Type IB or II, depending on risk
• Work with regulatory affairs to submit variation if required.
⸻
- QP Certification Readiness
• Ensure full visibility of:
• Change control documentation
• Updated specifications and methods
• Stability and impurity data
• Only certify affected batches when satisfied that product quality is not compromised.
⸻
Final Viva Statement:
“This type of change would trigger a detailed quality and regulatory review. As QP, I would assess the solvent classification under ICH Q3C, its impact on the impurity profile, residual solvent levels, API stability, and any downstream effect on the finished product. I’d verify that the change was controlled via change control, reviewed under the QTA, and determine whether regulatory variation is required. I would only certify the batch once I am confident that the change does not compromise product quality or regulatory compliance.”
Scenario 6: You make antibiotic API in China, bulk manufacture, packaged and QC tested in USA, GB for certification for release to UK. As a QP what do you need to have in place to feel comfortable to certify?
0: product type:(CD/biologics/IMP)
1. Supply chain map (api: 3rd, mfg;pkg; qc: MRA), release: UK for UK market
2. All sites listed in MA
3. all sites have appropreate licence, registration and cover mfg, testing, packaging, release. Importation activities.
4. All sites have GMP or equivalent
5. Audit report available for all sites and QP dec completed
6. CEP cert/ASMF for API site and nitrosamin risk Assessment for API and FP sites.
7 QTA in place in all sites
8. No written confirmation as api not imported to uk
9.no importation testing as USA MRA
10. PQR available (api and fp)
11. On going stability study
12. Sampling arrangement. Reference sample at USA with written agreement, retention sample at releasing site UK.
13. Documents for daily qp duties- coa, temp log, copy of batch documents
Scenario 6 follow up: API now changes to a site in India, what do you now need?
- CC open
- Impact on licence: MA variation type 2 (confirm with regulatory affairs)
- Check new api site has appropreate licence for manufacturing, CEP cert
- Impact on GMP - new site has GMP or equivalent cert, audit report, PQR/recent external audit result, and qp declaration
- Impact on finished product:
Impurity profile.Nitrosamine risk assessment, sptability study, put new FP batch on-going stability study woth th Rene API batch - QTA in place