Search Results for: root cause

7 Considerations for Outsourcing Medical Device Complaints

 

complaint handling 7 Considerations for Outsourcing Medical Device Complaints

Investigating medical device complaints can be a time-consuming task. This blog reviews seven considerations for outsourcing medical device complaints.

Two different clients of mine recently mentioned that they are overwhelmed by the amount of time required to investigate complaints and to file MDRs with the FDA. I suggested outsourcing the complaint handling to a third-party service provider, but they were unaware of any suppliers with that capability.

I was already familiar with several suppliers offering these services, but I wanted to know if companies were looking for these services. Therefore, I decided to post a discussion on one of the LinkedIn groups I manage: http://bit.ly/LinkedIn-ComplaintThread. In just two days, there were 21 different comments. Most of these were from consultants offering their services, but their comments were helpful. For example:

  1. “The majority of complaint handling work typically involves a high volume of less critical tasks. Routine things like ensuring all potential complaints are entered into your system, requesting additional information when its needed, documenting updates when they are received, or drafting complaint/reportability decisions based on company policy are all tasks that can easily be performed by a well-qualified service provider for significantly less than if they were done domestically.”  – Matts Bell
  2. “Direct input into ESG is much better and easier than an additional third party software package, as ESG does change often, and the software companies are not keeping up. Keep in mind that each change digs deeper into the quality system and information. What is acceptable today may not be acceptable tomorrow as the validation keys within ESG tighten.” – Courtland Imel
  3. “I too, have provided outsourced complaint, NCMR and CAPA investigations, customer contacts, and root cause analysis to final disposition, sometimes in an FDA remediation project. But it requires active involvement on the part of the client company, with periodic meetings to discuss each case/its resolution, as well as identified trends/their resolution.” – John E. Lincoln
  4. “In the case of adverse events identified through the litigation process, the company cannot contact the complainant directly because the case is in litigation…Utilizing an appropriate third-party service provider to work with you on this process can make this type of adverse event reporting fast, efficient, and cost-effective.” – Melissa Becker

It is true that parts of complaint investigations must be performed internally—such as failure analysis. You also cannot outsource responsibility for review and approval of complaint records or MDRs. However, suppliers can provide trained personnel that are capable of initiating and completing complaint records, performing follow-up with complainants, and determining if complaints are reportable to the FDA and other countries around the world. One of the suppliers I interviewed can translate adverse event reports for countries that require reporting of adverse events in languages other than English, and they have a professional translator verify accuracy. Some personnel even have a medical background (e.g., nursing).

7 Considerations for Outsourcing Medical Device Complaints 

  1. Find a supplier that has many years of experience helping medical device manufacturers with complaint handling and adverse event reporting (no rookies)
  2. Ask for a demo of the software—web-based software is best (I’ll explain why shortly)
  3. Ask to see their complaint handling procedure and perform a procedure review
  4. Ask how the supplier handles complaint investigations when the product is not returned (http://bit.ly/DeviceNotReturned)
  5. Verify that the rationale for MDR decisions is based upon the FDA requirements in 21 CFR 803 (http://bit.ly/Part803), and vigilance decisions are based upon MEDDEV 2.12/1 (http://bit.ly/MEDDEV2-12-1rev8)
  6. Ensure that the software system has a tracking of timelines for complaint handling and reporting already built-in
  7. Ensure the electronic forms are adequately designed for capturing information—not just yes/no checkboxes everywhere

Why is web-based software better than hosted?

The US FDA is moving quickly toward Electronic Submission Gateways (ESGs) as the preferred method of submissions (http://bit.ly/Why-FDA-ESG). Unfortunately, there are frequent changes to ESGs that require software modifications and revalidation (http://bit.ly/ESG-FDA). Therefore, unless you prefer to have a full-time person responsible for revalidation of software, web-based software solutions are typically your best choice for regulatory submission software tools. It’s also convenient to be able to access records and print them out for an FDA inspector from any computer. This eliminates any possibility of a 483 being issued against 21 CFR 820.198(f) (http://bit.ly/820-198).

7 Considerations for Outsourcing Medical Device Complaints Read More »

Effective Management Solutions for 10 CAPA Program Blunders

The author provides effective management solutions for ten real-life CAPA program blunders., (i.e., procedures, root cause analysis, closing CAPAs, etc.)

%name Effective Management Solutions for 10 CAPA Program Blunders
Effective Management Solutions for 10 CAPA Program Blunders

I am always looking for new and creative ways to help people understand the importance of maintaining an effective Corrective and Preventive Action (CAPA) program. If my last dozen CAPA blogs were not convincing enough, maybe this list of suggestions will help.

  • 1. If someone doesn’t follow procedures, just fire them. The employee in question is obviously the root cause. Management cannot be held responsible for the actions of employees. Once, I read a corrective action plan that indicated termination was the correction for a missing training record. The QA Manager clarified this statement by saying that the employee resigned for personal reasons, and there was no opportunity to train the employee. The CAPA record also indicated that 100% of the training records for manufacturing employees were reviewed for completion. There were a few records identified as incomplete, and those employees were trained—not terminated. The company also implemented a tracking tool to monitor training records. As a general rule, termination is not an acceptable corrective action or correction.
  • 2. If CAPAs are open longer than your procedure allows, close the existing CAPAs the day before the CAPAs become overdue, and open new CAPAs. CAPAs are not “closed” until all nonconformities have been corrected, corrective and preventive actions are implemented, and effectiveness checks are done. If the corrective and preventive actions were not completely effective, some companies chose to reopen the record and expand the plan of corrective and/or preventive actions. Other companies chose to open a new CAPA record, and reference the new record in the effectiveness check section of the previous CAPA record. Either approach works, but you cannot close an incomplete record and remain compliant.
  • 3. To verify the effectiveness of corrective actions, just include a copy of your document change order. Documenting changes to procedures meets part of the CAPA requirements, but this verifies implementation—not effectiveness. To verify the efficacy, you need to confirm that a nonconformity, or a potential nonconformity, will not recur. Low-frequency defects are often hard to demonstrate directly. The best approach is to validate the process parameters to demonstrate quantitatively that the process capability has improved. For manual processes, you may need to test the new process to verify that the error will not occur or will be detected.
  • 4. If you can’t finish tasks on schedule, revise your plan. If you still can’t finish tasks on schedule, revise your plan again—and again. It’s appropriate to revise your plan if you discover additional causes that your initial investigation missed. You should not, however, be revising target completion dates—except in rare cases. You also should not need to revise your plan multiple times.
  • 5. When you’re unsure why a problem occurred, identify the root cause as an unclear procedure, and make a minor change to the appropriate SOP. Making changes to procedures is quick and easy to verify. Unfortunately, this approach is seldom effective in preventing recurrence. You need to develop new process controls to make errors impossible. Eliminate variation in raw materials, eliminate subjectivity in inspections, and provide tools and fixtures to make manual processes capable of more consistent results. After you have reduced all three of these sources for process defects, then you are ready to revise your procedures and retrain employees.
  • 6. Whenever an employee fails to follow a procedure, just change the procedure to require another person to verify that they did it right. If one employee fails to follow procedures 100% of the time, a second person manually inspecting will also not be 100% effective. Another method of process control should be used to ensure that your process results in a conforming product. Adding more people provides a false sense of confidence. The use of objective measurement and go/no go fixtures offer a higher degree of certainty.
  • 7. Write a justification for an extension of the implementation timeline if a CAPA is about to become overdue. Justifications for extension provide objective evidence that management is aware that a CAPA plan is not meeting the target completion times. This is necessary on rare occasions, but extensions should never become routine. Also, if the progress of a CAPA is slow, monitoring should be frequent enough that management can release additional resources, or re-prioritize assignments in order to catch-up with the target completion date.
  • 8. Use the “5 Why” technique for root cause analysis to identify a user error to blame for complaints. The “5 Why” technique is effective at investigating the depth of a problem to ensure that the root cause is identified—instead of a symptom. If the reason for a problem is recognized as a supplier, then it is necessary to ask why the supplier’s error was not prevented or detected. Sometimes this requires asking “Why” more than five times, but identifying a cause you have no control over will fix nothing
  • 9. To monitor your CAPA program, conduct weekly CAPA board meetings where a person is asked to explain why the CAPA they were assigned is overdue. Anyone can make an excuse, but excuses will not complete CAPAs. CAPA boards and weekly meetings can be extremely valuable, but your CAPA board should rely on three rules: 1. Managers need to be present to re-allocate resources and re-prioritize tasks. 2. CAPAs that are on schedule or ahead of schedule requires no further discussion. 3. Anyone assigned to a CAPA that is behind schedule should request help and suggest solutions before the CAPA becoming overdue.
  • 10. Do not assign other departments the responsibility for CAPAs, because only QA has the training and competency to conduct an investigation of the root cause, and write a CAPA plan.  One of the most effective CAPA management tools I observed was a visual communication board that used color-coded paperclips, which identified resources assigned to CAPAs. By limiting the number of paperclips to equal the number of resources allocated to CAPAs, the company was able to level the workload of CAPA assignments to match the available resources in each department. You can only achieve this level of efficiency and effectiveness if multiple people in multiple departments are trained and competent to investigate the root cause and write CAPA plans. CAPA should be a core competency for every department because it’s the best process for fixing and preventing problems.

Disclaimer: If you missed my sarcasm, these are ten ways to mismanage a CAPA program. The brief paragraph after each numbered example is intended to provide the actual recommendation for effective management of your CAPA program.

%name Effective Management Solutions for 10 CAPA Program BlundersIf you are interested in learning more about CAPA, please register for the Medical Device Academy’s CAPA Workshop on October 3 in San Diego. Click here to register for the event: http://bit.ly/MDAWorkshops.

Effective Management Solutions for 10 CAPA Program Blunders Read More »

How to Utilize CAPA Training To Avoid FDA 483 Citations

The author discusses how formal CAPA training can help solve the four most common CAPA deficiencies and help avoid FDA 483 citations.

%name How to Utilize CAPA Training To Avoid FDA 483 Citations

Corrective And Preventive Action (CAPA) is considered to be one of the most critical processes in a Quality Management System (QMS). CAPAs prevent nonconformities from recurring, as well as identify potential problems that may occur within the QMS.

Both the Code of Federal Regulations (21 CFR 820.100) and the ISO 13485 Standard (8.5.2 and 8.5.3, respectively) include similar requirements for establishing and maintaining a compliant CAPA process. The concept seems pretty straightforward, right?

Then why do so many companies struggle with this process and go into panic mode during FDA inspections and Notified Body audits?

CAPA process deficiencies have long been the number one Good Manufacturing Practice (GMP) violation cited in FDA Warning Letters. Therefore, providing trained experts to teach the CAPA process is well worth the investment to provide your employees with the expertise needed to implement a sustainable, effective, and compliant process. Support from top management is a must for success.

7 Reasons Why There is LIttle Support for the CAPA Process
  1. Managers view CAPA as a necessary evil and apply minimum effort and resources to complete the required paperwork.
  2. All complaints, audit findings, shop floor nonconformities, etc., go straight into the CAPA system, resulting in what is known as “Death by CAPA.” There are hundreds of CAPAs to be dealt with, but the CAPAs languish and quickly become a mountain of overdue records.
  3. The lack of ability to conduct effective root cause analysis results in, at best, a band-aid solution, and recurrence of the same issues time and again.
  4. There is no risk-based or prioritization process that provides a triage for determining when a CAPA is appropriate, and how to classify its criticality.
  5. CAPA forms are either too restrictive, such as using “yes/no” questions, thereby stemming the creative flow of process thinking or, too open-ended, leaving the CAPA owner with little guidance for getting to the exact root cause.
  6. Trending and metrics that would highlight quality issues before they become complaints are lacking, so most CAPAs are last-minute reactions to a crisis, instead of proactive improvement projects.
  7. Senior management has not allocated sufficient time and resources to CAPA owners to develop expertise, and clearly do not understand the nuances of FDA compliance, the ISO Standard, and the responsibilities of CAPA ownership.
Consequences of an Ineffective CAPA System: FDA 483 Citations Are Possible

FDA 483 observations, Warning Letters, and loss of your ISO 13485 certification are possible consequences of failing to manage your CAPA process. Imagine explaining to your customers why you lost your certification, and why they should keep you as a trusted supplier. That is not a conversation you want to have.

A weak CAPA process allows nonconformities to recur, results in manufacturing downtime, requires to rework, and ends with the scrapping of product or lost customers. The consequences of a weak CAPA process negatively impact your company’s financial strategy and goals.

To prevent an increase in the cost of poor quality, your business cannot remain static. You need to improve and adopt best practices. Your CAPA process is a systematic way to make those improvements happen.

Characteristics of an Effective CAPA system?
  • Easy to follow the procedure
  • Defined CAPA inputs
  • Risk assessment and prioritization
  • Root-cause investigation tools
  • A well-defined action plan
  • Metrics to track progress
  • Communication of information and status
  • Effectiveness checks
  • Management support and escalation
What to Expect from Formal CAPA Training

Death by Powerpoint is not training. Effective CAPA training requires hands-on participation in working through root-cause analysis with an expert. One of the best training tools is case studies based upon recent 483 observations. A CAPA training course should teach you how to:

  1. Accurately identify the cause of problems
  2. Prioritize your corrective and preventive actions using a risk-based approach
  3. Implement an appropriate corrective and/or preventive action, and
  4.  Verify the effectiveness of your actions

CAPA training should teach you how to reduce the length and number of investigations. Training will also help you master current problem-solving methodologies to identify true root causes, utilizing facts, instead of guesswork or opinion. The proper identification of the exact root cause of a problem is critical because otherwise, your CAPA plan will fail to fix real problems.

Not all formal training needs to be in-person. Face-to-face training can be supplemented with more cost-effective training of concepts using webinars and recorded presentations. Interactive training is needed to supplement this training so that students can practice what they learn.

How Training Solves Common CAPA Deficiencies

The four most common CAPA deficiencies are:

  1. Inadequate procedures
  2. Incomplete investigations
  3. Overdue actions, and
  4. Failure to perform an effectiveness check

Each of these deficiencies is addressed directly by CAPA training. Formal CAPA training reviews each of the requirements for your CAPA process, and trainers will often share samples of CAPA procedures, and CAPA forms that they wrote and found to be effective. Learning multiple root cause investigation techniques, and practicing them using the case study technique, ensure that CAPAs are thoroughly investigated, rather than identifying superficial symptoms.

CAPA metrics are introduced during training to ensure that the CAPA process owner knows best practices for monitoring and analyzing the process. Finally, CAPA training includes specific examples of what is and what is not, a proper technique for performing an effectiveness check.

Results After Formal CAPA Training

The best reason for making formal CAPA training available to the people responsible for CAPAs are the results you will experience after the training. For example:

  1. Elimination of hundreds of overdue CAPAs
  2. Reduction in nonconformities, scrap, rework and customer complaints
  3. Lower overall costs associated with quality problems
  4. Better FDA inspection and Notified Body outcomes, and
  5. Safer products for your customer

%name How to Utilize CAPA Training To Avoid FDA 483 CitationsIf you are interested in learning more about CAPA, click here to register for Medical Device Academy’s Risk-Based CAPA webinar.

How to Utilize CAPA Training To Avoid FDA 483 Citations Read More »

Keeping Design Projects on Schedule: Using the CAPA Process

%name Keeping Design Projects on Schedule: Using the CAPA Process The author provides two steps to consider taking now and steps to take in the future that will help keep design projects on schedule using the CAPA process.

The ability to get new, high-quality products to market quickly is the most important core competency for a company to develop. What is your company doing to improve the performance of your design teams? If you have trouble answering the above question, you should consider performing a detailed internal audit of your design control process: http://bit.ly/AuditDesign.

The only significant change I would make to my recommendations from 2012 is to follow the GHTF guidance document for creating technical files using the STED format, instead of using NB-MED 2.5.1/Rec 5: http://bit.ly/GHTFSTEDGuidance. This approach to creating a technical file lends itself to meeting the Canadian Requirements for Medical Device Licensing, and this is the preferred format of Technical Files in Annex II of the proposed EU regulations.

At the end of the blog on how to audit design controls, Step 7 states that you should “Ask the process owner to identify some metrics or quality objectives they are using to monitor and improve the design and development process…If the process owner is tracking no metrics, you might review schedule compliance.” The two most common reasons why design projects are not able to keep pace with the design plan schedule are: 1) there are insufficient resources allocated for the project, and 2) the estimates of the duration for tasks in the schedule are too aggressive.

Step 1: Estimating the Duration of Tasks

Task duration is the easiest quality objective to track performance against. Whether you track design projects with an Excel spreadsheet or Microsoft Project, you can easily compare the actual duration of any project task with the estimated duration that was planned at the beginning of the project. It is important to measure the length of labor hours, rather than using the number of people because most design team members are multi-tasking. You can and should mine the data from previous design projects because this information is available now. As you go through historical data, you will also realize where there are weaknesses in how you capture data regarding labor hours.

Once you have the raw data, I recommend analyzing the data using % deviation and total hours. The % deviation will tell you which estimates were the least accurate, and the total hours will tell you which estimates have the most significant impact on the total project. Ideally, you will collect data from multiple projects, so that you can determine if the deviations are consistent from project-to-project.

This data analysis is important because the data analysis will help identify the root cause for inaccurate task duration estimates. You may also want to perform a Pareto Analysis of the data to prioritize which project tasks would benefit most from more accurate estimates. Once you have identified the root cause for inaccurate estimates, you can initiate Corrective And Preventive Actions (CAPA), where appropriate.

Step 2: Allocation of Resources

You may hear the phrase “Do more with less,” but I like to joke that design teams are expected to “Do everything with nothing.” If your design team is monitoring the accuracy of taking duration estimates for design projects, the accuracy of your project plans should improve. Your management team should also develop greater confidence in your teams’ ability to forecast product launch dates, thereby the estimates for resource needs. Managers frequently challenge you to achieve the impossible.

The most famous example of this is when Steve Jobs challenged Steve Wozniak to design the video game Breakout in just a few days. If you are the next Steve Jobs, and you have Woz on your team, keep aiming for the moon. If your team consists of mere mortals, you might need more resources. Your senior management may not have additional resources to provide, but it is critical to accurately estimate the resources needed for projects. If you can estimate accurately, you will have the following impact on your company:

  1. You will be able to estimate the amount of time to market that can be reduced by adding resources.
  2. You will be able to estimate the cost impact of unrealistic management timelines—instead of saying, “I can’t push it any faster, Captain.” (my favorite Star Trek quote).
Future Steps: Preventive Actions

In one of my previous postings (http://bit.ly/PASources), I stated, “The most fruitful source of preventive actions, however, is data analysis of process control monitoring.” If you are monitoring and measuring your design control process, you can use this approach to:

  • Identify preventive actions for your design process
  • Establish specifications for critical path tasks in each project
  • Calculate your design process capability for successful completion based upon historical data

The answer to the following question may help you identify your next design process improvement. How close are your estimates to achieving a Cpk > 1.33 for completing design verification protocols on-time? %name Keeping Design Projects on Schedule: Using the CAPA Process If you are interested in learning more about CAPA, please register for the Medical Device Academy’s CAPA Workshop on September 9 in Orlando, or on October 3 in San Diego. Click here to register for the event: http://bit.ly/MDAWorkshops.

Keeping Design Projects on Schedule: Using the CAPA Process Read More »

How to perform a quantitative CAPA effectiveness check

This article review explains how to conduct a quantitative CAPA effectiveness check, and you will also learn three methods NOT recommended.

quantitative effectiveness check 1024x713 How to perform a quantitative CAPA effectiveness check

There are three methods NOT recommended for a CAPA effectiveness check:

  1. verifying the procedure was revised,
  2. verifying employees were retrained, and
  3. making sure mistakes don’t occur 3x in a row.

The best method is to establish quantitative criteria for effectiveness based upon data collected during the investigation of the root cause. The graph above is an example of objective evidence that preventive action was effective. The chart shows that the process capability (Cpk) was improved from 0.837 to 2.50 by changing a process set-point to adjust the mean of the dimension closer to the center of the specification range. This is typical of adjustments made during process validation and revalidation activities.

Incorrect Method 1: Verify the Procedure was Revised

When a nonconformity is identified during an ISO 13485 audit, the laziest way to “fix” the problem is to revise your procedure. Despite the fact that most FDA 483s identify inadequate procedures as the reason for observation, your procedures are seldom the problem. Your employees may not even be following the procedures. Repeatedly revising procedures may be part of the problem. If you must revise your procedures, please involve the people that use the procedures.

Incorrect Method 2: Verify Employees were Retrained

During your last surveillance audit, you may have revised the procedure, but your auditor noticed that there were no retraining records for employees that were performing the revised procedure. One interviewee was unable to identify where the new inspection step could be found in the revised procedure. It’s too bad the interviewee didn’t notice the bold and underlined text indicating recent revisions. Your auditor wonders how effective your retraining process is.

Incorrect Method 3: No Mistakes 3x in a Row

Last month a manufacturing engineer was assigned to perform an effectiveness check related to corrective actions implemented in the incoming inspection process. The procedure was revised to clarify the proper procedure for a statistical sampling of rolls of plastic film as a corrective action. The engineer sampled the three most recent lots of the same plastic film that was incorrectly sampled in the past. All three lots were correctly sampled in accordance with the revised procedure. The engineer reported that the corrective actions implemented were effective. However, you have two new nonconformities on your desk from manufacturing related to incorrect sampling procedures during an incoming inspection of other raw materials. Now you wonder if the incoming inspection procedure was the real root cause.

Corrective actions that are actually effective

Instead of adding something to your procedures each time someone makes a mistake, you might want to think about how you can simplify and streamline your procedures with fewer words. You can say things more clearly with pictures and flow charts instead of hundreds of words. Training effectiveness can be verified with exams that ensure employees “read and understand” your revised procedures. Finally, when you identify a nonconformity with one product, you need to ensure that you consider how similar mistakes might occur with similar products. Maybe you need a process for incoming inspection that doesn’t rely upon someone reading procedures.

You need to be objective to perform an effectiveness check

The biggest weakness of the auditing process is that it relies heavily upon the subjective opinion of an auditor. This is why auditors are supposed to audit against objective audit criteria in an international standard. The need for objectivity is also why there are guidance documents to clarify a consistent interpretation of those standards. Therefore, when you perform an effectiveness check, you also need objectivity. The best way to ensure objectivity is to establish documented criteria for effectiveness prior to finalizing your corrective action plan. Ideally, that will be in the form of a prospective process validation protocol with quantitative acceptance criteria.

How to ensure objectivity

The single best way to ensure objectivity when you are performing a CAPA effectiveness check is to define the post-implementation goal in terms of a quantitative quality objective. Ideally, you can graph the quality metric using historical data and current data. If you need statistical analysis to see a difference between pre- and post-implementation of the CAPA, then your CAPA was not effective. If your graph looks like a miracle happened and the metric changed almost overnight, and timing corresponds to the date your corrective action(s) was implemented, then your CAPA was effective.

How to set a quality objective for you CAPA effectiveness check

Some people have trouble with using a quantitative approach in performing effectiveness checks because some things are harder to measure than others. However, you can measure anything. For example, you can even measure employees forgetting to initial and date changes to quality records. This can be done by identifying critical control points where quality records are reviewed, and documentation errors are measured. You can measure by the employee, by form, by month, etc. The key to monitoring and measuring a process is to answer the following questions:

  1. Who will measure it?
  2. What will be measured?
  3. Where will it be measured?
  4. When will it be measured?
  5. How will it be measured?
  6. How will measurements be analyzed?
  7. Who will data analysis be communicated to?

When to Perform a CAPA Effectiveness Check

Many companies set arbitrary deadlines for performing an effectiveness check (e.g., – between 30 and 60 days of implementation of corrective actions). Some companies use a risk-based approach to their CAPA process, and the urgency of effectiveness checks may be a function of risk. I recommend a completely different approach. Instead of using an arbitrary or risk-based approach, I recommend monitoring your new quality metric to estimate how long it will take to reach your new quality objective.
%name How to perform a quantitative CAPA effectiveness check

If you are interested in learning more about CAPA, click here to register for Medical Device Academy’s Risk-Based CAPA webinar.

How to perform a quantitative CAPA effectiveness check Read More »

A3 Reports – The Missing Link to Effective CAPA Process Management

A3 Workbook A3 Reports – The Missing Link to Effective CAPA Process ManagementYour CAPA process is the most important process in your Quality System for two reasons. First, CAPA is the tool you use to fix quality problems. Second, your CAPA process is guaranteed to be an area of interest for your next FDA inspector.

If CAPA is so important, why do companies still have inefficient CAPA processes?

When auditors review a CAPA process, some of them start by reading the procedure. When FDA writes a 483 observation about CAPA processes, the wording begins with “Procedures for corrective and preventive action have not been adequately established. Specifically…”. The approach of auditors and inspectors seems to suggest that your procedure is the key to an effective CAPA process, but your procedures are not the reason for the success or failure of processes.

Processes are effective when the management of the processes is effective. If a CAPA falls behind schedule, writing a justification for an extension is a process “solution.” A real solution is managing the process better. Management needs to monitor the progress of CAPAs regularly, should prioritize resources to ensure that CAPAs are completed on time, and needs to make decisions on which actions should be taken to prevent recurrence of quality problems. Therefore, you need to spend more time developing a method of managing CAPAs than you spend developing the CAPA process itself.

What is an A3 Report?

An A3 report is a tool that is ideally suited for managing CAPAs. “A3” refers to the size of the paper used (i.e., – approximately 11”x17”). An A3 report is a one-sided, single piece of paper that is used to build consensus among company management when you are making an important decision. The initial draft of the A3 report is distributed to each of the affected departments to ensure that all possible inputs to a quality problem are received. By encouraging 360-degree feedback for a proposed solution to a quality problem, you will ensure that the CAPA you develop addresses the issue completely.

In addition to encouraging 360-degree feedback, an A3 report includes an analysis of the problem, identification of the cause, proposed actions that require management decision, a section for documenting actions taken, and a follow-up section for management to review at specific milestones during the implementation plan. Including all of this information in one page forces CAPA owners to summarize information for management, and the standardized format makes it easier for managers to locate the information they want.

Here’s how these sections would be used for managing CAPAs.

Analysis of the Problem

This section is identical to the section of a traditional CAPA record, where the investigation of the problem is documented. This is where tools such as 5 Why analysis, Pareto charts, and Fishbone Diagrams would be used to illustrate the analysis of the problem. This section may change a great deal during the 360-degree review of the A3 report.

Root Cause or Potential Cause

In this section, there should be a concise statement of the root cause for corrective action plans or the potential cause(s) for preventive action plans. During the initial review of the A3 report, management may ask the person or team assigned to the CAPA to investigate the problem in greater depth or investigate other possible sources of information if the analysis appears to be inadequate. Management should also ensure that the causes are within the control of the company to correct or prevent. Identifying a cause that is outside the control of the company is just placing blame.

Proposed Actions

This section is similar to a typical CAPA plan, but the section includes the reason(s) why the proposed actions are recommended. The reasons why actions are proposed is important during the process of management reviewing the initial A3 report and approving the recommended actions. The best practice is to phrase the reasons in terms of quantitative results that will be achieved because this will provide a framework for metrics during follow-up by management.

Actions Taken

This section of the A3 report is updated throughout the implementation of the project. By comparing this section with proposed actions, management can monitor the status of each task included in the CAPA plan.

Follow-up

This section of the A3 report identifies how management will monitor the implementation of actions and when. The initial A3 report identifies what management will be monitoring, how it will be monitored, and at what milestones. Ideally, the monitoring includes quantitative metrics that demonstrate the effectiveness of the CAPA. During the implementation of the CAPA plan, actual metrics will be recorded in this section, and any adjustments that management makes are recorded here.

If you are interested in learning more about A3 reports, you can learn more from Daniel Matthews at http://bit.ly/A3Workbook.

You can also learn more about improving your CAPA process by attending one of the workshops on CAPA: September 9 in Orlando or October 3 in San Diego. Each workshop is one day, and early bird pricing is $249 per day if you register before August 1. Click Here to learn more: http://bit.ly/12AxxQ0

A3 Reports – The Missing Link to Effective CAPA Process Management Read More »

CAPA Form – 15 tips to avoid CAPA failure

This blog reviews 15 tips for creating an effective CAPA form including source, quality issue description, and the root cause investigation.

Your cart is empty

CAPA Form 1024x362 CAPA Form   15 tips to avoid CAPA failure

The reason for creating a “great CAPA form” is to improve the effectiveness of your CAPA process. Anyone in your company could be assigned to a CAPA, but not everyone is a CAPA expert. Therefore, designing an effective CAPA form can reduce errors and improve the effectiveness of the actions taken. You can also purchase our CAPA procedure and CAPA form, which is compliant with ISO 13485:2016.

Corrective and Preventive Action CAPA Procedure CAPA Form   15 tips to avoid CAPA failure
SYS-024 Corrective and Preventive Action (CAPA) Procedure, Form, and Log
SYS-024 - Medical Device Academy's newly updated CAPA procedure is a 6-page procedure. Your purchase will also include our CAPA form (FRM-009), and our CAPA log (LST-005). The procedure is compliant with ISO 13485:2016, 21 CFR 820.100, SOR 98/282, and the EU MDR. You will also receive free updates in the future. We are currently distributing our 16th version of the procedure.
Price: $299.00

Provide adequate space in CAPA form

The most important feature of a CAPA form is to ensure that there is adequate space for writing a complete response for each section. Having sufficient space is more important than the benefits of a shorter record.

Date your CAPA form was initiated

The date your CAPA form begins to be completed can be used to verify that there was no “undue delay” in the initiation of a CAPA in response to internal audit findings. The date of initiation is also used to calculate the due date for completing the investigation and providing a corrective/preventive action plan.

Include a cross-reference number in your CAPA form

This is typically a sequentially assigned CAPA log number. Ensure the number is prominent on all pages—just in case pages are separated.

CAPA source

The source of a CAPA is useful information when performing data analysis—especially for internal audits where the audit schedule should reflect the results of previous audits. Examples of CAPA sources include:

  • Complaints/Reportable Events
  • Internal, Supplier, and Third-Party Audits
  • Service Work Orders
  • Nonconforming Materials
  • Management Reviews

Description of CAPA issue

I use the word “issue” instead of nonconformity because you need a CAPA form that will work for potential nonconformities (i.e., – preventive actions), as well as nonconformities. Typically, the wording is identical to a customer complaint or an auditor’s text, but the description of the issue identifies the symptoms observed. Specific references to records, locations, times, equipment, products, and personnel involved may be necessary for the root cause investigation.

The investigator assigned and target due date for the plan

In ISO 13485:2016, the only change to the requirements for corrective actions and preventive actions was the clarification that planning is required. Since this was always implied in the standard, your procedure should already comply with clauses 8.5.2 and 8.5.3 in the 2016 version of ISO 13485.

This section of your CAPA form should identify who is going to investigate the root cause of the issue and the date that a corrective/preventive action plan is needed. The FDA requires submitting a corrective action plan for all 483 observations within 15 business days, or it will result in an automatic Warning Letter. Most certification bodies require a plan within 30 days. Your target due date should be risk-based unless there is a specific regulatory requirement. The date will also need to be based upon the date the issue was identified—not necessarily the date the CAPA was initiated.

Documenting the investigation of the root cause is the #1 item in a CAPA form

This section always reminds me of the story about the Ohno Circle. Every company asks if they can close a nonconformity during an audit, and the answer should always be “No.” You can correct a problem, but you cannot perform a root cause investigation and implement an effective corrective action during the same audit. You need to investigate the cause and the investigation documented. Some companies include a specific tool in this section, such as a “Fishbone Diagram.” This is also a mistake because there are many root cause analysis tools, and you need to select the best one for your specific situation. You might even need to use more than one tool.

Is your CAPA form missing containment of nonconforming product?

If the issue requires preventive action, there is nothing to contain. If the issue is specific to a procedure’s deficiency, there is also nothing to contain. If the issue requires corrective action and nonconforming materials or products are involved, then you need to quarantine the affected items. If the affected product has already left the company’s direct control (see 21 CFR 806.2(l) for a definition), then you have a potential recall. Regulators often look for “bracketing” or “bounding” of the upper and lower lot limits for an issue. Therefore, this section is where you document the rationale for why certain lots of products/materials are quarantined, and other lots are not.

Correction(s) – Your CAPA form must separate this from corrective actions

Fixing the immediate problem does not prevent a recurrence, but regulators will verify that each occurrence of the issue identified during the investigation of the root cause has been corrected. You should verify that each of the nonconformities identified in the original finding and the investigation is addressed in this section of your CAPA form. For preventive actions, this section is not applicable.

Corrective Action Plan/Target Due Date for Implementation

These are the steps planned to prevent a recurrence. If the plan changes, then it should be updated. There is no need to delete the old version of the plan, but the new version should include a date when the plan was revised. For preventive actions, this section is not applicable. The target date of implementation should reflect the risk associated with the issue.

Preventive action plan / target due date for implementation

These are the steps planned to prevent the occurrence of nonconformity. If an issue occurred for one product, but not for others, the actions taken for other products can be preventive. In this case, both the corrective action plan and the preventive action plan sections should be completed. The target date of implementation should reflect the risk associated with the issue.

Corrective and preventive actions implemented – Update your CAPA form weekly

This section details what specific actions were performed—both corrective and preventive actions can be documented here. The dates of completing actions should be documented, and reasons for delays and overdue actions should be identified.

How to document your plan for verification of effectiveness – CRITICAL

I recommend filling this section before the plan for corrective and preventive action is developed. This often helps the person developing the plan to ensure that the actions planned are adequate. Whenever possible, this should be quantitative, and it helps to identify a specific date for performing the effectiveness check.

Verification of effectiveness

This section of your CAPA form is where you document verification of effectiveness. Specifically, what verification activities were performed to ensure that the corrective and preventive actions you implemented were effective. The date verification of effectiveness was performed should be documented, and if the actions were not effective, then a new CAPA should be referenced here.

Signature and closure date

Someone needs to review, sign, and date your CAPA form when it is completed. Often, regulators will review only closed records.

CAPA Form – 15 tips to avoid CAPA failure Read More »

CAPA Case Study

This blog presents a CAPA training case study related to hundreds of open CAPAs, and how to effectively remediate this issue using a CAPA filter to avoid “death by CAPA.”

Years ago, when I took my first CAPA course, the student sitting next to me explained that he was taking the course as part of a consent decree with the US FDA. Evidently. his company had hundreds of open CAPAs that were not being closed promptly, and the CAPAs were ineffective when the records were finally closed.

Hundreds of open CAPAs?!

I was in total shock. You probably only have five to ten open CAPAs at your company. How could anyone have hundreds open?

He told me that every time a customer asked for technical support, a person was paged. If the page was not answered within three minutes, this was considered a customer complaint, and a new CAPA was opened automatically. The course instructor described the situation as “Death by CAPA.” His company did three things wrong    

1. Overreaction with Microscopic Focus

The company incorrectly identified failure to meet the three-minute target response time as a customer complaint. Also, several complaints related to the same issue should not result in a CAPA specific to each complaint.

2. Lack of Management Oversight

Nobody was tracking how long CAPAs remained open. There were no actions taken when target completion dates were missed. There were no reports to management on the status of CAPAs, and the only time CAPAs were discussed in a meeting was at the annual Management Review meeting.    

3. Failure to Check Effectiveness

Instead of verifying that corrective actions were effective, the company confirmed that corrective actions were implemented. Most of the corrective actions involved “retraining” or “revising the procedure.”

For any process to work correctly, you need to ensure that the process can handle the volume. If one person is responsible for managing hundreds of CAPAs each year, the CAPA process will be ineffective. You need more resources or fewer CAPAs. My recommendation is to use a CAPA filter.

 

Capa funnel photo CAPA Case Study

A CAPA filter does two things. First, it sorts CAPAs into problem categories. For example, all the poor response times to pages should be one problem with one CAPA. Second, a CAPA filter sorts CAPAs according to risk. A response to a page within five minutes instead of three minutes results in a customer waiting longer. A customer receiving no response could have a more severe impact, especially if the customer has diabetes that cannot seem to get their glucose monitoring device to work correctly.

Trend Analysis

Therefore, response rates to pages should be a metric subject to monitoring and measuring—not necessarily a CAPA. You have a positive trend if the number of late responses is declining, and the average delay is steadily shrinking. In this case, there may be no need for a CAPA. You have a negative trend if the number of late responses is increasing, or the average delay is getting longer. In this case, one or two CAPAs may be needed—not one CAPA for each occurrence.

Depending upon the issue, there may be a safety issue associated with extreme limits. In this case, it is recommended to establish alert limits and action limits. Alert limits may increase the frequency of monitoring and measuring, and corrections may also be implemented. However, if the action limit is reached, then a CAPA may be required.

Quality Plan

When I audit a company, it is not uncommon to observe a problem and to quickly identify a root cause. This frequently happens when the issue is familiar to many companies, and the root cause is: 1) inadequate procedures, 2) insufficient training, or 3) inadequate management oversight. If the problem is limited to one area, a CAPA may be entirely appropriate. However, if I observe the same type of problems in several areas, then the root cause is systemic. This can happen in a company where the following problems exist at the same time:

  1. The training procedure does not require demonstrating training effectiveness
  2. Employees are only required to “read and understand” procedures
  3. The top management has put a “freeze” on spending related to training

In a small company, this trifecta of doom is not uncommon. Therefore, in these cases, a CAPA does not address the root cause. Many companies will mistakenly identify the root cause as an “inadequate procedure.” The correction will be to fix the problem caused by the inadequate procedure. The corrective action will be to revise the procedure.

This is only a partial solution because it does not address the root cause. A stronger approach is to identify the root cause as an “ineffective training process.” The correction will be the same. The corrective action, however, will be expanded to include the initiation of a Quality Plan for changing the company training process.

The combined approach of a CAPA plan and a Quality Plan is a better solution because the process change will affect the entire Quality Management System and will require many months to implement fully. This is especially true if resources are constrained.

Here are a couple of upcoming webinars I am doing on CAPA and Complaint Handling:

CAPA Case Study Read More »

An Auditor’s Best Practices in Issuing a Major Nonconformity

%name An Auditors Best Practices in Issuing a Major Nonconformity

From the opening meeting through the audit and closing meeting, the author describes an auditor’s best practices in issuing a major nonconformity.

As an auditor, one of the most important (and difficult) things to learn is how to issue a nonconformity—especially a major. This is usually done at the closing meeting of an audit, but the closing meeting is not where the process of issuing the nonconformity begins. Issuing a nonconformity starts in the opening meeting.

ISO 19011:2011 is the official guidance document for auditors of Quality Management Systems, and ISO 13485 is the quality system standard for medical device manufacturers. Section 6.4.2 of this Standard explains best practices for an opening meeting. The last five items in this section are critical to preparing the client for potential nonconformities:

  1. Method of reporting audit findings, including grading, if any
  2. Conditions under which the audit may be terminated
  3. Time and place of the closing meeting
  4. How to deal with possible findings during the audit
  5. System for feedback from the auditee on findings or conclusions of the audit
  6. Process for complaints and appeals
Methods of Reporting and Grading Nonconformities

The auditor should be crystal clear in their description of minor and major nonconformities or any other grading that will be used. The auditor should also make it clear that they are looking for conformity rather than nonconformity. This is an audit—not an inspection. Typically, a minor nonconformity is described as “a single lapse in the fulfillment of a requirement,” while a major nonconformity is described as one of the following: 1) “a total absence in the fulfillment of a requirement,” 2) “repetition of a previous nonconformity,” 3) “failure to address a previously identified minor nonconformity,” or 4) “shipment of non-conforming product.” When the auditor is in doubt, then the finding is minor, and never a major. For a major nonconformity to be issued, there can be no doubt.

Conditions for Termination

The option to terminate an audit is typically reserved for a certification audit where a major nonconformity is identified, and there is no point in continuing. Termination is highly discouraged, because it is better to know about all minor and major nonconformities right away, instead of waiting until the certification audit is rescheduled. The certification body will charge you for their time anyway.

Another reason for termination is when an auditor is unreasonable or inappropriate. This is rare, but it happens. If the audit is terminated, you should communicate this to upper management at the certification body and the company—regardless of which side of the table you sit. For FDA inspections, this is not an option. For audits performed by Notified Bodies, there is the possibility of suspension of a certificate in response to audit termination. Therefore, I always recommend appealing after the fact, instead of termination. Appealing also works for FDA inspections.

How to Deal with Findings

All guides and auditees should be made aware of possible findings at the time an issue is discovered. This is important so that an auditee has the opportunity to clarify the evidence being presented. Often, nonconformities are the result of miscommunication between the auditor and the auditee. This frequently happens when the auditor has a poor understanding of the process being audited. It is a tremendous waste of time for both sides when this occurs. If there is an actual nonconformity, it is also important to gather as much objective evidence as possible for the auditor to write a thorough finding and for the auditee to prepare an appropriate corrective action plan in response to the discovery.

%name An Auditors Best Practices in Issuing a Major Nonconformity
Feedback from the Auditee

As an auditor, I always encourage auditees to provide honest feedback to me directly and to management, so that I could continue to improve. If you are giving feedback about an internal auditor or a supplier auditor, you should always give feedback directly before going to the person’s superior. You are both likely to work together in the future, and you should give the person every opportunity to hear the feedback first-hand.

When providing feedback from a third-party certification audit, you should know that there will be no negative repercussions against your company if you complain directly to the certification body. At most, the certification body will assign a new auditor for future audits and investigate the need for taking action against the auditor. In all likelihood, any action taken will be “retraining.” I never fired somebody for a single incident—unless they broke the law or did something unsafe. The key to providing feedback, however, is to be objective. Give specific examples in your complaint, and avoid personal feelings and opinions.

Complaints and Appeals

As the auditee, you should ask for the contact information of the certification body during the opening meeting. Ask with a smile—just in case you disagree, and so you can provide feedback (which might be positive). As the auditor, you should always make contact information for the certification body available. If you are conducting a supplier audit or an internal audit, you probably know the auditor’s boss, and there is perhaps no formal complaint or appeals process. In the case of a supplier audit, the customer is always right—even when they are wrong.

During the Audit

During the audit, you should always make the guide(s) and process owner(s) aware of any potential nonconformities as you find them. This is their opportunity to clarify the objective evidence for you and to explain why there is not a nonconformity. Often, at this point in the audit, I will refer to the Standard. I will identify the specific requirement(s) and show the process owner. I will say, “This is what I am trying to verify. Do you have anything that would help address this requirement?” If the process owner is unsure of how to meet the requirement, often, I will provide an example of how this requirement is addressed in other areas or at other companies.

If the audit is a multi-day audit, I will review the potential nonconformities at the end of the day and allow the auditee to provide additional objective evidence in the morning. If it is the last day of the audit, or it is a single-day audit, I will give auditees until the closing meeting to provide the objective evidence. Often, I will use this opportunity to explain what would be considered a minor nonconformity and what would be a major nonconformity. Usually, I can say, “This is not a major nonconformity because…”

%name An Auditors Best Practices in Issuing a Major Nonconformity

Closing Meeting

The closing meeting should be conducted as scheduled, and the time/location should be communicated to upper management in the audit agenda and during the opening meeting. Top management won’t be happy about nonconformities, but failure to communicate when the closing meeting will be conducted will irritate them further.

At the closing meeting, the auditee should never be surprised. If an issue remains unfulfilled at the closing meeting, the auditee should be expecting a minor nonconformity—unless the issue warrants a major nonconformity. Since a minor nonconformity is described as “a single lapse in the fulfillment of a requirement,” it is difficult for an auditee to argue that an issue does not warrant a minor nonconformity. Typically, the argument is that you are not consistent with other auditors. The most common response to that issue is, “Audits are just a sample, and previous auditors may not have seen the same objective evidence.” The more likely scenario, however, is that the previous auditor interprets requirements, instead of reviewing requirements with the client, and ensuring both parties agree before a finding is issued.

If a finding is major, the auditee should have very few questions. Also, I often find the reason for a major nonconformity is a lack of management commitment to address the root cause of a problem. Issuing a major nonconformity is sometimes necessary to get management’s attention.

Regardless of the grading, all audit findings will require a corrective action plan—even an FDA warning letter requires a CAPA plan. Therefore, a major nonconformity is not a disaster. You just need to create a more urgent plan for action.

An Auditor’s Best Practices in Issuing a Major Nonconformity Read More »

10 FDA Inspection Strategies that DON’T Work

If you were just notified of an FDA inspection and you don’t think you are ready, using tricks to hide your problems is a huge mistake. I have heard a few recommendations over the years for “secrets” to hide those problems. In this post, I share my favorite “secrets”–and why they DON’T work.

Here are my top 10 ways to make an FDA inspection worse:

10. Stalling when the investigator makes a request – This just irritates investigators. At best, the investigator will use the waiting time to identify additional documents to sample or to review the information you have provided more closely. At worst, the investigator will accuse the company of not cooperating with the inspection, and the investigator may return the following week with several more team members to help them. Whenever this occurred during a third-party audit that I conducted, I would move onto another area and interview someone. However, before I left the person that was slow to respond, I provided the person with a list of documents and records that I expected to be waiting for me upon my return. In extreme cases, I had to bluntly tell the management representative that I needed documentation more quickly. As an instructor, I teach auditors techniques for coping with this tactic.

9. Suggesting records for the investigator to sample – This is specifically forbidden in the case of third-party inspections and audits. The FDA has work instructions for identifying sample sizes, and samples are supposed to be selected randomly. In reality, samples are rarely random, and usually, the investigator is following a trail to a specific lot, part number, etc. When clients offered me samples, I tried to be polite and review the record they provided. However, I also would request several other records or follow a trail, as I have indicated above. Another approach I often use is to focus on high-risk items (i.e., – a risk-based approach to sampling). In general, you can expect the FDA investigators to sample more items than a registrar–and sample sizes are often statistically derived if the number of records is sufficiently large. When sample sizes are quite small, I recommend sampling 100% of the records since the previous inspection/audit. This is not always possible for third-party auditors, but internal auditors often can achieve this.

8. Outsourcing processes to subcontractorsThe FDA recently reinstated the requirement for contract manufacturers and contract sterilizers to be registered with the FDA by October 1, 2012. Therefore, hiding manufacturing problems from the FDA by outsourcing manufacturing is increasingly more difficult to do. In addition, the FDA focuses heavily on supplier controls and validation of outsourced processes. Therefore, an investigator will identify high-risk processes performed by subcontractors and request documentation of process validation by that supplier. If the company does not have the validation reports, this could quickly escalate to a 483, and possibly a visit to the subcontractor.

7. Trying to correct problems during the inspection – This is what I like to call the document creation department. At one company I worked for, we noticed a mistake across several of the procedures and made a change overnight between the first and second days of the audit. When the auditor asked for the procedures in the morning, he asked, “Is the ink dry yet?” The auditor then proceeded to request records that demonstrated compliance with the newly minted procedures. As you might have guessed, this resulted in several nonconformities. When clients attempt to correct problems found by an investigator, the investigator typically will respond with the following statement, “I applaud you for taking immediate action to contain and correct the problem. However, you still need to perform an investigation of the root cause and develop a corrective action plan to prevent a recurrence. To do this investigation properly may take several days.” I also teach auditors to memorize this phrase.

6. Writing a letter to file – When companies make minor design changes, one of the most common approaches is to “write a letter to file.” This phrase indicates that the design team is adding a memo to the Design History File (DHF) that justifies why design validation is not required or why regulatory notification/approval is not required. The FDA used to publish a decision tree to help companies make these decisions. In fact, such a decision tree is still part of the Canadian significant change document. The FDA recently withdrew a draft document that eliminated many perceived opportunities to utilize the “letter to file” approach. However, the FDA will still issue a 483 to a company if the investigator can identify a change that required validation that was not done, or a 510(k) that was not submitted for a design change. In fact, the FDA looks explicitly for these types of issues when an investigator is doing a “for cause” inspection after a recall or patient death.

5. Shut it down – Not running a production line that has problems is an ideal strategy for hiding problems. However, the FDA and auditors will simply be forced to spend more time sampling and reviewing records of the problematic production line. If you need to shut a line down, ensure everything is identified as nonconforming, and carefully segregate rejected product from good product. You should also use these problem lines as an opportunity to show off your investigation skills and your ability to initiate CAPAs. If you simply forgot to validate a piece of equipment, or do some maintenance, take your lumps and keep production running. If you are a contract manufacturer, never shut it down without notifying the customer. If you do not tell your customer, you will get a complaint related to on-time delivery and a 483.

4. Storing all records off-site – I first heard about this tactic during an auditor course I was co-teaching. During the course, we had many reasons why the company should be able to provide the records in a timely manner. However, I have experienced this first-hand as a third-party auditor. When this happens, I do three things: 1) increase my sampling of records that are available, 2) carefully review supplier controls and supplier evaluation of the storage facility (assuming it is outsourced), and 3) verify that the company has a systematic means for tracking the location (i.e., – pallet and box) for every record sent to storage. FDA investigators will simply move along to another record and follow-up on their earlier request with a second visit, or a request to send a copy of the document to them after the inspection.

3. Identifying information as confidential – A company can claim information is confidential and may not be shared with the public. Still, very little information is “confidential” concerning the FDA or Notified Bodies. Therefore, this strategy rarely works. In fact, this will enrage most FDA investigators. In training courses, I train auditors to ask the auditee to redact confidential information. For example, a CAPA log may have confidential information in the descriptions, but the trend data on opening and closing dates are never confidential.

2. The FDA is not allowed to look at those records – Although this statement is technically true for internal audit reports and management reviews, the FDA always says that they can access this information through the CAPA system. What the FDA means is that there should always be evidence of CAPAs from internal audits and management reviews. If there is not, then this will quickly become a 483. Another person I met tells the story that when they agreed to share the management review records with the investigator, the inspector rarely issued a 483. When they refused to share the management review with the FDA, the inspection went quite badly from that point forth. I don’t agree with being vindictive, but it happens.

1. Show me where that is required – This is just silly. Investigators and auditors are trained on the regulations, while you are educated on your procedures. Spend your time and effort, figuring out how your procedures meet the regulations in some way. Challenging the investigator excites the investigator. We all like a challenge–and we rarely lose. One auditee tried this approach with me in front of their CEO. This experience allowed me to show off that I had memorized the clause in question–and the corresponding guidance document sections. I think the CEO realized quickly that the management representative was not qualified.

My final advice is to do your best to help the investigator do their job, and treat every 483 as “just an opportunity to improve.” Just ensure you submit a response in 14 days, or you will receive a Warning Letter too!

10 FDA Inspection Strategies that DON’T Work Read More »

Scroll to Top