vendredi 26 septembre 2014

Congrès A3P... J-14 !


Plus que 14 jours avant le prochain congrès A3P !

Il est encore temps pour vous inscrire et participer les 14, 15 et 16 octobre prochains aux 10 ateliers et 16 conférences sur les thèmes de la maîtrise de la contamination, des utilités pharmaceutiques, des dispositifs médicaux et de l'annexe 1.

Plus d'informations sur le site A3P.

Des nouvelles Q&A de la FDA sur la conformité électronique...

Après la prise de position importante de la FDA sur la nécessité de conserver les enregistrements électroniques des rapports chromatographiques publiée en 2010, la FDA répond à deux questions sur l'utilisation de profils d'accès partagés entre plusieurs individus et sur l'utilisation de la signature électronique pour les enregistrements de contrôle et de production.

On notera également l'objection sur les pratiques de "trial injection" qui ont fait l'objet de plusieurs "warning letters" dans un passé récent.

Plus d'information ici

lundi 8 septembre 2014

Une mise en demeure sérieuse en matière de validation...

Cette société américaine de dispositifs médicaux a reçu un avertissement sérieux sur ses pratiques en matière de validation informatique :


1.    Failure to establish and maintain procedures for validating the device design, including risk analysis where appropriate, as required by 21 CFR 820.30(g). For example: a)    Your procedure number OP-11, Rev. E, Design Control, and procedure number OP-43, Software Quality Assurance Procedure, followed when a design contains software, do not include or refer to a process for conducting software validation. Specifically, section 5.1 of the procedure OP-43, Software Quality Assurance Procedure, states that validation should be conducted in light of the “level of concern” for software used in infusion pumps or accessory devices. However, the procedure does not provide, or refer to, a process for determining “level of concern” and establishing validation plans that are appropriate to the identified level of concern. Your responses dated May 7, 2014 and June 3, 2014 are not adequate. Your firm indicated that procedure number OP-43 was revised to address levels of software validation; however, your revisions do not address how the scope of the validation plan relates to the applicable “level concern”. b)    According to section 5.3.2.5 of the procedure number OP-43, Software Quality Assurance Procedure, a traceability analysis or matrix should be created that links requirements, design, specification, hazards, and validation. However, no traceability analysis has been documented since software version 1.600.1 Model 3860/3850 dated May 29, 2008. The current software version for Model 3860 is version 3.5.1 and is version 585.11.1 for Model 3850. Your responses dated May 7, 2014 and June 3, 2014 are not adequate. Your firm indicated that you revised the procedure OP-43 to clarify the traceability methods used during software development. Your firm also indicated that it documented traceability for all software changes for the 3860 MR infusion pump up to software version 3.5.1 and that similar revisions were documented for the 3850 MR Infusion Pump system. However, your firm did not indicate whether all required employees, such as employees in other departments governed by this procedure, were trained on the revised procedure and how it plans to assess effectiveness of the training to ensure traceability is being documented as and when software changes are made. c)    According to the section 5.7.1.1 of the procedure number OP-011, Rev. E, Design Control, design verification and validation should include examination of performance in relation to design specification, among others, extremes of input data. However, the firm’s software testing related to dose rate validation does not identify the boundaries that were tested. Your responses dated May 7, 2014 and June 3, 2014 are not adequate. Your firm provided a copy of its revised procedure number OP-43 “Software Development Process”, which includes the requirement that all unit tests, including boundary testing, are performed prior to software release (Section 5.6.2). Additionally, the firm provided a copy of the functional verification testing for the MRidium 3860 System software version 3.5.1 to show that this testing included a challenge to the boundary values for each of the pump’s selectable parameters. However, the procedure OP-43 does not provide, or refer to, a process for determining the boundary conditions. Also, your firm did not provide plans for conducting a retrospective review of all validation where boundary testing was performed to ensure the chosen boundaries were appropriate for the testing and that they are adequately documented...
 2.    Failure to establish and maintain procedures to ensure results of a design review, including identification of the design, the date, and the individual(s) performing the review, shall be documented in the design history file, as required by 21 CFR 820.30(e). For example: a)    An independent code review performed subsequent to June 2013 software change identifies you (Mr. Robert E. Susi), your Vice-President- QA/RA officer, and one of the firm’s software engineers who is the author of the code, as primary reviewers. However, you stated during the inspection that neither of these individuals participated in the actual review and that the review was performed by you and Mr. Dave Hefele. Further, a review of section 5.6, Design Review, of your firm’s procedure number OP-11, Rev. E, Design Control, indicates that it does not specify how to identify design review participants and ensure those individuals included do not have direct responsibility for the design state being reviewed. The response dated May 7, 2014 appears to be adequate. Your firm modified its Design Review Form (Form #LF250) to separately identify the designer/author from the independent reviewer. Your firm also conducted a retrospective review of previous Design Reviews and added a cover sheet to each specifying the designer/author and the independent reviewer. The adequacy of this correction will be verified during FDA's next scheduled inspection of your facility.

Ceci devrait amener les utilisateurs réglementés à vérifier et évaluer leurs pratiques internes.

Pour plus d'information sur nos missions d'audit et d'évaluation de la conformité de vos pratiques SI, cliquez-ici.