GMP change control
Everything you need to plan, assess, approve and verify changes the way EU GMP Chapter 1, Annex 15 and ICH Q10 expect. Free guides, findings and a self-check, plus the practitioner course that teaches the whole method.
6 modules · 2.5 hours, self-paced · verifiable certificate with a unique id
The first lesson of Module 1, in full. See how the course teaches before you pay.
Start the lessonTen inspection scenarios. Find out which part of your change system would generate a finding.
Take the self-checkThe change request form, the impact assessment and the QA checklist, in a working version you can use today.
Open the templatesMapped to the regulations you are inspected against
Referenced for educational context. No regulator endorses or accredits training providers.
Change management is a recurring deficiency category in EU inspection data and EudraGMDP non-compliance statements. It is rarely because sites have no procedure. It is because of these.
The part was swapped, the parameter adjusted or the software patched, and the paperwork followed a week later. A change control opened after implementation is a deviation with a different form number.
Same function, different supplier, different material of construction. Without a documented equivalence assessment, 'like-for-like' is an opinion, and the inspector will test it.
Validation: no. Regulatory: no. Stability: no. Nobody from those functions signed, and nothing explains why the answer is no. The assessment asserts impact rather than assessing it.
A change to a registered particular went live at the site while the dossier still said the old thing. Under Regulation 1234/2008 that is a batch made outside the marketing authorisation.
The record closes when the actions are ticked. Whether the change did what it was meant to do, and did nothing else, was never measured, so the effectiveness check is a signature on a blank line.
IT changes go through a service desk with no QA review, no risk assessment and no regression testing. Annex 11 section 10 applies to every change to a validated system, including patches and configuration.
Regulators treat training as part of the quality system, not a favour to staff: EU GMP Chapter 2 requires it, requires its effectiveness to be assessed, and requires the records to prove it. The evidence says the same thing in numbers. Below: what the published studies found, what it looks like on your change control KPIs, and the clause behind it.
41%
fewer quality defects
in the most engaged teams compared with the least engaged, across 112,000 business units. Engagement and development opportunities are measured together. [1]
26%
greater ability to deliver quality products
in organisations with a strong learning culture compared with those without. [2]
37%
higher employee productivity
in the same strong-learning-culture organisations; output per person, not hours. [2]
94%
would stay longer
of employees, at a company that invests in their learning. Retention is the quality metric nobody puts on the dashboard. [3]
The change control KPIs a trained team moves
These are the numbers a QA head reports at management review and an inspector asks for. No invented percentages here: measure yours before and six months after, and you will have your own.
Overdue change controls
Measured as: % of open changes past their target date
Lower is better
Change owners who classify correctly and scope the impact assessment on day one do not stall at approval. Overdue falls; controlled extension with a rationale replaces silent lateness.
Changes implemented before approval
Measured as: % of audited changes
Lower is better
People who understand what counts as a change, and why the approval gate exists, stop making the small change first and raising the record afterwards. This is the finding inspectors write up most.
Impact assessments complete first time
Measured as: % accepted without QA return
Higher is better
Cross-functional impact written to the standard the first time: validation, regulatory, supply and training questions asked at classification, not discovered at closure. QA review becomes review, not rewriting.
Time to approval
Measured as: median days, raised to approved
Lower is better
A clear classification, a complete impact assessment and named approvers cut the loops between the change owner and QA. Fewer returns, fewer meetings, faster approval.
Effectiveness checks passed
Measured as: % of checks passed at review
Higher is better
Effectiveness criteria defined before implementation, measuring whether the change delivered what it promised rather than whether the actions were ticked. Passed checks mean the change worked.
Changes closed with all actions verified
Measured as: % closed with objective evidence of every action
Higher is better
Closure with evidence cited by identifier: the updated SOP number, the training record, the validation report. No change is closed on a promise, so no dossier mismatch is found later.
Be first when the course opens
Leave a work email. You are notified before public launch and get the launch price. Nothing else is sent.
Plan, classify, assess, approve, implement and verify changes so that the validated state, the registered dossier and the quality agreements all survive, and the record proves it.
Hosted on The GMP Training Academy. Launching soon. People on the waitlist are notified first and get the launch price.
Why changes fail: lessons from inspection findings
Change classification and regulatory impact
Impact assessment across QMS, validation and supply
Approval, implementation and verification
Effectiveness checks and closure
Change control for computerised systems
A fair comparison with the two alternatives most sites use. If the classroom course is genuinely better for you, book it. Most of the time it is not the classroom that is the problem, it is the follow-through.
| This course | Generic GMP e-learning | Two-day classroom course | |
|---|---|---|---|
| Price per person | Launch price to be announced | €40 to €90 | €1,200 to €2,000 plus travel |
| Time away from work | 2.5 hours, in your own time | 1 to 2 hours | 2 days |
| Written by | Practitioners who review and approve changes | Content agency | Varies |
| Practice on real records | Yes, three full change records | No | Sometimes, on the day |
| Regulation cited by clause | Every module | Rarely | Usually |
| Templates you can use tomorrow | Change request, impact assessment, implementation plan | No | Sometimes |
| Assessment and certificate | Yes, verifiable ID | Completion certificate | Attendance certificate |
| Questions answered by the author | Yes | No | On the day only |
| Access period | 12 months, with updates | Varies | None after the event |
Each guide answers one question a QA reviewer or change owner actually asks, cites the clause, and shows the weak version next to the defensible one.
What EU GMP Chapter 1, Annex 15, ICH Q10 and ICH Q7 actually require of a change management system, what falls inside it, what is genuinely like-for-like, and why sites lose the validated state one uncontrolled change at a time.
Read the guideHow to classify a change on the site's quality system scale and, separately, on the regulatory scale: EU variation types IA, IB and II under Regulation (EC) 1234/2008, the classification guideline, and substantial changes under the MDR for devices.
Read the guideHow to run an impact assessment that covers validation, cleaning, stability, analytical methods, regulatory, quality agreements, supply, documentation and training, with the people who can actually answer, and the evidence to show why the answer is no.
Read the guideThe difference between approving a change and approving its implementation, how to build an action plan whose pre-requisites gate go-live, what verification means, and why dates on the change record are the first thing an inspector checks.
Read the guideWhat Annex 15 11.5 and ICH Q10 3.2.3 mean by evaluating effectiveness, how to define the measure and the window when the change is raised, why closing on completion is a finding, and how to trend the change control system itself.
Read the guideHow Annex 11 section 10 and GAMP 5 second edition apply to changes to validated computerised systems: configuration versus customisation, patches and cloud releases, regression testing, the audit trail as evidence, and why IT change and GMP change control cannot be separate systems.
Read the guide10 scenario questions, each with the clause behind the answer. About eight minutes. No sign-up. You get a readiness band and the modules that would close your gaps.
An impact assessment for a change to a coating pan exhaust fan reads: Validation, no impact. Regulatory, no impact. Cleaning, no impact. Training, no impact. It is signed by the requesting engineer and QA. What is the main weakness?
Answer and explanation in the self-check.
What the inspector wrote, why, and what would have prevented it. The fastest way to learn what gets cited.
Change management: changes implemented prior to approval
Change control CC-25-0112 revised the granulation end point in the batch record for product X. The first batch manufactured with the revised end point was completed on 18 March. The revised batch record was approved on 21 March, operator training was recorded on 25 March and the change control was approved for implementation on 28 March. Three further changes reviewed showed the same pattern.
Read the breakdownChange management: replacements not assessed for equivalence
Review of maintenance work orders for the purified water system identified 14 component replacements over 18 months recorded as like-for-like. In six cases the replacement was from a different manufacturer or of a different material of construction, including a UV lamp of a different output and a pump seal of a different elastomer. No equivalence assessment was documented for any of the 14. The procedure permitted the maintenance technician to determine like-for-like status.
Read the breakdownChange management: inadequate impact assessment
Change control CC-24-0387 replaced the coating pan exhaust fan with a unit of higher capacity. The impact assessment recorded 'no impact' for validation, regulatory, cleaning, stability and training, with no rationale, and was signed by the requesting engineer and QA only. Validation, regulatory affairs and production were not consulted. Subsequent deviation DEV-25-0041 attributed a coating uniformity drift to altered drying conditions resulting from the increased exhaust rate.
Read the breakdownThe course was not written from a syllabus. It was written from what regulators publish about what goes wrong with change control, then worked back to the practice that would have prevented it.
EudraGMDP non-compliance statements
Statements of non-compliance with GMP published by EU national competent authorities, where uncontrolled changes, loss of the validated state and dossier mismatches are cited, most often for changes made before assessment.
National competent authority inspection findings
Published deficiency trends and annual inspection reports from EU national authorities. Change control, qualification and validation under Annex 15 and Chapter 1 recur in the top categories, typically for changes to procedures, equipment and computerised systems made without assessment and approval by QA.
EMA GMP/GDP Inspectors Working Group and PIC/S publications
EMA Q&As on change management, the validated state and outsourced activities, and PIC/S guidance including PI 041-1 on data integrity for computerised system changes.
EU GMP Annex 15, Annex 11, ICH Q9 (R1) and ICH Q10
The expectations behind the findings: what a change record must contain, how risk should drive the assessment, and the regulatory question ICH Q10 3.2.3 requires.
Site change records reviewed in consultancy and audits
Anonymised change controls, used to build the practice records and the weak-versus-defensible examples.
Tap a term. The full glossary has 35 terms, grouped by stage of the process.
Open the glossaryA replacement identical in form, fit, function, material of construction and manufacturer part number, so that all existing qualification evidence applies without argument. The only legitimate exemption from formal change control, and only when the equivalence is documented.
Annex 15 11.2; EU GMP 3.34
Seat licences for the department or the site, a manager view of progress, and completion records exported for your training matrix. Content can be mapped to your SOP numbers on request.
If your question is not here, the contact page reaches a person, not a ticket queue.
A short breakdown of a real inspection finding, what went wrong and what would have prevented it. Unsubscribe in one click.
6 modules, real change records, a template you will use tomorrow, and a certificate your training matrix can reference. Launching soon. People on the waitlist are notified first and get the launch price.