Post-Change Management Evaluation

🚀 Back to Basics: Pharma Edition — Smart Change Management 👉 "Is every change really a Change Control?" 🔎 Understanding the basics of change evaluation is key to ensuring compliance without overcomplicating processes. Here’s the simple breakdown: 👉 When a Change Control is needed: – Changes impacting product quality, patient safety, or GMP compliance – Modifications affecting validated systems, equipment, or critical utilities – Regulatory commitments or marketing authorization requirements 👉 When a Change Control may not be needed: – Minor administrative updates (no GMP impact) – Routine maintenance within validated parameters – Cosmetic facility improvements without process effect 💡 Pro Tip: – Always perform an impact assessment first. Smart evaluation prevents unnecessary workload and focuses energy where it truly matters. 📚 Reference: – ICH Q10 (Pharmaceutical Quality System) – WHO Technical Report Series No. 1019, Annex 3 How does your organization decide what truly needs a Change Control? Let’s exchange insights! 💬

The recently announced changes in #FCPA enforcement strategy, and resulting uncertainty, have understandably generated anxiety within the #ethics & #compliance community. While this shift in risk impact/likelihood is closer to home, and your cheese may have been moved, it still requires a proactive and dispassionate assessment of the potential impacts on your ethics & compliance program and workplace culture. Here at Integrity Bridge LLC, we’ve been brainstorming with clients and business partners about the immediate questions to be considering: ➡️ Company Strategy & Risk: you might be worried that management is going to adversely react to the announced pause on FCPA enforcement. But they are likely distracted by other more pressing matters. Will new tariffs require a change in supply chains? Will it affect country entry/exit or M&A decisions? Has your risk of regulatory enforcement increased in other countries as a result of trade tension? As risk & compliance leader,  are you part of those strategy and risk conversations? ➡️ Risk Assessment & Remediation: The change in FCPA enforcement policy represents a shift in your corruption risk profile. Are there company locations/third parties who might see this as an opportunity to engage in inappropriate behavior? Do you need to increase monitoring in those areas? Is there merit in management restating their commitment to compliance with corruption laws to employees and third parties? And reinforcing the importance of speaking up if someone does request a bribe? ➡️ Third Party Risk Management: What is going to be your response if third parties now refuse to answer questionnaires or accede to audits? Is this now the opportunity to align corruption due diligence with e.g. sanctions, forced labor and cyber-security due diligence? ➡️ Monitoring: irrespective of how you feel about the initiative, there are strong parallels between some of the work that DOGE is doing (identification of potential fraud/overspend) and what compliance functions do. Is that an opportunity to explain the transaction monitoring work your team does, and how it could do more with appropriate resourcing? ➡️ Investigations: as Hui Chen notes in her excellent article (link below), there is perhaps less need to involve outside counsel in the investigation of corruption allegations. But do you have robust investigation governance, expertise and appropriate access to communications/data to diligently investigate those allegations? ➡️ Budget: You’ve just had your 2025 budget approved based on a certain set of assumptions. Rather than waiting for the question from leadership, do you need to firm up your ROI business case? (Nick Gallo has incredible resources to support this). Or even proactively pause on a particular compliance program investment until things become clearer? I would love to hear from you on other practical measures you are adopting in response to this change. #ethics #compliance #cco #complianceofficer #fcpa

Stop guessing how to comply with the EU AI Act. 🇪🇺 Start using the most practical, detailed, and free guide on conformity assessments I’ve seen yet. 📘 The Step-by-Step Guide to Conformity Assessments (April 2025) walks you through the actual requirements under the final version of the AI Act — not abstract summaries, not legalese-heavy bullet points — just clear, structured, operational steps. This isn’t just a PDF. It’s a compliance playbook for high-risk AI systems. And yes, it’s free. What’s inside? ✅ A visual decision tree to assess if conformity assessments (CA) apply to you ✅ Roles and responsibilities (who must do what — provider, deployer, importer?) ✅ When and how to perform internal vs third-party assessments ✅ Clear mapping of all seven requirements in Chapter III, Section 2 (RMS, datasets, docs, logs, transparency, oversight, security) ✅ Detailed guidance on the post-market obligations, including monitoring and corrective actions ✅ Explanation of how standards, sandboxes, and derogations affect your CA strategy ✅ Fully updated to the final AI Act text (June 2024 corrigendum) 🛠️ Why it matters? Because conformity assessments are the backbone of high-risk AI governance. And unless you want to be chasing interpretations in 2026, this is the resource to start from. 🙌 Huge thanks to the authors Andreea Serban, Vasileios R., and Katerina Demetzou, and to the editors and contributors from Future of Privacy Forum and OneTrust. Your work is not only accurate — it’s actually usable. That’s rare. #AIGovernance #AIAct #EULaw #AICompliance #ResponsibleAI === Did you like this post? Connect or Follow 🎯 Jakub Szarmach Want to see all my posts? Ring that 🔔.

Can I add features after my initial MDR certification? Yes, but treat every new feature as a formal change. Whether you need Notified-Body involvement depends on how the change touches intended purpose, risk, and conformity evidence. 1. Start with intended purpose and class → If a feature changes the intended purpose or pushes the device into a new risk class, you’re looking at a major change and fresh NB assessment. (Art. 2(12); Annex VIII) 2. Check your conformity route duties → Annex IX (QMS): you must inform the NB of substantial changes to the QMS or the device range covered. (Annex IX §2.4) → Type-examination: changes to the approved type require NB review and approval before placing on the market. (Art. 56(4); Annex X §6) → Product verification / production QA: apply the same change-notification logic per your certificate scope. (Annex XI) 3. Test “significance” against the GSPRs → If the feature could affect compliance with Annex I requirements (performance, safety, usability, materials, sterilisation, cybersecurity), notify the NB and submit the updated technical documentation. If not, document the rationale and evidence in your change file. (Annex I; Annex II) 4. Software features need extra checks → Reassess Rule 11 impact and your clinical functionality. Algorithm changes that influence diagnosis or therapy are typically significant. Align your 62304 change class with the regulatory change record, and update clinical evaluation where functionality shifts. (Annex VIII Rule 11; Annex XIV Part A) 5. Labels, IFU and claims → Update IFU, labels and website claims to stay aligned with the intended purpose; route edits through QMS review. (Annex I §23; Art. 7; Art. 10(9)) 6. UDI impact → Some design or performance changes trigger a new UDI-DI, and major scope shifts can require a new Basic UDI-DI and certificate update. Record the decision and rationale in your UDI procedure. (Art. 27; MDCG 2018-1) 7. Clinical and risk files → Update risk management, clinical evaluation and PMCF to cover the new feature, and reflect it in PMS/PSUR. (Art. 61; Annex XIV Part B; Annex III) Bottom line: you can add features after certification, but run them through formal change control. If they alter intended purpose, risk class, safety or performance claims, or trigger UDI changes, coordinate with your Notified Body before you ship. If you have any questions about regulatory, leave a comment! ⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡⬡ MedTech regulatory challenges can be complex, but smart strategies, cutting-edge tools, and expert insights can make all the difference. I'm Tibor, passionate about leveraging AI to transform how regulatory processes are automated and managed. Let's connect and collaborate to streamline regulatory work for everyone! #automation #regulatoryaffairs #medicaldevices

Excellence in Change Management: Industry Best Practices for QMS... Change Management is a critical process within a Quality Management System (QMS) that ensures all modifications are systematically evaluated, implemented, and verified to maintain compliance, quality, and efficiency. Following are the critical stages or steps as a part of the Change Management process are: ***Raise a Change Request 📝 - Categories: Product, Process, Supplier, etc. - Key Elements: - Current State: Detailed description of the existing condition. - Proposed Change: Clear definition of the intended modification. Rationale: Justification for the change, including potential benefits. Supporting Documents: Include validation reports, data, and other evidence. ***CFT Review - Approval: Conduct a multi-disciplinary review. - Feasibility/Risk Analysis 🛠️: Assess the impact on cost, quality, safety, and compliance. - Risk Mitigation Plan ⚠️: Develop strategies to address identified risks. ***Document Impact Assessment 📄 - Affected Documents: Identify changes needed in PFD, PFMEA, CP, work instructions, etc. - Training Requirements: Ensure all affected personnel are trained on the updated documents. - Document Control: Maintain version control and ensure all changes are tracked. ***PPAP Impact ✅ - Internal/External PPAP: Determine if the change requires a Production Part Approval Process (PPAP) submission. - Validation: Ensure that the change does not affect the PPAP outcome. ***Action Item Documentation 📋 - Comprehensive Documentation: List all action items, responsibilities, and deadlines. - Impact Assessment: Record the effect of each action on the overall process. - Review and Approval: Ensure each action is reviewed and signed off by relevant stakeholders ***Implementation and Effectiveness Verification 🔍 - Execution: Implement the change according to the plan. - Effectiveness Check: Conduct post-implementation reviews to verify the effectiveness. - Continuous Improvement: Gather feedback and refine the process as needed. Our Next Gen eQMS Solution offers a comprehensive, end-to-end Change Management module that integrates all the best-in-class practices outlined in this document. This isn't just a stand-alone feature; it's part of a fully interconnected platform with built-in linkages to other key processes and modules. If you're eager to explore and delve deeper into 'End-to-End Next Gen eQMS,' reach out to us for expert guidance and tailored solutions to improve your Cost of Quality (CoQ) and build a robust Quality Culture in your organization. ✍️ Discover more valuable content on QMS, EHS, QA, QC, Problem Solving, and Next Gen QMS by connecting with me, and let's embark on this journey together! 🚀 #changemanagement #eqms #qualityculture #qa #qms #qualityassurance #qualitymanagement #qualitymanagementsystem

API Source Change: Key Considerations Changing the API source requires evaluating its impact on safety, efficacy, stability, and manufacturability. Below are the key factors to assess: 1. Physicochemical Properties 1. PSD: Check D10, D50, D90 for dissolution, bioavailability, and uniformity impact. 2. Polymorphism: Ensure the same polymorphic form to maintain solubility, stability, and bioavailability. 3. Morphology: Assess crystalline vs. amorphous nature, surface area, and compression impact. 4. Hygroscopicity: Evaluate moisture absorption and its effect on stability. 5. Thermal Behavior: Consider melting point for granulation and drying processes. 6. Solubility & pH Profile: Compare aqueous and pH-dependent solubility. 7. Excipient Compatibility: Conduct DSC & FTIR to check for interactions. 2. Dissolution & Bioavailability 1. Dissolution Profile: Compare dissolution in 0.1N HCl, phosphate buffer, etc. 2. BCS Class: If BCS II/IV, minor changes can impact absorption; BE studies may be required. 3. Intrinsic Dissolution Rate: Ensure rate-limiting steps remain unchanged. 4. Permeability & Absorption: Check for significant deviations in permeability. 3. Stability Considerations 1. Forced Degradation Studies: Assess stability under acid, base, oxidative, thermal, and photolytic stress. 2. API Stability Profile: Compare impurity levels to ensure no new degradation pathways. 3. Shelf-life & Packaging: Conduct accelerated stability testing and confirm packaging suitability. 4. Regulatory & Compliance 1. Pharmacopeial Compliance: Verify USP, BP, EP, IP, JP compliance. 2. Impurity Profile: Ensure limits meet ICH Q3A/B guidelines. 3. Genotoxic & Elemental Impurities: Check for new GTIs or heavy metals. 4. Regulatory Filing: Determine if a DMF update, ANDA variation, or CMC supplement is required. 5. Supplier GMP Compliance: Confirm GMP certification and review COA, DMF, stability data, and residual solvents. 5. Manufacturing & Process Impact 1. Flowability & Compressibility: Assess effects on granulation and blend uniformity. 2. Granulation Suitability: Check performance in wet/dry granulation and direct compression. 3. Bulk & Tapped Density: Ensure dose uniformity and consistency. 4. Blending & Scale-up: Confirm blend uniformity, yield, and batch reproducibility. 6. In-vivo Considerations 1. BE Studies: Conduct if dissolution profiles differ significantly. 2. Pharmacokinetics (PK): Assess absorption and metabolism impact. 7. Risk Assessment & Final Decision 1. Comparability Protocol: Summarize findings to justify equivalence with the old API. 2. ICH Q12 Compliance: Ensure regulatory alignment. 3.. Implementation: If all parameters are met, proceed with regulatory filing and validation. Conclusion API source changes demand scientific, regulatory, and process evaluations to prevent any adverse impact on drug performance. A thorough risk assessment and compliance check is critical before implementation.

Scenario Based AML/KYC Preparation. 1.Scenario: Reassessing Risk Profiles Question: A previously low-risk client has begun engaging in activities that raise their risk profile. How would you handle this situation? Answer: - Reassess the Client’s Profile: Conduct a thorough review of the client’s recent activities and transactions to determine the cause of the increased risk. -Update Risk Rating: Adjust the client’s risk rating accordingly, ensuring that all relevant documentation is updated to reflect the new assessment. - Implement Enhanced Monitoring: Increase the frequency of monitoring for the client’s transactions and activities to detect any further unusual patterns. - Engage with the Client: Reach out to the client to discuss the changes and gather additional information regarding their recent activities. 2.Scenario: Suspicious Payments from Third Parties Question: You identify a client receiving multiple payments from unrelated third parties. What steps would you take to investigate? Answer: - Analyze Payment Details: Review the details of the payments, including amounts, frequency, and the relationship between the client and the third parties. - Contact the Client: Reach out to the client to inquire about the nature of these payments and the reasons for receiving them from multiple sources. - Investigate Third Parties: Conduct background checks on the third parties involved to assess their legitimacy and any potential connections to criminal activity. 3.Scenario: Client Withdrawals Post-SAR Filing Question: After filing a SAR for a client, you notice a significant increase in withdrawal activity. How do you respond? Answer: - Monitor Closely: Increase monitoring of the client’s account to assess the nature of the withdrawal activity and determine if it is part of a larger pattern of suspicious behaviour. - Assess Risks: Evaluate the risks associated with the withdrawals, including the amounts and the purposes indicated by the client. - Engage the Client: If appropriate, contact the client to inquire about the increase in withdrawals and gather any necessary documentation. .- Document Findings: Keep detailed records of all activities and communications related to the client during this period for compliance purposes. 4.Scenario: Changes in Beneficial Ownership Question: You learn that a client has undergone a significant change in beneficial ownership. How do you handle this information? Answer: - Request Updated Documentation: Obtain the new ownership structure documentation and verify the identities of the new beneficial owners. - Conduct Background Checks: Perform due diligence on the new owners to assess their legitimacy and any potential risks associated with them.

~MOC Management Of Change ~ • Scope: - Facility design & equipment - Operational procedures - Organizational structure - Work activities & methods • Core principles: 1. Risk-based approach 2. Proactive assessment 3. Continuous improvement • Key benefits: - Accident prevention - Regulatory compliance - Operational efficiency - Cost savings • Process steps: 1. Change identification 2. Risk assessment 3. Review & authorization 4. Safe implementation 5. Documentation & communication 6. Post-change evaluation • Critical applications: - High-risk industries - Complex systems - Regulated environments • Challenges: - Cultural resistance - Resource constraints - Adapting to rapid changes • Communication strategy: - Stakeholder engagement - Clear change documentation - Tailored training programs - Feedback mechanisms • MOC frequency: - Industry-dependent - Ranges from daily to yearly - Higher in dynamic sectors - Peaks during major transitions • Success factors: - Leadership commitment - Employee involvement - Robust tracking system - Regular audits and reviews

The process for commissioning completion, often referred to as “Management of Change” (MOC) in the context of commissioning, involves several crucial steps to ensure that all modifications to a project are documented, assessed, and implemented correctly. Identification of Change recognize the need for a change in design, equipment, or procedure that affects the commissioning process. Documentation complete a change request form to document the proposed change. This form should include details such as the description of the change, the reason for the change, and any associated risks. Evaluation Assess the impact of the proposed change on the project's scope, costs, safety, timeline, and compliance with regulations. This may involve technical evaluations, risk assessments, and consulting with relevant stakeholders. Approval Obtain approval from necessary stakeholders, which might include project managers, safety officers, or regulatory bodies. This step ensures that all parties are informed and agree on how to proceed. Implementation Planning Develop a clear plan for how the change will be implemented, including timelines, responsibilities, and resources required. Execution Carry out the change according to the implementation plan. This step may also include updating drawings, procedures, and documentation to reflect the new changes. Commissioning Activities Revise commissioning plans as necessary, along with conducting any required tests or inspections to ensure that the system meets operational requirements after the change. Training If applicable, provide training for personnel on the new systems, procedures, or equipment resulting from the change. Documentation Update Ensure that all relevant documentation, such as operation manuals, maintenance plans, and project records, are updated to incorporate the changes. Review and Closeout Finally, review the change to ensure objectives have been met and close out the MOC process. This may involve a final approval sign-off and ensuring that all records are properly archived!!

Everyone says “change is happening” But how do you know it’s actually working? Change initiatives are easy to start. Harder to measure. Without clear indicators, leaders guess if progress is real And guesswork rarely works Top change leaders track these metrics to stay ahead: 1/ Achievement → How close did we get to our change goals → Focus on learning first, then performance Example: % of project milestones met vs. planned 2/ Completion → How well did we execute on schedule, scope, and budget → Example: Tasks finished on time and within budget 3/ Acceptability → Stakeholder satisfaction with the process and solution → Example: Survey scores, qualitative feedback 4/ Engagement → How involved are teams and stakeholders in the change → Example: Attendance in workshops, participation in feedback sessions 5/ Adoption → Are people actually using new systems, behaviors, or processes → Example: % of employees actively using a new tool or workflow 6/ Sustainability → Are changes sticking over time or fading → Example: Reassess behaviors 3–6 months post-change 7/ Impact → The measurable difference on business outcomes → Example: Efficiency gains, revenue growth, or error reduction Stop hoping for progress. Start proving it. P.S. Which of these metrics do you track most closely in your change initiatives? -- Follow me, Daniel Lock, for practical tips for leading change, consulting & thought leadership