ICH Q9(R1) vs ICH Q10
The risk-management method vs the quality system it operates inside.
What a comparison is not
A comparison is SPEQ’s reading of how two published documents differ. Neither is the right answer, it is not a determination of which applies to you, and neither is summarised in a way that replaces reading it.
ICH Q9(R1) is the methodology for managing risk to product quality; ICH Q10 is the model for the pharmaceutical quality system that spans the product lifecycle. Q9 is a tool used throughout Q10 — they are complementary layers, not competing frameworks.
| ASPECT | ICH Q9(R1) | ICH Q10 |
|---|---|---|
| What it is | A risk-management methodology | A quality-management-system model |
| Scope | Assess, control, communicate, review risk to quality | The whole PQS across the lifecycle |
| Altitude | A method applied to decisions | The system governing all decisions |
| Key elements | Risk assessment, control, review; tool-agnostic | PPM & product monitoring, CAPA, change management, management review |
| Relationship | An enabler used within Q10 | The framework that embeds Q9 (and Q8) |
Reach for ICH Q9 when you need to make a specific risk-based decision — validation scope, deviation impact, supplier risk — using a structured method.
Reach for ICH Q10 when you are designing or assessing the quality system as a whole — the governance, monitoring, and improvement machinery that risk management operates within.
Q9 is the how; Q10 is the where. Quality risk management (Q9) is one of the enablers that make the pharmaceutical quality system (Q10) work — you apply Q9 methodology throughout the Q10 system. They are never either/or: a mature operation runs Q9 risk thinking inside a Q10 quality system, with Q8/Q11 development knowledge feeding both.
ICH Q9(R1) vs ICH Q10: frequently asked questions
Common questions on how ICH Q9(R1) and ICH Q10 differ and when each applies.
Is ICH Q9 part of ICH Q10?
Conceptually yes — quality risk management (Q9) is one of the two key enablers (with knowledge management) of the ICH Q10 pharmaceutical quality system. Q9 is the methodology; Q10 is the system that uses it throughout the lifecycle.
Which do I use for a validation-scope decision?
ICH Q9 — it provides the risk-assessment methodology to decide how much validation effort a system or process warrants. That decision then lives within, and is governed by, your ICH Q10 quality system.
Do Q9 and Q10 apply to medical devices?
They are written for pharmaceuticals/biologics. Devices use analogous concepts through ISO 14971 (risk) and ISO 13485/QMSR (quality system). The Q9/Q10 relationship — risk method inside a quality system — mirrors the ISO 14971/ISO 13485 relationship.