The GxP acronym decoder.

Medicines manufactured from living systems — proteins, vaccines, cell and gene therapies, blood and tissue products — where quality turns on characterization, viral safety, and comparability after change.

The standards for analyzing specimens generated in clinical trials — applying GLP-grade laboratory rigor to clinical-trial samples so those endpoints are credible.

The international standard (ICH E6) for designing, conducting, and reporting trials involving human subjects — protecting participant rights and safety and ensuring data credibility.

The data-integrity discipline underneath every GxP record — the ALCOA+ principles applied to how records and data are created, reviewed, and retained across paper and electronic systems.

The standards for storing and transporting medicinal products through the supply chain so quality is preserved from manufacturer to patient, and falsified medicines are kept out.

The established engineering methods applied to designing, commissioning, and qualifying facilities, equipment, and utilities (ASTM E2500) — where quality is built in before manufacturing begins.

The quality system (OECD; 21 CFR 58) governing non-clinical safety studies, organized around reconstructability — any study must be reproducible from its raw data.

The requirements governing how regulated products are made and controlled so every batch meets consistent, defined quality. The baseline body of standards regulators inspect against. SPEQ has a full GMP discipline page.

The standards for monitoring the safety of medicines once marketed (EU GVP Modules) — collecting, assessing, and acting on adverse-event and signal data across the lifecycle.

The systematic, preventive approach to food safety (Codex; the basis of FSMA preventive controls) — identifying hazards and controlling them at critical points rather than relying on end-product testing.

The periodic review of a product’s manufacturing and quality data (batches, deviations, OOS, changes, complaints, stability) to verify consistency and identify improvement. A common inspection starting point (US §211.180; EU GMP Chapter 1).

The closed-loop process of investigating a problem to root cause, correcting it, and taking preventive action so it (and similar issues elsewhere) does not recur — with an effectiveness check to confirm the fix held. The preventive half is the one most systems under-invest in.

The formal process for evaluating, approving, implementing, and documenting changes to a validated process, system, or document — assessing risk before implementation so improvements do not introduce new problems.

The total cost a business incurs because of quality failures — internal failure (scrap, rework, investigations), external failure (recalls, complaints, lost trust), plus appraisal and prevention costs. Much of it is hidden below the line, like an iceberg.

A departure from an approved procedure, specification, or standard. Deviations must be documented, investigated proportionate to risk, and trended — pattern recognition across deviations is what regulators expect, not just individual closure.

A structured risk-assessment tool that identifies potential failure modes, their effects, and their causes, then ranks them (often by severity × occurrence × detectability) to prioritize controls. A common QRM technique.

The overarching quality management system for pharmaceuticals defined by ICH Q10 — management responsibility, CAPA, change management, and continual improvement operating as one system across the product lifecycle. FDA’s QMM program rates the maturity of exactly this system.

FDA’s voluntary program to rate the maturity of a manufacturer’s quality management practices beyond baseline CGMP compliance — created to help reduce drug shortages and recalls and signal manufacturing reliability. Assessed across five practice areas on a 10-point scale.

The formalized system of processes, procedures, and responsibilities that directs and controls an organization’s quality. In pharma it is the ICH Q10 PQS; in devices, the ISO 13485 / FDA QMSR system.

The systematic process for the assessment, control, communication, and review of risks to quality across the product lifecycle (ICH Q9). Tools include FMEA, HACCP, and risk ranking; it underpins risk-based decisions throughout GxP.

The structured investigation that identifies the underlying cause of a problem rather than its symptom. A weak RCA — stopping at "human error" — is the reason many corrective actions fail and problems recur.

The set of attributes that define trustworthy GxP data. A record is data-integrity compliant when it can be traced to who made it, read, made at the time of the activity, an original (or true copy), and accurate — plus complete, consistent, enduring, and available for its full retention period.

A secure, computer-generated, time-stamped record of who did what and when to an electronic record — created, modified, or deleted — that cannot be altered. Reviewing audit trails as part of record review is a core data-integrity expectation.

The degree to which data is complete, consistent, and accurate throughout its lifecycle. DI failures — backdating, shared logins, deleted results, disabled audit trails — are among the most serious findings a regulator can issue.

FDA’s regulation on electronic records and electronic signatures — the criteria (audit trails, access control, trustworthy e-signatures) under which electronic records are considered as reliable as paper. The EU analogue is GMP Annex 11.

The integrated engineering and quality process of bringing facilities, equipment, and utilities into GxP service. ASTM E2500 reframed it around risk- and science-based verification of the aspects critical to product quality.

A process parameter whose variability affects a critical quality attribute and therefore must be monitored or controlled to ensure the process produces the desired quality.

Stage 3 of process validation — the ongoing monitoring and trending of the commercial process to ensure it stays in a state of control, providing early warning of drift before it becomes a deviation or batch failure.

A physical, chemical, biological, or microbiological property that must be within a limit or range to ensure product quality. CQAs are the outputs a validated process must reliably deliver.

A risk-based, critical-thinking evolution of CSV promoted by FDA — focusing test effort and documentation on the software functions whose failure would affect patient safety, product quality, or data integrity, rather than exhaustive scripting.

Establishing documented evidence that a GxP computerized system does what it is intended to do and will continue to — spanning requirements, risk assessment, verification, and lifecycle control (GAMP 5; 21 CFR Part 11; EU GMP Annex 11).

The ISPE guide providing a risk- and category-based framework for validating computerized systems, scaling effort to system complexity and novelty. The de facto global reference for CSV.

The classic qualification stages for equipment and systems: IQ confirms it is installed correctly, OQ that it operates across its intended range, and PQ that it performs consistently under real conditions. Often preceded by design qualification (DQ).

Stage 2 of process validation — confirming that the commercial process, running with qualified equipment and trained staff, reproducibly produces product meeting its quality attributes (typically demonstrated over defined qualification batches).

The three-stage FDA approach to process validation: Stage 1 process design, Stage 2 process qualification (PPQ), and Stage 3 continued process verification. Validation is a lifecycle, not a one-time event.

A systematic development approach (ICH Q8) that builds quality into the product by understanding the process and defining a design space, rather than testing quality in at the end. Anchored by critical quality attributes and critical process parameters.

The document defining what a system, equipment, or facility must do from the user’s perspective — the traceable starting point for qualification, verification, and acceptance.

Manufacturing a sterile product by separately sterilizing the product and components and combining them under conditions that prevent microbial contamination — used when terminal sterilization is not possible. The highest-risk manufacturing operation.

The master batch record is the approved manufacturing instruction; the executed (or electronic, EBR) batch record is the completed evidence that a specific batch was made and controlled as specified. Independent review precedes release.

The population of viable microorganisms on or in a product, component, or surface before sterilization. Controlling and monitoring bioburden is fundamental to sterility assurance.

The holistic, facility-wide set of controls for microbial, particulate, and pyrogen contamination, derived from product and process risk (EU GMP Annex 1). It ties together design, procedures, monitoring, and personnel into one documented strategy.

The demonstration that a product’s quality, safety, and efficacy are maintained after a manufacturing change (ICH Q5E for biologics). Because the process largely defines a biologic, comparability is a defining regulatory theme for them.

The routine sampling of air, surfaces, and personnel in classified areas for viable and non-viable particles, with alert and action limits, to demonstrate the manufacturing environment stays in a state of control.

A heat-stable component of the outer membrane of Gram-negative bacteria that causes fever and can be dangerous in injectables even after sterilization. Controlled via bioburden control and tested by the bacterial endotoxin (LAL) test.

A simulation of the aseptic filling process using sterile growth medium in place of product, to validate that the process and operators can maintain sterility. Contaminated units above the acceptance limit indicate a loss of aseptic assurance.

A test result that falls outside the registered specification (OOS) or deviates from the expected trend (OOT). OOS results require a documented, thorough investigation before any decision to release or reject — a frequent inspection focus.

Barrier technologies that separate operators from the aseptic filling zone to reduce contamination risk. An isolator provides a sealed, decontaminated environment; a RABS provides a physical barrier with controlled access.

The study of how a product’s quality changes over time under defined conditions (ICH Q1A), used to establish its shelf life or re-test period. Long-term, intermediate, and accelerated conditions are standard.

The documented process of transferring a product and its process knowledge between development and manufacturing, or between sites, so the receiving site can reproduce the process in a validated, controlled way (ICH Q10).

An AE is any untoward medical occurrence in a patient given a medicine; an SAE is one that is fatal, life-threatening, or otherwise serious; an ADR is an AE with at least a reasonable causal link to the medicine. Reporting timelines are strict.

The process by which a trial participant voluntarily confirms their willingness to take part after being informed of all aspects relevant to their decision. Consent process and documentation are among the most-cited GCP inspection findings.

The science and activities of detecting, assessing, understanding, and preventing adverse effects of medicines once on the market — collecting adverse events, managing signals, and acting to protect public health.

The PSMF describes a marketing-authorization holder’s pharmacovigilance system; the QPPV is the named individual accountable for its operation and oversight in the EU. Both are inspection focal points.

Documented plans of the pharmacovigilance and risk-minimization activities proportionate to a medicine’s risks — the EU RMP and the US REMS. Kept current as the safety profile evolves.

Information suggesting a new or changed causal association between a medicine and an event, warranting further investigation. Signal detection, validation, and assessment turn scattered case reports into knowledge that can change a product’s use.

The original records (and certified copies) of clinical findings, observations, and activities in a trial, from which case report form data is derived. Source-data verification checks that reported data matches the source.

The systematic process (21 CFR 820.30; ISO 13485) for controlling medical-device design — inputs, outputs, review, verification, validation, transfer, and changes — captured in a traceable design history file.

The international standard for the application of risk management to medical devices — identifying hazards, estimating and evaluating risks, controlling them, and monitoring effectiveness across the device lifecycle. The core of device quality.

In the US, Medical Device Reporting (21 CFR 803) is mandatory post-market reporting of device deaths, serious injuries, and malfunctions. In the EU, the MDR (Regulation 2017/745) is the overarching device regulation. Context distinguishes the two.

Software intended for a medical purpose that performs that purpose without being part of a hardware device. Its lifecycle is governed by IEC 62304, and computer-software-assurance thinking increasingly applies.

A system to mark and identify medical devices through their distribution and use with a unique code, improving traceability, recall effectiveness, and adverse-event reporting (FDA UDI rule; EU MDR EUDAMED).

The "current" qualifier signals that manufacturers must use up-to-date technologies and systems to comply with GMP — the expectation evolves, so yesterday’s acceptable practice may not meet today’s standard.

A document, signed by an authorized party, summarizing the testing results for a specific batch of material against its specification — the release evidence that a lot meets its quality requirements.

A confidential submission to FDA containing information about facilities, processes, or articles used in the manufacture of drugs — commonly used by API and component suppliers to support customers’ applications without disclosing trade secrets.

The form an FDA investigator issues at the close of an inspection listing observed conditions that may violate the FD&C Act. A 483 is not a final determination, but an unaddressed 483 can escalate to a warning letter or further action.

US FDA application types: IND (investigational new drug, to begin trials), NDA (new drug application, for a novel drug), ANDA (abbreviated, for a generic), and BLA (biologics license application, for a biologic).

FDA’s formal notification that a firm has significantly violated regulations, requiring prompt corrective action. Publicly posted, it is a serious escalation that can precede import alerts, seizures, or consent decrees.