[ QMM PRACTICE AREA 2 OF 5 ]

Business Continuity

Supply-chain reliability — supply planning, demand forecasting, and the ability to keep product flowing through disruption.

What this page does not claim

The practice area is FDA’s; how to work on it is SPEQ’s reading, labelled as such throughout. SPEQ does not score QMM, FDA does not endorse this interpretation, and nothing here is a QMM rating.

[ WHY THIS RESISTS THE USUAL PLAYBOOK ]

Business continuity is the easiest of the three to justify because it is unambiguously in the business’s own interest — a shortage is lost revenue, lost trust, and often a recall. It is "hard" only in that it demands proactive investment against a disruption that hasn’t happened yet. The good news: the engine that delivers it is one every business already wants — continuous improvement and preventive action.

[ THE PROACTIVE-QUALITY LENS ]

FDA created QMM in part because its 2019 Drug Shortages report found that the root cause of most shortages was not a lack of regulation but under-investment in mature quality management — reactive quality systems break under stress. Business continuity is what a proactive quality system produces as a by-product: the same continuous improvement and preventive action that raise quality are what keep product flowing.

The framing on this page is a SPEQ synthesis. The practice-area name is an FDA QMM program fact; the lens, principles, and maturity signals are SPEQ’s interpretation, not FDA scoring.

[ PRINCIPLES THAT MOVE IT ]

Preventive action is the half of CAPA everyone skips

CAPA is Corrective AND Preventive Action, but most systems are 90% corrective — fixing what already broke. The preventive half asks "where else could this happen, and what would stop it?" A programme that acts on that question systematically converts single failures into system-wide immunity.

Continuous improvement (PDCA / Kaizen) compounds resilience

Deming’s Plan-Do-Check-Act cycle and the Kaizen philosophy of small, constant improvement steadily remove the fragilities that become tomorrow’s disruption. ICH Q10 names continual improvement of process performance and product quality as a core PQS objective for exactly this reason.

Continued Process Verification catches drift before it stops the line

Stage 3 of the process-validation lifecycle — ongoing monitoring of the commercial process — is early-warning infrastructure. Trending process data to detect drift lets you act on a weakening process before it fails a batch, an inspection, or a supply commitment.

Business continuity management makes resilience explicit

ISO 22301 formalises what proactive quality implies: a business impact analysis to find single points of failure, recovery objectives, redundancy for critical materials and suppliers, and tested continuity plans. It turns "we’d cope" into a rehearsed, evidenced capability.

[ DO THIS MONDAY ]
  • Give the preventive half of CAPA its own pipeline — don’t let corrective work crowd it out
  • Run a business impact analysis to find single points of failure (a sole supplier, one qualified line, one key person)
  • Trend Continued Process Verification data to act on drift before it becomes a deviation
  • Qualify second sources and hold risk-based safety stock for materials on the critical path
  • Institutionalise PDCA/Kaizen so improvement is routine, not a project
  • Write and actually rehearse continuity plans for your highest-impact disruptions
[ WHAT IT LOOKS LIKE FROM THE OUTSIDE ]
IMMATURE
  • CAPA is almost entirely corrective; prevention is aspirational
  • A single supplier, line, or expert is an unmitigated single point of failure
  • Process problems are discovered as batch failures, not as trends
  • No tested plan exists for a major disruption
MATURE
  • Preventive actions systematically generalise fixes across the site
  • Critical dependencies are mapped, dual-sourced, or buffered
  • CPV trending flags drift early enough to act proactively
  • Continuity plans are documented, owned, and rehearsed
[ HOW SPEQ ASSESSES IT ]

SPEQ’s maturity assessment maps the following domains onto this practice area — a practitioner on-ramp, not an official FDA score:

Distribution & Cold Chain (GDP)