How to Implement Risk-Based Quality Management
Build RBQM into a trial from the protocol, not bolt monitoring on at the end.
What a how-to is not
A how-to is SPEQ’s practitioner method, not a procedure. It does not replace your own SOP, it is not a validated approach, and the judgement calls in it belong to your quality unit.
Risk-Based Quality Management (RBQM) designs quality into a clinical trial from the outset — identifying the factors critical to participant safety and data reliability, assessing and controlling their risks, and monitoring them through the trial. It is the operating model ICH E6(R3) expects, and it is broader than risk-based monitoring alone.
- 1
Identify critical-to-quality factors
Identify the factors critical to the reliability of the results and to participant safety — the data, the processes and the decisions that would change the trial’s conclusion or a participant’s wellbeing if they went wrong. This is a small list by design. A framework that treats everything as critical produces the exhaustive monitoring it was introduced to replace, and the discipline of the method is in what it leaves out.
- 2
Assess the risks to them
Assess the risks to those factors in terms of what could go wrong, how likely it is, how severe the consequence would be, and — the one most often skipped — whether anyone would detect it. Detectability is what determines whether a control is needed at all: a risk that is certain to be visible immediately needs a response, not a monitor.
- 3
Define controls and quality tolerance limits
Define the controls for each significant risk and set quality tolerance limits for the parameters that matter, stating in advance what deviation would be important enough to trigger action. Set after data exist, a tolerance limit describes what happened; set in advance, it is a commitment. Say what the response will be when a limit is exceeded, so the decision is not made under pressure.
- 4
Monitor risk through the trial
Monitor the risks through the trial rather than assessing them once at the start. New risks emerge — a site behaving differently, a protocol amendment, a vendor change — and risks assessed at design may prove unfounded. The point of the method is that it reallocates attention as the trial teaches you where attention is needed, which cannot happen if the assessment is never revisited.
- 5
Review and communicate
Review the risk position periodically and communicate it to the people who can act on it, including the sites and the vendors. Record what changed and why. At closeout, summarise how risk was managed and what deviations from quality tolerance limits occurred — that summary is what a reviewer will read to judge whether the approach was applied or merely adopted.
- !Treating RBQM as just risk-based monitoring, missing the protocol-design and risk-assessment front end.
- !Setting quality tolerance limits that are never actually tracked or acted on.
- !A one-time risk assessment that is never revisited as the trial evolves.
- !Risk decisions undocumented, so oversight cannot be demonstrated.
How to Implement Risk-Based Quality Management: frequently asked questions
Common questions on implement risk-based quality management.
What is the difference between RBQM and risk-based monitoring?
Risk-based monitoring (RBM) is the monitoring component; RBQM is the broader operating model that designs quality into the trial from the protocol — identifying critical-to-quality factors, assessing and controlling risks, and monitoring them (RBM being one part). ICH E6(R3) expects the broader RBQM approach.
What are quality tolerance limits?
QTLs are parameters, defined in advance, whose breach indicates a systematic issue that could affect participant safety or result reliability at the trial level. Tracking QTLs helps detect problems that individual data points would not reveal, prompting investigation and action.
When should RBQM start?
At the protocol-design stage. Its central idea is designing quality in from the outset — identifying critical-to-quality factors and their risks before the trial begins — rather than inspecting quality in through monitoring after data are collected.