· QUICK SCAN

Documentation & Change Control

Controlled records and a change process that keeps a validated state validated.

QMM · Advanced Pharmaceutical Quality SystemQMSQuality Management Systems
Assess this domain →
WHY IT MATTERS

Records are the evidence a regulated operation ran as intended, and change control is how a validated state survives change. When either fails, an inspector cannot trust anything downstream — which is why uncontrolled documents and unassessed changes are among the most frequently cited GMP deficiencies. This domain is the connective tissue of the whole quality system.

WHAT GOOD LOOKS LIKE

The observable evidence a practitioner — or an inspector — would expect at each maturity level. Drawn from the assessment questions themselves.

How are your quality documents controlled and version-managed?

1Foundational

No formal system — printed copies, email distribution

2Defined

Documented SOPs exist but reviews are ad hoc

3Managed

Formal DMS with scheduled review cycles and training records

4Quantified

Validated electronic DMS with metrics, trending, and periodic effectiveness review

5Optimized

Predictive, self-service DMS: automated review scheduling, real-time control metrics, and continuous-improvement feedback across the network

How is change control managed across your site?

1Foundational

Changes tracked informally — no formal review board

2Defined

Change control SOP exists; review is inconsistent

3Managed

Formal change control with cross-functional review and regulatory impact assessment

4Quantified

Integrated change management linked to risk register, CAPA, and regulatory intelligence

5Optimized

Predictive change management: automated risk-based routing, live regulatory-impact intelligence, and network-wide effectiveness benchmarking

COMMON INSPECTION FINDINGS
  • Obsolete or uncontrolled documents in use at the point of work — no effective version control.
  • Changes implemented without a documented impact / risk assessment or a regulatory-impact evaluation.
  • Records not completed contemporaneously; entries missing, backdated, or lacking a second-person review.
  • Change controls closed without an effectiveness check, or with implementation actions left overdue.
RECOMMENDED SPEQ RESOURCES
TEMPLATESOP Development TemplateSTANDARDICH Q10
WHAT IT LOOKS LIKE WHEN IT FAILS — LIVE FDA RECALLS

Recent FDA recalls whose reason SPEQ maps to this domain — a SPEQ editorial interpretation of the recall reason, not an official FDA classification.

2026-07-22Class ID'Dioses Fruit Pops, Inc.

May contain undeclared milk, pecans, pistachios, yellow #5 and red #40.

2026-07-22Class ID'Dioses Fruit Pops, Inc.

May contain undeclared milk, pecans, pistachios, yellow #5 and red #40.

2026-07-22Class ID'Dioses Fruit Pops, Inc.

May contain undeclared milk, pecans, pistachios, yellow #5 and red #40.

2026-07-22Class IIFayus Inc.

Undeclared peanuts

All recalls SPEQ maps to this domain →
ALL DOMAINS
Every maturity domain, decoded →
FDA QMM
How this rolls up to Advanced Pharmaceutical Quality System →
THE FRAMEWORK
Where this domain sits in the operating model →