Risk Management & CAPA
Quality risk management as the engine of the PQS, and CAPA that actually prevents.
Quality risk management (ICH Q9) is the engine of a modern pharmaceutical quality system, and CAPA is where a problem becomes prevention. A system that logs corrective actions but never verifies effectiveness — and keeps seeing the same deviation — is the textbook signature of a reactive operation. Maturity here is what turns single failures into system-wide immunity.
The observable evidence a practitioner — or an inspector — would expect at each maturity level. Drawn from the assessment questions themselves.
How are quality risks identified and managed across your operations?
Risks identified reactively after events occur
Risk assessments performed for major changes only
Proactive risk assessments using formal ICH Q9 methodology for processes and changes
Site-wide risk register with periodic review; risk metrics reported to quality council
Enterprise risk model with leading indicators and predictive analytics; risk posture continuously optimised and reviewed at board level
How does your CAPA system operate?
CAPAs logged but effectiveness rarely verified
CAPAs have defined owners and due dates; effectiveness check is inconsistent
Formal CAPA process with root cause analysis, implementation verification, and effectiveness check
CAPA system metrics trended and presented at management review; repeat deviations tracked
Self-improving CAPA system: predictive analytics pre-empt recurrence and feed prevention back into design and process controls
- ›CAPA effectiveness checks absent or perfunctory; repeat deviations recur for the same root cause.
- ›Root-cause analysis stops at "operator error" and retraining without addressing the system that allowed it.
- ›Risk assessments performed only for major changes, or scored subjectively without ICH Q9(R1) rigour.
- ›CAPAs and investigations routinely exceed their own defined timelines.
Recent FDA recalls whose reason SPEQ maps to this domain — a SPEQ editorial interpretation of the recall reason, not an official FDA classification.