Level 1: Foundational
Reactive — quality happens after the fact.
Your quality system is operating reactively. The priority is to formalise core procedures and stand up basic change control — this is where inspection risk is highest and quick wins are most available.
What a level is not
The five levels are SPEQ’s progression, labelled synthesis. They are not the FDA’s Quality Management Maturity rating scale, no regulator assigns them, and reaching one is not a compliance status.
A quality system rarely sits at one level everywhere. This is the character of each of the twelve GxP domains when it is operating at Level 1 — and the move that lifts it to the next.
Documents exist but are not controlled; changes happen and are recorded after the fact, if at all.
TO ADVANCE →Stand up a document register with version control and a basic change-request form approved before any change is made.
Problems are firefought; there is no functioning CAPA system and issues recur.
TO ADVANCE →Stand up a CAPA process that distinguishes correction from corrective/preventive action and requires a root cause.
Little or no formal validation; equipment and processes are used on faith.
TO ADVANCE →Establish qualification protocols and a documented control strategy for the critical processes.
Environmental monitoring is minimal or absent; contamination risk is unmanaged.
TO ADVANCE →Establish a routine EM program with defined sample locations and alert/action limits.
The organisation is largely unaware of regulatory change until it is enforced on them.
TO ADVANCE →Assign ownership and start a simple log of relevant regulators, guidances, and standards.
Clinical quality is reactive; issues surface at audit or inspection.
TO ADVANCE →Establish GCP SOPs and a defined monitoring approach for trials.
Laboratory work is informal; reconstructing a study from its records is difficult.
TO ADVANCE →Establish study plans, SOPs, and defined roles (study director, QA) per GLP.
Distribution conditions are uncontrolled; product integrity in transit is unknown.
TO ADVANCE →Introduce temperature monitoring and basic GDP SOPs for storage and transport.
Adverse events are handled reactively; regulatory reporting timelines are at risk.
TO ADVANCE →Establish case-processing SOPs and reliable intake with reporting-timeline control.
Data-integrity risk is unmanaged; records are vulnerable to loss, error, or alteration.
TO ADVANCE →Establish ALCOA+ awareness and close the obvious gaps: unique logins, audit trails on, controlled records.
Engineering and qualification are disconnected; systems are handed over without a verification basis.
TO ADVANCE →Establish user requirements and a basic C&Q approach linking design to verification.
A blame culture keeps problems hidden; bad news travels slowly and pre-softened.
TO ADVANCE →Separate blame from error: adopt a Just Culture stance and protect people who surface problems.