[ ENTERPRISE PILLAR 12 ]
Maintain product, material, service, data, and evidence control across suppliers, outsourced operations, logistics, and shared responsibilities.
This pillar covers the end-to-end external and material network, not only the E24 supplier-quality function or the ecosystem catalog of organization types.
The capability framing below, its failure modes and the boundary with neighbouring pillars are SPEQ’s practitioner reading — not a regulatory requirement, and not an assessment of any organization.
THE CAPABILITY
This is the capability of exercising control at a distance, over work performed inside organizations that have their own priorities, their own customers and their own regulators. It is one thing rather than several because material, services, delegated decisions and the records that describe them all arrive by the same route and fail the same way: something changed on the other side of a boundary and the organization found out late, or not at all. Sourcing, qualification, agreements, logistics, traceability and continuity are not six adjacent functions here — they are six instruments aimed at a single problem, which is keeping a claim about a product true across organizational lines the claim itself does not recognise.
Almost everything this capability knows about the network it depends on arrives through that network. The supplier reports its own deviations, characterises its own changes, and selects what a two-day audit sees after a month of preparing for it. Visibility is not merely imperfect; it is filtered by the party whose performance is being measured, and it thins with every tier, so it is weakest precisely where fragility usually concentrates — at the single plant, two or three steps back, that a whole industry buys from without knowing that it does. Then the capability's own objectives pull against each other by construction. Resilience wants second sources, qualified alternatives and stock that mostly sits unused; cost, cycle time and batch-to-batch consistency all want the opposite, and every consolidation is a resilience decision taken by people who are accounting for it as a saving. The trade is real and is almost never booked anywhere. And leverage runs backwards to need: influence over an external party is at its maximum during selection, when nothing has gone wrong and the risk is hypothetical, and at its minimum during a shortage or an exit, when the only alternative available is the one nobody qualified.
Each of these happens with the individual branches below being run competently. That is what makes them capability failures rather than performance problems.
Approval attaches to a company, and companies move work. Manufacture shifts to a second plant, a step is subcontracted, an intermediate starts coming from a new source. Each move may be entirely acceptable; none of them was visible, because the qualification record names a legal entity and the goods receipt names a purchase order, and nothing in between asks where this particular lot was actually made.
The agreement obliges the supplier to notify changes, the clause has been in force for six years, and no notification has ever arrived. That is read as stability. It much more often means the clause is unmonitored, the supplier's own change process has no step that identifies which customers to tell, and the first notice of a change will be an unexplained shift in an incoming result.
The agreement says both parties will investigate a deviation together. In practice the party that holds the process holds the facts, writes the investigation, and closes it to its own standard and its own timetable, while the party that holds the accountability reviews a finished document it cannot reopen. Nobody breached the agreement. The agreement described a collaboration instead of assigning a decision.
Two approved suppliers, separate audits, separate agreements, genuine redundancy on paper. Both buy the same starting material from the same producer, or run on the same single-source component, or sit in the same weather system and the same export regime. The concentration was never invisible; it was simply one tier below where the qualification programme looks.
WHERE THIS STOPS
This pillar owns the outside, up to the point where something crosses in. Once a material has been released to the process, its behaviour there belongs to manufacturing; the result of a test belongs to the laboratory that produced it; the disposition of a nonconforming lot is a quality decision, not a procurement one. Whether a supplier or site change requires anything to be filed with an authority is a regulatory determination — this capability owns knowing that the change happened and getting it in front of the people who make that call. Whether to make or buy at all is a portfolio and finance question that this pillar informs rather than settles. The seam that produces the most argument is a deviation at a contract manufacturer: the investigation sits with the party that has the equipment and the people, the accountability for the product sits with the party that does not, and both statements are true at once. Organizations that survive that seam have agreed beforehand who may close the investigation, who may accept the corrective action, and what happens when the two disagree — because at the moment it matters, the batch is already made.
The work moves and the answerability does not. That is the premise the whole capability is built on, and the practical consequence is uncomfortable: an organization has to be able to describe, defend and evidence work it did not watch. This is why oversight here is not a courtesy audit but a standing obligation — the person who has to explain the outcome is not the person who produced it.
The contract allocates money, liability and term; the quality agreement allocates decisions. Who releases, who investigates, who may subcontract, who notifies whom within how long, who has access to which records, and what happens on termination. They are signed by different people for different reasons, which is exactly why they drift apart — a commercial renegotiation that changes scope without touching the quality agreement leaves two documents describing two different relationships.
As far as the risk does, which is rarely one tier. The workable approach is not to audit everyone but to identify the small number of materials, components and services whose failure would stop supply or change the product, and to follow those specific paths until the actual origin is known. Breadth is unaffordable and mostly uninformative; depth on the few that matter is neither.
Only if the second source is qualified, currently exercised, and genuinely independent. An alternative that has never run at scale, or that has not made the material in three years, or that turns out to buy from the same upstream producer, is a plan rather than a capability. The honest test is whether switching could be executed on the timescale a real interruption would allow, not whether a second name appears on the approved list.
CAPABILITY BRANCH MAP
The shape of the supply network: design, make-versus-buy, capacity, dual sourcing, where dependency concentrates, scenario analysis and the continuity that follows from all of it.
Resilience is designed years before it is needed, and qualification lead times mean an alternative source cannot be created during a disruption. The organisation supplies from the network it built, not the one it would now choose.
A supplier from first consideration to exit: requirements, due diligence, approval, onboarding, ongoing monitoring, change notification, requalification and disengagement.
Qualification is a judgement about capability at a moment in time, and suppliers change — new sites, new subcontractors, new owners. Where monitoring is limited to incoming inspection, the organisation is testing product rather than assuring capability.
Control of what comes in: specifications, provenance, sampling, testing, status control, traceability, storage conditions and the notification obligations attached to change.
Material attributes propagate directly into product. A specification that omits an attribute the process depends on will be met by material that does not work, and the supplier will be correct in saying it complied.
Oversight of delegated regulated work at CDMOs, CROs and laboratories: responsibility allocation, governance, performance, access, audit, escalation, data and where accountability finally rests.
Regulators hold the contract giver accountable for work performed by the contract acceptor. Oversight that consists of receiving reports satisfies a procedure and not the obligation, because a report describes what the provider chose to disclose.
The document that allocates quality responsibility between two organisations: roles, records, release, deviations, complaints, changes, audit rights, subcontracting and termination.
The quality agreement decides who does what when something goes wrong, written while nothing has. Where it is a template signed by procurement, the ambiguity surfaces during a deviation — the worst possible moment to discover that neither party thought they owned the decision.
How supply is bought: requirement definition, sourcing, commercial terms, service levels, risk allocation, ethical standards and the regulated obligations that must survive into the contract.
Procurement decisions create quality obligations that quality did not negotiate. A supplier selected on price with no audit right or change-notification clause has been contracted into a position from which oversight is impossible.
Moving and holding product: lane qualification, custody, condition monitoring, excursion handling, security, logistics partners, returns and the records across all of it.
Distribution is where a correctly manufactured product is most often degraded, and the conditions are controlled by parties who are not manufacturers. An unmonitored lane is an unqualified process with product in it.
Legitimacy across borders and the supply chain: licences, customs, chain of ownership, product identifiers, traceability, verification and controls against diversion and counterfeit.
Serialisation exists because falsified medicines reach patients through legitimate supply chains. The controls only work if the data are accurate end to end — a mis-aggregated pallet breaks verification for every pack inside it.
Preventing and managing supply failure: demand and supply signals, critical material identification, scenarios, allocation, alternatives, regulatory notification and recovery.
Drug shortages are a patient-harm event and increasingly a reportable one. Most trace to a single site or a single upstream supplier — which means they are foreseeable from the network map long before they occur.
Watching the network: quality, delivery and capacity performance alongside financial, cyber, geopolitical and sustainability signals — with defined escalation when one moves.
Supplier failures are usually preceded by observable signals in other domains. Financial distress, a cyber incident or a site sale precede quality problems often enough that treating them as separate intelligence loses the warning.
CONNECTED OPERATING MODEL
MATURITY ORIENTATION · SPEQ SYNTHESIS
HIGH-VALUE INTERSECTIONS
SOURCE BASIS
REGULATORY BASIS
The 13 standards SPEQ maps to this pillar, and the 8 regulatory bodies behind them. Which standards belong to a pillar is a SPEQ judgement; the bodies, disciplines and industries below are read from the standards themselves.
EC · EMA · FDA · GS1 · IPEC · MHRA · USP · WHO
Ranked by how many of this pillar’s standards each one cites.
These 12 standards govern the system classes this pillar depends on rather than the pillar itself. The distinction matters: a standard that governs a system is not thereby a standard of every capability that uses it.
21 CFR Part 21121 CFR Part 11EU GMP Annex 11ISPE GAMP 5 (2022)ICH Q10ICH Q9(R1)21 CFR Part 820ISO 13485:2016ISO 9001:2015MHRA GxP DI (2018)ICH Q12EU GMP Annex 16
PROFESSIONAL · READINESS ORIENTATION
Rate observable operation from 0 (not established) to 4 (adaptive). The protected output prioritizes operating dimensions and evidence—not a compliance score.