EU GMP Annex 1 Gap Assessment

Structured gap assessment mapped to the major sections of EU GMP Annex 1. Scores each section, produces a readiness heat map, and prioritizes remediation actions.

WHAT THIS CALCULATES

How far a sterile facility has got against the twelve control areas of EU GMP Annex 1 (2022), scored on evidence maturity — and which areas are still gaps. It is a programme-management view of an annex that is unusually broad.

THE METHOD

areaScore

0 absent · 1 partial · 2 implemented · 3 implemented with evidence and trending

areas

the twelve Annex 1 control areas, following the annex’s own chapter structure

readiness%

whole-number percentage of the maximum achievable score

gaps

the areas at 0 or 1 — the ones that are not yet defensible

The 80% and 60% band thresholds are SPEQ judgement for triage, not an Annex 1 scoring scheme — the annex does not score. The distinction between 2 and 3 is the one that matters: implemented is not the same as evidenced and trended, and the 2022 revision is emphatic that expectations must be demonstrated, not asserted.

THE INPUTS, AND WHAT THEY MEAN

The twelve control areas

Score each on the evidence you could put in front of an inspector today, not on what the plan says will exist. Score 3 only where the area is not just implemented but generating data that is reviewed and trended.

Contamination Control Strategy

Worth calling out because it is the area the 2022 revision made central. The CCS is not a document that summarises the others — it is the argument that connects them, and it is scored as its own area for that reason.

HOW TO READ THE OUTPUT

• ›Target ≥80% before a formal readiness review, and treat the gap list as the work plan. The percentage is a summary for management; the areas at 0–1 are the actual output.
• ›A low CCS score alongside high scores elsewhere is the characteristic pattern of a site that has implemented the individual controls without connecting them. Annex 1 asks for the connection.
• ›The 2 → 3 step is where most programmes stall, and it is the step inspections examine: an implemented control with no trending is an assertion, and the annex asks for evidence.
• ›This assesses programme coverage, not technical adequacy. An area scored 3 can still be wrong — the assessment says the evidence exists, not that it is correct.

WORKED EXAMPLE

A site has implemented every Annex 1 area to a working standard, but contamination control strategy and process simulation are honestly rated partial — the CCS is drafted and media fills have not yet been redesigned to the 2022 expectations.

Ten areas

2 — implemented

Contamination Control Strategy

1 — partial

Process Simulation

1 — partial

A site that has implemented everything still lands at 61%, because implemented scores 2 out of 3 — the missing third is evidence and trending, and across twelve areas that gap dominates the score. The two partial areas are also the two that matter most: the CCS is the spine of the 2022 revision, and process simulation is where an inspector tests whether the aseptic claims hold. This is a site with real controls and an incomplete case for them.

REGULATORY BASIS

EU GMP Annex 1 (2022)

The manufacture of sterile medicinal products — the source of the twelve control areas, in force since 25 August 2023 (with the lyophilisation provisions from 25 August 2024).

ISO 14644-1

Cleanroom classification by particle concentration — the basis for the classification and qualification expectations Annex 1 builds on.

PIC/S PE 009-16 Annex 1

The PIC/S text aligned with the EU revision, which extends the same expectations across participating authorities.

LIMITATIONS — READ BEFORE YOU RELY ON THIS

• ›This is an analytical aid, not a validated system, and a self-assessment rather than an audit. Reproduce the judgement with an independent reviewer before treating the score as readiness.
• ›It assesses coverage, not correctness. An area can be fully implemented, score 3, and still be technically inadequate for your process.
• ›The twelve areas are the annex’s structure, not your facility’s risks. A site-specific hazard — a particular transfer step, a legacy isolator — will not appear as an area score.
• ›It is a snapshot. Annex 1 readiness moves with every equipment change, personnel change and deviation, so a score more than a few months old describes a different facility.

RELATED ON SPEQ