Change Control Impact Matrix

Structured impact matrix for classifying changes and determining required assessment scope. Covers product quality, regulatory filing, validation, supplier, SOP, and training impact.

WHAT THIS CALCULATES

A starting classification for a proposed change — minor, moderate or major — from the areas it touches. It is triage: it tells you how much scrutiny to route the change into before anyone has spent a week on the paperwork.

THE METHOD

criticalDrivers

how many of the three escalating areas are hit: product quality/patient safety, a registered detail, or the validated state

areasTouched

the total count of impact areas selected, out of six

major

the change alters what the product or its evidence is — expect prior approval, revalidation, or a regulatory submission

moderate

the change is contained but needs a documented assessment and defined verification

Which areas are hit matters more than how many. Three of the six are critical drivers because each on its own changes what the change IS rather than how much work it creates — a single registered detail outranks two procedural updates. Thresholds are SPEQ judgement for triage; your site procedure owns the real definitions.

THE INPUTS, AND WHAT THEY MEAN

Product quality or patient safety

The change could affect a critical quality attribute, a specification, or the safety profile. This is the driver that turns a routine change into a regulatory conversation.

Regulatory filing or registered detail

The change touches something described in a marketing authorisation or dossier. Under ICH Q12 the reporting category depends on what the filing actually commits to — check the dossier, not your memory of it.

Validated state / qualification baseline

The change moves equipment, process or system outside the conditions under which it was qualified. Anything here means revalidation scope is on the table.

Critical supplier or material

A change of source, grade or specification for a material that affects product quality — usually requiring supplier qualification and often comparability data.

SOP, batch record, or training impact

Documentation and people have to change with the process. Cheap to tick, and the most common reason a technically sound change fails on the floor.

Facility, utility, or equipment design

Physical or design changes to the manufacturing environment — including anything affecting classified areas, flows or utilities.

HOW TO READ THE OUTPUT

• ›This is the opening position for triage, not a disposition. QA owns the final classification under your change-control procedure, and ICH Q10 treats change management as a quality-system element — a judgement supported by evidence, not a calculation.
• ›A single critical driver outranks several ordinary areas. If the change touches a registered detail, its regulatory reporting category is the question, however small the change looks operationally.
• ›The classification sets the evidence burden, which is where the effort goes: what must be assessed, what must be revalidated, what must be notified or approved, and who must sign.
• ›The most expensive mistake here is under-classification. A change routed as minor that later proves to have altered the validated state means retrospective justification, which is far more costly than over-scoping at the start.

WORKED EXAMPLE

A site proposes switching to a new supplier for a critical excipient. The grade is equivalent but the supplier is new, the specification is named in the dossier, and batch records and training must be updated.

Regulatory filing or registered detail

yes — the excipient supplier is named

Critical supplier or material

yes

SOP, batch record, or training impact

yes

One critical driver and three areas puts this at moderate rather than major: the change is contained, but the registered detail means the ICH Q12 reporting category has to be settled before implementation, not after. Had the excipient also touched a critical quality attribute, a second critical driver would have carried it to major — and with it, a different approval path.

REGULATORY BASIS

ICH Q10 — Pharmaceutical Quality System

Establishes change management as one of the four elements of the quality system, operating across the product lifecycle.

ICH Q12 — Lifecycle Management

Defines established conditions and the reporting categories for post-approval changes — the framework that decides whether a change needs notification or prior approval.

ICH Q9(R1) — Quality Risk Management

Supplies the principle that the formality of the assessment should be proportionate to the risk, which is what this triage implements.

EU GMP Annex 15

Requires that changes be evaluated for their effect on the validated state and revalidated where justified.

LIMITATIONS — READ BEFORE YOU RELY ON THIS

• ›This is an analytical aid, not a validated system, and produces a starting classification rather than a disposition. Reproduce the assessment under your own change-control procedure — QA owns the outcome and the record.
• ›It counts areas; it cannot weigh magnitude. A trivial and a fundamental change to the same area select the same checkbox and score identically.
• ›It does not determine the ICH Q12 reporting category. Whether a change is a notification or requires prior approval depends on the established conditions in your specific filing.
• ›It has no view of cumulative change. Several individually minor changes to the same process can together move the validated state, and nothing here detects that.

RELATED ON SPEQ