Commissioning & Qualification (C&Q)
Before a line can make product, the facility, utilities, and equipment that will make it have to be shown fit for purpose. Commissioning and qualification (C&Q) is that proof. Its modern form is a deliberate break from the past: instead of generating an equal mountain of IQ/OQ/PQ paperwork for every bolt and valve, the risk- and science-based approach concentrates verification effort where it actually protects the patient — on the aspects of a system that affect product quality — and lets good engineering practice and supplier documentation carry the rest. It is the discipline where engineering and quality meet, and where over-documentation and under-verification are equal failures.
What an explainer is not
A topic explainer is SPEQ’s synthesis of what a practice involves, cited to the standards that govern it. It does not reproduce their text, and it does not determine which of them apply to your product or process.
[ POSITION IN THE FRAMEWORK ]
7 DIMENSIONS · 22 LINKSCommissioning and qualification proves a facility, utility, or equipment fit for GMP use — an engineering and manufacturing discipline where ASTM E2500 replaced "qualify everything" with verifying what matters to the patient.
06 · QUALITY MATURITY — COMMISSIONING & QUALIFICATION (C&Q), REACTIVE TO ADAPTIVE
Systems enter GMP use on go-live paperwork; IQ/OQ/PQ is generated uniformly for everything or skipped, with no link to product risk.
A C&Q SOP and protocols exist, but every component gets the same document set regardless of its impact on product quality.
Verification is driven by critical aspects traceable to product and process requirements; good engineering practice and vendor records are leveraged with rationale.
Commissioning, FAT/SAT, and monitoring data feed periodic review so a qualified system's drift is caught before it affects a validated process.
Risk and process knowledge drive qualification scope and design review up front; the qualified state is maintained by change control and retired under control.
SPEQ’s shared five-stage progression, labelled synthesis — not the FDA QMM rating scale. Where does your organization sit? Score your quality system →
07 · REGULATORY & EVIDENCE
GOVERNING STANDARDS · 3
Derived from the 3 standards SPEQ maps to this subject, across 3 regulatory bodies: EMA, ASTM, ISPE.
RECORDS & OBJECTIVE EVIDENCE
- A qualification strategy identifying critical aspects tied to product/process requirements
- Commissioning, FAT, and SAT records leveraged as qualification evidence with rationale
- IQ/OQ/PQ or verification protocols and reports with traceable acceptance criteria
- Supplier assessment and design-review records supporting leveraged testing
- Requalification and periodic-review records maintaining the qualified state
COMMON INSPECTION FINDINGS
- Equipment or utilities in GMP use with no qualification evidence
- Uniform IQ/OQ/PQ applied without identifying critical aspects
- Vendor documentation leveraged without assessment of its suitability
- Qualified state not maintained after a significant change (no requalification)
- Acceptance criteria not traceable to product or process requirements
What C&Q proves, and the shift ASTM E2500 made
Commissioning is the engineering process of bringing a system into working order; qualification is the documented, quality-approved evidence that the system will perform reliably for its GMP use. Historically the two were run as parallel paperwork exercises, with exhaustive Installation, Operational, and Performance Qualification protocols applied uniformly regardless of risk. ASTM E2500 reframed the whole activity: verification effort should be driven by risk to product quality and patient safety, and by process knowledge, not by a template that treats every component alike.
The consequence is a change of question. The old model asked "have we documented everything?"; the risk-based model asks "have we verified the things that matter to the patient, and can we show why the rest do not?" The ISPE Baseline Guide Vol. 5 operationalises this, and in the EU the qualification-and-validation expectations of EU GMP Annex 15 sit alongside it. Done well, the result is *less* paper and *more* assurance, concentrated where product quality is actually at stake.
Critical aspects: verifying what matters
The engine of the risk-based approach is the identification of critical aspects — the features of a system whose failure would affect a critical quality attribute of the product or the control of a critical process parameter. A cleanroom’s HVAC and its ability to hold classification is a critical aspect; the colour of its access door is not. Verification is then designed to challenge those critical aspects directly, with acceptance criteria traceable back to the product and process requirements they protect.
This is where quality and engineering must genuinely collaborate rather than sign each other’s documents. Subject-matter experts identify what is critical and design the tests; quality assures that the reasoning is sound and the critical aspects are covered. A C&Q package that verifies everything equally has usually verified the critical aspects no more rigorously than the trivial ones — which is the failure the risk-based approach exists to prevent.
Leveraging good engineering practice and vendor documentation
A defining feature of the modern approach is that it lets good engineering practice do work that used to be re-done under a quality protocol. Factory and site acceptance testing, commissioning records, and supplier documentation can be *leveraged* as qualification evidence — provided the activities were performed under good engineering practice, the vendor was assessed, and the records are reviewed and found suitable. There is no value in a quality team re-executing a test the vendor already performed competently and documented; the value is in confirming it was done right and covers the critical aspects.
The judgement is in the leveraging, not the copying. The team must decide which vendor and commissioning records are trustworthy enough to stand as qualification evidence, document that decision, and fill the gaps with targeted qualification testing. This is the practical difference between C&Q as an efficient, risk-based activity and C&Q as duplicated paperwork — and it is why supplier assessment and design review are treated as part of the qualification strategy, not preliminaries to it.
Where C&Q hands off to validation
C&Q proves the system is fit for use; it does not prove the *process* running on it makes conforming product — that is process validation, and the boundary between them matters. Qualification establishes that the equipment installed and operates as intended (the "does the tool work?" question); process validation establishes that the manufacturing process, run on qualified equipment, reliably yields product meeting its quality attributes (the "does the recipe work on this tool?" question). Blurring the two produces either equipment testing dressed up as process validation or process claims resting on unqualified equipment.
Because qualification underpins everything built on top of it, the state of qualification has to be maintained, not just achieved once: significant changes to a qualified system trigger requalification through change control, and periodic review confirms the qualified state still holds. A validated process running on equipment that has silently drifted out of its qualified state is a contradiction an inspection will find.
FREQUENTLY ASKED
What is the difference between commissioning and qualification?
Commissioning is the engineering process of bringing a system into working order; qualification is the documented, quality-approved evidence that the system will perform reliably for its GMP use. Modern C&Q integrates the two under a risk-based approach so that verification effort concentrates on the aspects that affect product quality.
What did ASTM E2500 change about C&Q?
It replaced the uniform, document-everything IQ/OQ/PQ model with a risk- and science-based approach: verification effort is driven by risk to product quality and patient safety and by process knowledge, focused on the critical aspects of a system, with good engineering practice and vendor documentation leveraged for the rest.
What is a "critical aspect" in qualification?
A critical aspect is a feature of a system whose failure would affect a critical quality attribute of the product or the control of a critical process parameter. Identifying critical aspects is how the risk-based approach decides what must be verified directly, and what can be covered by good engineering practice.
How does C&Q relate to process validation?
Qualification proves the equipment installs and operates as intended — "does the tool work?" Process validation proves the manufacturing process run on that qualified equipment reliably makes conforming product — "does the recipe work on this tool?" C&Q underpins process validation; a validated process cannot rest on unqualified equipment.