Part of The GMP Training AcademyAll GMP courses
CC · Practitioner

Change Control: the full syllabus

Plan, classify, assess, approve, implement and verify changes so that the validated state, the registered dossier and the quality agreements all survive, and the record proves it.

  • 2.5 hours, self-paced
  • Verifiable certificate with a unique ID
  • Team licences available
Launch price to be announcedI am interested, notify me first
Who it is for

Anyone whose name goes on the change record

  • QA staff who review, approve and close change controls
  • Engineering, validation, production and IT staff who raise and implement them
  • Regulatory and supply chain people who decide whether a change touches the dossier or the customer
What you will be able to do

Outcomes, not topics

By the end of the course you will have done each of these on a real record, not just read about it.

  • Decide what needs a change control, what is a like-for-like replacement, and what is a deviation in disguise
  • Classify changes as minor or major with a risk rationale that survives challenge, and map them to the EU variation categories under Regulation (EC) 1234/2008
  • Run a cross-functional impact assessment that covers validation, regulatory, quality agreements, supply, documentation and training
  • Sequence approval, implementation and verification so nothing goes live before the evidence exists
  • Define an effectiveness check that measures whether the change did what it was meant to, and close only when it passes
  • Apply Annex 11 and GAMP 5 to computerised system changes without a separate, weaker system
Syllabus

6 modules, in the order a change runs

  1. 1

    Why changes fail: lessons from inspection findings

    What change control is for, what regulators cite when it fails, and how sites lose the validated state one uncontrolled change at a time.

    Free preview: What needs change control in GMP? The scope question, answered with the regulations
  2. 2

    Change classification and regulatory impact

    Like-for-like, minor, major. Regulatory assessment under the Regulation (EC) 1234/2008 variation categories and the classification guideline, notified body and MDR requirements for devices, and why the site classification and the regulatory classification are two different questions.

    Free preview: Change classification: like-for-like, minor, major, and the regulatory question
  3. 3

    Impact assessment across QMS, validation and supply

    The cross-functional assessment: validation and qualification, cleaning, stability, analytical methods, quality agreements, supply and customer notification, documentation and training.

    Free preview: The change control impact assessment: cross-functional, evidenced, and not a row of 'no' ticks
  4. 4

    Approval, implementation and verification

    Pre-approval versus implementation approval, the action plan, gating go-live on completed pre-requisites, and verifying that what was implemented is what was approved.

    Free preview: Approval, implementation and verification: getting the sequence right
  5. 5

    Effectiveness checks and closure

    Defining the check when the change is raised, choosing a measure and a window, closing on evidence rather than on completion, and trending the change system itself.

    Free preview: Effectiveness checks and closure: proving the change worked
  6. 6

    Change control for computerised systems

    Annex 11 section 10, GAMP 5 second edition, configuration versus customisation, patches and cloud releases, regression testing and the audit trail as evidence.

    Free preview: Change control for computerised systems: Annex 11, GAMP 5 and the patch nobody assessed
Regulatory basis

Every module is tied to its clause

  • EU GMP Ch. 11.4(xi) change management
  • EU GMP Annex 15Section 11 change control
  • EU GMP Annex 11Section 10 change and configuration
  • ICH Q103.2.3 change management system
  • ICH Q9 (R1)Quality risk management
  • EU GMP Part II / ICH Q7Section 13 change control for APIs
  • ISO 13485 / MDR 2017/7457.3.9, 4.1.4; Annex IX substantial changes
  • Reg. (EC) 1234/2008EU variations: Type IA, IB and II
Why training is the best line in the quality budget

Trained people make fewer defects, close faster and stay.

Regulators treat training as part of the quality system, not a favour to staff: EU GMP Chapter 2 requires it, requires its effectiveness to be assessed, and requires the records to prove it. The evidence says the same thing in numbers. Below: what the published studies found, what it looks like on your change control KPIs, and the clause behind it.

  • 41%

    fewer quality defects

    in the most engaged teams compared with the least engaged, across 112,000 business units. Engagement and development opportunities are measured together. [1]

  • 26%

    greater ability to deliver quality products

    in organisations with a strong learning culture compared with those without. [2]

  • 37%

    higher employee productivity

    in the same strong-learning-culture organisations; output per person, not hours. [2]

  • 94%

    would stay longer

    of employees, at a company that invests in their learning. Retention is the quality metric nobody puts on the dashboard. [3]

The change control KPIs a trained team moves

These are the numbers a QA head reports at management review and an inspector asks for. No invented percentages here: measure yours before and six months after, and you will have your own.

EU GMP Chapter 2 (2.10 to 2.13): all personnel whose activities could affect product quality receive training, its practical effectiveness is periodically assessed, and the programme is approved by the head of Production or Quality Control as appropriate. Training records are kept. ICH Q10 section 2.4 lists training among the resources senior management must provide for the quality system. [4]
  1. 01

    Overdue change controls

    Measured as: % of open changes past their target date

    Lower is better

    Change owners who classify correctly and scope the impact assessment on day one do not stall at approval. Overdue falls; controlled extension with a rationale replaces silent lateness.

  2. 02

    Changes implemented before approval

    Measured as: % of audited changes

    Lower is better

    People who understand what counts as a change, and why the approval gate exists, stop making the small change first and raising the record afterwards. This is the finding inspectors write up most.

  3. 03

    Impact assessments complete first time

    Measured as: % accepted without QA return

    Higher is better

    Cross-functional impact written to the standard the first time: validation, regulatory, supply and training questions asked at classification, not discovered at closure. QA review becomes review, not rewriting.

  4. 04

    Time to approval

    Measured as: median days, raised to approved

    Lower is better

    A clear classification, a complete impact assessment and named approvers cut the loops between the change owner and QA. Fewer returns, fewer meetings, faster approval.

  5. 05

    Effectiveness checks passed

    Measured as: % of checks passed at review

    Higher is better

    Effectiveness criteria defined before implementation, measuring whether the change delivered what it promised rather than whether the actions were ticked. Passed checks mean the change worked.

  6. 06

    Changes closed with all actions verified

    Measured as: % closed with objective evidence of every action

    Higher is better

    Closure with evidence cited by identifier: the updated SOP number, the training record, the validation report. No change is closed on a promise, so no dossier mismatch is found later.

Be first when the course opens

Leave a work email. You are notified before public launch and get the launch price. Nothing else is sent.

Sources
  1. [1]Gallup (2020). The Relationship Between Engagement at Work and Organizational Outcomes: Q12 Meta-Analysis, 10th edition. 112,312 business units in 96 countries. Top-quartile business units on engagement showed 41% fewer quality defects, 81% lower absenteeism and 18% to 43% lower turnover than bottom-quartile units. Cross-industry meta-analysis. Gallup's engagement measure includes development and learning opportunities.
  2. [2]Bersin and Associates (2010). High-Impact Learning Culture: The 40 Best Practices for Creating an Empowered Enterprise. Organisations with a strong learning culture were 26% more able to deliver quality products, showed 37% greater employee productivity and were 46% more likely to be first to market. Cross-industry survey of about 40,000 organisations.
  3. [3]LinkedIn Learning (2018). Workplace Learning Report: The Rise and Responsibility of Talent Development in the New Labor Market. 94% of employees would stay longer at a company that invested in their career development. Cross-industry employee survey.
  4. [4]EudraLex Volume 4, EU Guidelines for Good Manufacturing Practice, Part I, Chapter 2: Personnel (2013), paragraphs 2.10 to 2.13. ICH Q10 Pharmaceutical Quality System (2008), section 2.4 Resource management. The regulatory requirement for training and for assessing its effectiveness.
How it compares

Against what your training budget usually buys

A fair comparison with the two alternatives most sites use. If the classroom course is genuinely better for you, book it. Most of the time it is not the classroom that is the problem, it is the follow-through.

This courseGeneric GMP e-learningTwo-day classroom course
Price per personLaunch price to be announced€40 to €90€1,200 to €2,000 plus travel
Time away from work2.5 hours, in your own time1 to 2 hours2 days
Written byPractitioners who review and approve changesContent agencyVaries
Practice on real recordsYes, three full change recordsNoSometimes, on the day
Regulation cited by clauseEvery moduleRarelyUsually
Templates you can use tomorrowChange request, impact assessment, implementation planNoSometimes
Assessment and certificateYes, verifiable IDCompletion certificateAttendance certificate
Questions answered by the authorYesNoOn the day only
Access period12 months, with updatesVariesNone after the event