Change control

Change control within quality management systems (QMS) and information technology (IT) systems is a formal process used to ensure that changes to a product or system are introduced in a controlled and coordinated manner. It reduces the possibility that unnecessary changes will be introduced to a system without forethought, introducing faults into the system or undoing changes made by other users of software. The goals of a change control procedure usually include minimal disruption to services, reduction in back-out activities, and cost-effective utilization of resources involved in implementing change.

Change control is currently used in various products and systems.^{[citation needed]} For IT systems it is a major aspect of the broader discipline of change management. Typical examples from the computer and network environments are patches to software products, installation of new operating systems, upgrades to network routing tables, or changes to the electrical power systems supporting such infrastructure.^{[citation needed]}

Certain portions of the Information Technology Infrastructure Library cover change control.^{[citation needed]}

The process

There is considerable overlap and confusion between change management, configuration management and change control. The definition below is not yet integrated with definitions of the others.

Certain experts describe change control as a set of six steps^[who?]:

Record / Classify
Assess
Plan
Build / Test
Implement
Close / Gain Acceptance

Record/classify

The client initiates change by making a formal request for something to be changed. The change control team then records and categorizes that request. This categorization would include estimates of importance, impact, and complexity.^{[citation needed]}

Assess

The impact assessor or assessors then make their risk analysis typically by answering a set of questions concerning risk, both to the business and to the process, and follow this by making a judgment on who should carry out the change. If the change requires more than one type of assessment, the head of the change control team will consolidate these. Everyone with a stake in the change then must meet to determine whether there is a business or technical justification for the change. The change is then sent to the delivery team for planning.^{[citation needed]}

Plan

Management will assign the change to a specific delivery team, usually one with the specific role of carrying out this particular type of change. The team's first job is to plan the change in detail as well as construct a regression plan in case the change needs to be backed out.^{[citation needed]}

Build/test

If all stakeholders agree with the plan, the delivery team will build the solution, which will then be tested. They will then seek approval and request a time and date to carry out the implementation phase.^{[citation needed]}

Implement

All stakeholders must agree to a time, date and cost of implementation. Following implementation, it is usual to carry out a post-implementation review which would take place at another stakeholder meeting.^{[citation needed]}

Close/gain acceptance

When the client agrees that the change was implemented correctly, the change can be closed.^{[citation needed]}

Regulatory environment

In a Good Manufacturing Practice regulated industry, the topic is frequently encountered by its users. Various industrial guidances and commentaries are available for people to comprehend this concept.^[1]^[2]^[3] As a common practice, the activity is usually directed by one or more SOPs.^[4] From the information technology perspective for clinical trials, it has been guided by another U.S. Food and Drug Administration document.^[5]

Notes

^ "Guidance for Industry: Quality Systems Approach to Pharmaceutical CGMP Regulations" (PDF). U.S. Food and Drug Administration. September 2006. Retrieved 12 July 2009. {{cite web}}: Cite has empty unknown parameter: |coauthors= (help)
^ Infusion. "Challenges of Change Control in a Regulated Industry" (PDF). Retrieved 28 April 2009. {{cite web}}: Cite has empty unknown parameter: |coauthors= (help)
^ ICH. "Q7: Good Manufacturing Practice Guide for Active Pharmaceutical Ingredients" (PDF). Retrieved 20 April 2011. {{cite web}}: Cite has empty unknown parameter: |coauthors= (help)
^ GMP Online Consultancy. "Change control system: Standard Operating Procedure". Retrieved 28 April 2009. {{cite web}}: Cite has empty unknown parameter: |coauthors= (help)
^ "Guidance for Industry: Computerized Systems Used in Clinical Trials" (PDF). U.S. Food and Drug Administration. April 1999. Retrieved 12 July 2009. {{cite web}}: Cite has empty unknown parameter: |coauthors= (help)

External links

[giqs-1] "Guidance for Industry: Quality Systems Approach to Pharmaceutical CGMP Regulations" (PDF). U.S. Food and Drug Administration. September 2006. Retrieved 12 July 2009. {{cite web}}: Cite has empty unknown parameter: |coauthors= (help)

[cccr-2] Infusion. "Challenges of Change Control in a Regulated Industry" (PDF). Retrieved 28 April 2009. {{cite web}}: Cite has empty unknown parameter: |coauthors= (help)

[gmpg-3] ICH. "Q7: Good Manufacturing Practice Guide for Active Pharmaceutical Ingredients" (PDF). Retrieved 20 April 2011. {{cite web}}: Cite has empty unknown parameter: |coauthors= (help)

[ccss-4] GMP Online Consultancy. "Change control system: Standard Operating Procedure". Retrieved 28 April 2009. {{cite web}}: Cite has empty unknown parameter: |coauthors= (help)

[gics-5] "Guidance for Industry: Computerized Systems Used in Clinical Trials" (PDF). U.S. Food and Drug Administration. April 1999. Retrieved 12 July 2009. {{cite web}}: Cite has empty unknown parameter: |coauthors= (help)

[1]

[2]

[3]

[4]

[5]