Posts Tagged ‘21 CFR Part 11’

This is the final post in our series on maintaining regulatory-compliant IT systems in the cloud. In this post, we’ll go over the key takeaways from the series and then we’ll send you on your way! Regardless of how much control you have over your IT systems, if you are using them for regulatory purposes, […]

As we’ve learned in the previous posts in this series, having a thoughtful, thorough cloud vendor qualification process and intelligent SLAs in your cloud vendor contracts will help you maximize the value of the cloud while maintaining regulatory compliance. In addition, here are some tips and best practices to help you knock it out of […]

In my previous post in this series, we discussed how to qualify cloud vendors. Once that process is complete, the second step to maintaining compliance is to document your specific regulatory requirements in a contract with the cloud vendor, usually in the form of service-level agreements (SLAs). In this blog post, I include a range […]

We recently completed a 21 CFR Part 11 gap analysis engagement for a client that was largely using SaaS applications, but had no cloud vendor qualification process in place. They had just been allowing each business unit to select the applications that met its user requirements, accept whatever validation documentation the cloud vendor supplied (if […]

Any time you take advantage of a cloud service – infrastructure, platform, or software – for a regulated purpose, you are ultimately responsible for its regulatory compliance, not the cloud vendor. This is critical for you to remember. So, how can you ensure regulatory compliance of a software system you did not build, you do […]

As we continue our series on maintaining regulatory-compliant cloud systems, let’s touch on a few key terms. Below are explanations of the primary cloud-hosted offerings available in the market. Infrastructure-as-a-Service (IaaS) When you purchase a software system and opt to have a vendor host it for you instead of installing it on servers you own, […]

If your company makes drugs, medical devices, or biologics (vaccines, blood and blood components, allergenics, somatic cells, gene therapy, tissues, and recombinant therapeutic proteins), it is regulated. If your company is regulated, then every IT system you use to design, develop, conduct trials, manufacture, package, label, store, distribute, install, or service your products is also […]

The benefits of cloud hosting – including Infrastructure-as-a-Service (IaaS), Platform-as-a-Service (PaaS), and Software-as-a-Service (SaaS) – are very clear: less upfront capital, faster implementations, scalability and elasticity, and no need for individual companies to maintain physical space, hardware, and/or technical staff for support. But there are also several risks to consider, including physical and technical security, […]

Imagine with me: Based on predefined clinical data and milestones, a site monitor receives a notification that one of her sites requires a site monitoring visit. She works with the site to schedule the visit, and both she and the site receive automated confirmation emails. The day of the visit, the monitor arrives at the […]

Over the past several weeks, I’ve published a series of posts that talk about how to assess and mitigate risk with your regulated IT systems. The FDA recommends using a risk-based approach to accomplish this feat, and we agree, so we laid out a four-part approach for you: Assess a system for its regulated status […]

A few weeks back, I described how to determine the risk level of a proposed change to a regulated IT system. I also talked about how the system risk level (SRL) and change risk level (CRL) work together to determine the level of rigor required to implement a proposed change without disrupting its validated state. […]

Now that July is here, I thought it would be neat to look back at what our readers found most interesting last month. Below are the top five blog posts Perficient’s life sciences practice wrote in June – they’re ranked in order of popularity, with number one being the most viewed piece. What Exactly Is An “Adverse […]