Risk Assessments as part of Design and Verification

Facility design and manufacturing processes are complex, multi-stage operations, fraught with difficulty. Ensuring the facility meets Good Manufacturing Practice (GMP) standards and other regulatory requirements is a major challenge. The complex regulations around biomanufacturing facilities require careful planning and documentation from the earliest design stages. 

Which is why consensus standards like ASTM E2500 exist.

Central to these approaches are risk assessment, to which there are three primary components:

• An understanding of the uncertainties in the design (which includes materials, processing, equipment, personnel, environment, detection systems, feedback control)
• An identification of the hazards and failure mechanisms
• An estimation of the risks associated with each hazard and failure

Folks often get tied up on what tool to use. Frankly, this is a phase approach. We start with a PHA for design, an FMEA for verification and a HACCP/Layers of Control Analysis for Acceptance. Throughout we use a bow-tie for communication.

Aspect	Bow-Tie	PHA (Preliminary Hazard Analysis)	FMEA (Failure Mode and Effects Analysis)	HACCP (Hazard Analysis and Critical Control Points)
Primary Focus	Visualizing risk pathways	Early hazard identification	Potential failure modes	Systematically identify, evaluate, and control hazards that could compromise product safety
Timing in Process	Any stage	Early development	Any stage, often design	Throughout production
Approach	Combines causes and consequences	Top-down	Bottom-up	Systematic prevention
Complexity	Moderate	Low to moderate	High	Moderate
Visual Representation	Central event with causes and consequences	Tabular format	Tabular format	Flow diagram with CCPs
Risk Quantification	Can include, not required	Basic risk estimation	Risk Priority Number (RPN)	Not typically quantified
Regulatory Alignment	Less common in pharma	Aligns with ISO 14971	Widely accepted in pharma	Less common in pharma
Critical Points	Identifies barriers	Does not specify	Identifies critical failure modes	Identifies Critical Control Points (CCPs)
Scope	Specific hazardous event	System-level hazards	Component or process-level failures	Process-specific hazards
Team Requirements	Cross-functional	Less detailed knowledge needed	Detailed system knowledge	Food safety expertise
Ongoing Management	Can be used for monitoring	Often updated periodically	Regularly updated	Continuous monitoring of CCPs
Output	Visual risk scenario	List of hazards and initial risk levels	Prioritized list of failure modes	HACCP plan with CCPs
Typical Use in Pharma	Risk communication	Early risk identification	Detailed risk analysis	Product Safety/Contamination Control

At BOSCON this year I’ll be talking about this fascinating detail, perhaps too much detail.