Facility design and manufacturing processes are complex, multi-stage operations, fraught with difficulty. Ensuring the facility meets Good Manufacturing Practice (GMP) standards and other regulatory requirements is a major challenge. The complex regulations around biomanufacturing facilities require careful planning and documentation from the earliest design stages.
Which is why consensus standards like ASTM E2500 exist.
Central to these approaches are risk assessment, to which there are three primary components:
An understanding of the uncertainties in the design (which includes materials, processing, equipment, personnel, environment, detection systems, feedback control)
An identification of the hazards and failure mechanisms
An estimation of the risks associated with each hazard and failure
Folks often get tied up on what tool to use. Frankly, this is a phase approach. We start with a PHA for design, an FMEA for verification and a HACCP/Layers of Control Analysis for Acceptance. Throughout we use a bow-tie for communication.
Aspect
Bow-Tie
PHA (Preliminary Hazard Analysis)
FMEA (Failure Mode and Effects Analysis)
HACCP (Hazard Analysis and Critical Control Points)
Primary Focus
Visualizing risk pathways
Early hazard identification
Potential failure modes
Systematically identify, evaluate, and control hazards that could compromise product safety
Timing in Process
Any stage
Early development
Any stage, often design
Throughout production
Approach
Combines causes and consequences
Top-down
Bottom-up
Systematic prevention
Complexity
Moderate
Low to moderate
High
Moderate
Visual Representation
Central event with causes and consequences
Tabular format
Tabular format
Flow diagram with CCPs
Risk Quantification
Can include, not required
Basic risk estimation
Risk Priority Number (RPN)
Not typically quantified
Regulatory Alignment
Less common in pharma
Aligns with ISO 14971
Widely accepted in pharma
Less common in pharma
Critical Points
Identifies barriers
Does not specify
Identifies critical failure modes
Identifies Critical Control Points (CCPs)
Scope
Specific hazardous event
System-level hazards
Component or process-level failures
Process-specific hazards
Team Requirements
Cross-functional
Less detailed knowledge needed
Detailed system knowledge
Food safety expertise
Ongoing Management
Can be used for monitoring
Often updated periodically
Regularly updated
Continuous monitoring of CCPs
Output
Visual risk scenario
List of hazards and initial risk levels
Prioritized list of failure modes
HACCP plan with CCPs
Typical Use in Pharma
Risk communication
Early risk identification
Detailed risk analysis
Product Safety/Contamination Control
At BOSCON this year I’ll be talking about this fascinating detail, perhaps too much detail.
Maturity models offer significant benefits to organizations by providing a structured framework for benchmarking and assessment. Organizations can clearly understand their strengths and weaknesses by evaluating their current performance and maturity level in specific areas or processes. This assessment helps identify areas for improvement and sets a baseline for measuring progress over time. Benchmarking against industry standards or best practices also allows organizations to see how they compare to their peers, fostering a competitive edge.
One of the primary advantages of maturity models is their role in fostering a culture of continuous improvement. They provide a roadmap for growth and development, encouraging organizations to strive for higher maturity levels. This continuous improvement mindset helps organizations stay agile and adaptable in a rapidly changing business environment. By setting clear goals and milestones, maturity models guide organizations in systematically addressing deficiencies and enhancing their capabilities.
Standardization and consistency are also key benefits of maturity models. They help establish standardized practices across teams and departments, ensuring that processes are executed with the same level of quality and precision. This standardization reduces variability and errors, leading to more reliable and predictable outcomes. Maturity models create a common language and framework for communication, fostering collaboration and alignment toward shared organizational goals.
The use of maturity models significantly enhances efficiency and effectiveness. Organizations can increase productivity and use their resources by identifying areas for streamlining operations and optimizing workflows. This leads to reduced errors, minimized rework, and improved process efficiency. The focus on continuous improvement also means that organizations are constantly seeking ways to refine and enhance their operations, leading to sustained gains in efficiency.
Maturity models play a crucial role in risk reduction and compliance. They assist organizations in identifying potential risks and implementing measures to mitigate them, ensuring compliance with relevant regulations and standards. This proactive approach to risk management helps organizations avoid costly penalties and reputational damage. Moreover, maturity models improve strategic planning and decision-making by providing a data-backed foundation for setting priorities and making informed choices.
Finally, maturity models improve communication and transparency within organizations. Providing a common communication framework increases transparency and builds trust among employees. This improved communication fosters a sense of shared purpose and collaboration, essential for achieving organizational goals. Overall, maturity models serve as valuable tools for driving continuous improvement, enhancing efficiency, and fostering a culture of excellence within organizations.
Business Process Maturity Model (BPMM)
A structured framework used to assess and improve the maturity of an organization’s business processes, it provides a systematic methodology to evaluate the effectiveness, efficiency, and adaptability of processes within an organization, guiding continuous improvement efforts.
Key Characteristics of BPMM
Assessment and Classification: BPMM helps organizations understand their current process maturity level and identify areas for improvement. It classifies processes into different maturity levels, each representing a progressive improvement in process management.
Guiding Principles: The model emphasizes a process-centric approach focusing on continuous improvement. Key principles include aligning improvements with business goals, standardization, measurement, stakeholder involvement, documentation, training, technology enablement, and governance.
Incremental Levels
BPMM typically consists of five levels, each building on the previous one:
Initial: Processes are ad hoc and chaotic, with little control or consistency.
Managed: Basic processes are established and documented, but results may vary.
Standardized: Processes are well-documented, standardized, and consistently executed across the organization.
Predictable: Processes are quantitatively measured and controlled, with data-driven decision-making.
Optimizing: Continuous process improvement is ingrained in the organization’s culture, focusing on innovation and optimization.
Benefits of BPMM
Improved Process Efficiency: By standardizing and optimizing processes, organizations can achieve higher efficiency and consistency, leading to better resource utilization and reduced errors.
Enhanced Customer Satisfaction: Mature processes lead to higher product and service quality, which improves customer satisfaction.
Better Change Management: Higher process maturity increases an organization’s ability to navigate change and realize project benefits.
Readiness for Technology Deployment: BPMM helps ensure organizational readiness for new technology implementations, reducing the risk of failure.
Usage and Implementation
Assessment: Organizations can conduct BPMM assessments internally or with the help of external appraisers. These assessments involve reviewing process documentation, interviewing employees, and analyzing process outputs to determine maturity levels.
Roadmap for Improvement: Organizations can develop a roadmap for progressing to higher maturity levels based on the assessment results. This roadmap includes specific actions to address identified deficiencies and improve process capabilities.
Continuous monitoring and regular evaluations are crucial to ensure that processes remain effective and improvements are sustained over time.
A BPMM Example: Validation Program based on ASTM E2500
To apply the Business Process Maturity Model (BPMM) to a validation program aligned with ASTM E2500, we need to evaluate the program’s maturity across the five levels of BPMM while incorporating the key principles of ASTM E2500. Here’s how this application might look:
Level 1: Initial
At this level, the validation program is ad hoc and lacks standardization:
Validation activities are performed inconsistently across different projects or departments.
There’s limited understanding of ASTM E2500 principles.
Risk assessment and scientific rationale for validation activities are not systematically applied.
Documentation is inconsistent and often incomplete.
Level 2: Managed
The validation program shows some structure but lacks organization-wide consistency:
Basic validation processes are established but may not fully align with ASTM E2500 guidelines.
Some risk assessment tools are used, but not consistently across all projects.
Subject Matter Experts (SMEs) are involved, but their roles are unclear.
There’s increased awareness of the need for scientific justification in validation activities.
Level 3: Standardized
The validation program is well-defined and consistently implemented:
Validation processes are standardized across the organization and align with ASTM E2500 principles.
Risk-based approaches are consistently used to determine the scope and extent of validation activities.
SMEs are systematically involved in the design review and verification processes.
The concept of “verification” replaces traditional IQ/OQ/PQ, focusing on critical aspects that impact product quality and patient safety.
Quality risk management tools (e.g., impact assessments, risk management) are routinely used to identify critical quality attributes and process parameters.
Level 4: Predictable
The validation program is quantitatively managed and controlled:
Key Performance Indicators (KPIs) for validation activities are established and regularly monitored.
Data-driven decision-making is used to continually improve the efficiency and effectiveness of validation processes.
Advanced risk management techniques are employed to predict and mitigate potential issues before they occur.
There’s a strong focus on leveraging supplier documentation and expertise to streamline validation efforts.
Engineering procedures for quality activities (e.g., vendor technical assessments and installation verification) are formalized and consistently applied.
Level 5: Optimizing
The validation program is characterized by continuous improvement and innovation:
There’s a culture of continuous improvement in validation processes, aligned with the latest industry best practices and regulatory expectations.
Innovation in validation approaches is encouraged, always maintaining alignment with ASTM E2500 principles.
The organization actively contributes to developing industry standards and best practices in validation.
Validation activities are seamless integrated with other quality management systems, supporting a holistic approach to product quality and patient safety.
Advanced technologies (e.g., artificial intelligence, machine learning) may be leveraged to enhance risk assessment and validation strategies.
Key Considerations for Implementation
Risk-Based Approach: At higher maturity levels, the validation program should fully embrace the risk-based approach advocated by ASTM E2500, focusing efforts on aspects critical to product quality and patient safety.
Scientific Rationale: As maturity increases, there should be a stronger emphasis on scientific understanding and justification for validation activities, moving away from a checklist-based approach.
SME Involvement: Higher maturity levels should see increased and earlier involvement of SMEs in the validation process, from equipment selection to verification.
Supplier Integration: More mature programs will leverage supplier expertise and documentation effectively, reducing redundant testing and improving efficiency.
Continuous Improvement: At the highest maturity level, the validation program should have mechanisms in place for continuous evaluation and improvement of processes, always aligned with ASTM E2500 principles and the latest regulatory expectations.
Process and Enterprise Maturity Model (PEMM),
The Process and Enterprise Maturity Model (PEMM), developed by Dr. Michael Hammer, is a comprehensive framework designed to help organizations assess and improve their process maturity. It is a corporate roadmap and benchmarking tool for companies aiming to become process-centric enterprises.
Key Components of PEMM
PEMM is structured around two main dimensions: Process Enablers and Organizational Capabilities. Each dimension is evaluated on a scale to determine the maturity level.
Process Enablers
These elements directly impact the performance and effectiveness of individual processes. They include:
Design: The structure and documentation of the process.
Performers: The individuals or teams executing the process.
Owner: The person responsible for the process.
Infrastructure: The tools, systems, and resources supporting the process.
Metrics: The measurements used to evaluate process performance.
Organizational Capabilities
These capabilities create an environment that supports and sustains high-performance processes. They include:
Leadership: The commitment and support from top management.
Culture: The organizational values and behaviors that promote process excellence.
Expertise: The skills and knowledge required to manage and improve processes.
Governance: The mechanisms to oversee and guide process management activities.
Maturity Levels
Both Process Enablers and Organizational Capabilities are assessed on a scale from P0 to P4 (for processes) and E0 to E4 (for enterprise capabilities):
P0/E0: Non-existent or ad hoc processes and capabilities.
P1/E1: Basic, but inconsistent and poorly documented.
P2/E2: Defined and documented, but not fully integrated.
P3/E3: Managed and measured, with consistent performance.
P4/E4: Optimized and continuously improved.
Benefits of PEMM
Self-Assessment: PEMM is designed to be simple enough for organizations to conduct their own assessments without needing external consultants.
Empirical Evidence: It encourages the collection of data to support process improvements rather than relying on intuition.
Engagement: Involves all levels of the organization in the process journey, turning employees into advocates for change.
Roadmap for Improvement: Provides a clear path for organizations to follow in their process improvement efforts.
Application of PEMM
PEMM can be applied to any type of process within an organization, whether customer-facing or internal, core or support, transactional or knowledge-intensive. It helps organizations:
Assess Current Maturity: Identify the current state of process and enterprise capabilities.
Benchmark: Compare against industry standards and best practices.
Identify Improvements: Pinpoint areas that need enhancement.
Track Progress: Monitor the implementation and effectiveness of process improvements.
A PEMM Example: Validation Program based on ASTM E2500
To apply the Process and Enterprise Maturity Model (PEMM) to an ASTM E2500 validation program, we can evaluate the program’s maturity across the five process enablers and four enterprise capabilities defined in PEMM. Here’s how this application might look:
Process Enablers
Design:
P-1: Basic ASTM E2500 approach implemented, but not consistently across all projects
P-2: ASTM E2500 principles applied consistently, with clear definition of requirements, specifications, and verification activities
P-3: Risk-based approach fully integrated into design process, with SME involvement from the start
P-4: Continuous improvement of ASTM E2500 implementation based on lessons learned and industry best practices
Performers:
P-1: Some staff trained on ASTM E2500 principles
P-2: All relevant staff trained and understand their roles in the ASTM E2500 process
P-3: Staff proactively apply risk-based thinking and scientific rationale in validation activities
P-4: Staff contribute to improving the ASTM E2500 process and mentor others
E-3: Leadership drives cultural change to fully embrace risk-based validation approach
E-4: Leadership promotes ASTM E2500 principles beyond the organization, influencing industry standards
Culture:
E-1: Some recognition of the importance of risk-based validation
E-2: Culture of quality and risk-awareness developing across the organization
E-3: Strong culture of scientific thinking and continuous improvement in validation activities
E-4: Innovation in validation approaches encouraged and rewarded
Expertise:
E-1: Basic understanding of ASTM E2500 principles among key staff
E-2: Dedicated team of ASTM E2500 experts established
E-3: Deep expertise in risk-based validation approaches across multiple departments
E-4: Organization recognized as thought leader in ASTM E2500 implementation
Governance:
E-1: Basic governance structure for validation activities in place
E-2: Clear governance model aligning ASTM E2500 with overall quality management system
E-3: Cross-functional governance ensuring consistent application of ASTM E2500 principles
E-4: Governance model that adapts to changing regulatory landscape and emerging best practices
To use this PEMM assessment:
Evaluate your validation program against each enabler and capability, determining the current maturity level (P-1 to P-4 for process enablers, E-1 to E-4 for enterprise capabilities).
Identify areas for improvement based on gaps between current and desired maturity levels.
Develop action plans to address these gaps, focusing on moving to the next maturity level for each enabler and capability.
Regularly reassess the program to track progress and adjust improvement efforts as needed.
Comparison Table
Aspect
BPMM
PEMM
Creator
Object Management Group (OMG)
Dr. Michael Hammer
Purpose
Assess and improve business process maturity
Roadmap and benchmarking for process-centricity
Structure
Five levels: Initial, Managed, Standardized, Predictable, Optimizing
Two components: Process Enablers (P0-P4), Organizational Capabilities (E0-E4)
Enterprise systems, business process improvement, benchmarking
Process reengineering, organizational engagement, benchmarking
In summary, while both BPMM and PEMM aim to improve business processes, BPMM is more structured and detailed, often requiring external appraisers, and focuses on incremental process improvement across organizational boundaries. In contrast, PEMM is designed for simplicity and self-assessment, emphasizing the role of process enablers and organizational capabilities to foster a supportive environment for process improvement. Both have advantages, and keeping both in mind while developing processes is key.
Defining the accountable individuals in a process is critical. In GAMP5, the technical System Owner role is distinct from the business Process Owner role, which focuses more on the system’s business process and compliance aspects.
The System Owner
The System Owner is responsible for the computerized system’s availability, support, and maintenance throughout its lifecycle. The System owner is the technical side of the equation and is often an IT director/manager or application support manager. Key responsibilities include:
Defining, reviewing, approving, and implementing risk mitigation plans
Ensuring technical requirements are documented
Managing change control for the system
Conducting evaluations for change requests impacting security, maintainability, data integrity, and architecture
Performing system administration tasks like user and privilege maintenance
Handling system patching, documentation of issues, and facilitating vendor support
Frankly, I think too many organizations make the system owner too low level. These lower-level individuals may perform system admin tasks and handle systems patching, but the more significant risk questions require extensive experience.
The System Owner focuses on the technical aspects of validation and ensures adequate procedural controls are in place after validation to maintain the validated state and protect data integrity.
The system owner requires learning and understanding new products and complex system architectures. They are the architect and need to be in charge of the big picture.
The Process Owner
In the context of GAMP5, a Process Owner plays a crucial role in the lifecycle management of computerized systems used in regulated industries such as pharmaceuticals and biotechnology. The Process Owner is ultimately accountable for the system’s implementation, validation, and ongoing compliant use.
I’ve written a lot about Process Owners. This use of process owner is 100% aligned with previous thinking.
Key Responsibilities of a Process Owner
System Implementation and Validation: The Process Owner ensures the system is implemented and validated according to regulatory requirements and company policies. This includes overseeing the creation and maintenance of validation documentation and ensuring the system meets its intended use.
Ongoing Compliance and Maintenance: The Process Owner must ensure the system remains validated throughout its lifecycle. This involves regular reviews, updates, and maintenance activities to ensure continued compliance with regulatory standards.
Data Integrity and Quality: As the data owner maintains the system, the Process Owner is responsible for its integrity, administration, operation, maintenance, and decommissioning. They must ensure that data integrity and quality requirements are met and maintained.
Decision-Making Authority: The Process Owner should be at a level within the organization that allows them to make business and process decisions regarding the system. This often includes roles such as operations director/manager, lab manager, or production manager.
Collaboration with Other Teams: The Process Owner must collaborate with various teams, including Quality (QA), IT, Computer System Validation (CSV), training, HR, system vendors, and system development teams, to ensure that all necessary compliance activities are performed and documented promptly.
Skills and Knowledge Required
Detailed Understanding of the System: The Process Owner should have a comprehensive understanding of the system, its purpose, functions, and use within the organization.
Regulatory Knowledge: A good grasp of regulatory requirements is crucial for ensuring the system complies with all relevant guidelines and standards.
Validation Practices: The Process Owner will sign off on validation documents and ensure that the system is fit for its intended use.
While the Molecule Steward, the ASTM E2500 SME role, is not directly equivalent to the GAMP 5 roles, it shares some similarities with both the system owner and process owner, particularly in terms of specialized knowledge and involvement in critical aspects of the system. It’s best to think of the Molecule Steward as the third part of this triad, ensuring the robustness of the scientific approach.
System Owner
Process Owner
Molecule Steward
Primary Focus
Technical aspects and maintenance of the system
Business process and compliance aspects
Specialized knowledge of critical aspects
Typical Role
IT director/manager or application support manager
Head of functional unit or department using the system
Subject matter expert in specific field
Key Responsibilities
– System availability, support, and maintenance – Data security – Risk mitigation plans – Technical requirements documentation – Change control management – Evaluating change requests
– Overall system integrity and compliance – Data ownership – User requirements definition – SOP development and maintenance – Ensuring GxP compliance – Approving key documentation – User training
– Defining system needs – Identifying critical aspects – Leading quality risk management – Developing verification strategies – Reviewing system designs – Executing verification tests
Expertise
Strong technical background
Business process knowledge
Specialized technical knowledge
Accountability
System performance and security
Business use and regulatory compliance
Critical aspects impacting product quality and patient safety
Involvement in Validation
Focuses on technical validation aspects
Ensures validation meets business needs
Leads verification activities
Comparison of SO, PO and ASTM E2500 SME
Scale of the System
People make the system too small here. This isn’t equipment A or computer system X. It’s the entire system that produces result Y. For example, it is the manufacturing process for DS (or upstream DS), not the individual bioreactors. Lower-level assistants can help with wrangling, but there should be overall accountability. The system, process, and ASTM E2500 SME must have the power in the organization to be truly accountable.
The Role of Quality
The Quality Unit is responsible for ensuring the right process and procedure are in place, that regulatory requirements are met, and that the system is fit for use and fit for purpose. The Quality Unit in GAMP5 is crucial for ensuring the safety, efficacy, and regulatory compliance of pharmaceutical products and computerized systems.
Ensuring Compliance and Product Quality: Quality is vital in ensuring that computerized systems used in pharmaceutical manufacturing meet regulatory requirements and consistently produce high-quality products. The Quality Unit helps organizations maintain high-quality standards in the various processes.
Risk Management: The Quality Unit champions a science-based risk management approach to system validation and qualification. Quality ensures the identification and assessment of potential risks.
Lifecycle Approach: The Quality Unit ensures that validation activities are conducted throughout the system’s lifecycle, from concept to retirement.
Documentation and Traceability: The Quality Unit oversees comprehensive documentation and traceability throughout the system’s lifecycle. Detailed records enable transparency, facilitate audits, and demonstrate compliance with regulatory requirements.
Change Management: The Quality Unit evaluates and controls system changes to ensure that modifications do not compromise product quality or patient safety.
Data Integrity: Quality is crucial in maintaining data integrity and ensuring records’ accuracy, reliability, and completeness.
Supplier and Internal Audits: Quality regularly audits suppliers and internal processes to ensure compliance and quality. These audits help identify gaps and areas for improvement in system development, implementation, and maintenance.
Beyond GAMP5
I consider this the best practice for handling an ASTM E2500 approach.
We tend to jumble forms of accountability in an organization, often confusing between a people manager and a technical manager. I think its very important to differentiate between the two.
People managers deal with human resources and team dynamics, while technical managers deal with managing design, execution, and improvement. They can be the same person, but we need to recognize the differences and resource appropriately. Too often we blur the two roles and as a result neither is done well.
Technical understanding of manufacturing systems and equipment
Leadership and communication skills
Certification, degree, or other professional recognition
Several years of experience in pharmaceutical manufacturing
Analytical and validation skills
Risk management and verification skills
Analytical and problem-solving skills
Ability to solve technical problems
Registered with the competent authority in the EU member state
Training and support skills
Continuous improvement and change management skills
Ability to define and monitor KPIs
Authority
Authority to design and install safety systems
Authority to certify batches and ensure compliance
Authority over knowledge management processes and content
Authority to define and verify critical aspects of systems
Authority to make decisions and implement changes in the process
Interaction with Others
Collaborates with production and quality control teams
Works with quality control, assurance, and regulatory teams
Works with various departments to ensure knowledge is shared and utilized
Collaborates with project stakeholders and engineering teams
Communicates with project leaders, process users, and other stakeholders
Examples of Activities
Reviewing batch documentation and certifying products
Certifying each batch of medicinal products before release
Validating new knowledge submissions
Conducting quality risk analyses and verification tests
Defining process objectives and mission statements
Ensuring compliance with GMP and regulatory standards
Ensuring compliance with GMP and regulatory standards
Providing training on knowledge management systems
Reviewing system designs and managing changes
Monitoring process performance and compliance
Overseeing investigations related to quality issues
Overseeing quality control and assurance processes
Updating and maintaining knowledge databases
Leading continuous improvement efforts
Identifying and implementing process improvements
Industry Context
Primarily in construction, manufacturing, and safety-critical industries
Pharmaceutical and biotechnology industries within the EU
Applicable across various industries, especially information-heavy sectors
Primarily in pharmaceutical and biotechnology industries
Applicable in any industry with defined business processes
Comparison table
Qualified Person (OSHA Definition): Focuses on ensuring compliance with safety standards and solving technical problems. They possess technical expertise and professional recognition and are responsible for designing and installing safety systems.
Qualified Person (EU): Ensures that each batch of medicinal products meets all required provisions before release. They are responsible for compliance with GMP and regulatory standards and must be registered with the competent authority in the EU member state.
Knowledge Owner: Manages and disseminates knowledge within an organization. They ensure that knowledge is accurate, up-to-date, and accessible, and they provide training and support to facilitate knowledge sharing.
ASTM E2500 SME: Ensures that manufacturing systems meet quality and safety standards. They define system needs, develop verification strategies, manage risks, and lead continuous improvement efforts.
Process Owner: Manages and optimizes specific business processes. They define process goals, monitor performance, ensure compliance with standards, and implement improvements to enhance efficiency and effectiveness.
All roles require a high level of subject matter expertise in their respective domains, whether it’s technical knowledge, regulatory compliance, manufacturing processes, or business processes.
This expertise is typically gained through formal education, certifications, extensive training, and practical experience.
Ensuring Compliance and Quality
A key responsibility across these roles is ensuring compliance with relevant laws, regulations, standards, and quality requirements.
Risk Identification and Management
These roles are all responsible for identifying potential risks, hazards, or process inefficiencies.
They are expected to develop and implement strategies to mitigate or eliminate these risks, ensuring the safety of operations and the quality of products or processes.
Continuous Improvement and Change Management
They are involved in continuous improvement efforts, identifying areas for optimization and implementing changes to enhance efficiency, quality, and knowledge sharing.
They are responsible for managing change processes, ensuring smooth transitions, and minimizing disruptions.
Authority and Decision-Making
Most of these roles have a certain level of authority and decision-making power within their respective domains.
Collaboration and Knowledge Sharing
Effective collaboration and knowledge sharing are essential for these roles to succeed.
While these roles have distinct responsibilities and focus areas, they share common goals of ensuring compliance, managing risks, driving continuous improvement, and leveraging subject matter expertise to achieve organizational objectives and maintain high standards of quality and safety. They are more similar than dissimilar and should be looked at holistically within the organization.
In ASTM E2500, a Subject Matter Expert (SME) is an individual with specialized knowledge and technical understanding of critical aspects of manufacturing systems and equipment. The SME plays a crucial role throughout the project lifecycle, from defining needs to verifying and accepting systems. They are responsible for identifying critical aspects, reviewing system designs, developing verification strategies, and leading quality risk management efforts. SMEs ensure manufacturing systems are designed and verified to meet product quality and patient safety requirements.
In the ASTM E2500 process, the Subject Matter Experts (SME) has several key responsibilities critical to successfully implementing the standard. These responsibilities include:
Definition of Needs: SMEs define the system’s needs and identify critical aspects that impact product quality and patient safety.
Risk Management: SMEs participate in risk management activities, helping to identify, assess, and manage risks throughout the project lifecycle. This includes conducting quality risk analyses and consistently applying risk management principles.
Verification Strategy Development: SMEs are responsible for planning and defining verification strategies. This involves selecting appropriate test methods, defining acceptance criteria, and ensuring that verification activities are aligned with the project’s critical aspects.
System Design Review: SMEs review system designs to ensure they meet specified requirements and address identified risks. This includes participating in design reviews and providing technical input to optimize system functionality and compliance.
Execution of Verification Tests: SMEs lead the execution of verification tests, ensuring that tests are conducted accurately and that results are thoroughly reviewed. They may also leverage vendor documentation and test results as part of the verification process, provided the vendor’s quality system and technical capabilities are deemed acceptable.
Change Management: SMEs play a crucial role in change management, ensuring that any modifications to the system are properly evaluated, documented, and implemented. This helps maintain the system’s validated state and ensures continuous compliance with regulatory requirements.
Continuous Improvement: SMEs are involved in continuous process improvement efforts, using operational and performance data to identify opportunities for enhancements. They also conduct root-cause analyses of failures and implement technically sound improvements based on gained product knowledge and understanding.
These responsibilities highlight the SME’s integral role in ensuring that manufacturing systems are designed, verified, and maintained to meet the highest standards of quality and safety, as outlined in ASTM E2500.
The ASTM E2500 SME is a Process Owner
ASTM E2500 uses the term SME in the same way we discuss process owners, or what is sometimes called product or molecule stewards. The term should probably be changed to reflect the special role of the SME and the relationship with other stakeholders.
A Molecule Steward has a specialized role within pharmaceutical and biotechnology companies and oversees the lifecycle of a specific molecule or drug product. This role involves a range of responsibilities, including:
Technical Expertise: Acting as the subject matter expert per ASTM E2500.
Product Control Strategies: Implementing appropriate product control strategies across development and manufacturing sites based on anticipated needs.
Lifecycle Management: Providing end-to-end accountability for a given molecule, from development to late-stage lifecycle management.
A Molecule Steward ensures a drug product’s successful development, manufacturing, and lifecycle management, maintaining high standards of quality and compliance throughout the process.
The ASTM E2500 SME (Molecule Steward) and Stakeholders
In the ASTM E2500 approach, the Subject Matter Expert (Molecule Steward) collaborates closely with various project players to ensure the successful implementation of manufacturing systems.
Definition of Needs and Requirements
Collaboration with Project Teams: SMEs work with project teams from the beginning to define the system’s needs and requirements. This involves identifying critical aspects that impact product quality and patient safety.
Input from Multiple Departments: SMEs gather input from different departments, including product/process development, engineering, automation, and validation, to ensure that all critical quality attributes (CQAs) and critical process parameters (CPPs) are considered.
Risk Management
Quality Risk Analysis: SMEs lead the quality risk analysis process, collaborating with QA and other stakeholders to identify and assess risks. This helps focus on critical aspects and consistently apply risk management principles.
Vendor Collaboration: SMEs often work with vendors to leverage their expertise in conducting risk assessments and ensuring that vendor documentation meets quality requirements.
System Design Review
Design Review Meetings: SMEs participate in design review meetings with suppliers and project teams to ensure the system design meets the defined needs and critical aspects. This collaborative effort helps in reducing the need for modifications and repeat tests.
Supplier Engagement: SMEs engage with suppliers to ensure their design solutions are understood and integrated into the project. This includes reviewing supplier documentation and ensuring compliance with regulatory requirements.
Verification Strategy Development
Developing Verification Plans: SMEs collaborate with QA and engineering teams to develop verification strategies and plans. This involves selecting appropriate test methods, defining acceptance criteria, and ensuring verification activities align with project goals.
Execution of Verification Tests: SMEs may work with suppliers to conduct verification tests at the supplier’s site, ensuring that tests are performed accurately and efficiently. This collaboration helps achieve the “right test” at the “right time” objective.
Change Management
Managing Changes: SMEs play a crucial role in the change management process, working with project teams to evaluate, document, and implement changes. This ensures that the system remains in a validated state and continues to meet regulatory requirements.
Continuous Improvement: SMEs collaborate with other stakeholders to identify opportunities for process improvements and implement changes based on operational and performance data.
Documentation and Communication
Clear Communication: SMEs ensure clear communication and documentation of all verification activities and acceptance criteria. This involves working closely with QA to validate all critical aspects and ensure compliance with regulatory standards.