Computer System Validation (CSV) vs. Computer System Assurance (CSA): Aligning Agile to the GAMP®5 "V" Model & System Development Life Cycle (SDLC)

The FDA has been moving in the direction of newer technology in an effort to no longer be a bottleneck to industry innovation.

As part of the Case for Quality program US FDA Center for Devices and Radiological Health noted how an excessive focus by industry on compliance rather than quality may be diverting resources and management attention toward meeting regulatory compliance requirements vs. investing in automation and digital technologies, which could greatly improve quality and process control.

A key element is a risk-based, product quality and patient-centric approach to Computer System Assurance (CSA), issued as a draft guidance in September 2022 vs. the traditional Computer System Validation (CSV) waterfall approach. CSA encourages critical thinking based on product and process knowledge and quality risk management over prescriptive documentation driven approaches. It also provides the ability to use automated testing to improve validation efficiency and effectiveness.

This is where FDA determined that "WHAT" is required can be done in different ways (the "HOW") and does not have to be according to the "checklist" mindset of most CSV work, where you crank out documents without specifically addressing the risk of potential failure of each requirement.

GAMP®5 supports the use of incremental, iterative, and evolutionary approaches including agile and automated testing for development of custom applications. Keys to success include a robust Quality Management System (QMS) and well trained and highly disciplined teams following well-defined processes supported by tools and automation.

Why should you Attend: The attendee will learn about FDA's approach to modernizing technology, and how that will benefit both the Agency and industry. We will discuss ways to modernize the System Development Life Cycle (SDLC) approach to software development, testing, and release, Computer System Validation (CSV), and Computer Software Assurance (CSA) by using automated testing tools that will result in a continuous validation of software products. This approach is amenable to the agile software development methodology, which can be adapted for use in validation. We'll discuss the pros and cons of each approach, and industry best practices for success.

You'll learn how the newest version of GAMP®5 2nd Edition issued in July 2022 aligns with the CSA approach, addressing non-linear forms of software development, testing, and release, such as agile. This provides a more efficient and effective way to ensure software changes can be done much more quickly using automated testing.

We'll cover Computer-Off-the-Shelf (COTS) software, Software-as-a-Service (SaaS), Infrastructure-as-a-Service (IaaS), Platform-as-a-Service (PaaS), and cloud services. You'll learn how to select an optimal solution and ensure that whatever that might be, you can build a contract and Service Level Agreement (SLA) that best suits your environment and needs.

We'll also provide new approaches for meeting 21 CFR Part 11, FDA's guidance for electronic records & electronic signatures, and also data integrity requirements, based on the "ALCOA+" principles: Attributable, Legible, Contemporaneous, Original or "True" Copy, Accurate, Complete, Consistent, Enduring, & Available.

Areas Covered in the Session:

• Learn how to identify "GxP" Systems
• Learn about FDA's current thinking about technology and software development, and how this will impact industry
• Discuss the current state of Computer System Validation (CSV) approach based on FDA requirements and the Computer Software
• Assurance (CSA) approach, based on the draft guidance from FDA in September 2022
• Learn about GAMP®5, Second Edition and how it aligns more closely with the CSA approach to validation
• Learn about the System Development Life Cycle (SDLC) approach to validation and how this can be modernized through a more agile approach, including automated testing for continuous validation
• Learn about cloud services and cloud service providers to optimize your experience
• Learn ways to validate in the cloud without compromising quality or compliance
• Learn the pros and cons of an agile vs. waterfall approach
• We will discuss cloud computing, Computer Off-the-Shelf (COTS) software validation, and Software-as-a-Service (SaaS), Infrastructure-as-a-Service (IaaS), and Platform-as-a-Service (PaaS) systems that can be embraced and validated effectively
• Discuss the best practices for documenting computer system validation efforts, whether using a waterfall or agile approach, including requirements, design, development, testing and operational maintenance procedures, including ways to improve efficiency and effectiveness of managing related documentation
• Understand the best approach to Installation Qualification (IQ) testing when the system components are not on premise, but in the cloud
• Understand how to maintain a system in a validated state through the system's entire life cycle in a more cost-effective manner, applying an Agile continuous validation approach
• Learn how to assure the integrity of data that supports GxP work, despite changes and advances in new technology
• Discuss the importance of "GxP" documentation that complies with FDA requirements
• Learn about the policies and procedures needed to support your validation process and ongoing maintenance of your systems in a validated state
• Know the regulatory influences that lead to FDA's current thinking at any given time
• Finally, understand the industry best practices that will enable you to optimize your approach to validation and compliance, based on risk assessment, to ensure data integrity is maintained throughout the entire data life cycle
• Q&A

• Information Technology Analysts
• Information Technology Developers and Testers
• Software Quality Assurance Professionals
• QC/QA Managers and Analysts
• Analytical Chemists
• Compliance and Audit Managers
• Laboratory Managers
• Automation Analysts
• Manufacturing Specialists and Managers
• Supply Chain Specialists and Managers
• Regulatory Affairs Specialists
• Regulatory Submissions Specialists
• Risk Management Professionals
• Clinical Data Analysts
• Clinical Data Managers
• Clinical Trial Sponsors
• Computer System Validation Specialists
• GMP Training Specialists
• Business Stakeholders/Subject Matter Experts
• Business System/Application Testers
• Vendors responsible for software development, testing and maintenance
• Vendors and consultants working in the life sciences industry who are involved in computer system implementation, validation and compliance