Standard Operating Procedure for Risk-Based Review of Lifecycle Changes
| Department | Regulatory Affairs |
| SOP No. | RA/2026/677 |
| Supersedes | NA |
| Page No. | 1 of X |
| Issue Date | 11/04/2026 |
| Effective Date | 11/04/2026 |
| Review Date | 11/04/2028 |
Purpose
This Standard Operating Procedure defines the systematic approach for conducting a risk-based review of lifecycle changes across regulated product, process, or system modifications to ensure timely regulatory compliance, maintain product quality, and support continuous improvement. It provides a controlled framework to assess the impact of changes, prioritize regulatory submissions, and maintain alignment with current quality and compliance standards.
Scope
This SOP applies to all lifecycle changes including but not limited to modifications in functional areas such as manufacturing, quality assurance, quality control, engineering, laboratory, warehousing, documentation, validation, calibration, equipment operation, cleaning, sampling, utilities, and regulatory affairs. It covers all dosage forms and related systems where changes may affect product quality, safety, efficacy, or compliance status. Exclusions include minor administrative updates not impacting compliance or product attributes.
Responsibilities
The following roles are involved:
- Initiator: Identifies and proposes changes for risk assessment.
- Functional Experts: Evaluate technical impact and provide input for risk categorization.
- Regulatory Affairs: Assess regulatory implications and submission requirements.
- Quality Assurance: Reviews risk assessment, approves risk classification, and monitors implementation.
- Change Control Coordinator: Facilitates change documentation, review meetings, and approvals.
- Management: Reviews and endorses high-risk changes.
Accountability
The Quality Assurance Head is accountable for ensuring the implementation, compliance, periodic review, escalation of non-compliance, and overall effectiveness of this SOP. Regulatory Affairs Head supports regulatory assessments and compliance monitoring.
Procedure
1. Initiation and Documentation: The change initiator documents the proposed lifecycle change using the approved Change Control Form, detailing the nature, rationale, and anticipated impact of the change.
2. Preliminary Assessment: The Change Control Coordinator performs an initial review to confirm completeness and forwards the proposal to relevant functional experts for technical and quality assessment.
3. Risk Evaluation: Each functional expert assesses the change’s impact on product quality, regulatory compliance, patient safety, and operational processes using established risk assessment tools such as Failure Mode and Effects Analysis (FMEA) or Risk Ranking Matrices. The type, extent, and criticality of the change determine the risk level (low, medium, high).
4. Regulatory Impact Assessment: Regulatory affairs evaluates whether the change requires notification, approval, or submission to health authorities per applicable guidelines and timelines.
5. Consolidated Risk Classification: Quality Assurance consolidates inputs and assigns a final risk category. Low-risk changes may proceed with routine documentation only; medium- and high-risk changes require formal approvals and, if necessary, regulatory submissions.
6. Approval Process: Low- and medium-risk changes are reviewed and approved within the functional change control team. High-risk changes are escalated to management or Change Control Board for final authorization before implementation.
7. Implementation: Upon approval, changes are executed according to validated procedures ensuring compliance with GMP and internal quality standards. In-process controls and monitoring are conducted to verify expected outcomes.
8. Verification and Documentation: Post-implementation verification activities are performed to confirm change effectiveness and absence of unintended consequences. All supporting data and approvals are documented in the Change Control File.
9. Deviation and CAPA: Any deviations identified during or after implementation trigger appropriate investigation and corrective actions as per respective SOPs.
10. Training and Communication: Relevant personnel are trained on approved changes, and communication is made to impacted departments for awareness and compliance.
11. Record Retention and Review: All records relating to the risk-based review and lifecycle changes are archived according to company record retention policy and subjected to periodic review as part of continuous improvement and compliance audits.
Abbreviations
- GMP – Good Manufacturing Practice
- FMEA – Failure Mode and Effects Analysis
- CAPA – Corrective and Preventive Action
- SOP – Standard Operating Procedure
- QA – Quality Assurance
- RA – Regulatory Affairs
Documents
The following documents are essential for the execution and control of this SOP:
- Change Control Form (Annexure-1)
- Risk Assessment Worksheet (Annexure-2)
- Regulatory Impact Assessment Checklist (Annexure-3)
References
- ICH Q9 Quality Risk Management
- FDA Guidance for Industry: Changes to an Approved Application
- EMEA Post-Approval Change Management Protocols
- Company Quality Manual and Change Control Policy
- ISO 9001:2015 Quality Management Systems – Requirements
- GMP Guidelines as per applicable jurisdiction
Version
1.0
Approval
| Prepared By | |
| Checked By | |
| Approved By |
Annexures
Annexure-1: Change Control Form
| Title | Change Control Form |
| Purpose | To document proposed lifecycle changes for review, risk assessment, approval, and implementation control. |
| Field | Details (Example) |
|---|---|
| Change Request No. | CCR-2026-015 |
| Date of Request | 05/04/2026 |
| Initiator Department | Manufacturing |
| Description of Change | Modification of tablet coating process parameters |
| Reason for Change | Enhance coating uniformity and reduce variability |
| Impact Assessment Summary | Product quality improved with minimal impact on process time |
| Proposed Implementation Date | 20/05/2026 |
| Signatures (Prepared, Reviewed, Approved) | — |
Annexure-2: Risk Assessment Worksheet
| Title | Risk Assessment Worksheet |
| Purpose | To evaluate the risk level of the proposed lifecycle change based on impact and probability criteria. |
| Parameter | Assessment | Comments |
|---|---|---|
| Change Description | Modification in cleaning cycle timing for equipment A | Intends to optimize cleaning without affecting hygiene standards |
| Impact on Product Quality | Low | Validated cleaning effectiveness maintained |
| Impact on Compliance | Medium | Requires regulatory notification in some markets |
| Probability of Failure | Low | Validated and monitored process |
| Risk Level | Medium | |
| Mitigation Measures | Additional sampling and verification during initial implementation | |
| Assessor Name/Role | Functional Expert | |
| Date | 10/04/2026 |
Annexure-3: Regulatory Impact Assessment Checklist
| Title | Regulatory Impact Assessment Checklist |
| Purpose | To determine regulatory submission requirements and timelines for the proposed lifecycle change in affected markets. |
| Check Item | Status | Remarks |
|---|---|---|
| Does change affect product formulation? | No | |
| Does change require update to marketing authorization? | Yes | Notification required in EMA region |
| Is prior approval mandatory? | No | Post-approval notification sufficient |
| Are stability data updates needed? | Yes | Supplemental data to be submitted within 6 months |
| Have impacted regulatory bodies been identified? | Yes | EMA, FDA, PMDA |
| Submission deadlines defined? | Yes | Within 30 days of change implementation |
| Assessed By | Regulatory Affairs Specialist | |
| Date | 11/04/2026 |
Revision History
| Revision Date | Revision No. | Revision Details | Reason for Revision | Approved By |
| 11/04/2026 | 1.0 | Initial issue | New SOP creation |