Appendix 2e Template of GXP Assessment
Appendix 2e Template of GXP Assessment
IT DEPARTMENT
GxP Assessment
for
<System Name>
PHARMADEVILS
IT DEPARTMENT
APPROVAL PAGE
Prepared By:
Reviewed By:
Approved By:
TABLE OF CONTENTS
REVISION HISTORY
Initial Document
PHARMADEVILS
IT DEPARTMENT
1.0 INTRODUCTION:
2.0 PURPOSE:
3.0 SCOPE:
4.0 RESPONSIBILITIES:
5.0 REFERENCES:
QUESTION RESPONSE
INSTRUMENT
1. Does the system have an instrument? (Respond as
Yes
Yes/No)
Answer 2 and 3 if 1 is Yes, otherwise mark as NA
Instrument/Equipment Manufacturer:
Instrument/Equipment Model No.:
2. Instrument Manufacturer Name and Model No.
APPLICATION/SOFTWARE
4. Does the System have an Application/ Software?
(Respond as Yes/No)
Answer 5 and 6 if 4 is Yes, otherwise mark as NA
PHARMADEVILS
IT DEPARTMENT
QUESTION RESPONSE
5. Application/ Software Name and Application/ Software Name:
Software Version No. Software Version:
6. Brief description of the Application/ Software
PHARMADEVILS
IT DEPARTMENT
Yes No
Q1 Does the Computerized system impact the patient safety?
N/A
Does the Computerized system functionality create any hazards to the environment Yes No
Q2
including people working on the system such as process control systems? N/A
Is the system involved in capturing information that would alert the organization to
Yes No
Q3 take an action or support the execution of an action that impacts the product quality
N/A
(e.g. product recall, adverse event reporting)?
Yes No
Q4 Does the system impact or store or retrieve data about the quality of the product?
N/A
Does the system produce data which is used to accept or reject product? (e.g.
Electronic Record System or critical process chart recorder) Yes No
Q5
Note: This data could be supporting data and need not be the only criteria for N/A
accepting or rejecting a product?
Is the system a process control system (e.g. PLC, HMI) that may affect product
Yes No
Q6 quality and is there any independent verification of the control system performance in
N/A
place?
Is the computerized application/system the official auditable, archive or record of any Yes No
Q7
regulated activity? N/A
Is the computerized system used to control and/or generate data and documentation to
Yes No
Q8 be included in a regulatory submission or otherwise submitted to the FDA, EMEA or
N/A
other similar regulatory agencies?
Yes No
Q9 Is the computerized system used as part of the company's Quality System?
N/A
Yes No
Q10 Is the computerized system used to control Quality System documentation?
N/A
Yes No
Q11 Is the computerized system used to control Manufacturing documentation?
N/A
Is the computerized system used to control Verification and Validation Yes No
Q12
documentation or data? N/A
Yes No
Q13 Is the computerized system used to control any packaging or labeling activities?
N/A
Is computerized system used to track/perform maintenance and/or calibration of Yes No
Q14
testing, laboratory, manufacturing or production equipment? N/A
Is the computerized system used to maintain purchasing, inventory, or distribution Yes No
Q15
data for the company's products? N/A
Note: If answer is “Yes” to any one question, then system shall be categorized as “GxP Applicable System” ; else
shall be categorized as “GxP Not Applicable System”
Conclusion of Section-B :The system is: GxP Applicable System GxP Not Applicable System
Note: If the system is categorized as “GxP Applicable System”, then answer the questions of Section-C.
PHARMADEVILS
IT DEPARTMENT
Q. (√) The
Questions (for Electronic Records Applicability)
No. Answers
Yes No
Q1 Does the system generate GxP applicable electronic records?
N/A
Yes No
Q2 Does the GxP applicable electronic records stored on durable media?
N/A
Note: If Answer to both the questions of Section-C are Yes, then Electronic Records is “Applicable” else “Not
Applicable”
Q. (√) The
Questions (for Electronic Signature Applicability)
No. Answers
Yes No
Q1 Does the system has provision to practice Electronic Signature in system?
N/A
Yes No
Q2 Does the mechanism of Electronic Signature is enabled in the system?
N/A
Note: If Answer to both the questions of Section-D are Yes, then Electronic Signature is “Applicable” else “Not
Applicable”
Conclusion of Section-D :Electronic Signatureis: Applicable Not Applicable
Close System: An environment in which system access is controlled by persons who are responsible for the
content of electronic records that are on the system
Open System: An environment in which system access is not controlled by persons who are responsible for the
content of electronic records that are on the system
Q.
Questions (for System Nature) (√) The Answers
No.
Yes No
Q1 Does the system is Close System?
N/A
Yes No
Q2 Does the system is Open System?
N/A
Conclusion of Section-E :System is: Close System Open System
PHARMADEVILS
IT DEPARTMENT
(√) The
Q. No. Questions (for Software Categorization)
Answers
Are the software functions as operating software used to manage the operating
Yes No
Q1 environment of the computerized system?
N/A
Example: Operating system, Data base etc.
Are the software functions as utility software used to manage the utility function of the
Yes No
Q2 computerized system?
N/A
Example: Anti-virus, Remote access, Printer, Backup solution etc.,
Is the computerized system having software, only it is used to perform basic tasks,
such as recognizing input from the keyboard, sending output to the display screen, Yes No
Q3
keeping track of files and directories on the disk, and controlling peripheral devices N/A
such as disk drives, printers, office tools?
Is the computerized system application software, often very complex that can be
configured by the user to meet the specific needs of the user’s business process, but not Yes No
Q5
possible to alter the source code? N/A
Example: LIMS, Data Acquisition, SCADA systems, SAP etc.
Is the computerized system application software custom designed and coded to suit the Yes No
Q6
business process? N/A
Note: GAMP 5 categorization of Software with computerized system shall be considered as below:
1: If answer is Yes to anyone of the question among Q1 to Q3, but answer is No or N/A to all other Questions, then
Category 1 (Infrastructure Software).
2: If answer is Yes to only question, Q4, but answer is No or N/A to all other questions, then Category 3 (Non
configured Products).
3: If answer is Yes to only question, Q5, but answer is No or N/Ato all other questions, then Category 4
(Configured Products).
4: If answer is Yes to only question, Q6, then Category 5 (Custom Applications).
Conclusion of Section-F
Conclusion of Section-G:
System is: Category 1: Standard Hardware Component
Category 2: Custom built (Bespoke) Hardware Components :
PHARMADEVILS
IT DEPARTMENT
Close System
E SYSTEM NATURE (OPEN / CLOSE)
Open System
COMPUTERIZED SYSTEM (SOFTWARE) Category 1 Category 3
F
CATEGORIZATION AS PER GAMP5 Category 4 Category 5