Introduction

Computer System Validation (CSV) is an extremely important subject for Quality Management System of highly regulated companies; software . In fact, every company focusing on medical device or pharmaceutical business needs to perform validation of their computer systems. This becomes even more important with the spread of digital health device and software-based medical devices.

Firstly, the ISO 13485:2016, for example, establishes that all the softwares used in the framework of a Quality Management System validation before their use.

Methodology for Computer System Validation

ISPE (International Society for Pharmaceutical Engineering) provides one of the most and complete guideline for the validation of computerised system. In fact, ISPE publishes regularly guidelines to support the validation of computerized systems for pharmaceutical or medical device sector.

The GAMP Guideline for Computer System Validation

GAMP stays for Good automated manufacturing practice and the full name of the guideline is GAMP 5 Guide: Compliant GxP Computerized Systems. The guideline provides extensive guideline on the validation of software using a risk-based approach. You can refer to the picture below for an overview of the GAMP approach for validation:

The responsibility of CSV is shared between the supplier and the user. To clarify, the user is the company which is using the computer system for the design or manufacturing of medical device or pharmaceutical products. The supplier is the provider of the software system.

Risk-based approach for Computer System Validation (CSV)

As mentioned before, ISO 13485 requires the application of a risk-based approach to determine the extent of the validation efforts towards a computer system. There might be different ways to apply a risk-based approach. On possibility is to divide the software application in different categories, such as:

  • Off-the-shelf software
  • Configured Software
  • Custom Software

The type one the extent of the validation depends from the category of the software. For example, for off the shelf software, the following scheme describes the possible approach:

Subscribe to 4EasyReg Newsletter

4EasyReg is an online platform dedicated to Quality & Regulatory matters within the medical device industry. Connect with us on LinkedIn and Twitter to stay informed about the latest news in regulatory affairs.

As one of the leading online platforms in the medical device sector, 4EasyReg offers extensive support for regulatory compliance. Our services cover a wide range of topics, from EU MDR & IVDR to ISO 13485, encompassing risk management, biocompatibility, usability, software verification and validation, and assistance in preparing technical documentation for MDR compliance.

Do not hesitate to subscribe to our Newsletter!

You have successfully subscribed to the newsletter

There was an error while trying to send your request. Please try again.

4EasyReg will use the information you provide on this form to be in touch with you and to provide updates and marketing.