Operations Control Programme (OCP) for Cleanrooms: How to Build It (ISO 14644-5:2025)

Operations Control Programme (OCP) in ISO 14644-5:2025: How to Build the Cleanroom “Operational Master Plan”

If there is one concept that truly distinguishes ISO 14644-5:2025 from any previous cleanroom-related document, it is the Operations Control Programme (OCP).

In day-to-day reality, many organisations have:

  • fragmented SOPs (gowning, cleaning, environmental monitoring, maintenance)
  • non-harmonised Excel plans
  • training programmes not consistently linked to risk
  • change control processes that “forget” environmental impact

The OCP was introduced to eliminate this fragmentation. It is the document (or structured document set) that allows you to answer—without improvisation—the most common audit question:

“Show us how you ensure, every day, that the cleanroom remains under control.”

What an OCP really is: a pragmatic definition

An OCP is a documented system that integrates all operational elements required to ensure that the cleanroom is operated in compliance with the specified cleanliness levels.

Translated into QA language:
it is your audit-ready dossier that connects:

  • requirements (ISO class / GMP requirements where applicable)
  • risks (QRM / CCS)
  • controls (programmes and SOPs)
  • evidence (records and trends)
  • improvement (reviews and CAPAs)

OCP vs “Cleanroom Manual”: the difference that matters in inspections

A descriptive manual (“this is how our cleanroom works”) is not sufficient unless you can demonstrate:

  • who does what
  • when it is done
  • how it is recorded
  • how deviations are managed
  • how the system is updated when changes occur

An OCP must be alive: under document control, periodically reviewed, and updated through formal change control.

Recommended OCP structure (ready-to-use table of contents)

Below is an optimised structure: comprehensive without being bureaucratic.
The logic is: one master document + annexes/appendices.

1) Purpose, scope and definitions

  • included areas, ISO classes, operational states (at-rest / in operation)
  • key terms (alert/action, special cleaning, etc.)

2) References and alignment

  • ISO 14644-1/-2/-3/-4/-5/-18
  • (in GMP) Annex 1 and internal CCS documents
  • linked SOPs

3) Governance: roles and responsibilities

  • RACI matrix (QA, Manufacturing, Engineering, Cleaning Contractor, Micro/EM)
  • OCP review and ownership responsibilities

4) Layout and flows (personnel, materials, waste)

  • layout drawings and flowcharts
  • segregation rules (spatial/temporal)
  • pass-boxes, interlocks, entry/exit procedures

5) Personnel programme and behaviour

  • access criteria (including health/fitness)
  • behavioural rules and enforcement
  • maximum occupancy per area (where applicable)

6) Gowning programme (critical section)

  • garments per area/class
  • gowning/de-gowning sequences
  • change and requalification frequencies
  • garment management (laundry, repairs, traceability)

7) Cleaning & sanitisation programme

  • surface–frequency–method–agent matrix
  • special cleaning (post-maintenance, post-shutdown)
  • residue management and material compatibility
  • records and supervision

8) Maintenance & calibration programme

  • HVAC and infrastructure maintenance schedules
  • calibration of critical instruments (pressures, particle counters, sensors)
  • cleanroom-safe maintenance procedures and post-cleaning

9) Environmental monitoring programme

  • parameters, locations, frequencies
  • alert/action limits and responses
  • data management, trend reviews, data integrity

10) Deviation management and CAPA (environmental events)

  • handling of alarms, excursions, OOS/OOT
  • escalation to QA
  • criteria for product/batch impact (GMP)

11) Change control and impact assessment

  • rule: no relevant change without impact assessment
  • triggers for requalification or additional testing
  • OCP updates following changes

12) Periodic review and continuous improvement

  • review frequency (typically annual + event-based)
  • KPIs and trends (particles, microbiology, pressures, alarms)
  • outputs: actions, CAPAs, SOP revisions

How to build the OCP efficiently (without rewriting everything)

Step 1 — Inventory existing documentation

List all existing SOPs, plans and records. The goal is to identify what is missing versus what simply needs to be linked.

Step 2 — Identify the 10 “minimum defensible” elements

To be audit-ready even without perfection, ensure at least the following exist:

  • personnel and material flows
  • cleaning programme + records
  • maintenance/calibration plans + records
  • environmental monitoring plan + trend reviews
  • gowning and training rules + evidence
  • change control with impact assessment

Step 3 — Make it audit-friendly

Auditors want fast navigation:

  • clear index
  • cross-references (SOP IDs, revisions)
  • essential annexes (layouts, matrices, plans)

Step 4 — Embed the risk-based rationale (the real game changer)

When an inspector asks “Why this frequency?”, you must be able to answer:

“Because the risk assessment shows that …” —and present the documented rationale and decision.

 

Integration with QRM and (in GMP) CCS: what inspectors really expect

Modern expectations go beyond “we have a CCS.” Inspectors want to see that:

  • the CCS identifies risks and controls
  • the OCP implements them through programmes and SOPs
  • deviations and trends feed back into CCS and OCP (PDCA loop)

If CCS and OCP do not “talk” to each other, the system looks like shelfware.

Common OCP mistakes (that lead to observations)

1) OCP missing or incomplete

Many sites have individual elements but no integrated framework. Result: loss of time and credibility during audits.

2) Misalignment between document and reality

One of the most avoidable findings—regular gemba walks and updates are usually sufficient.

3) No risk-based rationale

“Once per month because we chose it” is the fastest way to trigger a CAPA.

4) OCP not updated after changes

Any change to layout, equipment, flows or procedures should trigger an OCP update.

5) OCP not under QA document control

If it is not versioned, approved and controlled, it is immediately vulnerable.

Mini OCP audit-readiness checklist (no templates revealed)

If you checked today, would you be able to answer “yes” to all of these?

  • Is there an OCP document with a clear scope and index?
  • Are layouts and flows (personnel/material/waste) current?
  • Is the cleaning programme complete (including high surfaces and special cleaning)?
  • Is there an HVAC maintenance plan + sensor calibrations + records?
  • Is the EM programme defined with points, frequencies, limits, actions and trending?
  • Is there cleanroom-specific change control with impact assessment?
  • Are training matrices and role-based records in place (including contractors)?
  • Are periodic reviews documented with actions/CAPAs?
  • Is there evidence the OCP is implemented, not just written?
  • Is there evidence the OCP is current and under control?

If you want a ready-to-use OCP framework (structure, checklists and audit-ready verification) without building everything from scratch,
👉 download the complete guide “ISO 14644-5:2025 – Operational Guide to Cleanroom Operations” on guidegxp.com.

Back to blog

Looking for something specific?