Build the qualification strategy around the protective functions and intended use of the system. A completed sequence of DQ, FAT, SAT, IQ, OQ and PQ documents does not establish containment if the tests omit transfer, cleaning, waste or maintenance. Conversely, useful supplier evidence should not be repeated mechanically when its relevance, quality and configuration can be demonstrated.
Qualification must connect requirements to evidence while keeping product-quality, occupational and environmental decisions clear. The system may need several complementary assessments: installation and functional verification, boundary integrity, task-based containment performance and actual workplace exposure assessment. No single test should be presented as proving all of them.
1. Define scope and system boundaries
Identify the enclosure or process machine, transfer interfaces, extraction and filtration, controls, utilities and room interactions included in the project. Mark supplier boundaries and shared services. Describe which operating modes and non-routine tasks fall within the intended use, and which are excluded or require separate approval.
Define the material and process envelope that the evidence must support: powder properties, quantities, packaging, operating frequency, cleaning methods and intervention requirements. Qualification of a configuration is not an unlimited authorization for any future compound or operation. Record the assumptions that would trigger reassessment if they changed.
Assign roles for engineering, quality, EHS, occupational hygiene, operations, maintenance and suppliers. Quality approval of GMP qualification does not automatically constitute occupational authorization, and an occupational performance study does not replace product-quality validation. The project needs coordination between these responsibilities rather than a single ambiguous sign-off.
2. Establish the regulatory and verification framework
[REGULATORY REQUIREMENT] EU GMP Annex 15 provides the qualification and validation framework within its applicable manufacturing scope. Requirements should be addressed through a planned, documented lifecycle approach. The project's qualification extent and acceptance criteria must reflect intended use and the risks being controlled.
[TECHNICAL STANDARD] ASTM E2500 provides a science- and risk-based approach to specification, design and verification of pharmaceutical manufacturing systems and equipment within its scope. The current E2500-25 scope does not substitute for occupational or environmental regulatory obligations. Its verification concepts can inform an integrated project without erasing those separate responsibilities.
[QRM] ICH Q9(R1) supports quality risk management, including appropriate formality and management of subjectivity. Use risk assessment to identify critical aspects and meaningful evidence. It should not become a retrospective explanation for omitted tests or an arithmetic exercise that hides an unresolved protective function.
3. Make the URS testable
Translate broad statements into requirements with an objective, operating condition, acceptance basis and verification method. For example, the system shall contain the process is incomplete unless the process, relevant tasks and evidence expectations are defined. Separate requirements for integrity, pressure control, transfer sequencing, cleaning and performance.
Avoid inserting unsupported numerical targets simply to make a requirement measurable. Containment criteria need the toxicological and occupational rationale appropriate to their purpose. Pressure limits, analytical sensitivity and test conditions require engineering and scientific justification. Where an input is not yet available, assign responsibility and a hold point for its resolution.
Maintain a traceability matrix linking each critical requirement to design evidence and tests. The matrix should show partial coverage and open gaps, not merely a row marked complete. Include evidence location, configuration, deviations and approval status so that another reviewer can understand what has actually been demonstrated.
4. Use DQ to resolve design risk
Design qualification should establish that the proposed design is suitable for the intended use and addresses applicable requirements. Review containment boundaries, material flows, ergonomics, pressure and exhaust arrangements, cleaning, waste and maintenance. Check that the design allows the required tests to be performed meaningfully.
Examine foreseeable failures and recovery actions before manufacture. Examples include loss of extraction, incomplete docking, damaged gloves, blocked transfer and interruption during cleaning. Define safe states, alarms and interlocks, with clear ownership where equipment and building systems interact.
Use drawings, calculations, mock-ups and technical reviews as appropriate. Record decisions and their evidence rather than collecting signatures against a supplier brochure. Design gaps discovered here are generally easier to resolve than gaps found after installation, when access, interfaces and shutdown windows constrain the available options.
5. Allocate FAT and SAT evidence deliberately
Factory acceptance testing can verify construction, functions, sequences and selected performance before shipment. Define what the factory setup represents and what it cannot reproduce. Utilities, room conditions, connected equipment and operator tasks may differ from the installed system, limiting the conclusions that can be carried forward.
Agree FAT protocols and acceptance criteria before execution. Review raw records, deviations, instrument status and tested configuration. Where a surrogate performance study is included, treat its design and interpretation as a specialist workstream rather than an informal demonstration appended to the FAT agenda.
Site acceptance testing addresses delivery, installation interfaces and operation in the site environment according to its agreed scope. Define the relationship between SAT and IQ/OQ to avoid gaps or unnecessary repetition. Reuse evidence only where its quality, relevance, configuration and approval support that decision; document the rationale.
6. Verify installation and operation
Installation qualification should confirm the installed arrangement against approved specifications and drawings. Relevant items can include materials, component identification, utility connections, instrumentation, filters, ducts, software configuration and documentation. The selected checks depend on the system and the critical aspects identified during assessment.
Operational qualification challenges the functions and operating ranges needed for intended use. Include alarms, interlocks, mode transitions, loss of relevant utilities and restart conditions where appropriate. Test the integrated cause-and-effect behaviour, not just individual input and output signals in isolation.
For pressure and airflow functions, specify the configuration, door conditions, equipment combinations and measurement basis. For integrity tests, identify the boundary and test condition. These results support defined conclusions; they should not be relabelled as proof of acceptable emissions during every production task.
For glove systems, verify the approved component, installation and port interface, and the site-defined inspection and integrity-test method. State separately what this evidence establishes and what remains to be demonstrated through task-based containment testing.
7. Distinguish PQ, performance testing and exposure assessment
Performance qualification addresses effective and reproducible performance for the approved intended use within the qualification strategy. Its exact relationship with process validation and containment studies should be stated for the project. Do not assume that every organisation uses these labels in the same way.
A containment performance study evaluates emissions during specified operations, often using a justified surrogate. Current SMEPAC guidance can inform a standardized approach within its scope. The study needs a defined task sequence, sampling plan, analytical method, acceptance basis and treatment of variability and deviations.
Actual occupational exposure assessment addresses real work with the intended substances and conditions. It may draw on qualification and surrogate evidence, but it answers a different question. Personal breathing-zone and fixed-area samples have different purposes. The occupational hygienist should determine the appropriate assessment and interpretation for the site.
8. Build an evidence matrix
| Requirement or question | Design evidence | Verification evidence | Decision supported |
|---|---|---|---|
| Boundary is correctly constructed | Approved drawings and component specifications | Installation and integrity checks | Defined physical boundary is assembled as intended |
| Extraction loss is controlled | Failure assessment and cause-and-effect design | Functional fault challenge | Specified safe-state response occurs |
| Transfer preserves containment | Interface review and operating sequence | Representative task-based performance study | Emissions meet the agreed study criteria |
| Cleaning is suitable | Cleanability review and method development | Cleaning validation and task assessment | Defined quality and access objectives are addressed |
| Workplace exposure is controlled | Exposure-control strategy | Appropriate occupational hygiene assessment | Actual work is evaluated against relevant criteria |
Keep the limits of each conclusion visible. A matrix that uses the same leak-test certificate in every row may look complete while leaving the main exposure scenario unevaluated. Likewise, a successful surrogate study cannot correct an unresolved alarm or an unverified maintenance method by association.
9. Manage deviations without losing the question
For each deviation, record the observed condition, affected requirement, immediate action and potential impact on the evidence. Determine whether the test remains interpretable, needs repetition or requires design correction. Avoid changing an acceptance criterion after seeing the result unless there is an independently justified, approved scientific basis.
Assess whether a correction changes other functions or invalidates earlier evidence. Replacing a seal, changing a filter arrangement or altering control logic can affect more than the failed test. Define targeted regression checks from the change's impact rather than repeating everything automatically or assuming no further checks are needed.
Close critical gaps before the corresponding use is authorized. If staged release is appropriate, define the permitted scope, restrictions and outstanding evidence explicitly. A general qualification complete statement should not hide conditions that operators and maintenance personnel need to follow.
10. Example: using factory evidence at site
A supplier completes an agreed enclosure integrity test and a transfer sequence test at the factory. At site, the equipment connects to a different exhaust arrangement and the receiving container interface is modified. The project team reviews which conclusions remain valid for the installed configuration.
Documented construction evidence may remain useful, while the changed exhaust interaction and transfer interface require additional verification. The site plan challenges the integrated controls and the relevant operating sequence. The team does not repeat an unaffected test solely because it is labelled FAT, nor accept affected evidence solely because it previously passed.
This hypothetical example illustrates evidence-based reuse. The decision depends on configuration, conditions and the question answered, not on the location printed on the test report. The traceability matrix records the rationale and the resulting site evidence.
11. Preserve the integrity of the evidence
Identify the source record for each acceptance decision and retain the data needed to reconstruct it. For electronic records, consider access, timestamps, configuration, audit trails where applicable and the review of changes. A transcribed result should remain traceable to its original measurement and the conditions under which it was obtained.
Review discrepancies between protocol entries, instrument records and supplier summaries before closing the test. Establish how corrections are made without obscuring the original information. When data from different systems is combined, check units, time alignment and identifiers. These controls support a defensible interpretation of the evidence; they do not replace the technical assessment of whether the test actually challenges the required function.
12. Handover and lifecycle checklist
Before routine use, confirm that requirements, design decisions, tests, deviations and approvals form a coherent record. Operations and maintenance need the approved operating envelope, procedures, alarm responses, spare specifications and restrictions. Training should reflect the tested method, especially where performance depends on a defined manual sequence.
- Critical requirements have an acceptance basis and traceable evidence.
- Supplier and site interfaces have no unassigned verification gaps.
- FAT evidence reused at site matches the relevant installed configuration.
- IQ and OQ cover installation, protective functions and selected abnormal conditions.
- Performance studies include representative tasks and suitable analytical capability.
- Actual exposure assessment has a defined owner and relationship to surrogate evidence.
- Deviations and changes have been assessed for their effect on earlier conclusions.
- Cleaning, waste and maintenance methods are ready for the intended use.
- Handover includes records, training, restrictions and a lifecycle review strategy.
[GUIDEGXP RECOMMENDATION] Define reassessment triggers such as a new compound, different package, changed operating sequence, repeated alarm, significant maintenance or modified exhaust system. Periodic review should consider actual performance, deviations and change history rather than relying only on an arbitrary calendar interval. Qualification is most useful when its evidence remains connected to the equipment and work actually performed throughout the lifecycle.
Sources, scope and engineering recommendations
Source status checked on 25 September 2026. Apply each document within its jurisdiction and scope. GEP and GuideGxP recommendations are engineering advice, supported by risk assessment; examples are illustrative. For copyrighted standards and ISPE guides, the public scope and edition were verified; detailed licensed protocols are not reproduced.
- [REGULATORY REQUIREMENT] European Commission — EU GMP Annex 15: Qualification and Validation.
- [QRM] ICH Q9(R1) — Quality Risk Management, EMA current version.
- [TECHNICAL STANDARD] ASTM E2500-25 — Specification, Design and Verification of Pharmaceutical Manufacturing Systems.
- [GUIDANCE] ISPE — SMEPAC, third edition: Airborne Particle Emissions from Containment Systems.
- [GUIDANCE] EMA — Health-based exposure limits for shared manufacturing facilities.
- [TECHNICAL STANDARD] BSI — EN 689:2018, Workplace Exposure: Measurement of Exposure by Inhalation.
