An empty chamber exhibits satisfactory thermal distribution, but a packaged component slowly reaches the intended condition. A biological indicator shows no growth, while a probe documents exposure below the approved criterion. These results should not be reduced to a single favorable signal: the validation must explain what the measurements demonstrate, what load they represent, and how discordant evidence is resolved.
1. Define the claim that the validation must support
The protocol must state the process, equipment, materials, configurations, and operating window covered. The conclusion "validated cycle" is incomplete without these boundaries. A cycle developed for packaged metal parts does not automatically cover liquids, porous materials, or mixed loads, even when the machine program uses the same setpoints.
Distinguish between development and validation. Development explores variables and builds the knowledge necessary to select robust conditions. Validation verifies a defined configuration and strategy with approved criteria. Continuing to change parameters during a campaign presented as validation requires explicit management of changes and their impact on results.
[QRM] Connect each claim to evidence. If repeatability is to be demonstrated, data obtained under justified conditions are required. If a family is to be extended, characteristics supporting representativeness are needed. If depyrogenation is to be demonstrated, the mere inactivation of a microbiological challenge does not answer the question.
2. Verify prerequisites
Before execution, confirm qualified configuration, controlled recipes, available utilities, and suitable instruments. Verify maintenance, calibration, and documentation status. Open deviations must be evaluated to determine if they compromise the execution or interpretation of the tests, with an approved decision.
Define materials, initial conditions, and load preparation. Mass, packaging, moisture, fill volume, and initial temperature can influence the result. Do not limit yourself to a general photograph: associate an identifiable diagram and sufficient information to reproduce the configuration.
Personnel must be familiar with the protocol, incident management, and criteria for stopping a test. A displaced probe or loading error must be documented while the information is available. Planning pressure must not turn an uninterpretable test into apparently compliant data.
3. Distinguish distribution and penetration
Heat distribution characterizes the distribution of thermal conditions in the studied space. Heat penetration evaluates how heat reaches the relevant points of the load. The two studies may share instruments and sequences, but they answer different questions. A uniform chamber does not guarantee uniform heating inside every container or package.
Empty mapping helps to understand the equipment's behavior. Loaded mapping shows the effect of the configuration and its interactions with the medium. Document why selected positions are informative and how previous studies guided the choice.
The slowest point may change between families, layout, and initial conditions. Do not turn a historical result into an immutable property of the chamber. Validation extensions must consider whether the proposed configuration alters heat transfer or medium access.
4. Select families and worst-case scenarios
A family must group configurations by pertinent characteristics: material, geometry, mass, packaging, heat transfer mode, and microbiological or endotoxin risk. The commercial name or nominal volume alone is not enough. Identify inclusions, exclusions, and limits that make the rationale applicable.
The maximum load may be critical for heating or air removal; the minimum may behave differently regarding control or exposure. A mixed load introduces interactions not necessarily represented by studies of individual components. Evaluate these scenarios without assuming a universal hierarchy.
Different worst-case scenarios may exist for efficacy and material quality. The configuration that heats slowly is not necessarily the most sensitive to overheating. The plan must cover relevant risks and explain how chosen conditions delimit future operation.
5. Design measurements and uncertainty
Select sensors suitable for the range, environment, and measurement dynamics. Consider accuracy, resolution, response, calibration, and acquisition chain. The number of channels and their position must derive from the objective and expected variability, without adopting standard quantities lacking justification.
Document probe assembly and possible perturbations. In small containers, the sensor may modify the condition intended to be observed. In packaged loads, cable routing may alter the barrier or create a path for the medium. The procedure must control these effects.
Define before the test how to handle lost channels, displaced probes, calibration deviations, and missing data. An absent critical measurement can invalidate a conclusion even when other channels are satisfactory. The decision must consider residual coverage and rationale, without automatic substitution with the average of other probes.
6. Integrate the microbiological strategy
When appropriate, biological indicators support the evaluation of the process's microbiological performance. Select the organism, population, resistance, support, and mode of use in relation to the process. The choice must consider certificates, storage conditions, expiration, and verification of pertinent characteristics.
[TECHNICAL STANDARD] The ISO 11138 series distinguishes general requirements from requirements for specific processes. Parts 1 and 3 of 2017 concern general requirements and BIs for moist heat, respectively; part 4 of 2017 concerns dry heat in its stated scope. These references do not make a BI suitable for any heat treatment.
Define placement, recovery, transport, incubation, and controls according to the approved method. The challenge must represent a pertinent difficulty without creating artificial, uninterpretable conditions. Results require a reliable identification chain linking each indicator to the cycle, position, and configuration.
[REGULATORY REQUIREMENT] Annex 1 clarifies that biological indicators constitute additional evidence and must not override critical physical parameters that are not met. A favorable biological result cannot, therefore, be used to ignore a significant thermal deviation.
7. Establish consistent acceptance criteria
Criteria must derive from intended use, development, applicable requirements, and scientific strategy. They may concern exposure, distribution, penetration, lethality, challenge response, and material quality. Also, declare air removal, drying, or cooling conditions when necessary for performance and load usage.
Do not universally assume 121 °C for 15 minutes, an F0 of 12, or a fixed number of tests. Conditions cited by guides or pharmacopoeias must be applied within their scope and linked to the process. For example, a provision regarding the documentation of a terminal cycle does not automatically become a general criterion for every equipment PQ.
Explicitly state how results close to limits are compared and what role uncertainty plays. Define rounding and data treatment before the conclusion. A change in numerical format must not turn an unfavorable result into apparent compliance.
8. Evidence interpretation matrix
| Situation | Necessary evaluation | Conclusion to avoid |
|---|---|---|
| Conformant distribution, insufficient penetration | Transfer into the load, configuration, and cycle | The chamber is uniform, therefore the load is acceptable |
| Favorable BI, failed critical physical parameter | Deviation and reliability of both pieces of evidence | The BI overrides the physical failure |
| Invalid critical probe | Residual coverage and interpretability of the test | The average of other channels replaces the data |
| Endotoxin challenge with inadequate recovery | Analytical suitability and sample preparation | Low residue means demonstrated reduction |
| Discordant repetitions | Variability, causes, and window robustness | Retain only the favorable cycles |
9. Execute and retain all evidence
Record actual configuration, instruments, recipe, and initial conditions for every test. Retain original data, events, and observations. Photographs can support the description of the load but must be identifiable and consistent with the map of probes and indicators.
Review during execution allows for identifying acquisition problems without waiting for the end of the campaign. However, it must not become a selection of only favorable results. Interrupted attempts, development tests, and validation tests must be classified correctly and maintain a reconstructible history.
Calculations must be verifiable. Retain formulas, parameters, and versions of spreadsheets or software used, with controls proportionate to criticality. A well-presented chart does not replace verification that channels, units, and intervals were associated correctly.
10. Example: extension to a new packaging
A site uses a cycle for individually packaged metal parts and proposes double packaging to improve transfer toward the aseptic area. The component mass remains unchanged, but steam access and behavior during drying change. The team does not consider the fact that the internal material is the same as sufficient.
The evaluation compares materials, geometry, permeability, closure modes, and layout. Development studies examine difficult points and packaging quality after treatment. The validation protocol covers the proposed configuration and necessary limits, with appropriate physical and microbiological criteria.
This illustrative example highlights that a seemingly logistical change can alter the process. The new configuration enters routine only after the documented decision and updating of recipes, instructions, and the validated family. Subsequent protection is evaluated together with thermal performance.
11. Manage failures and repetitions
A non-compliant result requires an investigation distinguishing process, load, measurement, or analytical method problems. All hypotheses must be evaluated with evidence. Do not automatically attribute the failure to a probe because other results are favorable, nor to the BI without verifying its handling.
Repetition must follow an approved decision and answer a precise question. If the cycle is modified, evaluate which previous tests remain applicable. If a measurement is corrected, document why the new execution resolves the problem and what limitations remain.
The final report must summarize results, deviations, analysis, and the scope of acceptance. Configurations not covered must be visible. A cautious and specific conclusion is more usable than a general statement suggesting undemonstrated applicability.
12. Connect validation and routine control
Translate results into approved load configurations, controlled recipes, review criteria, and anomaly management. Production must be able to recognize if a load falls within the validated scope. The addition of a component, reduction of the load, or change in packaging must trigger the required evaluation.
[REGULATORY REQUIREMENT] Annex 1, § 8.39, requires revalidation of worst-case load configurations for thermal cycles at least annually; for other configurations, the frequency must be justified in the CCS. This indication must be applied to the relevant context and distinguished from calibration or maintenance frequencies.
Also define events requiring re-evaluation before the periodic deadline: changes, unexpected trends, failures, significant repairs, and new families. Maintaining the validated state depends on the ability to recognize when conditions are no longer those demonstrated.
13. Approval checklist
Verify that every criterion has a traceable result, channels are identified, and microbiological or analytical controls are valid. Check the coverage of limit conditions and consistency between raw data, calculations, and conclusions. Deviations must have a documented disposition understandable to an independent reviewer.
Confirm that the report indicates authorized configurations, operational limits, and maintenance activities. Verify instruction updates and training. The validation result must be applicable in the field: a correct conclusion not translated into operational controls leaves open the risk of out-of-scope use.
For BIs, verify that the certificate, lot, expiration, and usage conditions correspond to the indicators actually used. Link control and incubation results to the test. The presence of the certificate in the dossier does not, by itself, demonstrate that the challenge was stored and handled correctly or that its placement was representative.
For depyrogenation, review initial recovery, method sensitivity, residual results, and container reconciliation. The limit of quantification must allow for the stated conclusion. If the residue is not quantifiable, correctly express the minimum demonstrable reduction and do not assign an arbitrary value of zero.
Finally, verify that the transfer to routine preserves the studied initial conditions. Material storage, waiting before treatment, and loading modes can alter risk or thermal response. The procedure must describe these elements with sufficient precision to allow reproducible application across operators and shifts.
References and pathways
Sources verified on September 23, 2026: EU GMP Annex 1 and Annex 15; EMA, sterilisation, 2019; official catalogs ISO 11138-1, ISO 11138-3 and ISO 11138-4.
Deepen your knowledge in the Sterilization & Depyrogenation Systems hub, cycle development, depyrogenation tunnels, and requalification.
