fbpx
1-888-310-4540 (main) / 1-888-707-6150 (support) info@spkaa.com
Select Page

PLM in the Cloud: Computer System Validation in FDA Regulated Industries

cloud for engineering image of buildings
Published by Mike Solinap
on July 29, 2013

Product lifecycle management (PLM) systems have evolved from being custom-built, on-premise applications to cloud-based, off-the-shelf solutions. As adoption for PLM in the cloud increases, system validation approaches in FDA/GXP regulated industries have had to adapt as well.

PLM Evolution

The FDA and Computer System Validation

Computer system validation is mandated by the Quality System regulation (FDA, 21 CFR Part 820) which requires that “when computers or automated data processing systems are used as part of production or the quality system, the manufacturer shall validate computer software for its intended use according to an established protocol.”

Furthermore, computer systems that implement part of a manufacturer’s production processes or quality system are subject to the Electronic Records and Signatures regulation (FDA, 21 CFR Part 11).

The  classical V-Model is typically applied for Software Verification and Validation for enterprise systems:

V-model

Applying the V-Model to Cloud Based Service Models

There are three basic service models in the cloud (source: David Chou, http://blogs.msdn.com/b/dachou/):

Cloud deployment models source - david chou

The V-Model may be applied to systems in the cloud as follows:

v model applied to the cloud

While the IQ, OQ responsibilities are shifted to the cloud service provider, as the regulated company you are still accountable for compliant quality systems. As the regulated company, you must verify that the service provider has appropriate controls in place.

Before you select a cloud service provider for your PLM solution:

  • Conduct  a supplier audit and perform a risk assessment
  • Document risks related to roles and responsibilities, processes controls and technology  used
  • Formally document the responsibilities of the cloud service provider

After going live with cloud based solution continue periodic performing periodic audits of the cloud service provider.

Next Steps:

Latest White Papers

The Ultimate Jira Data Protection

The Ultimate Jira Data Protection

Remote work is here to stay, and companies are turning to cloud-based solutions to support their teams. Atlassian's suite of products is a top choice for businesses worldwide. But, many businesses are still unsure about its built-in data protection capabilities....

Related Resources

PTC LiveWorx 2023 Highlights

PTC LiveWorx 2023 Highlights

PTC LiveWorx is the premier event bringing together professionals and innovators from various industries. It ignites the exploration of digital transformation, industrial innovation, and emerging technologies. From engaging keynote presentations to hands-on workshops...

How To Reduce Cybersecurity Risks For Remote Workers

How To Reduce Cybersecurity Risks For Remote Workers

Remote working is an effective way to keep your business running 24/7, mitigate downtime and tap into new markets or expertise. Now, the world is flooded with companies utilizing remote work, digital nomads and gig workers to keep their competitive edge. But, the rise...

10 Compelling Reasons to Migrate to the Cloud

10 Compelling Reasons to Migrate to the Cloud

Are you ready to move to the cloud? The cloud is a game-changing technology that has revolutionized the way businesses operate. So, we're sharing the top 10 compelling reasons why you should plan to migrate to the cloud. 10 Compelling Reasons To Migrate To The Cloud...