Professional Documents
Culture Documents
Qua-Dmt-G-001 Guideline For Root Cause Analysis Investigations
Qua-Dmt-G-001 Guideline For Root Cause Analysis Investigations
1.0 PURPOSE
The purpose of this procedure is to provide guidelines on the appropriate techniques to use for effective
root cause analysis, impact assessments and corrective and preventative action development, with
respect to all unexpected events that may be encountered during the course of manufacturing, testing,
storing and supporting pharmaceutical API, finished goods and intermediates.
This procedure is not intended to replace or modify existing function and site event, deviation and
atypical procedures nor provide alternative recording and tracking methods to the forms and checklists
detailed in the formal SOP's.
2.0 SCOPE
This guideline can be applied to all levels of investigation from laboratory and shop floor incidents and
process interruptions, through laboratory and production deviations and atypical investigations and
documentation to Internal Quality Audit Observations.
It is mandatory that at least one formal root cause analysis technique will be used for Atypical
Investigations.
3.0 REFERENCES
QUA-DMT-S-001 – Event Management/ Deviation and Atypical Procedure
QUA-DMT-S-002 – Laboratory Investigations
QUA-DMT-S-003 – Investigation For Analytical Laboratory Instruments.
QUA-DMT-S-004 – Significant Investigations
GDL 1.50 MMD Quality Risk Management
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
4.0 DEFINITIONS
None
5.0 RESPONSIBILITIES
See Section 6.2
6.0 PROCEDURE
Problems should not be dealt with superficially, but addressed with sound root cause
analysis.
That problems should be characterized by direct observation and the collection of date.
That the investigators must have a clear understanding of the process being investigated.
That effective root cause analysis is done to find the true root cause.
That effective countermeasures are developed based on the clear understanding of the
process to be improved and the relationships with other processes and activities and that
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
the "improver" of the process has a clear and communicable vision of the improved version
of the process
The overall RTPS/ A3 methodology contains many of the elements that we are familiar with for
the investigation of "GMP deviations". However, there are a number of critical omissions which
means that the A3/ RTPS investigation, reporting and correction/ improvement system does not
on it's own meet the GMP requirements for GMP Investigations and therefore for events,
deviations and Atypicals as defined by SOP QUA-DMT-S-001 the A3 acts as only a data
collection and investigation facilitation tool and all formal data, information and investigation
analysis and reporting are captured, collated, reviewed, approved and filed as per the
requirements of QUA-DMT-S-001. See table 1 below.
Table 1 – comparison of the steps and flow of the A3 Problem Solving and GMP Deviation
Management Approaches.
A3 Process GMP Process
Understand the Current State Generate problem specification as part of the formal
investigation
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
The A3 process can be used a the starting point for any investigation and provides an excellent
tool for the collection of initial data and observations in the field.
6.1.3.1 If the A3 Sheet/ Process is used as a starting point for deviations for any
production, testing or other GMP related activities, then all existing SOP's for
deviation management apply. This means that the A3 Sheet must carry as a
minimum the following data:
Date
Time
Location
Product/ Process
Lot number
Nature of the defect
Whether a note was made in the batch record.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
The original A3 Sheet can remain with the investigator until the completion of the
investigation and then may be filed by investigation lead for future training purposes.
This is not a Quality Record as all data and information will be present in any formal
event, deviation and atypical investigation report.
Note the following sections of this guideline referring to the roles and responsibilities of
investigation stakeholders, the tools for investigation and the tools and rules for Impact
Assessment, Corrective and Preventative measures are common for GMP investigations
and Non-GMP investigations.
It is important to be clear on the general expectations before looking at the specific roles,
responsibilities and accountabilities.
It is expected that sound science methods and logic are used for all investigations and that
the data collected are accurate and verifiable.
It is expected that investigations are undertaken with an open mind to ensure that there all
relevant facts are considered.
It is expected that as most deviations will involve people as observers or contributors that
the fact finding starts with the recording of information from the people present at the time
the incident occurs and that this observational information may be collected and captured in
notes and formats that do not appear in the finished report.
It is expected that the investigation team may return to gather more information by interview
or discussion as the investigation progresses.
It is expected that facts and data (dates, times, temperatures etc.) will be verifiable.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
It is an expectation that all stakeholders understand that the true measure of success is the
number of iterative investigation cycles required to get to the true root cause (ideally one)
and the effectiveness of the preventative actions with respect to reoccurrence.
It's length. Demonstrating good logic and efficiency in establishing the root cause
and effective corrective actions is the goal of the process. The fewer the words
required to do this the better.
The scale of the assessed impact to the business. A complete, unbiased and
exhaustive impact assessment is a core GMP requirement.
The following roles are defined in this section of the guideline and the responsibilities and
accountabilities are defined in the following sections:
Discoverer
Assignor
Lead investigator Responsibilities
Contributing Investigators
Investigation Process Facilitator
Investigator's Line Management
Functional Reviewers
Quality Assurance Reviewers
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
It is the responsibility of the lead investigator to formally and visibly use logical
analysis techniques such as Kepner Tregoe (Analytical Problem Solving) and/ or “5
whys” analysis to drive to the root cause of all atypicals.
It is the responsibility of the lead investigator to be familiar with, and competent in,
the technologies, processes and/ or procedures involved in the investigation or to
involve the appropriate expertise and/or acquire the appropriate knowledge.
It is the responsibility of the lead investigator to agree and develop the plan for the
execution of corrective and preventative action to ensure their execution in the
allowed time frame.
The technical accuracy and the thoroughness of the investigation process are the
primary responsibilities and accountabilities of the lead investigator. These
responsibilities and accountabilities cannot be delegated.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
and or “5 whys” analysis to drive to the root causes of the problems under
investigation.
The technical accuracy and the thoroughness of the information and analysis
provided to the lead investigator are the primary responsibilities and
accountabilities of the contributing investigators. These responsibilities and
accountabilities cannot be delegated.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
The line managers of investigation staff are accountable for ensuring that the
investigators adopt the most appropriate formal root cause analysis tools for the
investigation to which they are assigned. In addition, they are accountable for
reviewing the work of their staff on the context of the expectations for root cause
analysis, impact assessment and corrective and preventative action
development, planning and implementation and for coaching and development
for the highest quality of investigational and process improvement skills.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
6.3.1 Introduction
Root cause analysis is an essential tool in the process of preventing repeat process and activity
deviations from expected process outcomes. When a GMP manufacturing process or system
delivers an unexpected negative outcome or is not executed correctly then there may be a risk
that the safety, efficacy, purity, quality or identity of the product maybe impacted. It is a
regulatory and a company expectation that these deviations for the expected process or
process outcome are recorded and evaluated. For those deviations determined to have a
potential impact on the safety, efficacy, purity, quality or identity of the product the following is
required:
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
While the above is a GMP regulatory expectation and a condition of us being authorized to
produce pharmaceutical products, the business, safety, health and environmental benefits of
good quality reproducible formal root cause analysis are clear. By understanding the true root
causes of the deviation we can identify corrective actions that will truly remediate the process
output or product where that is possible. More importantly, we can identify effective actions that
prevent to process deviation from occurring again and permanently improve the quality of life for
all stakeholders and eliminate needless waste from our daily activities.
Thorough and formal root cause analysis requires discipline and focus, but it ensures that we do
not address only the symptoms of the problem and miss the underlying issue.
Thorough and formal root cause analysis also ensures that we do not jump to conclusions as to
the underlying issues and forces us to use facts and not experience, preference and bias to
develop preventative actions.
A formal peer reviewed and quality reviewed Root Cause Investigation is not required for every
deviation from expected outcomes. A formal Root Cause Analysis is expected for every event
formally designated as an atypical and the Event, Deviation and Atypical Investigation
procedure (QUA-DMT-S-001) provides specific expectations with respect to GMP and
regulatory expectations.
However, the use of the logical thought processes required for a Root Cause Analysis and use
of techniques such as fish bone diagrams, Real Time Problem Solving and 5 whys can help
structure and speed up simpler investigations or non GMP investigations into Safety, Health and
Environment deviations and flow interruption and process waste. In short, effectively and quickly
identifying the root cause and correct preventative measures for any unexpected event will only
increase customer and Stakeholder satisfaction with respect to products, services and working
environment.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
The root cause analysis technique that we will use are based on 3 techniques:
(Note that it is a best practice to incorporate 5 whys and Fish Bone techniques into a KT
analyses to ensure that the process being investigated is clear and all potential root
causes are considered (Fish Bone) and/ or that human choice and motivation is analyzed
(5 whys)).
Two other specialized derivations of the fish bone and 5 why's tools are used to help guide the
investigation of human error and to assist rapid problem solving in a production, engineering
and laboratory "shop floor environment". These are:
Real Time Problem Solving, also known as RTPS and A3 Problem Solving.
Our reporting structure for Root Cause Analysis is based on a Kepner Tregoe Root Cause
Analysis as this is the basis of our more complex technically focused Root Cause Analysis
approach.
There is one fundamental objective for a root cause analysis that we must not lose sight of and
one fundamental error that we must avoid:
Objective
Eliminate the problem and prevent reoccurrence the first time around.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
Assuming that we know the root cause just by looking at the point of failure. If we jump to
conclusions, and if we believe that we know the answer we will start fitting the facts to our
theory, when we should be fitting our theory to the facts.
A formal root cause analysis follows 6 fixed steps to ensure that the true root cause is
determined and effective preventative measures are implemented.
1) PROBLEM STATEMENT
2) PROBLEM SPECIFICATION
3) POTENTIAL ROOT CAUSES/ POSSIBLE ROOT CAUSES (Fishbone diagram and 5
whys)
4) CONFIRMATION OF ROOT CAUSE
5) CONCLUSION AND IMPACT ASSESSMENT
6) CORRECTIVE AND PREVENTATIVE ACTIONS
Note that the development of Impact Assessments And Corrective and Preventative
Actions are common to all investigation techniques and are called dealt with separately
in section 6.10 and 6.11
It is also important to remember that the development of the problem specification is iterative
and that the specification will develop and become more complete as the investigation
progresses. In the case of atypical investigations this means that impact assessments regarding
product, work in progress materials and the suitability of equipment and processes/ methods for
manufacturing and testing will need to be re-visited periodically to ensure the emerging
understanding of the event under investigation does not change past assessment.
Figure 1 provides an overview of the investigational steps and the points at which it is
recommended that any preceding impact assessments are reassessed.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
KT Root Cause
Analysis selected
Figure 1 – Over view of the
investigational steps
Assemble
Problem
Observations
Used With Atypicals
To Ensure Timely Action
With Respect To Product,
Document Problem
Processes and People
Yes
Document revised Problem Specification No
impact assessment Complete?
and
Actions in an
Interim report
Assemble
Potential Root
Act on the Causes
revised Impact
Assessment
Analysis Of Problem
Document the Specification Versus
completion and Potential Root Causes
outcome of the action
arising from the
change in Yes
interim impact Possible To No
Decide On Root
No
Is Confirmation
Yes Did Test Confirm
Test Required Root Cause?
No
____________________________________________________________________________________________________
Go to final impact assessment
Document the root cause
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
The best and most effective problem solving events are run to a plan and are facilitated. This
ensures that sequential problem solving is avoided. A typical plan would proceed as follows:
There should be a clear understanding and definition of the problem to be solved if time is not to
be wasted in order for the investigation to be successful.
PROBLEM STATEMENT examples:
Briefly describe only the problem - Do not describe symptoms.
E.g.
“The low BHA assay of VYTORIN tablets at release”
NOT “QC’s rejection of VYTORIN tablets”
Beware of trying to solve more than one problem at once - more than one RCA maybe required.
E.g.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
For an effective root cause analysis there must be an accurate and complete problem
specification. Demonstrable facts and data should be included. There is no limit to the numbers
of entries in each section and the number of “is” and “is not” entries do not need to match.
The following table (table 2) lists the questions that should be asked to allow a complete
specification of the problem. Some examples of statements are provided as a guide.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
Table 2 – Problem specification table with some example facts for a problem.
IS IS NOT
What the problem is? What the problem is not?
e.g. e.g.
Suppressed dissolution of Ezetimibe…. Suppressed dissolution of Simvastatin.
Low Ezetimbe assays………
Where the problem is occurring? Where the problem is not occurring?
e.g. e.g.
10/10 and 10/20 tablets 10/40 and 10/80 tablets……..
From each HPLC……..
When the problem is occurring? When the problem is not occurring (but
could)?
e.g.
Intermittently e.g.
Since November 2005 Continuously
Grouped incidents At fixed intervals
At all compression forces Individual events
Meggle lactose Before November 2005………
With different lots of excipients
For all lab techs
All results for as system suitability….
To what extent the problem is occurring To what extent the problem is not occurring
e.g. e.g.
Mostly out side of lower SPC 3 sigma Above upper 3 sigma limits.
limits Failures of specification.
Clear shifts (9 batches consecutively A trend of reducing dissolution values
below the mean for the process)… Individual batches showing the
result…….
What changed Since the last "correct" What has not changed since the last
event/ activity: "correct" event/ activity:
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
e.g. e.g.
Change control implemented for sensor All staff are the same as for previous PM
PM/ Calibration Changes. event
Specific Examples Of Information That Should Be Considered For Collection And Review as
Part of the investigation process:
The identification of the possible causes and the evaluation of the causes must take place in
two separate exercises as two different processes are required.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
Good and effective Root Cause Analysis requires that the identified root cause be proven to be
correct. This ensures that flaws in the investigation process (such as jumping to a conclusion
early in the exercise) are discovered before the corrective and preventative measures are
determined.
The preferred option is by direct experimentation and measurement. However this may not
always be possible depending on the complexity of the system that failed, the duration
between failure events or the cost of experimentation.
Logical analysis where the rationale for the cause and effect correlations are described in
the report. Using this approach however requires that consideration must be given to on-
going monitoring of one or more Key Performance Indicator for the system under
investigation for a duration that would ensure the potential for repeat events of the problem
investigated would surface.
The 5 Whys technique is a simple but powerful tool to help find the root cause of a problem and
it is particularly useful for systematic and people related problems. The tool does not require
detailed statistics, but is considered to be powerful enough to be included in Six Sigma
methodology.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
The technique works by repeatedly asking the question "Why" and using the question to peel
away the layers of symptoms that get in the way of seeing the true root cause of a problem. The
power of the technique comes from the simplicity and the intuitive flow of one question it's
answer forming the basis of the next question. Branches in cause and effect can be
accommodated which allows the relationships between the different root cause elements in
complex problems to be evaluated against one another.
Although the technique is called "5 Whys" it may take more or less than 5 questions before you
find the root cause of the problem. However the traditional concept is that you can get to the
root cause of any problem with the right series of 5 questions and answers.
As already stated a 5 Whys analysis should be selected for investigating problems which
involve human and human operated systems and human machine/ process interactions. It can
form part of a Kepner Tregoe Root Cause Analysis to help with the identification of potential root
causes resulting from process/ equipment and human interactions. It can also be used without
on its own for incident investigations where a KT is not applicable (i.e. the root cause elements
are visible, but the relationships are not clear.)
One very important thing to remember is that 5 whys frequently fail to reach the true root cause
because the process when the a why question generates an answer that indicates that a person
failed to act in the correct manner for the situation. In the examples shown in section 4.5.4 you
will see called out points where there was more than one answer to a question and where the
answer given is actually a simplification of the true human error. The examples actually illustrate
the concepts of "migration".
Write down the specific problem (see section 3 – item number 2 Element 1 -
The Problem Statement). Like KT analysis an accurate problem statement is
critical to arriving at the true root cause as it formalizes the problem and it also
helps the investigation team focus on the same problem.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
Ask Why the problem happens and write the answer down below the problem.
If the answer you arrive at doesn't identify the root cause of the problem written
down in step 1, ask Why again and write that answer down. If you find a branch
(i.e more than one potential answer is identified) write both and apply the
technique to both / all branches).
If the answer is not the root cause loop back to step 3 until the problem's root
cause is identified. This may take more or less times than five Whys.
Below are two examples. The serious example looks suspiciously similar to the way that some
procedures and practices evolve in the work environment, where one system is used for a
purpose other than the original intention and that purpose then drives unintended actions and
behaviours that have a negative impact on the business.
Serious Example - Problem Statement: Customers are unhappy because they are being
shipped products that don't meet their specifications.
6.5.4.2 Why did manufacturing build the products to a different specification than that of
sales?
Because the sales person expedites work on the shop floor by calling the head of
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
6.5.4.3 Why does the sales person call the head of manufacturing directly to start work
instead of following the procedure established in the company?
Because the "start work" form requires the sales director's approval before work
can begin and slows the manufacturing process (or stops it when the director is
out of the office).
6.5.4.4 Why does the form contain an approval for the sales director?
Because the sales director needs to be continually updated on sales for
discussions with the CEO.
The answers in 4.6.4.4 looks straight forward, however buried in these simple
statements is a much more significant problem, which requires some special approaches
to ensure effective corrective and preventative actions are developed and implemented.
Section 4.7 provides guidance on how to proceed when one or more answers to a why
question are characterisable as "Human Error".
Humorous example - Problem Statement: You are on your way home from work and
your car stops in the middle of the road.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
6.5.4.9 Why did you lose your money in last night's poker game?
Because I'm not very good at "bluffing" when I don't have a good hand.
The objective of this process is not to apportion blame or find the guilty, it is to understand what
contributed to the "human error".
For these types of investigations the term error is used to describe an unintended outcome from
a process that involves human actions/ activities or decision making or a failure to use a
process or use the correct process.
For this type of investigation to work correctly it is essential that everyone involved feels
comfortable that the purpose is to identify improvement opportunities.
It is also essential that everyone involved in the process or decision is included directly in the
investigation process.
6.6.2 When Should The Human Error Focused 5 Whys Investigation Process Be Used?
This process should be used when it is clear that the correct and incorrect outcome for a
process, decision or action is primarily dependent on a human conscious or unconscious
choice.
An example, taken from section 6.5 and used as the basis for the illustration below:
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
Why does the sales person call the head of manufacturing directly to start work
instead of following the procedure established in the company?
Well there could be many reasons, in section 6.5.4 the sales man makes a choice.
Because the "start work" form requires the sales director's approval before work can
begin and slows the manufacturing process (or stops it when the director is out of the
office).
However, there could have been an number of different answers, for example:
The salesman did not know of the procedure and was following an example learned
from his predecessor in the job.
The majority of work in the area of human error breaks down errors in to 6 types:
Learning Gap
Memory Gap
Inconsistency
Application
Omission
Decisions (also known as violations)
The example answer where the Salesman knew about the form and signature would be an
example of a decision error, a deliberate violation. The example answer where the salesman
did not know the proper procedure would be a Learning Gap.
The age, length of service, training status, complexity of task and operating conditions at
the time are all relevant factors and should be noted as the facts are assembled.
6.6.3.3 Step 3 – Characterize the External Factors Influencing Internal Nature Of The
Error
6.6.3.4 Step 4 – Characterize the Internal Factors Influencing Internal Nature Of The
Error
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
B - Did the individual perceive a low personal risk from the migration?
Perception that there are no negative consequences to company/ dept.
Perception that there are no negative consequences from peers.
Perception that there are no negative consequences from supervisors and
managers.
6.6.3.5 Step 5 – During the analysis Did You Find That Another Individual Made An
Error?
Characterize the error in terms of the 6 classes of Human error and restart the
process for this new branch.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
The technique is also particular useful on its own when there is little quantitative data available
and can help generate ideas as to where to look for or how to generate quantitative data to
support the root cause analysis. Using the fishbone diagram can also keep the investigation
team focused on the problem and the investigation process, and avoid the temptation to jump to
conclusions.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
Cause Cause
Problem Statement
Cause Cause
As stated above the Fishbone diagram tool is works extremely well in combination with both
Kepner Tregoe and 5 Whys techniques and in particular when there is a team involved and little
quantitative data.
In a Kepner Tregoe Root Cause Analysis the Fishbone Diagram technique can be used to
develop the potential Root Causes required in Element 3 (Causes/ Possible Causes). The
Fishbone can be used to identify the potential causes and then be supplemented with the 5
Whys technique to drive down from the potential cause to the contributing factors.
6.7.3 How To Perform A Fishbone Cause and Effect Diagram Focus Analysis
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
Write down the specific problem as a question. Like KT and 5 Whys analyses, an
accurate problem statement is critical to arriving at the true root cause as it
formalizes the problem and it also helps the investigation team focus on the
same problem. Expressing the problem as a 'why' type question will help the
team brainstorm as each root cause idea should answer the question either
singly or in combination with another contributing factor.
The agreed problem statement is placed in a box at the 'head' of the fishbone.
The rest of the fishbone then consists of the spine (one line drawn across the
page) which attaches the problem statement to the bones that branch out from
the spine. These branches are labeled with different root cause categories. The
Root Cause categories that are selected and the number depend on the nature
of the problem being investigated. There are some standard choices that are
suggested in the literature.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
One suggestion is the 6 M’s for manufacturing care of the iSixSigma Magazine
web site (http://www.isixsigma.com).
Machines (or Equipment)
Methods (or Instructions/ procedures)
Materials (or Raw Materials)
Measurements (or Processes)
Mother Nature (or Environment)
Manpower (or People)
Or the 4 P’s for Systems and Services from the same source.
Policies
Procedures
People
Plant/Technology
With the skeleton constructed the team should take a branch at a time and
brainstorm to find contributing potential causes and list these down as fine detail
off of the main branches.
For each cause identified, continue to ask 'why does that happen?' as with the 5
Whys technique, until you get to the end answer and attach that information as
another bone off of detail branch. This will drive the process to identify the true
root causes of a problem.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
Cause
Detail
Problem
Statement
With the branches completed with detail and whys, some validation and/ or
prioritization of the potential causes is required to see which match the facts and
have the biggest effect. This may require asking additional staff to review the
diagram and validate the potential root causes in the detail.
A critical element in all investigations is the assessment of the impact of the event under
investigation based on the data available and knowledge of the risks and sensitivities of the
product and the regulatory and Company requirements and guidance's. Impact assessments
guide both our long term preventative measures as well as short term immediate actions.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
As any investigation is an evolving process with more knowledge and understanding being
added over time, Impact Assessments must also be periodically refreshed and updated in the
light of this new information. Given the constant requirement to respond quickly to patient safety
and compliance risks and for the clear documentation of rationale for action/ inaction a formal
process of triggering and documenting impact assessments is required.
However, impact assessments must be considered not only from a risk to the patient
perspective (Product Compliance to the filed specifications and expectations for product purity,
safety, efficacy and identity), Process Compliance to file process parameters, Equipment
Compliance to qualification, reproducibility and performance requirements and final People
Compliance to cGMP and specific job performance requirements.
In addition, the potential impacts in each of these four categories of risk over different time
periods, specifically, the past, the present the near future and the shelf life of the product.
The following section provides a detailed guidance on the responses required for different
possible risks under the four classifications of impacts.
However, during the course of an investigation there will be several opportunities for additional
information to become available that may change the previous impact assessment, for example
see the flow chart below:
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
Document Problem
Used With Atypicals Statement
To Ensure Timely Action
With Respect To Product,
Processes and People
Perform Impact
Assessment
Document Impact
Assessment
Assemble Problem
Specification
Notify Operations and
Quality stakeholders Document Problem
of change in Specification
impact assessment
No
Impact Assessment
Document revised impact Still Accurate?
assessment
and actions in an Interim report Yes
Assemble Potential
Root Causes
Conclude Root
Cause
No
Impact Assessment
Still Accurate?
____________________________________________________________________________________________________
Act on final impact assessment Yes
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
6.8.3 Performing An Impact Assessments, Risk Levels and Response Assessment Tool
Tables 3 and 6 provide a basic tool kit for objective determination of impact with respect to four
broad types of risk:
However, there is another dimension to consider the scope of the incident in terms of the time of
discovery, the location of the incident in terms of product and impact of the incident on future
performance. risk to future outcomes need to be considered. As a result some additional
qualifying questions must be asked, these are:
Does this severity level apply to "The Batches under investigation"?
Does this severity level apply to "Related batches of a different product?
Does this severity level apply to " Past production
Does this severity level apply to " Next Production
Does this severity level apply to " Over Product shelf Life" "
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
Finally, we need to consider the probability of an event, from 100% certain to 0% possibility
(using scores such as 100%, 75%, 50%, 25% or 0%).
When all 4 elements have been considered, by placing a probability score in each of the scope
boxes at each level of severity, it is possible to then use the "Risk Level Key" table (found at the
bottom left sides of tables 3 to 6) to translate the score, scope and severity into a risk ranking of
High, Medium or Low.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
Table 3 - Impact Assessments, Risk Levels and Response Assessment Tool (Risk Type A)
Area of Impact (Consider probability from 100% certain to 0% possibility, score 100%, 75%, 50%, 25% or 0%) Review against risk map. Write
risk level in box (high, medium, low, N/A see guide at bottom of the table)
Location of Risk and Severity
Any potential impact to compliance to the filed critical processes and 3 – Serious
N/A
critical process parameters for:
________________________________________________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
______________________________________________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
Table 4 - Impact Assessments, Risk Levels and Response Assessment Tool (Risk Types B)
Area of Impact (Consider probability from 100% certain to 0% possibility, score 100%, 75%, 50%, 25% or 0%) Review against risk map. Write
risk level in box (high, medium, low, N/A see guide at bottom of the table)
Location of Risk and Severity
Any potential temporary impacts to patient health due to the risks 4 – Very
related to the identity, safety, quality (performance) or purity of: Serious
Any potential impact on the conformance to filed specifications and 3 – Serious
N/A
expectations of product safety, quality (performance) or purity for:
______________________________________________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
______________________________________________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
Table 5 - Impact Assessments, Risk Levels and Response Assessment Tool (Risk Type C)
Area of Impact (Consider probability from 100% certain to 0% possibility, score 100%, 75%, 50%, 25% or 0%) Review against risk map. Write
risk level in box (high, medium, low, N/A see guide at bottom of the table)
Location of Risk and Severity
Any potential that the equipment was not under a validated or 2 – Important
qualified state or was operating inside of its qualified envelope at N/A
the time of production of:
Any potential that the robustness/ sensitivity of the equipment was 1 – Negligible
N/A N/A
unsuitable for reliable production of :
Probability of an undesirable outcome
______________________________________________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
______________________________________________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
Table 6 - Impact Assessments, Risk Levels and Response Assessment Tool (Risk Type D)
Area of Impact (Consider probability from 100% certain to 0% possibility, score 100%, 75%, 50%, 25% or 0%) Review against risk map. Write
risk level in box (high, medium, low, N/A see guide at bottom of the table)
Location of Risk and Severity
Any potential temporary impact to patient and operator safety due to 4 – Very
N/A N/A
non-compliance to GMP during the production of: Serious
Any potential that the person was not/ is not competent to perform 2 – Important
N/A N/A
the task or action at the time of production of:
Any potential that the person was not/ is not qualified/ trained to 1 – Negligible
N/A
perform the task or action at the time of production of:
Probability of an undesirable outcome
______________________________________________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
______________________________________________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
Then using the high, medium low risk ranking scores, the scope and the Risk Type, appropriate
actions and timings can be determined by using table 7;
Table 7 – Corrective Action Required For Risk Scope and Risk Ranking
Risk Assessment
Next Production Halt All Related Halt All Related Develop risk mitigation
Production Activities Production Activities in parallel with
until Risk is mitigated until Risk is mitigated production under
additional supervision
or recovery plan.
Over Product shelf Life Immediate quarantine Initiate Fact Finding Initiate Fact Finding
of impacted lots in following SOP QUA – SOP QUA –DMT-S-004
Merck Control, Initiate DMT-S-004 (potential (potential Class 3 recall
Fact Finding following Class 2 recall and FDA and FDA Field Alert)
SOP QUA –DMT-S-004 Field Alert)
(potential Class 1
recall) FDA Field Alert
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
Summarising and formally closing the root cause analysis is critical. It allows the lead investigator to
review the root cause analysis process and understand what went well and what learning opportunities
can be gained from the investigation. Another critical element of the conclusion is to collect together
and properly document the impacts on the product, process people, data, equipment, material etc. that
arise from the Root Cause Analysis process and findings.
The conclusion therefore must condense the investigation and the findings into a summary that will
allow people not directly involved in the investigation to:
Understand the events and issues
Feel confident in the accuracy and completeness of the investigation
Feel confident in the accuracy and thoroughness of the impact assessment.
Feel confident in the relevance and appropriateness of the corrective and preventative actions.
Corrective actions are reactions to a problem that has already occurred and focused on the
steps to be taken to address the immediate risks identified in the impact assessments
performed through out the investigation cycle.
As such they are likely to evolve as the investigation progresses however they must always be
formally documented and filed with the investigation report.
Table 7 provides guidance on the types of corrective actions applicable for the types of impact
assessments that are likely to arise from incident investigations.
Corrective actions should be documented with the relevant impact assessment and the
responsible parties and completion date or due dates recorded.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
Preventative actions are those actions required to ensure that the underlying root cause of an
incident does not reoccur or the loss repeat. As such they are only possible to determine at the
end of the investigation process when the root cause is known.
Because they must be based on a deep understanding of both the failure and the process/
product, equipment, person or systems that failed, Preventative Actions require time to develop
and a most effective if developed in a team of knowledgeable stake holders.
Significant preventative actions require not only time to identify the possible options, but to
qualify them as feasible and to plan their implementation.
All stakeholders should be engaged in this development and implementation planning process.
All actions must have an identified assignee and a suggested implementation date.
It is recognised that the implementation date may change based on resources and priority
changes that occur after the completion of the investigation.
It is also recognised that the nature of a corrective or preventative action may change as more
data about the technical nature of an action becomes available.
Cross function Preventative Actions require the approval of all stakeholders and it is the lead
investigators responsibility to obtain this.
Approving Management are accountable for ensuring that the CAPA principles and guidance's
are observed and adhered and that actions are supportable in the time frame given.
6.10.3.1 Identification
6.10.3.2 Evaluation
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
Conduct a risk assessment to evaluate the magnitude of the problem and potential
impact as described in the section 6.8 Impact Assessments. Types of risk and
severity levels of the problem should be considered during the evaluation.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
If it meets the High Severity and High Frequency threshold, production should be
stopped and only can be resumed with the corrective action(s). The risk level 3 and
above would require PA(s). If it is in the Risk Level 2, then there is an evaluation to
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
determine whether CAPA is required or not. However, PA for the Risk Level 2 is not
mandatory. If it is in the Low Risk threshold (Risk Level 1), no CAPA is required.
When evaluating a CAPA, the risk types (process, product, equipment, and people
compliance impact) should be considered.
The person who is assigned the CAPA needs to be part of identifying the CAPA, its
timeline and must ensure its full intent.
If the Lead Investigator is not the SME for the process/system, then CAPA
development needs to be led by the latter.
The significance to the purity, identity, quality, safety and efficacy of the product
of the underlying root cause and symptoms of a failure, should it re-occur.
The risk of reoccurrence of the root cause failure (not the symptoms).
Preventative actions should be prioritised on the basis for the standard risk
management approach of:
1 - Remove the risk
2 – Substitute the high risk element for a lower one.
3 – Apply engineering controls
4 – Proceduralise and train on preventative human systems.
When entering the description of the CAPA do not use generic terminology (for
example, "complete as per the above", "update procedure as per investigation", or
"modify equipment as outlined"). Apply the SMART principles when describing the
CAPA – Specific, Measurable, Applicable, Realistic and Tied to Business. Write the
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
description so that future reviewers are able to determine the exact intent of the
CAPA. Keep in mind that you are writing for someone else and not yourself.
CAPAs must be developed with the objective to avoid a repeat of the issue so the
following should be adhered to :
CAPAs involving SOP updates are to be minimized. It is acceptable where the
system/approach is being changed to make it more robust or if it is to undergo a
major design modification to make it more understandable etc However, updates
to add minor clarifications or details are not, particularly where 99.9% of the time
the task is being done correctly so the SOP detail is not the issue. Updating the
SOP as a CAPA should be justified by the area management (i.e QMS system
owner and Quality Owner).
Preventive Action is aligned to the root cause and it should be clear that there is
a clear link between the problem and root cause and the CAPA.
Preventative actions for issues unrelated to the true root cause should not be
included in the formally tracked CAPA list for an incident unless a failure to do so
could lead to deviation requiring a Risk Level 3 or above investigation.
Contributing factors not related to the true root cause do not require the formally
tracked CAPA.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
6.10.3.4 Implementation
Given that CAPAs have been chosen for higher risk issues, the target should be to
close as soon as possible so that the risk of repeats is reduced.
If a CAPA can be implemented within the approval time of the investigation, it should
be done so.
CAPA timelines have to be appropriate. For a major issue where the incident has
resulted in a higher risk issue that would result in a Major audit observation or
Regulatory non-compliance, the CAPA must be closed within 60 days. As a guide,
CAPA closure should not exceed 90 days unless justified. If CAPA can not be closed
immediately and significant risks exist, interim risk mitigation plan should be
considered.
To avoid the vast majority of CAPAs being due for closure at the end of the month
the CAPA closure date should be the same date within the month of closure as the
atypical/deviation occurs. This is to help load level the CAPA closure dates.
o The only exception is when you want to set a shorter timeline to closure (which is
good to do).
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
o For CAPAs, the due date is to be determined via "Investigation Closure Data +
fixed number of days" method such that they are spread.
When CAPA is closed, CAPA closure note should be sent to area governance team.
CAPA closure note consists of Issue, CAPA Intent, and Closure.
o Visual inspection failure for HSM post manual intervention and COP parts.
o As an interim action prior to the next HSM cleaning, the HSM technicians who
will complete the cleaning will be briefed on the learning from this atypical,
retrained on the visual inspection SOP and training package used to train the
lead techs and informed that this procedure must be applied for inspections
carried out during the cleaning process. The technicians involved will not
complete manual cleaning of the HSM until they have been retrained on the
cleaning procedure and assessed to be competent to complete the activity. While
the above preventive action is being implemented, final visual inspection (to
confirm equipment surfaces are clean and dry) will continued to be performed by
an independent Lead Technician or Shift Lead or Engineer prior to release of
equipment for production use.
CLOSURE (Briefly describe how the CAPA intent is addressed. Ask ourselves. Have all
of the goals and intents of this CAPA been met? Did the actions correct or prevent
the problem? Have all actions been completed? Will there be any potential adverse
impact as a result of actions taken?)
o The technicians involved in the atypical have been trained by either shift leads or
the operation lead on the visual inspection SOP and training package which was
used previously for training the lead technicians. The training was conducted in
the field explaining the locations of failures involved in the atypical and the
contributing factors leading to the failures. Importance of adhering to the visual
inspection requirements including the right tools and techniques have been
communicated.
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
When a repeated event occurs, there should be an analysis of why previous CAPA is
not effective to prevent reoccurrence and underlying process or system problem still
exist.
Implementation of the CAPA and its effectiveness should be actively monitored until
it is concluded that the issue has been fully addressed. Periodic review on the
effectiveness of CAPA is required to ensure the actions taken were effective.
Periodic review (i.e Monthly Atypical/Deviation review meeting, Proactive Process
Analysis) should review the trend of repeated incidents and progress of actions
items.
8.0 APPENDICES
____________________________________________________________________________________________________
Parent SOP : NA
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
STANDARD OPERATING PROCEDURE PAGE NO. 55 of 60
APPENDIX 1
Co Investigators
IS IS NOT
IS IS NOT
When the problem is occurring? When the problem is not occurring (but could)?
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
STANDARD OPERATING PROCEDURE PAGE NO. 57 of 60
IS IS NOT
To what extent the problem is occurring? To what extent the problem is not occurring (but could)?
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
APPENDIX 2
Fish Bone Diagram Templates
Machines (or Equipment) Materials (or Raw Materials) Measurements (or Processes)
Policies Procedures
People Plant/Technology
EFFECTIVE DATE: 04-OCT-2012 GMT-0400
DOCUMENT PRINTED ON 05-JUN-2015
DOCUMENT APPROVALS
Document ID: 0901435082adf727
Document Name: QUA-DMT-G-001 GUIDELINE FOR ROOT CAUSE ANALYSIS INVESTIGATIONS