You are on page 1of 85

RIPER

AUTONOM
OUS
NAAC &
Electronic records and Digital signature NBA(UG)
SIRO -
DSIR

A Seminar presented as a part of I year


M.Pharm II Semester requirement
ACY 2019 – 2020

By
S.Chandana priya
Regd.No: 19L81S402

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)

Welcome SIRO -
DSIR

to the
World of Digital Technology

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
SIRO -
DSIR
“No product is made today, no person moves
today, nothing is collected, analyzed or
communicated without some digital
technology’ being an integral part of it. That,
in itself, speaks the overwhelming ‘value’ of
digital technology”
- Louis Rossetto

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
Introduction OUS
NAAC &
NBA(UG)
SIRO -
• All organizations involved in drug and device DSIR

distribution, approval, manufacturing and quality


assurance are aware of the Food and Drug
Administration's 21 CFR Part 11 (or more familiarly,
Part 11), but individuals within these organizations
frequently have trouble understanding its application.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
21 CFR Part 11  OUS
NAAC &
• It is the part of Title 21 of the Code of Federal NBA(UG)
SIRO -
Regulations that establishes the United States Food andDSIR
Drug Administration (FDA) regulations on Electronic
Records and Electronic Signatures (ERES). 
• Part 11, as it is commonly called, defines the criteria
under which electronic records and electronic signatures
are considered trustworthy, reliable, and equivalent to
paper records .

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
It is defined as any combination of text, graphics, NAAC &
NBA(UG)
data, audio, pictorial or other information re – SIRO -
DSIR

presentation in digital form that is created, modified,


maintained, archived, retrieved or distributed by a computer
system, and is applicable to records required by any other
FDA regulation and applicable to records submitted to FDA
under the Food, Drug &Cosmetic Act or the Public Health
Service Act, even if not required by FDA. 

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
SIRO -
DSIR

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
Documents management NAAC &
NBA(UG)
SIRO -
DSIR

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
Examples of Electronic records include: SIRO -
DSIR
• emails, websites, Ms-Office documents, digital
purchase receipts, databases, text messages, social
media postings, and information stored on
SharePoint sites and content management systems
(Catalyst, Slack, DropBox, etc.)

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
SIRO -
DSIR
• It also applies to electronic records submitted to the
agency under the requirements of the Federal Food,
Drug, and Cosmetic (FD&C) Act and the Pubic
Health Service Act, even if such records are not
specifically identified in agency regulations.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
• In addition to meeting the regulation's criteria, SIRO -
DSIR
official FDA submissions that consist of electronic
records are acceptable only if the type of record being
submitted has been identified in a public docket (No.
92S-0251) as one that FDA is ready to accept in
electronic form (62 FR:13465).

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
• If the type of record has not been identified in the SIRO -
DSIR

public docket, official submissions must be on paper.

• For records that are maintained but not necessarily


submitted to FDA, electronic records can substitute for
paper records as long as they meet the criteria set forth in
the rule (62 FR:13435).

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
• Individuals are also expected to consult the NAAC &
NBA(UG)
SIRO -
appropriate FDA division before proceeding DSIR

with submission of records in electronic form (21


CFR 11.2(b)).
• Furthermore, the regulation stipulates that computer
systems (including hardware and software), controls,
and attendant documentation maintained under the
rule are subject to FDA inspection (21 CFR 11.1(e)).

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
Specifically, FDA's concerns focused on the relative NBA(UG)
SIRO -
DSIR
ease with which electronic signatures and data sets can be
falsified or altered.
• For example, FDA expressed concern that: Database
elements can be changed at any time to misrepresent
information without evidence that a change was made
and in a manner that destroys the original.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
• More staff may have access to electronic records NBA(UG)
SIRO -
DSIR
than to paper records and can be falsified more
readily than traditional handwritten signatures.
• An electronic signature based on a combination with
an identification code can be loaned or lost.
• Falsification is easier to achieve and cannot be
detected (62 FR:13432—13433).

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
Limiting FDA’s access to records NAAC &
proves challenging NBA(UG)
SIRO -
DSIR

• FDA's inspection authority includes the power to


inspect records that are kept in an electronic format;
• However, FDA does not have the right to inspect all
company records.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
• Providing access to electronic records will make it NBA(UG)
SIRO -
DSIR
more difficult to ensure that only required records

are turned over to FDA, as the scope of a request


based on the volume of paper.
• As a result, it may prove much easier to
inadvertently provide FDA with documents the
agency is not entitled to inspect.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
Requirements of 21 CFR part 11 OUS
NAAC &
NBA(UG)
• All computerized systems must be validated. SIRO -
DSIR

• There needs to be secure retention of electronic records


and instant retrieval.
• User-independent computer-generated time-stamped audit
trails.
• System and data security, data integrity and confidentiality
through limited authorized access to systems and records.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
• Use of secure electronic signatures for closed NBA(UG)
SIRO -
and open systems. DSIR

• Use of digital signatures for open systems.

• Use of operational checks.


• Use of device checks.
• Educated persons for maintenance or use electronic

systems to perform their assigned task.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
Why computer systems are needed to be compliant to OUS
21CFR part 11 ? NAAC &
NBA(UG)
SIRO -
DSIR
• All computer systems which store data which is used
to make Quality decisions/data which will be reported
to the FDA must be compliant with 21 CFR 11.
• In laboratory situations, this includes any laboratory
results used to determine quality, safety, strength,
efficacy, or purity.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
• In clinical environments, this includes all data SIRO -
DSIR

to be reported as part of the clinical trial used to


determine quality, safety, or efficacy.
• In manufacturing environments, this includes all
decisions related to product release and product
quality.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
What is accurate record generation? NAAC &
NBA(UG)
SIRO -
DSIR
• It means that records entered into the system must be
completely retrievable without unexpected alteration
or unrecorded changes.
• This is generally tested by verifying that records
entered into the system must be accurately displayed
and accurately exported from the system.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
How records must be protected? NAAC &
NBA(UG)
SIRO -
DSIR

• Electronic records must not be corrupted and must be


readily accessible throughout the record retention
period.
• This is usually performed through a combination of
technological and procedural controls.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
Example for document is OUS
NAAC &
created/encrypted NBA(UG)
SIRO -
DSIR

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
Why documentations are required for OUS
NAAC &
21 CFR part 11 compliant programs? NBA(UG)
SIRO -
DSIR

 Documentation must exist which defines system


operations and maintenance.
 Typically these requirements are met by company
document control procedures.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM

Requirements for Electronic records OUS


NAAC &
NBA(UG)
SIRO -
DSIR
• Include the printed name of the signer, the date/time
the signature was applied, and the meaning of the
electronic signature.
• Be included in human readable form of the record.
Electronic signatures must not be separable from their
record.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
• Must be unique to a single user and not used by SIRO -
DSIR

anyone else.
• Can use biometrics to uniquely identify the user. If
biometrics are not used, they need at least two distinct
identifiers (for example, the user ID and a secret
password).

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
Advantages of Electronic Records OUS
NAAC &
NBA(UG)
SIRO -
 Faster data transfer DSIR

 Instant data access


 Reduced queries
 Data can be categorized

 Ease in decision-making
 Savage of time and money

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
Disadvantages of Electronic records NAAC &
NBA(UG)
SIRO -
DSIR
• Cost-effective in implementation

• Availability of internet connection


• Data security
• Regular validation of electronic devices

• Regulatory compliance

Department of Pharmaceutical Quality Assurance


RIPER
Main reasons for choosing electronic AUTONOM
OUS
records are: NAAC &
NBA(UG)
SIRO -
 Fast and Easy retrieval (Easy access) DSIR

 Version control (previous versions are not valid)


 Security (encryption services)

 Legal compliance (provides information quickly and


efficiently)
 Disaster recovery (Cloud based backup and storage
systems)
Department of Pharmaceutical Quality Assurance
RIPER

Electronic record provisions AUTONOM


OUS
NAAC &
 Closed system - an environment in which system access is NBA(UG)
SIRO -
DSIR
controlled by persons who are responsible for the content of
electronic records that are on the system
 Open system - an environment in which system access is not
controlled by persons who are responsible for the content of
electronic records that are on the system
 Hybrid system - a system for which handwritten signatures executed
on paper and paper-based records are maintained in addition to
electronic records

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
Access criteria OUS
NAAC &
NBA(UG)
SIRO -
• Policies stipulating who has access records DSIR

and on restricted records,


• Assurance that access and retrieval are timely,
• Assurance that records are retrievable by authorized
users only,
• Relevant metadata applicable to the captured record,
and
• Recognition on privacy issues.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
E-records infrastructure should consists OUS
NAAC &
NBA(UG)
• wide awareness of the value of records; SIRO -
DSIR

• effective laws and policies;


• governance and accountability arrangements;
• consistent and effective standards and practices;

• influence and guide change;


• cost-effective computer-based systems; and

• adequate budget, space, and supplies.


Department of Pharmaceutical Quality Assurance
RIPER
AUTONOM
Control on records OUS
NAAC &
NBA(UG)
SIRO -
• Measures to monitor who has access to records, DSIR

• Safeguard the records from unauthorized access to ensure


integrity of the records is maintained at all times,
• Audit trail of all records to capture all activity to ensure the
records are not compromised,
• Demonstration that migration, system malfunctions,
upgrades,

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
• Regular maintenance of records systems will not SIRO -
DSIR
infringe upon the integrity of the records,
• Methodologies to protect the confidentiality, privacy,
and security of records from unauthorized access,
tampering, or disposal,
• Validation/verification techniques that ensure system
and functional compliance requirements are met,

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
• Records protection and preservation requirements NBA(UG)
SIRO -
DSIR
also must be met,
• Ability of the records system to preserve records and
their associated metadata and be accessible throughout its
retention period, and
• Ability for long-term or archival storage, and ensure
these records and data remain accessible in the future.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
SIRO -
DSIR

Digital Signatures

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
What is a Digital signature? OUS
NAAC &
NBA(UG)
SIRO -
• A digital signature is a mathematical technique DSIR

used to validate the authenticity and integrity of a

message, software or digital document.


• it can offer far more inherent security, and is intended to
solve the problem of tampering and impersonation in
digital communications.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
• The FDA considers any organization that uses NAAC &
NBA(UG)
SIRO -
electronic signatures to be an entity with an DSIR

electronic record system that must comply with the code in


its entirety and the systems of the aforementioned
organizations because they directly affect public safety.
• Part 11 relates data integrity to the reliability of the
electronic records created and managed by an

organization's critical operating systems.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
SIRO -
DSIR

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
SIRO -
DSIR

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
Classes of Digital signature based on OUS
NAAC &
type of certificate NBA(UG)
SIRO -
• Class 1 DSIR

• Class 1 signatures provide a basic level of security


and are used in environments with a low risk of data
compromise.
• It can’t be used for legal business documents as they
are validated based only on an email ID and
username.
Department of Pharmaceutical Quality Assurance
RIPER
AUTONOM
OUS
• Class 2 NAAC &
NBA(UG)
SIRO -
• These used for e-filing of tax documents, including DSIR
income tax returns and Goods and Services Tax
(GST) returns.
• This type authenticates a signee’s identity against a
pre-verified database.
• These are used in environments where the risks and
consequences of data compromise are moderate.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
• Class 3 NAAC &
NBA(UG)
• The highest level of digital signatures. SIRO -
DSIR

• This require a person or organization to present in front


of a certifying authority to prove their identity before
signing.
• These are used for e-auctions, e-tendering, e-ticketing,
court filings and in other environments where threats to
data or the consequences of a security failure are high.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
When are electrical signatures needed? NAAC &
NBA(UG)
SIRO -
DSIR

• There is (as yet) no obligation to create and deliver


documents in a digital format. However, there is
increasing pressure from the authorities and notified
bodies to do this.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
• Standardized electronic formats like CDISC NAAC &
NBA(UG)
SIRO -
(Clinical Data Interchange Standards Consortium) InDSIR

the case of clinical trials are to some extent the single


most efficient form of communication.
• As soon as manufacturers create electronic
documents instead of paper documents, must replace
handwritten signatures with electronic or digital
signatures.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
Subpart A – General provisions OUS
NAAC &
NBA(UG)
SIRO -
• Part 11 consists of three subparts. Subpart A DSIR

contains the general provisions and describes the code's


scope, implementation and definitions.
• Section 11.2 says that companies can maintain
documents in electronic form and use electronic
signatures in place of traditional signatures.
• Section 11.3 simply defines the terms used in Part 11.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM

Subpart B – Electronic Records OUS


NAAC &
NBA(UG)
SIRO -
DSIR
• Subpart B focuses on electronic records and discusses
the applicable controls for closed and open systems
(sections 11.10 and 11.30, respectively), signature
manifestations (11.50) and processes for linking
signatures to documents (11.70). 

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
• The integrity of system operations and information NBA(UG)
SIRO -
DSIR
stored in a given system are protected by certain
measures for closed systems including:
 Validation

 The ability to generate accurate and complete copies of


the records
 Archival protection of the records

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
 Use of computer-generated, time-stamped audit NAAC &
NBA(UG)
SIRO -
trails DSIR

 Use of appropriate controls over systems


documentation
 Determine that persons who develop, maintain, or use
electronic records and signature systems have the
education, training and experience to perform their
assigned

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
• Whether a system is closed or open depends on SIRO -
DSIR

the individuals who are responsible for the content of


the electronic records control access to the system
containing those records.
• If so, the system is closed; if not, it's open and requires
additional precautions.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
• These precautions include document encryption NBA(UG)
SIRO -
DSIR
and using appropriate digital signature standards to
ensure that entities maintain all records with
"authenticity, integrity and confidentiality."
• Open systems also require all the controls required
for closed systems.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
• Section 11.50 covers signature manifestations, NBA(UG)
SIRO -
DSIR
which must include: "the printed name of the signer, the
date and time when the signature was executed, and
the meaning associated with the signature.
• This states that signed electronic records shall contain
information and shall be included in any human-readable
form of the record.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
• Section 11.70 requires that a given system must OUS
NAAC &
NBA(UG)
link a signature, whether electronic or handwritten, SIRO -
DSIR
to a particular electronic record in such a manner that
signatures are protected from excision, duplication or
transfer that could result in document falsification.
Note: The master record is still the electronic record, and
signing a printout of an electronic record doesn't exempt
the electronic record from Part 11 compliance.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
Subpart C – Electronic Signatures OUS
NAAC &
NBA(UG)
SIRO -
• Section 11.100 says that electronic signatures are DSIR

legally binding and equivalent to handwritten


signatures.
• Only one individual verified by the issuing entity can
use a given electronic signature. Once assigned, an
organization must not reassign/reuse an electronic
signature other than the original assigned individual.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
•   As with all best practices, enormous gains in SIRO -
DSIR
efficiency and productivity will ultimately result in
significant cost savings from implementation.
• Documentation and paper trail methodologies have
become so costly.
• Part 11 isn't just a cost of doing business; it's a trail of
forensic evidence testifying to the quality of products.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
Who issues Digital signatures? NAAC &
NBA(UG)
SIRO -
DSIR
• A licensed Certifying Authority(CA) issues the digital
signature. Certifying Authority means a person who
has been granted a license to issue a digital signature
certificate under section 24 of the IT-Act-2000.
• Controller, appointed by Central govt. of India is the
Head of Certifying Authorities.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
• A Digital signature Certificate is a secure digital NBA(UG)
SIRO -
DSIR
key that is issued by the certifying authorities for
the validating and certifying the identity of the person.
• A Digital signature certificate contains information
about the user’s name, pin code, country, mail address,
date of insurance of the certificate and name of
certifying authority.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
Difference between Electronic signature OUS
Vs Digital signature? NAAC &
NBA(UG)
SIRO -
Electronic signature Digital signature DSIR

• An electronic signature is • A Digital signature is a


an electronic symbol guarantee that an electronic
attached to a contract or document is authentic.
other record, used by a
person with an intent to
sign.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
SIRO -
DSIR

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
DocuSign’s advanced digital transaction OUS
NAAC &
platform. NBA(UG)
SIRO -
DSIR
 Is used by many of the world’s largest enterprises

 Implements stringent standards for security and


compliance, including Public Key Infrastructure (PKI)
 Automates document flow

 Increases transaction speed


 Reduces operational costs

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM

Features of Digital signature


OUS
NAAC &
NBA(UG)
SIRO -
DSIR
• Authentication – They authenticate the source 
of messages. Since digital certificate is bound to a
specific user, the signature shows that the user sent it.
• Integrity – Sometimes, the sender and receiver of a
message need an assurance that the message was not
altered during transmission.
• Non-Repudiation – A sender cannot deny sending a
message which has a digital signature.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
Digital signatures are time-bound OUS
NAAC &
NBA(UG)
SIRO -
• They are eligible for a medium(long) or even DSIR

permanent retention period.


• This technique is designed for the short-term
validation of digital documents and are validated
immediately after the transfer.
• The authentication function of this is a short-life
cycle.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
• The validation of the document after a certain NAAC &
NBA(UG)
SIRO -
time has elapsed since receipt, forms a problem DSIR

i.e., preservation period of records can’t exceed this


validity period of several years or less.
• Migration is at present the most widely applied
preservation strategy.
• The digital documents are migrated to a suitable
archiving format.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM

Validation chain must be available OUS


NAAC &
NBA(UG)
SIRO -
DSIR
• To continue using digital signatures for the
authentication of digital documents in the future, as it is
not sufficient to preserve the records.
• For verification, an external PKI structure is required.

• The complete 'validation chain' including the digital


certificates and root certificates must remain available

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM

PKI(Public Key Infrastructure) OUS


NAAC &
NBA(UG)
SIRO -
DSIR
• It is the basis for digital signature today.

• Public Key Infrastructure (PKI) is a set of


requirements that allow (among other things) the
creation of digital signatures. 
• It provides user with a pair of keys, private key and a
public key used in all signed transactions.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
PKI components….. OUS
NAAC &
NBA(UG)
SIRO -
• A certificate authority(CA) DSIR

• A Registration authority(RA)
• A Central directory
• Validation authority(VA)
• A Certificate management system

• A Certificate policy

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
SIRO -
• Certification authorities are usually commercial DSIR

organizations and distribute the digital certificates.


• For the verification of digital signatures, these
certificates must remain available.
• One has no guarantee that digital certificates will be
preserved in the long term.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
• The relatively short lifespan of software SIRO -
DSIR
applications for authentication, there is no evidence
that the technology will remain.
• The reconstruction of the necessary software in the
future on the basis of documented algorithms is indeed
possible, but that would be a fairly expensive and
complex issue.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
• The maintenance of such an external validation NAAC &
NBA(UG)
SIRO -
structure also conflicts with the archival principle DSIR

as self-sufficient as possible.
• All essential elements of the 'validation chain' must be
present in the digital repository itself.
• A certificate archive would have to be set up and
secured very well, so certificates could not be changed
or added.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
SIRO -
DSIR

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
An example for easy understanding NAAC &
NBA(UG)
SIRO -
DSIR

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
SIRO -
DSIR

Security
solutions

Department of Pharmaceutical Quality Assurance


RIPER

Registration Validation AUTONOM


OUS
NAAC &
NBA(UG)
SIRO -
• Immediately after receipt, the validity of the DSIR

digitally signed document is checked by means of the


digital signature.
• The result of this validation is registered by the receiver in
the metadata of the document.
• These metadata must be archived together with the record
and must be protected against any changes.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
• This approach is that the authentication SIRO -
DSIR

technology of a digital signature is predominantly

a technological solution and does not escape


technological obsolescence.
• Furthermore, the complete validation chain must be
archived.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
• An alternative is being sought in the embedding SIRO -
DSIR
measures for establishing the authenticity and
integrity in a procedure that is transferable.
• This approach also corresponds with the archival
view that documents used within a work process are
authentic though changes are made.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
SIRO -
DSIR

Department of Pharmaceutical Quality Assurance


RIPER

Conclusion AUTONOM
OUS
NAAC &
NBA(UG)
• The use of an advanced digital signature as a proof SIRO -
DSIR
of authenticity and integrity for electronic records raises
several questions and problems.
• They result in particular from the fact that the whole
concept of the digital signature is based on a digital object.
• In addition to the dependence on a 'validation chain', there

is also a huge dependence on technology.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
• Technology becomes obsolete quickly and there- SIRO -
DSIR
fore may not be the exclusive basis for assurance of
reliability.
• Therefore Technological solutions must be replaceable

and must be embedded in an overall management


procedure.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
• Furthermore, reliability includes more than NBA(UG)
SIRO -
DSIR
authenticity and integrity alone.
• Accuracy and trust also play an important role in the
archiving of reliable records.
• Assurance of reliability is a never ending process that
starts on creation or receipt, and must be maintained
during the entire life cycle.

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
SIRO -
DSIR

References……….

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
• https://en.wikipedia.org/wiki/Title_21_CFR_Part_11 NAAC &
NBA(UG)
• https://www.qualityze.com/blogs/electronic-signatures-new-prot
SIRO -
ocol-verification-quality-records documents/#:~:text=Any%20d
DSIR
ocuments%20signed%20electronically%20need,sense%20of%2
0authorization%20as%20well
.
• http://www.presentationeze.com/blog/electronic-signatures-requ
irements-medical-device-manufacturing/
• https://www.qualitydigest.com/july05/articles/02_article.shtml
• https://www.contractpharma.com/issues/2002-11/view_features/
electronic-records-amp-electronic-signatures/

• https://www.mfiles.com/Content/documents/en/res/inthenews/Q
uality_Progress_article_May_2013_avoiding_avalanche.pdf

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
• https://www.recordnations.com/articles/whats-best-paper-dig
NAAC &
ital-record management/#:~:text=Digital%20records%20giv NBA(UG)
e%20you%20the,and%20while%20it's%20being%20transmi SIRO -
tted DSIR
.
• https://www.mddionline.com/understanding-fdas-electronic-
records-and-signatures-regulation#:~:text=electronic%20rec
ords%20and%20signatures%E2%80%94a,records%20and%
20traditional%20handwritten%20signatures
.
• http://www.expertisecentrumdavid.be/docs/digitalsignatures.
pdf
• https://www.sciencedirect.com/topics/psychology/electronic-
record

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
• https://www.toppr.com/guides/business-laws-cs/cyber-laws/d
NAAC &
igital-signature/ NBA(UG)
SIRO -
• https://www.fda.gov/regulatory-information/search-fda-guida
DSIR
nce-documents/part-11-electronic-records-electronic-signatur
es-scope-and-application
• https://www.cognidox.com/blog/what-is-fda-21-cfr-part-11
• https://www.slideshare.net/atuljaybhaye/digital-signatures-10
8792026

• https://www.icsi.edu/media/portals/86/Geeta_Saar_71_Maint
enance_and_inspection_of_documents_in_ele.pdf

• https://innovareacademics.in/journal/ajpcr/Vol6Suppl2/178
2.pdf

Department of Pharmaceutical Quality Assurance


RIPER
AUTONOM
OUS
NAAC &
NBA(UG)
SIRO -
DSIR

Thank You !
Department of Pharmaceutical Quality Assurance

You might also like