Quality Management System for a Pharma QC Laboratory

In short: A pharmaceutical QC laboratory needs a documented quality management system (QMS) suited to the type and volume of testing it does. WHO’s good practices for QC laboratories (TRS 1052, Annex 4, 2024) describe what the quality manual, SOPs, audits, complaints handling and management review should cover. This article is for QC managers, analysts and QA staff building or reviewing a laboratory QMS.

What WHO expects of a laboratory QMS

WHO Technical Report Series 1052, Annex 4 (2024), WHO good practices for pharmaceutical quality control laboratories, is the revision of the earlier version published as TRS 957, Annex 1 (2010), and replaces it. It is aligned with WHO GMP and with ISO/IEC 17025:2017. Its section 3 (“Organization and management system”, paragraphs 3.4 and 3.5) says the quality manager should ensure the establishment, implementation and maintenance of a QMS appropriate to the scope of the laboratory’s activities. The QMS should be communicated to and understood by the relevant staff before implementation, and its elements should be documented, on paper or electronically.

The same section covers: structural requirements, the QMS, control of documentation, change control, control of records, control of data, corrective and preventive actions (CAPA), internal audits, complaints, management review and improvement. Section 4 adds planning topics such as performance management and quality risk management.

The ICH Q10 Pharmaceutical Quality System guideline (2008), which has its own section on management review (2.6), is the wider framework that a manufacturer’s QC laboratory sits within.

The quality manual

The quality manual, or an equivalent document, is the top-level description of the QMS. TRS 1052 paragraph 3.6 lists what it should contain as a minimum. A QC laboratory of a manufacturer may hold the same information in other controlled documents instead of a stand-alone manual.

A quality policy statement that includes:

• management’s intentions regarding the standard of service, including competence, impartiality and consistent operation;
• a commitment to develop, implement and maintain an effective QMS and to keep improving it;
• a commitment to comply with the WHO guideline;
• a requirement that all concerned staff have access to the QMS documents and apply the procedures in their work.

The manual should also describe, among other items:

• the laboratory structure (organisational chart or equivalent) and the quality-related responsibilities, so that limits of authority are clear;
• how the QMS documentation is structured, and the general internal quality management procedures and SOPs;
• required qualifications, experience, competence and training of staff;
• policies for internal and external audits, CAPA, complaints, management review, selection and approval of analytical procedures, handling of atypical and out-of-specification (OOS) results, data governance, reference substances and materials, proficiency testing (optional for a manufacturer’s QC laboratory), risks and opportunities, and selection of service providers and suppliers.

Check the exact list in paragraph 3.6 of the current guideline when you write your own manual, as it is more detailed than this summary.

Written procedures (SOPs) the laboratory should have

An approved SOP should exist for each administrative and technical operation. Typical areas listed in the guideline (paragraph 3.7) include:

• personnel matters, including qualification and training;
• control of documents, records and data integrity;
• change control, internal audit, complaints and CAPA;
• purchase and receipt of supplies such as reagents and materials;
• procurement, preparation and control of reference substances and materials;
• internal labelling and storage of materials and solutions;
• qualification, calibration and preventive maintenance of equipment;
• sampling, if done by the laboratory;
• testing of samples, including methods and equipment;
• validation and verification of analytical procedures, validity of results, atypical and OOS results, and nonconforming work;
• cleaning of the laboratory, benches, equipment and glassware;
• monitoring of environmental and storage conditions;
• disposal of reagents, standards and samples.

Internal audits

The quality manager organises internal audits covering all relevant elements of the QMS, under an audit programme that sets frequency, methods and responsibilities and considers the importance of the activity, changes and previous results (TRS 1052, subsection 3.8, paragraphs 3.42 and 3.43). Internal audits are scheduled at least once a year and carried out by trained personnel independent of the activity audited. Findings and the CAPA taken are recorded, and the effectiveness of corrective actions is monitored. External audits or inspections, for example by a regulator, are additional to this.

Management review

Laboratory management reviews should be convened at planned intervals, at least annually, to monitor the effectiveness of the management system (TRS 1052, subsection 3.10, paragraph 3.47). Typical inputs (paragraph 3.50) include audit and inspection outcomes and their follow-up, complaints, CAPA, follow-up of risks and opportunities, proficiency-testing results, trend analysis, and a critical review of OOS results over the period (section 6.83). Decisions and actions are recorded and followed up at the next review.

Records

QMS records, such as audit reports, training records, equipment logs and analytical raw data, are GMP records. Keep them at least 1 year after the expiry date of the respective product batch (EU GMP Part I Chapter 4 paragraph 4.11, or 5 years after QP certification if longer; 21 CFR 211.180(a)), and longer if local law or the marketing authorisation requires. TRS 1052 (paragraph 3.20) also asks laboratories to keep original observations, calculations, calibration and validation records and final results for not less than five years, or longer where national law requires.

Frequently asked questions

Is a quality manual mandatory for a QC laboratory? The guideline says the QMS elements should be documented, for example in a quality manual. A manufacturer’s QC laboratory may keep the information in other documents instead.

How often should management review take place? At least annually under TRS 1052.

Who is responsible for internal audits? The quality manager plans and organises them, at least once a year, using trained staff independent of the area audited.

Does a pharma QC laboratory need ISO 17025 accreditation? Not by default. TRS 1052 is designed to align with ISO/IEC 17025:2017, but accreditation is a separate decision, often required for national QC laboratories.

Related reading

• CAPA process: step-by-step instructions
• SOP on Data Integrity
• Failure (out-of-specification) OOS laboratory results (USFDA)

References

• WHO, WHO good practices for pharmaceutical quality control laboratories, WHO Technical Report Series No. 1052, Annex 4 (2024).
• ICH, Q10 Pharmaceutical Quality System (2008).
• European Commission, EudraLex Volume 4, EU GMP Part I, Chapter 4 Documentation, paragraph 4.11.
• US FDA, 21 CFR 211.180(a), General requirements for records.