How do you manage changes to products and processes in a GMP-compliant way, without compliance gaps or production stoppages?

A change control system rarely fails because of missing forms, but because of the sequence. Three steps must mesh together before a change is implemented: the risk assessment under ICH Q9(R1) determines how deeply it is examined. The regulatory impact assessment decides whether a variation under Regulation (EC) No 1234/2008 or a notification to the notified body under MDCG 2020-3 is due. And only the release permits implementation, including revalidation under EU GMP Annex 15. Anyone who reverses this sequence and implements first will, in case of doubt, have an unapproved change in the registered or certified state, and that is the most expensive of all findings.

This is exactly where we come in. The impact assessment comes at the beginning, not the end: before anything is changed in production, it is clarified whether the change is minor, major or critical, which variation or notification to the notified body it triggers and what revalidation scope follows. Via Established Conditions and a PACMP under ICH Q12, planned follow-up changes can even be aligned with the authority in advance, which shifts the later submission effort to where it is plannable, instead of into the critical path just before market launch.