Chapter 20 / Tools, Statistics, Vendors, Budgets, and Risk Control / Paid beta preview

Chapter 20: Quality, Risk, and Inspection Readiness

How quality, risk, CTQs, CAPA, TMF, and inspection readiness become everyday PM practice. ## Quality Is Not The Department At The End Chapter 19 ended with a warning: cost pressure becomes dangerous when teams start trading away documentation, oversight, participant protection, or data integrity to protect a number. DIAB-220 had avoided the worst version of that mistake, but the pressure was real. The team wanted fewer monitoring follow-ups, faster trial master file [ICH E6(R3)] cleanup, shorter vendor explanations, and quicker closure of "minor" data questions. Every request sounded reasonable in isolation. Together, they made Grace Kim uncomfortable. Grace, Director of Clinical Quality Assurance and Inspection Readiness, joined Lauren Brooks after a governance meeting. "Quality is not the department that says no at the end," Grace said. "Quality is how the trial proves what happened, why it was acceptable, and how the important risks were controlled." Quality means the trial is fit to protect participants and produce reliable results. It does not mean nothing goes wrong. Quality management is the system for identifying, controlling, documenting, reviewing, and improving trial quality. Quality by design means building quality into the protocol, operations, systems, vendors, training, and oversight before problems occur. The project manager does not become Quality Assurance. The PM helps keep risks, owners, evidence, timelines, and escalation visible. Quality, Regulatory, Medical, Safety, Data Management, Clinical Operations, vendors, CROs, investigators, and governance all retain their own authority. ## The QUALITY Frame Grace gave Lauren a frame: | Letter | Meaning | PM Question | |---|---|---| | Q | Quality Starts Early | Were CTQs designed into the trial, not inspected in later? | | U | Understand The Risks | Which risks threaten participant protection and reliable results? | | A | Audit-Ready Evidence | Can we prove what happened, who decided, and why? | | L | Logs, Deviations, And CAPA | Are issues classified, trended, corrected, and prevented? | | I | Inspection Readiness | Could the team explain the trial clearly to an inspector today? | | T | TMF And Traceability | Are essential records [ICH E6(R3)] complete, current, and connected? | | Y | Your PM Boundary | Is the PM coordinating quality discipline without becoming QA? | Critical-to-quality [ICH E8(R1)] factors, or CTQs, are the trial features most important to participant protection and reliable results. For DIAB-220, CTQs included informed consent [FDA Informed Consent 2023], eligibility, randomization, safety reporting, primary endpoint data, participant follow-up, drug accountability, data integrity, and sponsor oversight of delegated work. ## CTQs: What Must Not Fail Grace asked Lauren to name what mattered most if an inspector asked whether DIAB-220 was credible. | CTQ | Why It Matters | Example Signal | |---|---|---| | Informed consent [FDA Informed Consent 2023] | Protects participant rights and voluntariness | Wrong consent version or late documentation | | Eligibility | Protects participants and interpretability | Ineligible participant randomized [ICH E9] | | Randomization/blinding [ICH E9] | Protects fair comparison and bias control | IRT mismatch or unblinding [ICH E9] concern | | Safety reporting | Protects participants and regulatory obligations | Late SAE handoff or missing follow-up | | Primary endpoint data | Supports main study conclusion | Missing or out-of-window Week 12 HbA1c | | Participant follow-up | Protects safety and missing-data control | Treatment stop confused with study discontinuation | | Drug accountability | Protects participant safety and treatment integrity | Dispensing/return reconciliation gap | | Data integrity | Supports trustworthy evidence | Source/EDC mismatch without explanation | | Sponsor oversight | Shows delegated work was controlled | Vendor issue logs [PMBOK] without closure evidence | CTQs help teams avoid equal attention to unequal risks. A typo in a noncritical field and a missing primary endpoint value are not the same quality problem. ## Risk-Based Quality Management Risk-based quality management, or RBQM, is a structured way to identify, evaluate, control, communicate, review, and adapt to important risks. RBQM does not mean doing less oversight everywhere. It means focusing effort on the risks most likely to affect participant protection and reliable results. Risk-based monitoring [FDA RBM 2023] is one part of that larger quality approach. It may include onsite, remote, and centralized monitoring focused on critical data, critical processes, and emerging risks. Remote monitoring is not automatically risk-based monitoring [FDA RBM 2023]. Fewer site visits are not automatically smarter oversight. Lauren used the quality management plan [PMBOK] and risk register [PMBOK] to connect each critical-to-quality risk with its signal, owner, and action threshold: The team used the vendor oversight plan to turn the details into operating choices the PM could assign, monitor, and escalate: Wrong consent version used: the accountable owner was Clinical Ops/CRO/Regulatory; CTQ affected was Consent; the PM response was to version control, site training, CRA review; signal/threshold was Any occurrence; repeat pattern; escalation was Quality/Ethics review. Endpoint visits outside window: the accountable owner was Clinical Ops/Data; CTQ affected was Primary endpoint; the PM response was to scheduling support, monitoring, dashboard; signal/threshold was Trend above 3% or cluster by site; escalation was Governance if persistent. Late SAE reporting: the accountable owner was Safety/PV/CRO;

...