Skip to content
risk-based quality management
Josh Peterson07/23/266 min read

How an eQMS Supports Risk-Based Quality Management Under ICH E6(R3)

Sponsors are like conductors. They bring together the best of CROs, laboratories, manufacturing partners, clinical sites, and other specialized vendors and tune them to a unified goal: help create safe, effective therapies and devices for patients.

But while the individual responsibilities of a clinical trial can be delegated, accountability cannot. Sponsors must track vendor qualification, team training status, document control, and quality issue management before risks emerge.

As clinical trials become more complex and distributed, maintaining this necessary level of oversight gets harder.

That's one of the driving ideas behind ICH E6(R3), the latest revision to the International Council for Harmonisation's Good Clinical Practice (GCP) guideline.

Rather than treating quality as a parade of isolated compliance activities, ICH E6(R3) reinforces the need for proactive, risk-based quality management from the start. It encourages organizations to build a foundation of quality by identifying what matters most, focusing oversight where risk is highest, and reassessing those risks as the trial progresses.

For sponsors and CROs, the challenge is turning those principles into practical quality processes that work throughout the trial.

What does ICH E6(R3) change about risk-based quality management?

Risk-based thinking was already part of Good Clinical Practice. ICH E6(R3) gives it a more central role in how clinical trials are designed, conducted, and overseen.

The revision strengthens the focus on four related principles:

  1. Identify critical-to-quality factors early. Sponsors should determine which activities, processes, and data are most important to participant protection and reliable trial results before the trial begins.
  2. Manage risks throughout the trial. Protocol changes, vendor performance, staffing, quality events, and new data can introduce new concerns or change the importance of existing ones. Sponsors must have a way to initiate, document, and enforce changes throughout the trial.
  3. Keep controls proportionate to risk. Activities that could directly affect participant safety or data reliability may require closer oversight than lower-risk activities. For example, informed consent processes may warrant more rigorous controls than administrative activities because errors could directly affect patient safety or study integrity.
  4. Maintain oversight of delegated work. Sponsors can’t take a hands-off approach. They remain accountable for important activities transferred to CROs and other service providers and need ongoing visibility into vendor qualifications, training, audits, quality events, corrective actions, and more.

ICH E6(R3) tells Sponsors and CROs to focus their quality activities where the greatest impact – and potential for risk – exists, without adding unnecessary complexity.

At a Glance

Risk-based quality management means identifying what matters most, putting appropriate controls in place, and continuing to review those controls as the trial progresses.

 

Why proactive oversight can be difficult

The principles are straightforward. Applying them across a complex clinical trial is the hard part, especially when sites, vendors, teams, and data are all distributed..

Vendor information may live in one spreadsheet while audits, training records, quality agreements, deviations, and corrective actions are managed somewhere else. And for Sponsors that rely on periodic reports from CROs and other partners, access to data between formal reviews can be pretty limited.

These gaps make it harder to answer important questions:

  • Is this vendor still suitable for the work it performs?
  • Are required qualifications and audits current?
  • Have the right people completed the right training?
  • Are quality issues isolated, or is a pattern developing?
  • Can we trace an issue through investigation and corrective action?
  • Do we have the records needed to demonstrate ongoing oversight?

The trick is to bring these processes and records together, giving Quality teams a more current view of activity across the trial. And that starts by adopting tools that were built intentionally for quality and compliance.

How an eQMS supports proactive, risk-based oversight

ICH E6(R3) is more than just an initial risk assessment. To truly carry out ongoing, proactive risk-based quality management, teams need consistent processes, connected records, and timely reporting throughout the trial.

That’s where an electronic quality management system (eQMS) can help.

1. Match vendor oversight to risk

Sponsors work with CROs, laboratories, software providers, and other vendors that can affect different parts of a trial. Risk-based oversight means focusing attention on the vendors and activities with the greatest potential impact on participant safety or data integrity.

A laboratory analyzing patient samples, for example, may require closer monitoring and more frequent audits than a vendor providing general business services. Teams can use vendor risk assessments, audit findings, quality events, and corrective actions to determine when oversight should change.

An eQMS with configurable fields, workflows, and audit scheduling makes it easier to document that approach and apply it consistently. Teams can maintain vendor records and schedule recurring audits based on risk and scope.

2. Connect the records surrounding risk

A vendor’s risk can change once work begins. Audit findings, deviations, corrective actions, training gaps, or changes in performance may all signal that closer oversight is needed.

If an audit finding leads to an investigation, corrective action, document update, and new training assignment, each step should be easy to follow from identification through closure.

Quality teams need to understand how vendor records relate to:

  • Audit findings
  • Incidents, complaints, or deviations
  • Corrective and preventive actions
  • Change controls
  • Controlled documents
  • Training requirements
  • Reviews and approvals

A connected eQMS keeps these related records together. Teams can review the full context of an issue without piecing together information from spreadsheets, emails, and separate systems.

3. Keep documents, training, and approvals aligned

Protocols, SOPs, quality agreements, and supporting records may pass between several organizations during a trial. Each handoff creates another opportunity for an outdated version to be used or an approval to become separated from its source record.

When a controlled document changes, teams should be able to assign the appropriate training, track completion, and confirm that required approvals are in place.

Effective document control helps teams maintain:

  • Approved and effective versions
  • Revision histories
  • Defined reviewers and approvers
  • Related training assignments
  • Complete audit trails

An eQMS that connects document control, training management, and electronic signatures helps teams manage those steps within the same quality process. That gives Quality teams a clear record of who reviewed, approved, and trained on each version without having to reconcile information across separate systems.

Get More Training Management Tips & Templates

Check out QMS University to learn more training management best practices, plus get templates and step-by-step guides across all facets of quality management.
 

QMS University Image

 

 

4. Recognize quality signals earlier

Periodic audits still matter, but quality activity needs to continue between reviews. Recurring deviations, overdue corrective actions, longer closure times, or repeated training gaps can let you know a closer look is needed.

Depending on the trial and its risks, teams may need to monitor:

  • Recurring issues associated with a vendor or study
  • Open or overdue corrective actions
  • Audit findings and closure times
  • Training compliance
  • Document approval delays
  • Changes in selected quality metrics

Quality dashboards and reports help bring those signals together. An eQMS with configurable metrics and reporting can help teams monitor trends, identify emerging patterns, and determine when additional oversight or reassessment is appropriate.

With the right information in view, Quality teams can ask better questions, investigate meaningful changes, and act before individual issues grow into larger risks.

Build a more proactive approach to GCP quality

ICH E6(R3) places greater emphasis on identifying important risks early and maintaining oversight throughout the trial.

An eQMS with configurable workflows, connected quality records, audit trails, training management, and reporting makes that approach easier to carry out. These capabilities give sponsors and CROs a clearer view of vendor activity, related quality events, and emerging signals throughout the trial.

The eQMS provides the structure, while sponsors and CROs define the risk criteria, controls, and oversight processes appropriate for their trials. This gives Quality teams the visibility to recognize potential problems earlier, understand their broader context, and act before isolated issues become larger risks.

ZenQMS gives Quality teams a connected, configurable system for managing these processes without forcing them into rigid workflows. Sponsors and CROs can adapt the system to their responsibilities, risks, and ways of working while maintaining a clear record of quality activity across clinical operations.

Book a demo to how ZenQMS can support quality management across your clinical operations.