Sampling plan not risk-based during internal audit – preventing false OOS results


Published on 26/04/2026

Assessing and Addressing Non-Risk-Based Sampling Plans during Internal Audits

In pharmaceutical manufacturing, the integrity of raw material sampling plans is critical to achieving compliance and maintaining product quality. However, when internal audits reveal that sampling plans are not risk-based, it can lead to false out-of-specification (OOS) results and significant operational risks. This article will provide a structured investigation into the potential failure modes associated with non-risk-based sampling plans, offering practical steps for pharmaceutical professionals to effectively address and mitigate these issues.

By the end of this article, readers will gain insights into how to identify symptoms, determine probable causes, execute a thorough investigation, implement corrective and preventive actions (CAPA), and ensure ongoing control and monitoring in accordance with GMP expectations. The knowledge shared will equip quality and operational teams to enhance their sampling methods and maintain compliance during regulatory inspections.

Symptoms/Signals on the Floor or in the Lab

The first step

in addressing a non-risk-based sampling plan is identifying the symptoms that suggest a deeper issue. Common signals include:

  • Increased OOS Results: An unusual spike in OOS results during routine quality control testing may indicate that sampling is not adequately reflecting the raw materials’ quality.
  • High Variability in Results: Consistent discrepancies between batches or unexpected variability in analytical results can suggest flaws in the sampling methodology.
  • Frequent Vendor Non-Compliance: A pattern of vendor qualification failures or a lack of comprehensive supplier audits can indicate neglected risks in the sampling process.
  • Staff Complaints: Feedback or concerns from laboratory and quality assurance personnel regarding inconsistent sampling protocols can serve as an advanced warning of underlying issues.

Each of these symptoms warrants immediate investigation to determine whether the sampling plan’s methodology and execution are adequately assessing risk through appropriate sampling frequencies, techniques, and batch sizes.

Likely Causes

Identifying the most likely causes of a non-risk-based sampling plan involves examining several categories: Materials, Method, Machine, Man, Measurement, and Environment. Below is a categorization of possible causes:

Category Likely Cause
Materials Improper selection of raw materials for critical processes, insufficient vendor qualification criteria.
Method Lack of alignment with risk-based methodologies or outdated sampling procedures.
Machine Inadequate calibration of measurement devices or improper maintenance of sampling equipment.
Man Inadequate training of personnel leading to inconsistent sampling practices.
Measurement Flawed testing methods or inappropriate sampling sizes that do not accurately reflect the material quality.
Environment Improper storage conditions affecting raw material stability, leading to sampling discrepancies.
Pharma Tip:  Sampler training deficiency during regulatory inspection – inspection-ready sampling justification

Understanding these categories helps to further drill down into specific root causes, providing a comprehensive approach to investigations.

Immediate Containment Actions (first 60 minutes)

Immediacy is essential when addressing indications from non-risk-based sampling plans. The following containment actions can be implemented within the first hour of identifying an issue:

  1. Cease Processing: Immediately halt any processes utilizing the affected raw materials to prevent further complications.
  2. Notify Key Personnel: Alert the relevant quality assurance and regulatory teams of the potential risk.
  3. Document Findings: Start an internal report detailing the observations, including batch numbers and any preliminary findings.
  4. Isolate Affected Batches: Secure any affected batches to prevent distribution until further analysis.
  5. Perform Initial Testing: Conduct preliminary testing of retained samples from the affected lots to verify results.

Quick and structured containment actions are critical to minimizing risk and assuring traceability of the investigation process.

Investigation Workflow

Following containment, a structured investigation workflow must be initiated. This will involve collecting data from various sources and systematically interpreting these findings. The workflow should include the following steps:

  1. Data Collection: Gather pertinent data, including sampling records, vendor qualification documentation, batch production records, and previous OOS reports.
  2. Sampling Method Review: Review the current sampling plans against regulatory guidelines to identify any deficiencies.
  3. Conduct Interviews: Speak with key personnel involved in the sampling process to understand their knowledge of established protocols.
  4. Statistical Analysis: Analyze available data for trends and correlations, particularly in relation to sampling methodologies employed.
  5. Document Findings: Maintain clear documentation through every stage to substantiate any changes made based on the investigation.

The interpretation of collected data will guide the identification of specific failure points and serve as evidence to support further investigation methodologies.

Root Cause Tools

When investigating a non-risk-based sampling plan, employing root cause analysis tools is crucial in narrowing down the underlying issues. Common tools include:

  • 5-Why Analysis: A straightforward method where the investigator asks “Why?” at least five times to explore the cause-and-effect relationships. This is particularly useful for simple problems.
  • Fishbone Diagram (Ishikawa): An effective method for visualizing potential causes across categories, helping teams brainstorm and categorize issues comprehensively.
  • Fault Tree Analysis: A top-down, deductive failure analysis that models the interrelationships between various suspected causes and can assist for complex issues.
Pharma Tip:  Sampling SOP not followed during incoming material receipt – GMP expectations for material sampling

Select the appropriate root cause tool based on the complexity of the situation. Less complex issues can often be effectively analyzed using 5-Why, while more complicated causes may benefit from more structured approaches like Fault Tree Analysis.

CAPA Strategy

CAPA initiatives need a systematic approach once root causes are determined to facilitate corrections, corrective actions, and preventive actions:

  1. Correction: Address immediate non-compliance and root cause findings through direct remediation, such as re-evaluation or re-sampling of affected batches.
  2. Corrective Action: Implement in-depth changes to prevent recurrence, including revising sampling procedures and enhancing vendor qualification processes.
  3. Preventive Action: Develop processes to regularly review sampling plans, ensuring they align with current risk assessments and regulatory standards.

Each action should be tracked and documented thoroughly to confirm effectiveness and ensure a return to compliance.

Control Strategy & Monitoring

An effective control strategy ensures that the quality system can detect and respond to the performance of the sampling plan. This should consist of:

Related Reads

  • Statistical Process Control (SPC): Implement SPC techniques to monitor sampling processes and outcomes over time to detect variations promptly.
  • Regular Sampling and Trending: Conduct routine checks of raw material storage conditions and batch releases to ensure compliance with established specifications.
  • Automated Alarms: Use alarms and alerts to signal deviations in sampling or storage conditions to facilitate quick responses.
  • Periodic Verification: Regularly evaluate and verify the effectiveness of the sampling process against established benchmarks.

This control strategy will enable ongoing monitoring and assurance that the sampling techniques remain valid and reflect the intended quality attributes.

Validation / Re-qualification / Change Control Impact

Any changes made as a result of the investigation need to be documented and evaluated under the guidelines of validation and change control:

  1. Validation of New Methods: If sampling methodologies are revised, ensure they undergo appropriate validation to confirm their effectiveness before implementation.
  2. Re-qualification of Vendors: Vendor qualification criteria should be reassessed to ensure alignment with updated risk-based sampling requirements.
  3. Change Control Documentation: Document all changes in a formal change control process to maintain thorough records for audits and inspections.

Reviewing and re-validating processes ensures that any modifications do not inadvertently introduce new risks or compliance issues.

Pharma Tip:  Improper sample storage during incoming material receipt – CAPA to prevent recurrence

Inspection Readiness: What Evidence to Show

Preparing for regulatory inspections requires proper evidence to demonstrate compliance with risk-based sampling protocols:

  • Sampling Records: Maintain comprehensive records of sampling plans, processes, and outcomes, along with any deviations or OOS results.
  • Logs and Documentation: Ensure all actions taken (containment, CAPA steps) are documented thoroughly to support the investigation results.
  • Batch Documentation: Keep detailed batch production records, including vendor qualifications, along with detailed reports of OOS investigations.
  • Deviations Documentation: Document all deviations and how they were addressed to provide a clear history of organizational learning and improvements.

Providing inspections with clear, documented evidence of a robust quality system enhances credibility and demonstrates a commitment to compliance.

FAQs

What are the signals that indicate a need to review sampling plans?

Increased OOS results, variances across batch testing, and personnel feedback regarding the sampling process often indicate a need for review.

How can we validate our new sampling procedures?

New procedures should undergo validation protocols that confirm their accuracy and reliability in representing quality attributes consistently.

What constitutes an effective CAPA strategy?

An effective CAPA strategy consists of identifiable corrections for immediate issues, corrective actions to prevent recurrence, and preventive actions for ongoing compliance.

Why is it important to maintain sampling records?

Maintaining accurate sampling records is essential for demonstrating compliance during inspections and for effective troubleshooting in the event of quality issues.

How can technology aid in sampling plan verification?

Automated systems, SPC, and data analytics can enhance the reliability and timeliness of sampling process evaluations, helping to spot trends and anomalies early.

When should vendor qualifications be reassessed?

Vendor qualifications should be reassessed whenever there are significant changes in material sourcing, processes, or if a vendor has a history of quality issues.

What documentation is critical for regulatory audits?

Critical documentation includes sampling methods, OOS investigation records, CAPA documentation, vendor qualifications, and batch production records.

How often should sampling methods be reviewed?

Sampling methods should undergo regular reviews to ensure they align with current best practices, regulatory requirements, and manufacturing parameters.

Conclusion

Addressing non-risk-based sampling plans necessitates a well-structured approach, incorporating containment, thorough investigation processes, and robust corrective actions. By adhering to these best practices and employing effective control strategies, quality professionals can mitigate risks associated with raw material sampling, reinforce compliance, and enhance overall product quality.