Sampling plan not risk-based during internal audit – CAPA to prevent recurrence


Published on 26/04/2026

Addressing Non-Risk-Based Sampling Plans Identified During Internal Audits

In pharmaceutical manufacturing, the integrity of raw material sampling is critical for ensuring product quality and regulatory compliance. Instances where internal audits reveal non-risk-based sampling plans can lead to significant regulatory concerns and potential product quality issues. Understanding how to effectively investigate and address these discrepancies is essential for maintaining compliance and minimizing risk.

This article provides a structured approach to conducting an investigation when a non-risk-based raw material sampling plan is identified during an internal audit. Readers will learn how to identify symptoms, assess likely causes, implement containment actions, and develop a robust CAPA strategy to prevent recurrence.

Symptoms/Signals on the Floor or in the Lab

During internal audits, several symptoms may indicate that a raw material sampling plan is not based on risk. These include:

  • Inconsistent Sampling Procedures: Variations in sampling methods across raw materials without a risk-based justification.
  • High Rate of Deviations: Increased occurrences of out-of-specification (OOS) results that correlate with specific suppliers or materials.
  • Supplier Audit Findings:
Identified lapses in vendor qualifications indicating insufficient supplier control over raw materials.
  • Unexpected Failures: Emergence of defects in finished products linked with non-compliant raw materials, leading to field complaints.
  • Identifying these signals early is crucial, as they can escalate into major compliance issues if not managed properly. A proactive approach to assessing raw material quality hinges on an effective risk-based sampling plan.

    Likely Causes

    When analyzing the failure of a sampling plan during an internal audit, it’s important to categorize likely causes based on the “5Ms:” Materials, Method, Machine, Man, Measurement, and Environment.

    Category Likely Causes
    Materials Lack of documentation on material specifications or insufficient vendor qualification procedures.
    Method Use of outdated or inadequate sampling methods that don’t align with current risk assessments.
    Machine Malfunctioning equipment that might skew sampling results (e.g., improper weighing scales).
    Man Inadequate training on sampling standards or human errors in execution.
    Measurement Inconsistent measurement techniques or lack of calibration logs for measuring devices.
    Environment Improper storage conditions affecting material integrity and skewing sampling results.

    By categorizing the issues, organizations can better target their investigations to determine the root causes of any deficiencies in the sampling plan.

    Immediate Containment Actions (first 60 minutes)

    Upon identification of a non-risk-based sampling plan, immediate containment actions should be initiated as follows:

    1. Cease Sampling: Halt all ongoing sampling activities related to implicated materials or suppliers.
    2. Notify Relevant Stakeholders: Inform all key personnel, including Quality Assurance (QA), Quality Control (QC), and Manufacturing teams.
    3. Assess Material Quarantine: Place affected materials on hold until a thorough investigation can be conducted.
    4. Initial Documentation: Record the initial findings and symptoms observed during the audit for future reference.
    5. Communication Plan: Establish a communication plan to keep all stakeholders updated on the investigation’s progress.

    These actions are essential for containing any potential quality issues and protecting the organization from further risk while a thorough investigation is conducted.

    Investigation Workflow (data to collect + how to interpret)

    The investigation workflow should be systematic, focusing on collecting relevant data for analysis. Consider the following steps:

    1. Collect Sampling Records: Review all historical sampling records related to the materials in question.
    2. Assess Supplier Compliance: Gather vendor qualification data, including previous audit reports and quality agreements.
    3. Review Training Records: Check the training records of personnel involved in the sampling process to identify any gaps.
    4. Analyze OOS Results: Document and analyze all occurrences of OOS results linked to the sampling strategy.
    5. Identify Environmental Factors: Examine logs for storage and environmental conditions affecting materials during the sampling process.

    Through thorough data collection, patterns and trends may emerge that will guide the interpretation of root causes and direct subsequent corrective actions.

    Root Cause Tools

    Effective identification of root causes relies on the appropriate application of various quality tools. Here we’ll explore three methodologies:

    • 5-Why Analysis: This technique explores the underlying reasons for a problem by asking “why” successively until the root cause is identified. Typically used for straightforward issues where the causation is not deeply layered.
    • Fishbone (Ishikawa) Diagrams: Useful for visualizing the interconnection of potential causes across categories. Particularly effective in complex scenarios with multiple factors contributing to the problem.
    • Fault Tree Analysis: A top-down method that allows for a structured examination of the relationships between events leading to a failure. This is beneficial when multiple pathways can lead to the same critical failure.

    Choosing the right tool depends on the investigation’s complexity and the specific nature of the issues identified.

    CAPA Strategy

    Once the root cause has been established, a comprehensive CAPA must be designed. This should include:

    • Correction: Take immediate action to address the identified non-compliance (e.g., retrain personnel, update sampling protocols).
    • Corrective Action: Implement changes to prevent recurrence, such as revising the sampling plan to align with risk-based principles and conducting a full supplier re-evaluation.
    • Preventive Action: Establish procedures for ongoing monitoring and ensure future audits evaluate sampling plans against defined risk criteria.

    Documenting these actions clearly is essential in supporting the case for compliance and demonstrating commitment to continuous improvement.

    Related Reads

    Control Strategy & Monitoring

    To ensure long-term compliance and prevent the reoccurrence of sampling errors, a robust control strategy is necessary. Consider the following:

    • Statistical Process Control (SPC): Implement SPC methodologies to monitor variances in raw material quality and sampling practices continually.
    • Regular Sampling Reviews: Establish quarterly reviews of sampling plans and related deviations to ensure they remain appropriate and risk-based.
    • Alarm Systems: Set up automated alarms to flag deviations from standard sampling protocols or unexpected OOS results.
    • Verification Processes: Schedule periodic evaluations of both suppliers and internal procedures to ensure compliance with established quality standards.

    By embedding control measures within the operations framework, organizations can significantly enhance their ability to detect future discrepancies early.

    Validation / Re-qualification / Change Control impact

    Involvement of validation and change control processes is essential when implementing modifications to a sampling plan. Key aspects include:

    • Validation Needs: Assess whether new sampling methods require validation under current GMP standards.
    • Re-qualification of Equipment: If methods have changed, ensure that all equipment involved in the sampling process is re-qualified and validated.
    • Change Control Protocols: Apply rigorous change control procedures to document and justify any updates to the raw material sampling plan.

    Understanding the validation landscape is vital, as modifications to protocols carry regulatory implications that must be accounted for throughout the investigation.

    Inspection Readiness: what evidence to show

    Prior to any regulatory inspection, it is prudent to ensure all documentation and evidence are in alignment. This includes:

    • Records of Deviations: Clearly documented instances of sampling plan failures and corrective actions taken.
    • Training Logs: Evidence of training provided to staff regarding updated sampling procedures.
    • Audit Reports: Completed internal audit documentation demonstrating ongoing assessment of compliance.
    • Quality Agreements: Updated vendor qualification agreements reflecting the revised sampling standards.

    Maintaining comprehensive records not only supports inspection readiness but also serves as a valuable resource for continuous improvement initiatives going forward.

    FAQs

    1. What is a risk-based sampling plan?

    A risk-based sampling plan is designed using risk assessment methodologies to determine the appropriate sampling frequency and method based on the supplier’s performance and material characteristics.

    2. How do I identify vendor qualification lapses?

    Vendor qualification lapses can typically be identified through supplier audit reports, historical quality data, and deviations related to specific materials.

    3. What should I do if an OOS result is linked to material sampling?

    If an OOS result is linked to material sampling, initiate an immediate investigation, contain the material, and assess the sampling methods used.

    4. How often should internal audits of sampling plans be conducted?

    Internal audits should ideally be conducted at least annually, but more frequent audits may be warranted based on risk assessments and supplier performance.

    5. What are common training gaps that may lead to sampling errors?

    Common gaps include insufficient training on sampling procedures, lack of knowledge about regulatory requirements, and outdated training content related to new methods.

    6. What records are essential for regulatory inspection readiness?

    Essential records include training logs, quality agreements with suppliers, sampling and testing records, and documentation of corrective actions taken.

    7. What is the importance of environmental controls in sampling?

    Environmental controls ensure that the conditions under which materials are sampled and stored do not compromise their integrity, impacting product quality.

    8. How can SPC enhance the quality of sampling plans?

    SPC can detect variability in sampling processes, enabling early intervention to mitigate the risk of noncompliance and improve overall quality assurance.

    Pharma Tip:  Cross-contamination during sampling during internal audit – CAPA to prevent recurrence