Negotiating IT in the FDA Regulatory Environment

By Bruce Maches

April 26, 2010

All life science, food product, and cosmetic companies in the US must operate under the regulatory framework put forth by the Food & Drug Administration. In my first blog entry I briefly touched upon the subject of FDA regulatory compliance. This blog entry will dive deeper into this topic to give you a much clearer understanding of the regulatory environment that life sciences companies must labor under and what the IT groups in those organizations must deal with from a compliance standpoint. I will then discuss how this impacts the advance of cloud computing in life science companies along with some examples of current uses in my next entry.

Every life science company, whether bio-tech, big pharma or medical device, must navigate a complex sea of regulations, recommended practices and government mandates as part of their normal business activities. This can include SOX (for public companies) HIPPA2 (patient privacy for electronic records) and numerous FDA regulatory guidelines. All life science companies have some sort of internal regulatory affairs function that ensures FDA compliance across the entire organization focusing on research/laboratory practices, manufacturing processes, clinical trials, and the IT organization. The primary driver for IT regulatory practices that I will focus on is CFR 21 Part 11. One clarifying comment, the FDA, like many other regulatory bodies does not issue standards; instead it provides guidelines on what must be done to be considered compliant but not on the execution of how it is accomplished.

In a nutshell the Code for Federal Regulations 21 Part 11 defines how life science companies implement system controls, including audits, validation & verification processes, electronic signatures, and documentation for software and systems involved in processing electronic records. This primarily applies to systems dealing with research, drug development, manufacturing, clinical trials, regulatory submissions but not common systems such as the companies financial or HR applications. Part 11 compliance is done through an intensive validation process involving three primary steps which I will describe shortly. All of this effort is to ensure that processing activity and electronic records for a particular system are accurate and can be trusted. In addition the overall IT compliance environment includes the system support and maintenance procedures along with verifying that the personnel managing the system have the requisite skills and training to properly do so.

The key word here is trust – if I am an FDA auditor how do I know I can trust the operation and output of a particular system? Keep in mind that if you cannot prove something then to an auditor is did not happen. The actual Part 11 compliance process for any application includes the hardware, software and operational environment for the system itself. This allows an IT group to answer the questions:

Can I prove the system was installed correctly?

Can I prove the system is operating correctly?

Can I prove the system is performing correctly to meet the stated user requirements?

To prove these three things the system validation process has three primary components, the Installation Qualification (IQ), the Operational Qualification (OQ) and the Performance Qualification (PQ) scripts. These are extremely detailed documents laying out the individual steps involved in performing these three tasks. Each step has an expected outcome (i.e. click on OK and the dialog box disappears) which must be handwritten in, each line item initialed and every page signed. To give you an idea on how lengthy this process can be I recently installed an off the shelf document management package with no customization for a bio-tech client. The IQ document was a 1 inch stack of paper, the OQ filled two 3 inch binders, and the PQ was 2 inches of paper. I know this sounds quite exhausting but it is the process by which an auditor can be assured that the work was correctly done per spec. Any issues encountered during the execution of the scripts must be documented as deviations and then resolved with supporting information. In performing the IQ script, one of the standard pieces of information recorded is the model, type, configuration, and serial number of the computer on which the software is being installed which may not be applicable in a cloud computing environment.

I hope I haven’t bored you with all of the details but I wanted to give you more background on the environment in which FDA regulated companies must exist.

So the big question is how does this impact the acceptance of cloud computing based applications in life science companies? In my next blog entry I will discuss some of these questions:

How does the FDA currently view the use of cloud technologies?

Does the use of private vs. public cloud services affect Part 11 compliance?

Does the type of cloud service (IaaS, PaaS, and SaaS) being used impact the validation process?

What current examples are there of life science companies using cloud technologies?

How can cloud help life science companies deal with their inventory of legacy validated systems?
 

Subscribe to HPCwire's Weekly Update!

Be the most informed person in the room! Stay ahead of the tech trends with industy updates delivered to you every week!

NSF Project Sets Up First Machine Learning Cyberinfrastructure – CHASE-CI

July 25, 2017

Earlier this month, the National Science Foundation issued a $1 million grant to Larry Smarr, director of Calit2, and a group of his colleagues to create a community infrastructure in support of machine learning research Read more…

By John Russell

DARPA Continues Investment in Post-Moore’s Technologies

July 24, 2017

The U.S. military long ago ceded dominance in electronics innovation to Silicon Valley, the DoD-backed powerhouse that has driven microelectronic generation for decades. With Moore's Law clearly running out of steam, the Read more…

By George Leopold

Graphcore Readies Launch of 16nm Colossus-IPU Chip

July 20, 2017

A second $30 million funding round for U.K. AI chip developer Graphcore sets up the company to go to market with its “intelligent processing unit” (IPU) in 2017 with scale-up production for enterprise datacenters and Read more…

By Tiffany Trader

HPE Extreme Performance Solutions

HPE Servers Deliver High Performance Remote Visualization

Whether generating seismic simulations, locating new productive oil reservoirs, or constructing complex models of the earth’s subsurface, energy, oil, and gas (EO&G) is a highly data-driven industry. Read more…

Trinity Supercomputer’s Haswell and KNL Partitions Are Merged

July 19, 2017

Trinity supercomputer’s two partitions – one based on Intel Xeon Haswell processors and the other on Xeon Phi Knights Landing – have been fully integrated are now available for use on classified work in the Nationa Read more…

By HPCwire Staff

NSF Project Sets Up First Machine Learning Cyberinfrastructure – CHASE-CI

July 25, 2017

Earlier this month, the National Science Foundation issued a $1 million grant to Larry Smarr, director of Calit2, and a group of his colleagues to create a comm Read more…

By John Russell

Graphcore Readies Launch of 16nm Colossus-IPU Chip

July 20, 2017

A second $30 million funding round for U.K. AI chip developer Graphcore sets up the company to go to market with its “intelligent processing unit” (IPU) in Read more…

By Tiffany Trader

Fujitsu Continues HPC, AI Push

July 19, 2017

Summer is well under way, but the so-called summertime slowdown, linked with hot temperatures and longer vacations, does not seem to have impacted Fujitsu's out Read more…

By Tiffany Trader

Researchers Use DNA to Store and Retrieve Digital Movie

July 18, 2017

From abacus to pencil and paper to semiconductor chips, the technology of computing has always been an ever-changing target. The human brain is probably the com Read more…

By John Russell

The Exascale FY18 Budget – The Next Step

July 17, 2017

On July 12, 2017, the U.S. federal budget for its Exascale Computing Initiative (ECI) took its next step forward. On that day, the full Appropriations Committee Read more…

By Alex R. Larzelere

Women in HPC Luncheon Shines Light on Female-Friendly Hiring Practices

July 13, 2017

The second annual Women in HPC luncheon was held on June 20, 2017, during the International Supercomputing Conference in Frankfurt, Germany. The luncheon provid Read more…

By Tiffany Trader

Satellite Advances, NSF Computation Power Rapid Mapping of Earth’s Surface

July 13, 2017

New satellite technologies have completely changed the game in mapping and geographical data gathering, reducing costs and placing a new emphasis on time series Read more…

By Ken Chiacchia and Tiffany Jolley

Intel Skylake: Xeon Goes from Chip to Platform

July 13, 2017

With yesterday’s New York unveiling of the new “Skylake” Xeon Scalable processors, Intel made multiple runs at multiple competitive threats and strategic Read more…

By Doug Black

Google Pulls Back the Covers on Its First Machine Learning Chip

April 6, 2017

This week Google released a report detailing the design and performance characteristics of the Tensor Processing Unit (TPU), its custom ASIC for the inference Read more…

By Tiffany Trader

Nvidia Responds to Google TPU Benchmarking

April 10, 2017

Nvidia highlights strengths of its newest GPU silicon in response to Google's report on the performance and energy advantages of its custom tensor processor. Read more…

By Tiffany Trader

Quantum Bits: D-Wave and VW; Google Quantum Lab; IBM Expands Access

March 21, 2017

For a technology that’s usually characterized as far off and in a distant galaxy, quantum computing has been steadily picking up steam. Just how close real-wo Read more…

By John Russell

HPC Compiler Company PathScale Seeks Life Raft

March 23, 2017

HPCwire has learned that HPC compiler company PathScale has fallen on difficult times and is asking the community for help or actively seeking a buyer for its a Read more…

By Tiffany Trader

Trump Budget Targets NIH, DOE, and EPA; No Mention of NSF

March 16, 2017

President Trump’s proposed U.S. fiscal 2018 budget issued today sharply cuts science spending while bolstering military spending as he promised during the cam Read more…

By John Russell

CPU-based Visualization Positions for Exascale Supercomputing

March 16, 2017

In this contributed perspective piece, Intel’s Jim Jeffers makes the case that CPU-based visualization is now widely adopted and as such is no longer a contrarian view, but is rather an exascale requirement. Read more…

By Jim Jeffers, Principal Engineer and Engineering Leader, Intel

Nvidia’s Mammoth Volta GPU Aims High for AI, HPC

May 10, 2017

At Nvidia's GPU Technology Conference (GTC17) in San Jose, Calif., this morning, CEO Jensen Huang announced the company's much-anticipated Volta architecture a Read more…

By Tiffany Trader

Facebook Open Sources Caffe2; Nvidia, Intel Rush to Optimize

April 18, 2017

From its F8 developer conference in San Jose, Calif., today, Facebook announced Caffe2, a new open-source, cross-platform framework for deep learning. Caffe2 is the successor to Caffe, the deep learning framework developed by Berkeley AI Research and community contributors. Read more…

By Tiffany Trader

Leading Solution Providers

How ‘Knights Mill’ Gets Its Deep Learning Flops

June 22, 2017

Intel, the subject of much speculation regarding the delayed, rewritten or potentially canceled “Aurora” contract (the Argonne Lab part of the CORAL “ Read more…

By Tiffany Trader

Reinders: “AVX-512 May Be a Hidden Gem” in Intel Xeon Scalable Processors

June 29, 2017

Imagine if we could use vector processing on something other than just floating point problems.  Today, GPUs and CPUs work tirelessly to accelerate algorithms Read more…

By James Reinders

Russian Researchers Claim First Quantum-Safe Blockchain

May 25, 2017

The Russian Quantum Center today announced it has overcome the threat of quantum cryptography by creating the first quantum-safe blockchain, securing cryptocurrencies like Bitcoin, along with classified government communications and other sensitive digital transfers. Read more…

By Doug Black

MIT Mathematician Spins Up 220,000-Core Google Compute Cluster

April 21, 2017

On Thursday, Google announced that MIT math professor and computational number theorist Andrew V. Sutherland had set a record for the largest Google Compute Engine (GCE) job. Sutherland ran the massive mathematics workload on 220,000 GCE cores using preemptible virtual machine instances. Read more…

By Tiffany Trader

Google Debuts TPU v2 and will Add to Google Cloud

May 25, 2017

Not long after stirring attention in the deep learning/AI community by revealing the details of its Tensor Processing Unit (TPU), Google last week announced the Read more…

By John Russell

Groq This: New AI Chips to Give GPUs a Run for Deep Learning Money

April 24, 2017

CPUs and GPUs, move over. Thanks to recent revelations surrounding Google’s new Tensor Processing Unit (TPU), the computing world appears to be on the cusp of Read more…

By Alex Woodie

Six Exascale PathForward Vendors Selected; DoE Providing $258M

June 15, 2017

The much-anticipated PathForward awards for hardware R&D in support of the Exascale Computing Project were announced today with six vendors selected – AMD Read more…

By John Russell

Top500 Results: Latest List Trends and What’s in Store

June 19, 2017

Greetings from Frankfurt and the 2017 International Supercomputing Conference where the latest Top500 list has just been revealed. Although there were no major Read more…

By Tiffany Trader

  • arrow
  • Click Here for More Headlines
  • arrow
Share This