Cloud Infrastructure and FDA Compliance

By Bruce Maches

May 5, 2010

In my first blog entry I provided background on some of the issues life sciences companies are facing and the potential for cloud computing in dealing with these challenges. In my previous blog entry I provided a high level overview of the extensive system validation and verification process required by the FDA regulatory guidelines. This entry will focus on the infrastructure services side of cloud computing. I will also discuss how the aspects of public versus private cloud impacts the approach for implementing cloud computing in the life sciences. I have already received feedback from a number of you and the regulatory compliance topic seems to be of the most interest so I will focus my next few entries on cloud services and FDA compliance.
 
As mentioned in my prior post, CFR 21 Part 11 validation is a basic fact of life for FDA regulated companies. While my focus is and will continue to be on the life sciences, the FDA also provides the regulatory framework that food and cosmetics companies must adhere to. Many of the challenges faced by these companies are the same that life science companies are dealing with. This includes such items as product recalls, lot traceability, clinical testing studies, and managing product manufacturing.
 
So – how does the cloud infrastructure paradigm align with the FDA regulatory compliance model? Part 11 validation outcome is all about ensuring system quality and to be able to trust that the system in question was installed, operates, and performs correctly. Keep in mind that the FDA, like similar regulatory bodies, doesn’t tell you ‘this is how you must do things’ what they do is state ‘this is what needs to be done’ and it is up to you to prove that you are meeting the guidelines as stated. If you went to the FDA and said ‘we want to leverage cloud for this new system we are implementing’ they would not tell you how to do it and if it would be accepted or not. They would simply point to CFR 21 Part 11 and say ‘if you meet those standards it is acceptable’. That is not something you want to gamble on after investing significant funds in a new cloud based system that must be validated.
 
Since the Installation Qualification (IQ) document covers the infrastructure piece we can concentrate on how to support IQ validation requirements while attempting to utilize cloud based infrastructure and the differences between private and public environments.
 
An IQ document contains a complete set of detailed information on the hardware environment, the underlying software (from OS to application) and instructions on how to install the system from out of the box. A significant amount of this information is captured simply to avoid the risk of failing an audit and these procedures were originated prior to the advent of cloud computing. Some of the items recorded as part of the IQ script normally include:
 
• Hardware serial number
• System configuration
• Equipment location
• Exact versions off all installed software
 
Of course you can see that with public cloud services there are already some issues. In a public cloud offering there is no way to know the detailed information on the hardware and software that your system will be running on or even the exact location of the system itself. In the current way of approaching the IQ validation process, public cloud computing is just not a viable option for these types of applications. Until regulatory auditors can handle not knowing the hardware configuration and location it is just too big a risk to attempt to put a validated application into the public cloud and hope you can pass any potential regulatory audit. That doesn’t mean that a life science company couldn’t use public cloud provisioned infrastructure for non-validated applications and many are doing so now.
 
Now for private cloud the situation can be different if, and it is a big if, the provider of the public cloud is willing to go through the time and expense to pre-validate their entire environment prior to loading any real applications. This would mean creating and executing an IQ document for each server/OS configuration installed in the private cloud. While this sounds like a lot of work, it would be manageable if the private cloud environment were to be completely homogenous from both a hardware and system software standpoint. You would create one IQ document template and execute it for each separate server being installed. This way you could record the hardware information and software installation configuration for every machine. The drawback to this is that every potential user of this validated environment would need their applications to fit into this ‘one size fits all’ offering limiting its appeal to potential clients.
 
Another approach would be to create a certain base level of validation for the private cloud environment. In other words, validate the hardware piece and common software components through the IQ process. The data center operator could then create pre-qualified machine images with all of the supporting documentation which could then be ordered by the client to fit their particular needs. These machine images could include various operating systems, database engines or other supporting software. These would have been through a qualification process meaning that most of the IQ portion is complete with only minor client unique portions remaining. A client could then pick the most appropriate machine image for their needs with supporting documentation and most of the IQ complete. They would then only need to go through the IQ process for those pieces necessary to meet their specific needs.  
 
So – in a nutshell, the public cloud model just does not fit, at this time, the current practices for validation in FDA regulated companies. However the private cloud environment could be leveraged to provide life science companies with a short-cut to completing overall system validation. Any cloud infrastructure provider willing to put in the up-front effort will find they have a solution that would be very appealing to FDA regulated companies looking to be more efficient with their IT dollars. I am actually in the process of starting this effort with a large managed services provider and will keep you updated on how it works out.
 
In my next entry I will discuss how infrastructure as a service can be used to lower costs and increase speed to market for life science companies. I will also provide some examples of what is being done currently in the industry.
 
Feel free to contact me at [email protected]

Subscribe to HPCwire's Weekly Update!

Be the most informed person in the room! Stay ahead of the tech trends with industry updates delivered to you every week!

Empowering High-Performance Computing for Artificial Intelligence

April 19, 2024

Artificial intelligence (AI) presents some of the most challenging demands in information technology, especially concerning computing power and data movement. As a result of these challenges, high-performance computing Read more…

Kathy Yelick on Post-Exascale Challenges

April 18, 2024

With the exascale era underway, the HPC community is already turning its attention to zettascale computing, the next of the 1,000-fold performance leaps that have occurred about once a decade. With this in mind, the ISC Read more…

2024 Winter Classic: Texas Two Step

April 18, 2024

Texas Tech University. Their middle name is ‘tech’, so it’s no surprise that they’ve been fielding not one, but two teams in the last three Winter Classic cluster competitions. Their teams, dubbed Matador and Red Read more…

2024 Winter Classic: The Return of Team Fayetteville

April 18, 2024

Hailing from Fayetteville, NC, Fayetteville State University stayed under the radar in their first Winter Classic competition in 2022. Solid students for sure, but not a lot of HPC experience. All good. They didn’t Read more…

Software Specialist Horizon Quantum to Build First-of-a-Kind Hardware Testbed

April 18, 2024

Horizon Quantum Computing, a Singapore-based quantum software start-up, announced today it would build its own testbed of quantum computers, starting with use of Rigetti’s Novera 9-qubit QPU. The approach by a quantum Read more…

2024 Winter Classic: Meet Team Morehouse

April 17, 2024

Morehouse College? The university is well-known for their long list of illustrious graduates, the rigor of their academics, and the quality of the instruction. They were one of the first schools to sign up for the Winter Read more…

Kathy Yelick on Post-Exascale Challenges

April 18, 2024

With the exascale era underway, the HPC community is already turning its attention to zettascale computing, the next of the 1,000-fold performance leaps that ha Read more…

Software Specialist Horizon Quantum to Build First-of-a-Kind Hardware Testbed

April 18, 2024

Horizon Quantum Computing, a Singapore-based quantum software start-up, announced today it would build its own testbed of quantum computers, starting with use o Read more…

MLCommons Launches New AI Safety Benchmark Initiative

April 16, 2024

MLCommons, organizer of the popular MLPerf benchmarking exercises (training and inference), is starting a new effort to benchmark AI Safety, one of the most pre Read more…

Exciting Updates From Stanford HAI’s Seventh Annual AI Index Report

April 15, 2024

As the AI revolution marches on, it is vital to continually reassess how this technology is reshaping our world. To that end, researchers at Stanford’s Instit Read more…

Intel’s Vision Advantage: Chips Are Available Off-the-Shelf

April 11, 2024

The chip market is facing a crisis: chip development is now concentrated in the hands of the few. A confluence of events this week reminded us how few chips Read more…

The VC View: Quantonation’s Deep Dive into Funding Quantum Start-ups

April 11, 2024

Yesterday Quantonation — which promotes itself as a one-of-a-kind venture capital (VC) company specializing in quantum science and deep physics  — announce Read more…

Nvidia’s GTC Is the New Intel IDF

April 9, 2024

After many years, Nvidia's GPU Technology Conference (GTC) was back in person and has become the conference for those who care about semiconductors and AI. I Read more…

Google Announces Homegrown ARM-based CPUs 

April 9, 2024

Google sprang a surprise at the ongoing Google Next Cloud conference by introducing its own ARM-based CPU called Axion, which will be offered to customers in it Read more…

Nvidia H100: Are 550,000 GPUs Enough for This Year?

August 17, 2023

The GPU Squeeze continues to place a premium on Nvidia H100 GPUs. In a recent Financial Times article, Nvidia reports that it expects to ship 550,000 of its lat Read more…

Synopsys Eats Ansys: Does HPC Get Indigestion?

February 8, 2024

Recently, it was announced that Synopsys is buying HPC tool developer Ansys. Started in Pittsburgh, Pa., in 1970 as Swanson Analysis Systems, Inc. (SASI) by John Swanson (and eventually renamed), Ansys serves the CAE (Computer Aided Engineering)/multiphysics engineering simulation market. Read more…

Intel’s Server and PC Chip Development Will Blur After 2025

January 15, 2024

Intel's dealing with much more than chip rivals breathing down its neck; it is simultaneously integrating a bevy of new technologies such as chiplets, artificia Read more…

Choosing the Right GPU for LLM Inference and Training

December 11, 2023

Accelerating the training and inference processes of deep learning models is crucial for unleashing their true potential and NVIDIA GPUs have emerged as a game- Read more…

Baidu Exits Quantum, Closely Following Alibaba’s Earlier Move

January 5, 2024

Reuters reported this week that Baidu, China’s giant e-commerce and services provider, is exiting the quantum computing development arena. Reuters reported � Read more…

Comparing NVIDIA A100 and NVIDIA L40S: Which GPU is Ideal for AI and Graphics-Intensive Workloads?

October 30, 2023

With long lead times for the NVIDIA H100 and A100 GPUs, many organizations are looking at the new NVIDIA L40S GPU, which it’s a new GPU optimized for AI and g Read more…

Shutterstock 1179408610

Google Addresses the Mysteries of Its Hypercomputer 

December 28, 2023

When Google launched its Hypercomputer earlier this month (December 2023), the first reaction was, "Say what?" It turns out that the Hypercomputer is Google's t Read more…

AMD MI3000A

How AMD May Get Across the CUDA Moat

October 5, 2023

When discussing GenAI, the term "GPU" almost always enters the conversation and the topic often moves toward performance and access. Interestingly, the word "GPU" is assumed to mean "Nvidia" products. (As an aside, the popular Nvidia hardware used in GenAI are not technically... Read more…

Leading Solution Providers

Contributors

Shutterstock 1606064203

Meta’s Zuckerberg Puts Its AI Future in the Hands of 600,000 GPUs

January 25, 2024

In under two minutes, Meta's CEO, Mark Zuckerberg, laid out the company's AI plans, which included a plan to build an artificial intelligence system with the eq Read more…

China Is All In on a RISC-V Future

January 8, 2024

The state of RISC-V in China was discussed in a recent report released by the Jamestown Foundation, a Washington, D.C.-based think tank. The report, entitled "E Read more…

Shutterstock 1285747942

AMD’s Horsepower-packed MI300X GPU Beats Nvidia’s Upcoming H200

December 7, 2023

AMD and Nvidia are locked in an AI performance battle – much like the gaming GPU performance clash the companies have waged for decades. AMD has claimed it Read more…

Nvidia’s New Blackwell GPU Can Train AI Models with Trillions of Parameters

March 18, 2024

Nvidia's latest and fastest GPU, codenamed Blackwell, is here and will underpin the company's AI plans this year. The chip offers performance improvements from Read more…

DoD Takes a Long View of Quantum Computing

December 19, 2023

Given the large sums tied to expensive weapon systems – think $100-million-plus per F-35 fighter – it’s easy to forget the U.S. Department of Defense is a Read more…

Eyes on the Quantum Prize – D-Wave Says its Time is Now

January 30, 2024

Early quantum computing pioneer D-Wave again asserted – that at least for D-Wave – the commercial quantum era has begun. Speaking at its first in-person Ana Read more…

GenAI Having Major Impact on Data Culture, Survey Says

February 21, 2024

While 2023 was the year of GenAI, the adoption rates for GenAI did not match expectations. Most organizations are continuing to invest in GenAI but are yet to Read more…

The GenAI Datacenter Squeeze Is Here

February 1, 2024

The immediate effect of the GenAI GPU Squeeze was to reduce availability, either direct purchase or cloud access, increase cost, and push demand through the roof. A secondary issue has been developing over the last several years. Even though your organization secured several racks... Read more…

  • arrow
  • Click Here for More Headlines
  • arrow
HPCwire