Pharmaceutical quality system tool · Africa and India

QMS Documentation Master Index

A practical, risk-based inventory of the controlled documents and records used to establish, operate and improve a pharmaceutical manufacturing site.

Current-status note

Requirements checked to 20 October 2026.

PIC/S: PE 009-18 is the current GMP Guide and took effect on 24 September 2026.

Validation: PIC/S PI 006-4, the revised recommendations on qualification and validation, took effect on 1 October 2026.

European Union: the revised Chapter 4 and Annex 11 texts published in July 2025 remain consultation drafts; they are useful future-direction signals, not current binding text.

India: the revised Schedule M is the operating baseline after the limited small/medium-manufacturer extension ended on 31 December 2025. Product, licence and category-specific applicability still requires verification.

Use the tool correctly

An inventory and gap-assessment framework—not a ready-made SOP package.

Each row represents a control family that a manufacturing site should assess. It does not mean every site needs a separate document with that exact title. The right structure follows products, processes, technologies, licences, people and risk.

Africa is not one legal jurisdiction. Apply the requirements of each national authority, intended export market and procurement programme. In India, apply the current Drugs Rules, revised Schedule M, licence conditions and relevant central, state and product requirements.

Document architecture

Keep governance, instructions and evidence connected.

Level 1

Governance

Quality policy and manual, Site Master File, quality objectives, Validation Master Plan and management-review framework.

Level 2

System controls

SOPs, programmes, plans, agreements and standards that define how the pharmaceutical quality system operates.

Level 3

Operational instructions

Master formulae, batch and packaging instructions, specifications, methods, protocols and work instructions.

Level 4

Objective evidence

Forms, registers, logbooks, raw data, executed records, reports, trends and approved decisions.

External layer: keep legislation, GMP guides, pharmacopoeias, product registrations, engineering standards and customer commitments under controlled external-document monitoring.

Interactive implementation tool

Search the master document inventory.

Treat each row as a document family to assess—not a command to create a separate SOP. Combine documents where responsibilities and evidence remain clear, and add product, market and site-specific controls where your risk assessment requires them.

142document families
13system areas
98core GMP families
2026requirements review

142 document families shown

Requirements and practice reviewed 20 October 2026.

IndexDocument familyType / ownerApplicabilityMinimum controlled evidencePrimary basis
GOV-001Governance and pharmaceutical quality systemQuality policyPolicySenior management / QACore GMPApproved policy, communication and periodic suitability reviewPIC/S Ch. 1–2; ICH Q10
GOV-002Governance and pharmaceutical quality systemQuality manual or equivalent PQS descriptionManualHead of QualityCore GMPScope, process map, governance, responsibilities and interfacesPIC/S 1.7; ICH Q10
GOV-003Governance and pharmaceutical quality systemSite Master FileMaster fileQACore GMPCurrent description of site, operations and GMP controlsPIC/S Ch. 4; WHO TRS 961 Annex 14
GOV-004Governance and pharmaceutical quality systemQuality objectives and performance indicatorsPlan / registerSenior management / QACore GMPApproved objectives, measures, owners, targets and follow-upICH Q10; PIC/S Ch. 1
GOV-005Governance and pharmaceutical quality systemManagement review procedure and agendaSOPSenior management / QACore GMPInputs, frequency, decisions, resources, actions and minutesPIC/S 1.6; WHO data integrity
GOV-006Governance and pharmaceutical quality systemOrganisation chart and quality-unit independenceControlled chartHR / QACore GMPNamed roles, reporting lines, deputies and approvalPIC/S Ch. 2; WHO GMP
GOV-007Governance and pharmaceutical quality systemQuality governance committees and escalation pathwayCharter / SOPSenior management / QARisk-basedTerms of reference, quorum, escalation criteria and minutesICH Q10; ICH Q9(R1)
GOV-008Governance and pharmaceutical quality systemQuality risk management systemSOP / registerQACore GMPRisk method, facilitators, register, review and risk acceptanceICH Q9(R1); PIC/S Ch. 1
GOV-009Governance and pharmaceutical quality systemQuality culture and data-integrity governance programmePolicy / programmeSenior management / QACore GMPAccountability, reporting channels, resourcing, metrics and reviewWHO TRS 1033 Annex 4; PIC/S PI 041-1
GOV-010Governance and pharmaceutical quality systemAnnual Product Quality Review / Product Quality ReviewSOP / reportQACore GMPApproved review, trend conclusions, CAPA and management decisionsPIC/S 1.10; WHO GMP
GOV-011Governance and pharmaceutical quality systemQuality-system effectiveness reviewProtocol / reportQARisk-basedProcess performance, recurring issues, maturity and improvement planICH Q10; PIC/S Ch. 1
DOC-001Document control and data governanceDocument and record controlSOPQA DocumentationCore GMPCreation, review, approval, issue, change, withdrawal, archive and disposalPIC/S Ch. 4; WHO GMP
DOC-002Document control and data governanceQMS document master indexRegisterQA DocumentationCore GMPCurrent document identity, owner, revision, status, effective date and locationPIC/S 4.32
DOC-003Document control and data governanceDocument numbering and taxonomyStandard / SOPQA DocumentationCore GMPUnique identification rules for policies, SOPs, forms, masters and recordsPIC/S 4.3
DOC-004Document control and data governanceTemplate and master-form controlSOP / registerQA DocumentationCore GMPApproved masters, issuance, reconciliation, access and obsolescence controlsPIC/S 4.1–4.6; WHO data integrity
DOC-005Document control and data governanceGood documentation practicesSOPQACore GMPALCOA+, entries, corrections, signatures, blanks, attachments and reviewPIC/S 4.7–4.9; WHO TRS 1033 Annex 4
DOC-006Document control and data governanceRecord retention and archival schedulePolicy / scheduleQA / Legal / ITCore GMPRecord class, trigger, minimum period, media, owner and dispositionPIC/S 4.10–4.12; national law
DOC-007Document control and data governanceControlled-copy issuance and reconciliationSOP / logQA DocumentationCore GMPCopy number, holder, issue, return, replacement and destructionPIC/S Ch. 4
DOC-008Document control and data governanceExternal standards and regulatory-document controlSOP / registerRegulatory / QACore GMPSource, version, applicability, change monitoring and impact assessmentPIC/S Ch. 4; ICH Q10
DOC-009Document control and data governanceData governance framework and data-flow mapsPolicy / mapQA / IT / Process ownersCore GMPCritical data, creation, processing, review, transfer, storage and destructionWHO TRS 1033 Annex 4; PIC/S PI 041-1
DOC-010Document control and data governanceElectronic signatures and identity attributionSOPQA / ITConditionalIdentity proofing, signature meaning, linkage, revocation and reviewEU Annex 11; 21 CFR Part 11
DOC-011Document control and data governanceScanning, true copies and certified-copy controlsSOPQA Documentation / ITConditionalVerification, metadata, legibility, completeness and source dispositionWHO data integrity; PIC/S PI 041-1
DOC-012Document control and data governanceHybrid record-system controlsSOP / system descriptionQA / ITConditionalAuthoritative record, interfaces, reconciliation and retrievalPIC/S 4.1; WHO data integrity
DOC-013Document control and data governanceTranslation and multilingual-document controlSOPQA DocumentationConditionalQualified translation, technical verification, equivalence and revision alignmentPIC/S 4.2–4.5
PER-001Personnel, training and hygieneJob descriptions and authorised responsibilitiesControlled role profileHR / Department heads / QACore GMPCompetence, duties, authority, deputies and approvalPIC/S Ch. 2
PER-002Personnel, training and hygieneGMP induction and continuing-training programmeProgrammeHR / QACore GMPCurriculum, frequency, trainers, records and overdue escalationPIC/S Ch. 2; WHO GMP
PER-003Personnel, training and hygieneTraining needs analysis and role curriculaMatrix / planDepartment heads / QACore GMPRole-to-task mapping, prerequisites and qualification statusPIC/S Ch. 2
PER-004Personnel, training and hygieneTraining effectiveness and personnel qualificationSOP / recordsDepartment heads / QACore GMPAssessment, observation, demonstration, retraining and authorizationPIC/S Ch. 2; ICH Q10
PER-005Personnel, training and hygienePersonnel hygiene, gowning and conductSOPProduction / QA / HRCore GMPHealth, clothing, washing, behaviour and access requirementsPIC/S Ch. 2
PER-006Personnel, training and hygieneMedical examination and illness reportingSOP / confidential recordOccupational health / HRCore GMPFitness assessment, restrictions, reporting and return to dutyPIC/S 2.16
PER-007Personnel, training and hygieneContractor, consultant and temporary-worker qualificationSOP / registerUser department / QACore GMPSelection, induction, supervision, access and retained credentialsPIC/S 2.22; Ch. 7
PER-008Personnel, training and hygieneVisitor access and GMP briefingSOP / logSecurity / QARisk-basedAuthorization, escort, hygiene, confidentiality and entry recordsPIC/S Ch. 2–3
ENG-001Premises, utilities, equipment and engineeringFacility design basis and GMP zoning philosophyMaster / design basisEngineering / QACore GMPFlows, segregation, containment, cleaning, maintenance and expansion assumptionsPIC/S Ch. 3; WHO GMP
ENG-002Premises, utilities, equipment and engineeringPremises and room-data registerRegisterEngineering / QACore GMPRoom use, grade, finishes, pressure, temperature, humidity and utilitiesPIC/S Ch. 3
ENG-003Premises, utilities, equipment and engineeringEquipment master list and criticality assessmentRegister / assessmentEngineering / User departments / QACore GMPUnique ID, location, intended use, criticality and lifecycle statusPIC/S Ch. 3; Annex 15
ENG-004Premises, utilities, equipment and engineeringPreventive maintenance systemSOP / plans / recordsEngineeringCore GMPAsset plans, frequencies, work orders, breakdowns, review and backlogPIC/S Ch. 3–4
ENG-005Premises, utilities, equipment and engineeringCalibration and metrology programmeSOP / plans / recordsEngineering / QCCore GMPStandards, traceability, limits, labels, out-of-tolerance assessment and recallPIC/S 3.41; Ch. 4
ENG-006Premises, utilities, equipment and engineeringHVAC operation, monitoring and maintenanceSOP / planEngineering / QACore GMPSet points, alarms, filters, pressure, recovery, cleaning and trendsPIC/S Ch. 3; WHO HVAC guidance
ENG-007Premises, utilities, equipment and engineeringPharmaceutical water-system operation and monitoringSOP / programmeEngineering / QC / QAConditionalGeneration, storage, distribution, sanitisation, sampling, alerts and trendsWHO TRS 1033 Annex 3
ENG-008Premises, utilities, equipment and engineeringCompressed gases, steam and other process utilitiesSOP / programmeEngineering / QCConditionalQuality specification, monitoring, maintenance and point-of-use controlPIC/S Ch. 3; risk assessment
ENG-009Premises, utilities, equipment and engineeringCleaning and sanitation of premisesSOP / schedule / recordsProduction / Housekeeping / QACore GMPMethods, agents, frequencies, responsibilities, verification and logsPIC/S Ch. 3–5
ENG-010Premises, utilities, equipment and engineeringPest-control programmeSOP / contract / trendsAdministration / QACore GMPMap, approved chemicals, inspections, findings, trends and CAPAPIC/S Ch. 3
ENG-011Premises, utilities, equipment and engineeringEngineering drawings and configuration controlSOP / drawing registerEngineering / QACore GMPApproved as-built drawings, revision, issue and change linkagePIC/S Ch. 3–4; Annex 15
ENG-012Premises, utilities, equipment and engineeringEquipment cleaning, use and maintenance logbooksLogbooksUser departments / EngineeringCore GMPChronological use, cleaning, calibration, maintenance and repair recordsPIC/S 4.31
MAT-001Materials, suppliers and warehousingSupplier and service-provider qualificationSOP / registerProcurement / QACore GMPRisk tier, due diligence, audit, approval, monitoring and disqualificationPIC/S Ch. 1, 5 and 7
MAT-002Materials, suppliers and warehousingApproved supplier and manufacturer listRegisterQA / ProcurementCore GMPMaterial/service scope, site, approval status, conditions and review datePIC/S Ch. 5
MAT-003Materials, suppliers and warehousingQuality and technical agreementsAgreement / registerQA / Business ownerConditionalResponsibilities, change, deviations, data, audit, release and communicationPIC/S Ch. 7; ICH Q10
MAT-004Materials, suppliers and warehousingMaterial specificationsSpecificationQC / QACore GMPIdentity, compendial/internal tests, limits, sampling, storage and retest/expiryPIC/S 4.13–4.16
MAT-005Materials, suppliers and warehousingReceipt, quarantine and status controlSOP / recordsWarehouse / QACore GMPVerification, damage checks, identity, segregation, labels and system statusPIC/S 4.22; Ch. 5
MAT-006Materials, suppliers and warehousingSampling of starting and packaging materialsSOP / plan / recordsQC / WarehouseCore GMPSampling plan, tools, locations, precautions, containers and traceabilityPIC/S Ch. 4 and 6; WHO sampling guidance
MAT-007Materials, suppliers and warehousingMaterial testing, release and rejectionSOP / recordsQC / QACore GMPTesting status, review, disposition, labels and ERP/LIMS alignmentPIC/S Ch. 5–6
MAT-008Materials, suppliers and warehousingStorage, FEFO and environmental monitoringSOP / logs / trendsWarehouse / QACore GMPMapped conditions, alarms, excursions, rotation and trend reviewPIC/S Ch. 3 and 5; GDP
MAT-009Materials, suppliers and warehousingDispensing and material issuanceSOP / recordsWarehouse / Production / QACore GMPVerification, weighing, reconciliation, labels, containment and returnPIC/S Ch. 5
MAT-010Materials, suppliers and warehousingInventory reconciliation and discrepancy investigationSOP / reportsWarehouse / Finance / QACore GMPCycle counts, variance thresholds, investigation and approvalPIC/S Ch. 5; data integrity
MAT-011Materials, suppliers and warehousingReturned, damaged, expired and obsolete materialsSOP / registerWarehouse / QACore GMPSegregation, assessment, disposition, destruction and reconciliationPIC/S Ch. 5
MAT-012Materials, suppliers and warehousingCold-chain material handlingSOP / qualification recordsWarehouse / QAConditionalReceipt, storage, monitoring, alarms, transport and excursion assessmentGDP; product requirements
PRD-001Production and packaging operationsMaster manufacturing formula and processing instructionsMaster instructionProduction / QACore GMPFormula, equipment, process sequence, parameters, IPCs, yields and precautionsPIC/S 4.17–4.18
PRD-002Production and packaging operationsBatch manufacturing recordExecuted recordProduction / QACore GMPIssued copy, materials, equipment, operators, process data, yields and reviewPIC/S 4.20
PRD-003Production and packaging operationsMaster packaging instructionsMaster instructionPackaging / QACore GMPPack configuration, components, coding, specimens, line clearance and reconciliationPIC/S 4.19
PRD-004Production and packaging operationsBatch packaging recordExecuted recordPackaging / QACore GMPLine identity, materials, codes, checks, yields, reconciliation and approvalPIC/S 4.21
PRD-005Production and packaging operationsLine clearance and area readinessSOP / checklistProduction / Packaging / QACore GMPPrevious-product removal, cleanliness, status, documents and materialsPIC/S Ch. 5
PRD-006Production and packaging operationsIn-process controls and samplingSOP / recordsProduction / IPQA / QCCore GMPTest method, frequency, limits, action, equipment and traceabilityPIC/S Ch. 5–6
PRD-007Production and packaging operationsYield and reconciliation controlsSOP / recordProduction / Packaging / QACore GMPStages, theoretical/actual quantities, limits and discrepancy investigationPIC/S Ch. 5
PRD-008Production and packaging operationsCleaning and equipment-changeover proceduresSOP / recordsProduction / QACore GMPMethod, sequence, hold times, status labelling, verification and releasePIC/S Ch. 3 and 5; validation guidance
PRD-009Production and packaging operationsCross-contamination and mix-up preventionSOP / risk assessmentProduction / QA / EngineeringCore GMPHazard evaluation, segregation, campaigns, cleaning and monitoringPIC/S Ch. 3 and 5; HBEL guidance
PRD-010Production and packaging operationsProcess and bulk hold-time controlsSOP / study / recordProduction / QA / QCRisk-basedDefined stages, conditions, limits, labelling and excursion assessmentWHO TRS 992 Annex 4
PRD-011Production and packaging operationsReprocessing, rework and recoverySOP / authorizationProduction / QA / RegulatoryConditionalScientific justification, approval, validation, records and regulatory impactPIC/S Ch. 5
PRD-012Production and packaging operationsPrinted packaging material and coding controlSOP / reconciliationPackaging / QA / WarehouseCore GMPReceipt, secure storage, issue, specimen, online checks, return and destructionPIC/S Ch. 5
PRD-013Production and packaging operationsManufacturing status labels and identificationSOP / label mastersProduction / Warehouse / QACore GMPMaterial, room, equipment and batch status with controlled label issuancePIC/S Ch. 3 and 5
LAB-001Quality control, microbiology and stabilityQuality-control laboratory manualManualHead of QCCore GMPOrganisation, scope, workflow, review, release interfaces and safetyPIC/S Ch. 6; WHO TRS 1052 Annex 4
LAB-002Quality control, microbiology and stabilitySpecifications and analytical test proceduresSpecification / methodQC / QACore GMPApproved requirements, method, system suitability, calculations and limitsPIC/S Ch. 4 and 6
LAB-003Quality control, microbiology and stabilitySampling plans for materials and productsPlan / SOPQC / QACore GMPPopulation, locations, quantities, method, containers and rationalePIC/S Ch. 6; WHO sampling guidance
LAB-004Quality control, microbiology and stabilityAnalytical worksheets, notebooks and raw-data controlRecord / SOPQC / QACore GMPContemporaneous raw data, calculations, review, corrections and attachmentsPIC/S Ch. 4 and 6; WHO data integrity
LAB-005Quality control, microbiology and stabilityLaboratory instrument lifecycleSOP / registerQC / Engineering / QACore GMPQualification, calibration, maintenance, access, software and statusWHO TRS 1052 Annex 4; Annex 15
LAB-006Quality control, microbiology and stabilityReference standards and working standardsSOP / registerQCCore GMPQualification, receipt, storage, potency correction, use and expiryPIC/S Ch. 6; WHO QC laboratory guidance
LAB-007Quality control, microbiology and stabilityReagents, volumetric solutions and culture mediaSOP / logsQC / MicrobiologyCore GMPPreparation, standardisation, growth promotion, labelling, storage and expiryPIC/S Ch. 6; WHO QC laboratory guidance
LAB-008Quality control, microbiology and stabilityLaboratory result review and second-person verificationSOP / checklistQC / QACore GMPRaw-data completeness, calculations, audit trail, specification and approvalPIC/S Ch. 6; WHO data integrity
LAB-009Quality control, microbiology and stabilityOOS, OOT and atypical-result investigationSOP / recordsQC / QACore GMPLaboratory assessment, hypotheses, manufacturing review, impact and CAPAPIC/S Ch. 6; FDA OOS guidance
LAB-010Quality control, microbiology and stabilityStability programme and protocolsSOP / protocol / scheduleQC / Regulatory / QACore GMPBatches, conditions, pulls, tests, trends, excursions and commitmentsICH Q1; PIC/S Ch. 6
LAB-011Quality control, microbiology and stabilityReserve and retention samplesSOP / inventoryQC / QACore GMPQuantity, storage, access, examination, period and disposalPIC/S Annex 19 (rev. 2026)
LAB-012Quality control, microbiology and stabilityEnvironmental and microbiological monitoringProgramme / recordsMicrobiology / QA / ProductionConditionalLocations, frequencies, methods, limits, trends, isolates and responseProduct/process requirements; WHO/PIC/S
LAB-013Quality control, microbiology and stabilityLaboratory data and chromatography governanceSOP / controlsQC / IT / QAConditionalSequences, processing methods, integrations, audit trails, review and backupWHO TRS 1025 Annex 4; data-integrity guidance
LAB-014Quality control, microbiology and stabilityLaboratory investigation and invalidation governanceSOP / decision recordQC / QACore GMPScientific rationale, authorization, retest/resample controls and trend reviewPIC/S Ch. 6; WHO data integrity
VAL-001Qualification, validation and technology transferValidation Master PlanMaster planValidation / QACore GMPPolicy, scope, responsibilities, lifecycle, schedules, acceptance and governancePIC/S Annex 15 and PI 006-4; WHO TRS 1019 Annex 3
VAL-002Qualification, validation and technology transferUser requirements specificationsSpecificationUser department / Engineering / QACore GMPIntended use, GMP/data needs, capacity, environment, alarms and lifecycle supportPIC/S Annex 15 and PI 006-4; ICH Q9(R1)
VAL-003Qualification, validation and technology transferDesign qualification and design reviewProtocol / reportEngineering / User / QACore GMPTraceability of design to approved requirements and risksPIC/S Annex 15 and PI 006-4
VAL-004Qualification, validation and technology transferCommissioning and turnover packagesPlan / dossierEngineering / ValidationRisk-basedTests, certificates, drawings, manuals, punch items and handover acceptancePIC/S PI 006-4; good engineering practice
VAL-005Qualification, validation and technology transferInstallation, operational and performance qualificationProtocol / reportValidation / User / QACore GMPPre-approved tests, deviations, traceability, conclusion and releasePIC/S Annex 15 and PI 006-4
VAL-006Qualification, validation and technology transferProcess validation and continued process verificationProtocol / report / programmeProduction / Validation / QA / QCCore GMPProcess knowledge, PPQ design, sampling, acceptance, trends and lifecycle reviewPIC/S PI 006-4; WHO validation guidance
VAL-007Qualification, validation and technology transferCleaning validationProtocol / report / matrixValidation / Production / QA / QCCore GMPWorst case, limits, sampling, recovery, hold times, residues and lifecycle reviewPIC/S PI 006-4; WHO HBEL guidance
VAL-008Qualification, validation and technology transferAnalytical method validation and verificationProtocol / reportQC / QACore GMPCharacteristics, acceptance criteria, data, deviations and approved conclusionICH Q2(R2); WHO QC laboratory guidance
VAL-009Qualification, validation and technology transferAnalytical method transferProtocol / reportSending / Receiving QC / QAConditionalResponsibilities, method, comparative design, acceptance and investigationWHO technology-transfer guidance
VAL-010Qualification, validation and technology transferComputerised-system validationPlan / protocol / reportSystem owner / IT / QAConditionalRequirements, risk, testing, data migration, security, release and periodic reviewEU Annex 11; GAMP principles; 21 CFR Part 11
VAL-011Qualification, validation and technology transferTransport and shipping qualificationProtocol / reportSupply chain / QAConditionalRoutes, profiles, packaging, challenge tests, monitoring and excursion controlPIC/S PI 006-4; GDP; product requirements
VAL-012Qualification, validation and technology transferTechnology-transfer governanceSOP / plan / reportTechnical / Production / QC / QAConditionalKnowledge package, gap analysis, responsibilities, transfer batches and closureWHO TRS 1044 Annex 4; ICH Q10
QEV-001Quality events, audit and continual improvementDeviation and nonconformance managementSOP / recordsAll functions / QACore GMPImmediate control, classification, investigation, impact, CAPA and closurePIC/S Ch. 1; ICH Q10
QEV-002Quality events, audit and continual improvementCorrective and preventive action managementSOP / registerProcess owners / QACore GMPAction quality, risk priority, ownership, due dates, changes and effectivenessICH Q10; ICH Q9(R1)
QEV-003Quality events, audit and continual improvementCAPA effectiveness checksSOP / evidence planProcess owners / QACore GMPPredefined criteria, timing, evidence, decision and further actionICH Q10; PIC/S PI 054-1
QEV-004Quality events, audit and continual improvementChange controlSOP / registerAll functions / QACore GMPClassification, impact, risk, approvals, implementation, effectiveness and regulatory assessmentPIC/S Ch. 1; ICH Q10
QEV-005Quality events, audit and continual improvementTemporary change and planned-deviation controlSOP / registerProcess owners / QARisk-basedJustification, controls, duration, approvals, monitoring and closurePQS / QRM principles
QEV-006Quality events, audit and continual improvementInternal audit and self-inspectionSOP / programme / reportsQACore GMPRisk-based schedule, independence, evidence, findings, CAPA and follow-upPIC/S Ch. 9
QEV-007Quality events, audit and continual improvementRegulatory inspection readiness and responseSOP / trackerQA / RegulatoryCore GMPHosting, document room, response review, commitments and evidenceNational requirements; PQS
QEV-008Quality events, audit and continual improvementQuality metrics and trend managementSOP / dashboardsQA / Process ownersRisk-basedDefinitions, data verification, signals, escalation and management reviewICH Q10; WHO data integrity
QEV-009Quality events, audit and continual improvementRecurring-event and cross-system signal detectionSOP / review recordQARisk-basedTaxonomy, periodic review, linkage, escalation and systemic CAPAICH Q10; ICH Q9(R1)
QEV-010Quality events, audit and continual improvementRoot-cause analysis methods and facilitationSOP / guideQA / InvestigatorsCore GMPEvidence standards, tool selection, causal verification and human factorsICH Q9(R1); PQS practice
QEV-011Quality events, audit and continual improvementQuality defect and critical-event escalationSOP / contact matrixQA / Senior managementCore GMPSeverity, notification, decision authority, regulator/customer communication and recordsPIC/S Ch. 8
QEV-012Quality events, audit and continual improvementQuality action and commitment trackingRegisterQACore GMPSource, owner, due date, dependency, evidence, extension and closureICH Q10
QEV-013Quality events, audit and continual improvementContinual-improvement programmeProgramme / portfolioSenior management / QARisk-basedOpportunities, prioritisation, benefits, controls and sustainability reviewICH Q10
CSV-001Computerised systems and digital recordsGxP computerised-system inventory and criticalityRegister / assessmentIT / System owners / QAConditionalSystem, version, owner, GxP use, data criticality, validation and hostingEU Annex 11; WHO data integrity
CSV-002Computerised systems and digital recordsComputerised-system lifecycle and validationSOPIT / System owners / QAConditionalConcept, requirements, risk, testing, release, operation, change and retirementEU Annex 11; 21 CFR Part 11
CSV-003Computerised systems and digital recordsUser access and privileged-account managementSOP / access registerSystem owners / IT / QAConditionalRole design, approval, unique accounts, periodic review and prompt revocationWHO data integrity; PIC/S PI 041-1
CSV-004Computerised systems and digital recordsAudit-trail configuration and reviewSOP / review recordsProcess owners / QA / ITConditionalCritical events, frequency, reviewer, exceptions, escalation and evidenceWHO data integrity; EU Annex 11
CSV-005Computerised systems and digital recordsBackup, restore and disaster recoverySOP / test recordsIT / System ownersConditionalScope, frequency, segregation, restore tests, recovery objectives and failuresEU Annex 11; WHO data integrity
CSV-006Computerised systems and digital recordsData migration, transfer and interface verificationSOP / protocolIT / System owners / QAConditionalMapping, completeness, accuracy, reconciliation, exceptions and approvalWHO data integrity; EU Annex 11
CSV-007Computerised systems and digital recordsElectronic master data and configuration controlSOP / registerSystem owners / QA / ITConditionalCreation, verification, approval, release, change history and periodic reviewWHO data integrity; PIC/S Ch. 4
CSV-008Computerised systems and digital recordsPeriodic review of computerised systemsSOP / reportSystem owners / IT / QAConditionalChanges, incidents, access, audit trail, performance, validation and obsolescenceEU Annex 11
CSV-009Computerised systems and digital recordsCloud, hosted service and IT supplier assuranceSOP / assessment / agreementIT / Procurement / QAConditionalDue diligence, data location, security, availability, audit, exit and continuityWHO data integrity; EU Annex 11
CSV-010Computerised systems and digital recordsComputerised-system incident and continuity managementSOP / recordsIT / System owners / QAConditionalDetection, data impact, workaround, recovery, investigation and CAPAEU Annex 11; ICH Q10
DSP-001Distribution, complaints, returns and recallFinished-product release and certificationSOP / release recordQA / Authorised release roleCore GMPBatch review, deviations, OOS, validation, regulatory status and dispositionPIC/S Ch. 1, 4 and 6
DSP-002Distribution, complaints, returns and recallDistribution records and batch traceabilitySOP / recordsSupply chain / QACore GMPCustomer, batch, quantity, date, destination and retrievalPIC/S 4.28; GDP
DSP-003Distribution, complaints, returns and recallTransport, dispatch and delivery controlsSOP / recordsSupply chain / QACore GMPApproved routes/providers, conditions, security, monitoring and proof of deliveryGDP
DSP-004Distribution, complaints, returns and recallProduct complaint managementSOP / registerQA / Customer serviceCore GMPIntake, triage, investigation, sample, trend, response and regulatory assessmentPIC/S Ch. 8
DSP-005Distribution, complaints, returns and recallProduct quality defect and market actionSOP / recordsQA / Regulatory / Senior managementCore GMPRisk evaluation, authority consultation, action, communication and follow-upPIC/S Ch. 8
DSP-006Distribution, complaints, returns and recallRecall and mock-recall programmeSOP / reportsRecall committee / QACore GMPDecision, classification, contacts, reconciliation, effectiveness and periodic challengePIC/S Ch. 8
DSP-007Distribution, complaints, returns and recallReturned-product assessment and dispositionSOP / recordsWarehouse / QACore GMPIdentity, conditions, history, tamper status, decision and destructionPIC/S Ch. 5 and 8
DSP-008Distribution, complaints, returns and recallSuspected falsified or diverted product responseSOP / recordsQA / Security / RegulatoryRisk-basedAuthentication, quarantine, investigation, authorities and supply-chain actionPIC/S Ch. 8; WHO guidance
REG-001Regulatory and product lifecycleManufacturing licences, GMP certificates and permits registerRegisterRegulatory / QACore GMPAuthority, scope, number, conditions, validity, renewal owner and evidenceNational law
REG-002Regulatory and product lifecycleProduct registration and marketing-authorisation registerRegisterRegulatoryCore GMPProduct, strength, pack, market, licence, status, commitments and variationsNational law; ICH CTD
REG-003Regulatory and product lifecycleRegulatory commitment and post-approval action trackerRegisterRegulatory / QACore GMPCommitment, market, owner, due date, evidence and closureMarketing authorisations
REG-004Regulatory and product lifecycleVariation and regulatory-change assessmentSOP / recordsRegulatory / QACore GMPChange classification, market impact, submission, approval and implementation controlsNational variation rules; ICH Q12
REG-005Regulatory and product lifecycleRegistered-detail versus site-master reconciliationSOP / reviewRegulatory / QA / TechnicalCore GMPFormula, process, sites, methods, specifications, packs and commitmentsPIC/S Ch. 4; marketing authorisation
REG-006Regulatory and product lifecycleArtwork, label and patient-information controlSOP / masters / registerRegulatory / Packaging / QACore GMPApproved text, proofs, version, market, implementation and obsolescenceMarketing authorisation; PIC/S Ch. 5
REG-007Regulatory and product lifecycleProduct lifecycle knowledge and dossier archiveSOP / indexRegulatory / Technical / QACore GMPDevelopment, transfer, validation, changes, annual reviews and submissionsICH Q10; ICH Q12
REG-008Regulatory and product lifecyclePharmacovigilance and product-safety interfaceSOP / agreementSafety / Regulatory / QAConditionalComplaint/adverse-event triage, exchange, reconciliation and escalationNational pharmacovigilance requirements
SPC-001Specialised and conditional systemsSterile manufacturing contamination-control strategyStrategy / programmeQA / Production / Engineering / MicrobiologyProduct-specificIntegrated facility, process, personnel, monitoring and sterility-assurance controlsEU/PIC/S Annex 1; WHO sterile GMP
SPC-002Specialised and conditional systemsHighly potent, sensitising or hazardous-product controlRisk assessment / programmeEHS / QA / Production / EngineeringProduct-specificHBEL, containment, dedication, cleaning, monitoring and waste controlsPIC/S Ch. 3 and 5; WHO hazardous GMP
SPC-003Specialised and conditional systemsBeta-lactam or special-segregation operationsProgramme / SOP setQA / Production / EngineeringProduct-specificDedicated facilities/systems, flows, cleaning, monitoring and material/personnel controlsNational GMP; product hazard
SPC-004Specialised and conditional systemsBiologicals, vaccines or biotechnology productsProduct-specific systemTechnical / QA / Production / QCProduct-specificSeed/cell banks, biosafety, asepsis, cold chain and specialised testingWHO/PIC/S specialised annexes
SPC-005Specialised and conditional systemsInvestigational medicinal-product controlsProduct-specific systemQA / Clinical supplyProduct-specificRandomisation/blinding, release, reconciliation, returns, destruction and trial recordsPIC/S Annex 13; WHO investigational-product GMP
SPC-006Specialised and conditional systemsContract manufacture, testing or distributionGovernance packageBusiness owner / QAConditionalQualification, agreements, transfer, oversight, data, audit and continuityPIC/S Ch. 7
SPC-007Specialised and conditional systemsImport, export and customer-market complianceRegister / SOPRegulatory / Supply chain / QAJurisdiction-specificPermits, market conditions, certificates, dossiers, customer requirements and renewalsDestination-country law
SPC-008Specialised and conditional systemsEnvironmental, occupational safety and emergency responseManagement systemEHS / Engineering / HRJurisdiction-specificRisk assessments, permits, waste, exposure, incidents, drills and statutory recordsNational EHS law; GMP interfaces

Interpretation: “Core GMP” means normally expected for a conventional finished-product manufacturer. Other labels require a documented applicability decision based on products, technologies, markets, licences and risk.

Your authoritative register

Minimum fields for each controlled document.

The downloadable CSV is a coverage assessment. Your live master index should also control the following lifecycle fields.

01

Unique document ID and exact title

02

System area, process and document type

03

Owner, author, reviewers and approving role

04

Current revision, status and effective date

05

Previous or superseded document reference

06

Review basis, review date and event triggers

07

Linked forms, templates, records and systems

08

Controlled medium, location and source of truth

09

Training or qualification requirement

10

Retention trigger, minimum period and archive owner

11

Regulatory, product or technical basis

12

Sites, departments, products and markets in scope

Controlled lifecycle

Manage the decision trail from need to disposal.

  1. 01Need

    Identify a regulatory, process, product, risk or business-control need.

  2. 02Draft

    Use competent authors, approved templates and the actual operating process.

  3. 03Review and approve

    Verify technical correctness, interfaces, usability and Quality authorization.

  4. 04Prepare and train

    Release forms, systems, copies and competence before the effective date.

  5. 05Issue and use

    Make only the effective version available where work and decisions occur.

  6. 06Review and improve

    Use changes, events, trends, audit results and regulatory updates as triggers.

  7. 07Withdraw and archive

    Prevent unintended use while preserving complete, retrievable history.

  8. 08Retain or dispose

    Apply approved triggers, periods, legal holds and documented destruction.

Current control practice

Move beyond an SOP list.

Control every format

Apply one lifecycle to paper, electronic and hybrid instructions and records. Define which copy or system is authoritative and how components are reconciled.

Map critical data

Show where GMP data are created, transformed, reviewed, transferred, stored, backed up, retained and destroyed—not only where the final report is filed.

Review by risk and event

Set review logic according to criticality, change and performance. A universal two-year SOP review cycle is not a regulatory rule and must not replace event-driven review.

Govern electronic masters

Control templates, master data, roles, audit trails, interfaces, backups, migration, suppliers, periodic review and system retirement through the validated lifecycle.

Measure the system, not the count

A large SOP library is not evidence of an effective PQS. Monitor overdue documents, obsolete copies, training readiness, recurring events and record-review defects.

Keep external requirements live

Assign owners to monitor legislation, pharmacopoeias, GMP guides, product licences and customer requirements and to document the impact of each relevant change.

30–60 day implementation sequence

Convert the reference index into your controlled system.

01

Set scope and process map

Define sites, dosage forms, laboratories, warehouses, utilities, outsourced activities, markets and GxP systems covered.

02

Import the present inventory

Bring active, draft, superseded and archived documents into one reconciled list, including forms and electronic masters.

03

Classify and remove ambiguity

Assign every item a family, owner, status, source of truth and relationship to its records. Resolve duplicates and uncontrolled copies.

04

Assess the 13 system areas

Use the interactive index to record present, absent, not applicable, duplicate or improvement-required decisions with rationale.

05

Prioritise by patient and data risk

Address release, sterility or contamination, identity, traceability, critical utilities, data integrity and regulatory commitments first.

06

Design the usable hierarchy

Combine related controls where sensible, keep instructions at the point of use and separate stable policy from frequently changing operational detail.

07

Assign lifecycle accountability

Confirm authors, technical reviewers, Quality approvers, document administrators, trainers, record custodians and system owners.

08

Connect training and effective use

Do not make a document effective until copies, systems, materials, users and competence evidence are ready.

09

Approve gaps and remediation

Obtain management agreement on risk, interim controls, resources, dates and evidence for closure.

10

Run a monthly health review

Trend overdue reviews, pending training, obsolete-copy returns, document errors, record defects and open remediation actions.

Common failure patterns

A master index can still hide weak control.

Failure patternPractical interpretation
One SOP for every rowThe index describes control families. One well-designed procedure may govern several related records, forms or subprocesses.
Generic internet proceduresA document that does not match actual people, equipment, products, systems and licences creates inspection and execution risk.
Several competing master listsA spreadsheet, eQMS and department register can quietly disagree. Define one authoritative inventory and reconcile interfaces.
Uncontrolled blank formsBlank templates can create GMP records and therefore require master control, version status, access and—where used—issuance or reconciliation.
Paper and electronic halves do not meetHybrid records fail when the authoritative record, links, sequence, review responsibility and retention are not defined.
Calendar review without process reviewRenewing a revision number without checking changes, deviations, audit findings, user feedback and regulatory updates adds little control.
Records without a retention ownerA retention period alone is insufficient. Define the trigger, medium, archive, retrieval, legal hold, destruction approval and evidence.
External standards go stalePharmacopoeias, GMP guides, registrations and technical standards require monitored versions and documented applicability decisions.

Regional application

Build one coherent PQS, then map every legal and market obligation.

African manufacturing sites

Start with the competent national medicines authority and local manufacturing licence. Add WHO GMP as a strong common baseline, then map regional harmonisation pathways, public-procurement requirements, donor or prequalification expectations and every intended export market. Infrastructure resilience, imported spares, technical support and supply continuity should appear in risk, maintenance, utility and business-continuity documents.

Indian manufacturing sites

Align the quality system with the current Drugs Rules and revised Schedule M, the scope and conditions of the manufacturing licence, applicable CDSCO and State Licensing Authority requirements, pharmacopoeial obligations and the commitments of domestic and export registrations. Verify special provisions for the relevant product categories instead of assuming one generic list covers every licence.

International supply

Use the destination market and approved dossier to extend—not replace—the home-site system. PIC/S, EU, FDA, WHO-prequalification, customer and technical-agreement expectations should be mapped to responsible processes, effective documents and retrievable evidence.

Primary source framework

Requirements and guidance used for this index.

Official sources accessed 20 October 2026. Confirm current text, national adoption, licences and product commitments before implementation.

Draft-status discipline: The 2025 proposed revisions to EU GMP Chapter 4 and Annex 11 inform future readiness but are not represented here as final legal requirements. The operational index is anchored to current official text and established data-integrity practice.

Educational notice: This tool supports structured assessment and planning. It is not legal advice, a substitute for a site-specific risk assessment or an instruction to use documents that have not been reviewed and approved through your pharmaceutical quality system.