Monitoring, Audits, Inspections, and Quality Management
This domain tests whether you understand who is watching, against what standard, and what happens after findings. Items contrast a sponsor's monitoring visit or audit with a regulatory inspection, and then ask for an appropriate corrective and preventive action rather than a vague promise to retrain.
Monitoring
- Purpose: verify participant rights and well-being, protocol and GCP compliance, and data accuracy against source.
- Types: pre-study qualification visit, interim monitoring (on-site, remote, or centralised/risk-based), and close-out. The monitoring plan defines scope; source data verification vs source data review are distinct activities.
- Output: a monitoring report and a follow-up letter with action items the site must close within agreed timelines - the monitor documents, the site corrects.
Audits versus inspections
- Audit: independent, systematic examination initiated by the sponsor or CRO, measured against SOPs and regulations; findings stay internal but may trigger corrective action plans.
- Inspection: conducted by a regulatory authority (for example FDA's Bioresearch Monitoring programme, EMA, MHRA) under statutory authority. Common outcomes include Form 483 observations, an establishment inspection report with or without action indicated, and warning letters.
- Inspectors may review consent forms, delegation logs, source versus CRF, IP accountability, safety reporting and training records, and may interview staff.
Quality management
- ICH E6(R2)/(R3) promote quality by design: identify risks to critical data and processes, then mitigate and monitor them (quality tolerance limits, key risk indicators).
- The quality system rests on written SOPs, documented training, deviation management, and CAPA with root-cause analysis and an effectiveness check.
Worked example
During an FDA inspection, five consent forms lack the date the participant signed. Reasoning: the finding is a documentation failure, not a consent-element failure, but it undermines the timing evidence. Respond with root cause (no second-person check at the visit), corrective action (revised consent checklist, dual verification at signature), and an effectiveness check (audit 20 consecutive consents over six months). Do not argue about whether the date "matters."
Traps that cost marks
- Calling a sponsor audit an inspection, or assuming inspectors need an appointment.
- Delaying or restricting an inspector's access to records and staff.
- Offering "we will retrain staff" as a complete CAPA with no root cause or effectiveness check.
- Leaving monitoring follow-up items open and then claiming closure at close-out.
- Destroying records once the database locks.