I85PREP
⌘ K
GPPQE study materials
GPPQE study resources

GPPQE: Risk-Based Thinking and Corrective Action

GPPQE · Work through your exam, one topic at a time.

All guide sections

Risk-Based Thinking and Corrective Action

Domain 4 - Risk-Based Thinking and Corrective Action

This domain tests ICH Q9(R1) and the mechanics of CAPA. Expect items on risk assessment methods, formality proportionate to risk, the limits of RPN scoring, and effectiveness checks.

Core rules

  • ICH Q9(R1) states two primary principles: risk evaluation should be based on scientific knowledge and ultimately link to protection of the patient; and the level of effort, formality, and documentation should be commensurate with the level of risk.
  • The QRM process: risk assessment (identification, analysis, evaluation), risk control (reduction, acceptance), risk communication, and risk review.
  • Common tools: FMEA/FMECA, HACCP, FTA, HAZOP, PHA, risk ranking and filtering, and risk matrices. Selection depends on the question, the available data, and the required formality.
  • RPN = severity × occurrence × detectability is a prioritisation aid, not a decision rule. Equal RPNs can hide very different severity, and detection scoring is often subjective. Q9(R1) explicitly asks for attention to subjectivity and to product availability as a risk dimension.
  • CAPA lifecycle: contain, investigate, determine root cause, assess impact (including other batches and products), plan actions, implement, verify effectiveness, and close. Effectiveness checks need predefined criteria and a defined waiting period.

Worked example

An FMEA on a filling line scores a missing-stopper defect at S=9, O=3, D=7 (RPN 189) and a label smudge at S=2, O=8, D=2 (RPN 32). A team working only by RPN would fix the smudge first because it is easier. Correct reasoning: severity 9 dominates; the missing-stopper failure needs a control that prevents or detects it regardless of ranking. The output is an action to add a vision inspection check with validated detection capability, plus a review of whether the occurrence score is credible.

Traps that cost marks

  • Using an arbitrary RPN threshold (for example 100) as an accept/reject line.
  • Performing the risk assessment after the decision, to justify it.
  • Closing CAPA without an effectiveness check, or checking immediately after training before any effect could appear.
  • Treating "retrain the operator" as a root cause fix.
  • Ignoring patient impact and product availability when assessing quality risk.