Regulatory & Compliance

Change management.

Manage GMP-compliant changes safely and efficiently. We establish change control processes that combine regulatory compliance with operational agility.

Quality manager discusses change control

Why uncontrolled changes are one of the biggest compliance risks in the life sciences industry.

Change is inevitable in the pharmaceutical and medtech industries. However, without structured change management, significant regulatory risks arise:

  • Changes are approved without a full risk assessment and affect validated processes.
  • Changes relevant to regulatory authorities—such as variations and amendments to marketing authorizations—are identified too late.
  • Change control processes are perceived as a bureaucratic obstacle rather than a quality tool.
  • Lack of traceability: Inspectors cannot determine when, what, and why changes were made.
Can you provide a complete change control record for every process change made in the last three years during an inspection?
A QA officer signs a change control record at a pharmaceutical company in the 1960s

Our change management services.

We build change control systems that ensure compliance—without slowing down operations.

Change Control System Setup & Review
Design of a comprehensive change control process in accordance with ICH Q10, GMP Annex, and ISO 13485. Change request forms, impact assessment methodology, approval workflow, and traceability requirements. Review and optimization of existing change control SOPs.
Regulatory Impact Assessment
Assessment of each change for regulatory action: Does a variation need to be submitted? Is revalidation required? Is notification to the Notified Body required? Prioritization based on criticality and deadline management.
Change Control for IT Systems & Validation Changes
Structured change management for software updates, system configurations, and validated systems in accordance with GAMP5. GMP-compliant change documentation with an impact analysis on the validation status. For more information: Computer System Validation.
Training & Change Control Culture
Training for production, QA, and development teams: What constitutes a change, when must it be formally reported, and how is its impact assessed? Practical case studies from pharmaceutical and medtech production.

Case Study: Implementing Change Control at a Mid-Sized Pharmaceutical Manufacturer.

A pharmaceutical company with 400 employees was facing an FDA inspection—without complete change control records.

The challenge

No traceability for process changes.

Changes to manufacturing parameters and qualification documents were communicated informally. During preparations for the FDA inspection, it became apparent that complete impact assessments were missing for more than 60% of the changes made over the past three years.

Measures

Establishment of a comprehensive change control system.

Together with the quality team, we developed a documented change control process in accordance with ICH Q10: a classification matrix, an impact assessment template, an electronic approval workflow, and training for 120 employees in QA and production.

Results

Inspection passed – System permanently established.

The FDA inspection was completed without any major findings. The change control system has since been fully integrated into our operations. All outstanding changes from previous years were retroactively documented and risk-assessed.

Why Entourage for Change Management Compliance.

Change control is more than just a documentation task—it is an operational process that must be actively implemented throughout the organization.

Degree of regulation.

We understand the requirements of ICH Q10, the GMP Annex, ISO 13485, the MDR, and the FDA CFR from real-world experience—not just from textbooks. Our assessments are ready for regulatory review.

Operational feasibility.

Change control systems that don’t work in day-to-day operations are circumvented. We design processes that are realistic and efficient—not just compliant on paper.

Cross-functional experience.

We bring together QA, Regulatory Affairs, IT validation, and production—because change management is a cross-functional task that affects all departments.

Quick deployment.

In cases of urgent inspection requirements or ongoing regulatory proceedings, we are available on short notice and immediately prioritize critical change records.

This is how we work.

From an initial assessment to a change control system fully integrated into your operations—structured, transparent, and tailored to your organization.

01

Taking stock.

Analysis of the existing change control process, standard operating procedures (SOPs), and open change records. Identification of gaps and areas of risk.

02

System Design.

Development of the change control process: classification matrix, impact assessment template, approval workflow, and traceability structure.

03

Implementation.

Implementation of SOPs and forms, integration into existing quality management systems, and training of the relevant teams in QA, production, and IT.

04

Review & Handover.

Quality assurance for the first change controls in the new system, handover to internal managers, and documentation completed in a manner that stands up to inspection.

Frequently Asked Questions About Change Management Compliance.

What is change control in the life sciences?
Change control is the formal process by which planned changes to products, processes, equipment, systems, or documents are evaluated, approved, documented, and implemented. It ensures that changes do not have any unexpected negative effects on product quality, safety, or regulatory compliance.
Which changes must go through change control?
Any changes that could potentially affect product quality, safety, efficacy, or regulatory approval. This includes: changes in raw materials or suppliers, changes in process parameters, equipment replacement, site changes, software updates in validated systems, and changes to the manufacturing facility.
What is the difference between minor, major, and critical change?
The classification is based on the potential risk associated with the change: Minor Changes pose a low risk and can be implemented internally immediately. Major Changes require a more detailed assessment and, if necessary, revalidation. Critical Changes may have implications for regulatory approval and must be notified to the regulatory authorities before they are implemented.
When should a variation be submitted to the authorities?
In the event of significant changes to a drug approval or CE certification. For drugs: Type IA, IB, or II variation, depending on the severity of the change; in certain cases, an annual notification. For medical devices: Notification to the Notified Body if the technical documentation or the design basis is affected.

Set up change control properly—before the audit does.

Whether you need help setting up a system, reviewing standard operating procedures (SOPs), or require immediate action ahead of a regulatory inspection: We’re available on short notice and bring the necessary regulatory expertise directly to your company.

Submit a project inquiry.

Please briefly describe your current challenge. An expert from our team will contact you shortly.