Is your cloud app FDA CSA Ready?

FDA’s CDRH is planning on releasing a guidance on Computer Software Assurance (CSA) for Manufacturing, Operations, and Quality System Software in 2020 (applicable to non-product CSV only). Currently, it is on their “A” list. There has been a lot of industry chatter about this particular guidance related to computer validation. Everyone is eager to know about FDA’s current position on computer validation. So much has changed in the last two decades and we still don’t know what FDA’s current thinking is when it comes to the “cloud”. FDA has surely managed to keep us behind a “dark cloud”!

Read More
xLM for DevOps - Introducing vCD (Validated Continuous Delivery)

The main objective of this post to answer the following questions.  I know a picture is worth a thousand words and so I will do this with illustrations.

  1. Can "Validation" and "DevOps" be used in the same sentence (like vCD - Validated Continuous Delivery)?

  2. Is DevOps a viable model for validated apps in GxP Environments?

  3. How can one ensure the "validation fidelity" in a DevOps environment?

Read More
Continuous Validation for ServiceNow - HOW IS IT DONE?

What are the key steps involved in continuously validating a ServiceNow App?

One has to bear in mind that the underlying IaaS and PaaS infrastructure is constantly changing. In fact, the Cloud App itself is continuously changing. In the new cloud world, it does not make any value-sense to pin to an "ancient" version.  Thus this Continuous Validation Framework is designed to mitigate these risks and ensure that your ServiceNow app is maintained in a validated state.

Read More
ServiceNow: Data Integrity Guide for GxP Compliance - Tables

This post provides a framework for configuring the ServiceNow Platform Tables to meet today's data integrity standards in order to comply with 21 CFR Part 11 and other predicate GxP regulations.  I will attempt to cover:

  1. How to leverage in-built ServiceNow features to ensure Tables are configured for GxP Compliance?

  2. How to design the configuration qualification (CQ) tests?

  3. How to ensure "validated status" (VS) on a ongoing basis?

Read More
A Step-by-Step Guide to "continuously" Qualify Microsoft Azure PaaS and Serverless Architectures

I very frequently get asked whether Azure Platform-as-a Service (PaaS which includes Serverless Architectures) can be qualified as well?  Surprisingly, this question is asked even by Azure users who agree that Azure IaaS can be qualified.  In this blog post I will provide a prescriptive guide to intelligently qualify Azure PaaS and maintain it in a qualified state (QS). 

Read More