Quality management system development and remediation

A quality management system, or QMS, has two ways to fail. It can be absent, which is the position of most companies approaching their first licence. Or it can be so heavy that people work around it, which is the position of many established sites. QMS development covers the first. Remediation covers the second.

The elements are not negotiable, although their depth is. Document control with a clear hierarchy. Deviation and non conformance handling. CAPA. Change control. Complaints. Product recall. Self inspection. Management review. Training and competency. Quality risk management. Product quality review. Supplier and material control. Data governance and integrity. Release and, where relevant, the responsibilities of the Qualified Person or Responsible Person.

What varies is how much machinery each element needs. A company of fifteen people does not need the change control process of a multinational, and imposing one is the surest way to guarantee that changes get made without going through it.

These are the indicators we look for first, and they are visible within a day.

A growing backlog of open deviations, particularly ones past their target closure date with an extension recorded but no new reasoning. CAPAs closed on the day the action was completed, with no effectiveness check afterwards. Procedures whose last revision date is more than three years old in an area that has changed. Change control records raised after the change was made. A management review that has not been held within the last twelve months, or one held with no data and no actions arising. Staff who cannot say where the current version of a procedure lives.

Each of these on its own is a finding. Together they describe a system that has stopped being used, which is a far more serious position.

We start from the processes you actually run, not from a template library. The document set is written to describe what happens, with the controls added where they are needed. That produces fewer procedures than a template purchase, and procedures that people follow, which is the only measure that matters at inspection.

Roll out is part of the work rather than an afterthought. A procedure that has been approved but not trained out and not used is worse than no procedure, because it creates a documented commitment you are visibly failing to meet.

Remediation is mostly subtraction. Duplicated procedures are merged. Controls that add no value are removed. Forms that nobody completes are withdrawn rather than reissued. Then the backlog is triaged by risk and closed in sequence, with the systemic causes addressed rather than each record individually.

We are explicit about one thing at the start. Remediation that reduces the size of a quality system will feel wrong to people who equate volume with compliance. It is worth having that conversation with your management team early rather than halfway through.

How long does it take to build a quality system?

For a small wholesale distribution operation, typically two to four months to a usable state. For a manufacturing site it is longer and depends heavily on how much validation and qualification work runs alongside. We give a phased plan so that the elements needed for your licence application come first.

Do you supply templates?

We use a starting library, but we do not deliver it unchanged. A template set that has not been adapted to your processes is the most common cause of a quality system nobody follows.

Will the system be proportionate to our size?

That is the point. Over specifying is as damaging as under specifying, because an unusable system gets bypassed and the bypass is what an inspector finds.

Can you work inside our electronic QMS?

Yes. We work in the common electronic quality systems and we will work in yours. If you are choosing one, we can help you specify what you need before you buy, which is considerably cheaper than discovering it afterwards.

We have an inspection in eight weeks and our system is a mess. What can you do?

Triage. In eight weeks the realistic aim is not a rebuilt system but a defensible position, meaning the worst gaps closed, an honest gap analysis in hand, and a credible plan with dates for the rest. Inspectors respond very differently to a company that knows its weaknesses and has a plan than to one that appears unaware of them.