Introduction – What the Participants Expect
- Introductions and welcome
- Course objectives and topic review
- An open session capturing the expectations of the delegates
Overview of IT/OT Suppliers and Service Providers
- Suppliers and service providers – what is the difference?
- What should a regulated user expect from their suppliers and service providers?
- Critical success factors
- Clarifying roles and responsibilities
- Good Practice and regulatory considerations
Supplier Selection Process
- Identification of potential suppliers/service providers
- Creating a short-list of potential candidates
- Factors to consider when making the final selection
- Documenting the decision-making process
Workshop: Selecting a Supplier
- A workshop based on a real-life case study
Auditing IT/OT Suppliers
- Factors to consider
- Focusing the assessment
- Engaging with the supplier
- Reporting and managing the findings
- Regulatory expectations
- Corrective actions and follow-up audits
Leveraging Audit Findings
- Integrating suppliers and service providers expertise and deliverables
- Into the validation process
- Throughout the system life cycle
- Leveraging supplier testing
Workshop: Quality Planning Exercise
- Working with your supplier/service provider to develop a plan for success
Introduction – Gain Understanding of Delegate Experience and Background
Workshop 1: What the Delegates expect
- Capturing delegates expectations
- Sharing and reducing to key points
- Facilitated discussion
Interactive Session: Good Validation Practices
- IT and system governance
- CSV roles and responsibilities
- Role of Quality Unit
Project Life Cycle
- Life cycle refresh
- Life cycle activities and deliverable by agile approaches
Presentation of the Project Mandate
- Presentation of the case study application
- Project Mandate
Workshop 2: Elaborating URS - Drafting URS
- Outlining and drafting URS for the case study application
- Debriefing and plenum discussion
URS (User Requirement Specification): Structure and Content
- URS: Purpose and objectives; Roles & responsibilities
- URS structure
- Prioritizing user requirements
- URS: how much is enough?
Workshop 3: Elaborating URS - Consolidated URS
- Elaboration of a consolidated URS draft for the case study application
- Debriefing
Introduction to Qualification Planning
- Qualification Planning refresh
- Q-Plan Purpose and objectives
- Roles & responsibilities
- Topics to be covered
Workshop 4: Elaborating a Qualifcation / Validation Plan
- Filling out a high-level and system risk assessment for the case study application
- Outlining & drafting a qualification plan for the case study application
- Debriefing
Qualification / Validation Plan: Structure and Content
- Q-Plan structure
- Q-Plan scalability
- Qualification/validation strategy
Introduction to Functional Specifications
- FS refresh
- Purpose and objectives
- Roles & responsibilities
- Recommendation regarding the elaboration of FS
Workshop 5: Elaborating Functional Specifications
- Outlining FS for the case study application
- Drafting some functionalities
- Debriefing
Risk Management Refresh: Scalability and Objectives
- Risk management refresh: purpose and objectives; process; roles & responsibilities; scalability
- Risk Management traps to avoid
Workshop 6: Performing Functional Risk Assessment
- Performing a functional risk assessment for functionalities of the case study application
- Debriefing
Migration and Supporting Activities
- Risk mitigation measures: Purpose and objectives; roles & responsibilities; scheduling and scalability; risk mitigation: more than testing
- Supporting activities: What supporting processes
Introduction to Design Review
- Design Review: Purpose and objectives; Roles & responsibilities
- Design Review more than Design Qualification
Workshop 7: Design Review Planning
- Planning and elaborating a design review strategy for the case study application
- Debriefing
Practical Approach to Design Review
- Design review process: points to consider
- Design review scalability
- Recommendation
Source Code Review
- Source code Review: Purpose and objectives; Roles & responsibilities
- What should be reviewed; how to review / document
Interactive Session: Good Validation Practices
- IT and system governance
- CSV roles and responsibilities
- Role of quality unit
Testing and Verification: Objectives and Content
- Testing and verification: Purpose and objectives; roles & responsibilities
- Efficient Testing
Workshop 8: Elaborating OQ / FT Test Cases
- Outlining OQ/FT and PQ/FT for the case study application
- Drafting some functional test cases
- Drafting some performance test cases
- Debriefing
Alternative & Agile Approaches
- Alternative software development models
- Agility objectives
- Needs for flexible engineering methodologies
- Practical approaches and recommendations
Integration Project vs Bespoke Development
- Roles & responsibilities, life cycle for: Integration projects; development projects
- What to leverage and how to leverage?
Workshop 9: Elaborating a Qualification / Validation Report
- Outlining & drafting a qualification report for the case study application
- Debriefing
Qualification / Validation Report: Objectives and Content
- Qualification/Validation report:
- Purpose and objectives
- Roles & responsibilities
- Report structure
- Recommendation
Bringing Legacy Systems into Compliance
- Objectives
- What shall be done?
- Recommendation
System Classification – A Record-Based Approach
- Needs for a system classification
- Classification criteria
- How to classify a Systems?
Today / Future IT Compliance Challenges
- Open Source software validation
- Challenge demands infrastructure platforms for applications
- Global systems validation vs local defence
- Paperless recipe-based production – ISA 95 / S 88
- Cloud computing – Data integrity
- Validating Artificial Intelligence (AI)
- Challenges for data integrity on lab systems