Perform Annual Supplier Risk Assessments to Ensure GMP Compliance

Conduct Annual Supplier Risk Assessments to Ensure GMP Control

Remember: Annual supplier risk assessments are a GMP requirement to verify continued quality, regulatory compliance, and risk mitigation in pharmaceutical sourcing.

Why This Matters in GMP

Suppliers of raw materials, packaging components, contract services, and laboratory testing directly impact product quality and patient safety. Risk levels may change over time due to performance issues, regulatory updates, or market changes. Conducting annual supplier risk assessments ensures that vendors continue to meet GMP standards, have adequate quality systems, and align with current regulatory expectations. Neglecting these assessments can lead to unnoticed quality drift, supply chain disruptions, or regulatory violations due to third-party non-compliance.

Also Read: Never Use Expired Standard Operating Procedures in GMP Environments

Regulatory and Compliance Implications

FDA 21 CFR Part 211.84 requires testing and approval of materials before use, implying supplier reliability. EU GMP Chapter 7 mandates that suppliers be qualified and regularly evaluated based on risk. WHO GMP and Schedule M emphasize supplier audits, risk classification, and performance review. During inspections, regulators request supplier qualification files, audit reports, and risk ranking documents. Inadequate or outdated assessments often result in supplier qualification citations or demands for corrective action.

Implementation Best Practices

Develop a supplier risk assessment SOP defining criteria

such as quality history, audit results, regulatory status, and delivery performance.

Use a risk scoring system (e.g., low, medium, high) to prioritize suppliers for annual review or re-audit.

Involve QA, Procurement, and relevant departments in periodic reviews and updates to the supplier list.

Maintain updated supplier qualification files with certificates, change notifications, and audit summaries.

Reclassify suppliers after major incidents or market alerts, triggering requalification if necessary.

Regulatory References

FDA 21 CFR Part 211.84 – Testing and Approval of Incoming Materials
EU GMP Chapter 7 – Outsourced Activities and Supplier Qualification
WHO GMP – Vendor Approval and Risk Assessment
Schedule M – Supplier Evaluation and Requalification Systems