Foreword |
|
ix | |
|
Preface |
|
xi | |
|
Publisher's Note |
|
xiii | |
Dedication |
|
xv | |
|
|
1 | (4) |
|
|
5 | (8) |
|
What Is a Computer System? |
|
|
5 | (1) |
|
What Is a Computer Systems Validation? |
|
|
5 | (1) |
|
Why Do We Validate Computer Systems? |
|
|
6 | (2) |
|
|
8 | (1) |
|
Which Systems Should Be Validated? |
|
|
8 | (1) |
|
Introduction to the Computer Systems Validation Process |
|
|
9 | (2) |
|
Computer Systems Validation for Low Criticality and/or Low Complexity Projects |
|
|
11 | (2) |
|
USA Regulatory Requirements for Computer Systems |
|
|
13 | (8) |
|
|
17 | (1) |
|
|
18 | (3) |
|
New Computer Systems Validation Model |
|
|
21 | (4) |
|
Computer Validation Management Cycle |
|
|
25 | (4) |
|
|
26 | (1) |
|
|
26 | (1) |
|
|
27 | (1) |
|
|
27 | (1) |
|
|
27 | (1) |
|
Validation of Computer Systems |
|
|
27 | (1) |
|
|
27 | (1) |
|
|
27 | (2) |
|
Computer Validation Program Organization |
|
|
29 | (6) |
|
|
29 | (1) |
|
Computer Systems Validation Executive Committee |
|
|
30 | (1) |
|
CSV Cross-Functional Team |
|
|
30 | (1) |
|
|
31 | (1) |
|
|
32 | (1) |
|
Validation Program Coordinators |
|
|
32 | (3) |
|
The Computer Systems Validation Process |
|
|
35 | (8) |
|
|
40 | (3) |
|
Validation Project Plans and Schedules |
|
|
43 | (6) |
|
|
43 | (1) |
|
|
43 | (2) |
|
|
45 | (1) |
|
|
45 | (4) |
|
|
49 | (8) |
|
|
49 | (1) |
|
|
49 | (1) |
|
Document Inspections and Technical Reviews |
|
|
50 | (1) |
|
|
51 | (1) |
|
|
52 | (2) |
|
|
54 | (3) |
|
|
57 | (24) |
|
|
57 | (1) |
|
Hardware Installation Qualification |
|
|
58 | (3) |
|
Software Installation Qualification |
|
|
61 | (3) |
|
System Operational Qualification |
|
|
64 | (3) |
|
System Performance Qualification |
|
|
67 | (2) |
|
Operating System and Utility Software Installation Verification |
|
|
69 | (1) |
|
Standard Instruments, Microcontrollers, Smart Instrumentation Verification |
|
|
70 | (3) |
|
Standard Software Packages Qualification |
|
|
73 | (1) |
|
A Related Product for ISO/IEC 12119, The IEEE Standard Adoption of ISO/IEC 12119 |
|
|
73 | (3) |
|
Configurable Software Qualification |
|
|
76 | (2) |
|
Custom-Built Systems Qualification |
|
|
78 | (3) |
|
|
81 | (4) |
|
|
81 | (1) |
|
|
81 | (4) |
|
Relevant Procedural Controls |
|
|
85 | (2) |
|
|
87 | (4) |
|
|
87 | (1) |
|
Change Management Process |
|
|
88 | (3) |
|
|
91 | (2) |
|
|
91 | (1) |
|
Training in the Regulated Industry |
|
|
91 | (2) |
|
|
93 | (12) |
|
|
93 | (1) |
|
|
93 | (3) |
|
|
96 | (1) |
|
|
97 | (1) |
|
|
98 | (1) |
|
Other Key Security Elements |
|
|
99 | (6) |
|
|
105 | (2) |
|
|
105 | (1) |
|
|
105 | (2) |
|
Hardware/Software Suppliers Qualification |
|
|
107 | (4) |
|
Maintaining the State of Validation |
|
|
111 | (6) |
|
|
111 | (6) |
|
Part 11 Remediation Project |
|
|
117 | (4) |
|
|
117 | (1) |
|
|
118 | (1) |
|
Corrective Action Planning |
|
|
119 | (1) |
|
|
119 | (1) |
|
Remediation Project Report |
|
|
120 | (1) |
|
|
121 | (4) |
|
Instructions to Operators |
|
|
121 | (1) |
|
|
121 | (1) |
|
Part 11-Related Operational Checks |
|
|
122 | (2) |
|
Validation of Operational Checks |
|
|
124 | (1) |
|
Compliance Policy Guide (CPG) 7153.17 |
|
|
125 | (4) |
|
|
125 | (4) |
|
|
129 | (8) |
|
|
129 | (1) |
|
What Constitutes an Electronic Record? |
|
|
129 | (1) |
|
What Constitutes a Part 11 Required Record? |
|
|
130 | (1) |
|
How Should Part 11 Records Be Managed? |
|
|
130 | (1) |
|
Minimum Record Retention Requirements |
|
|
131 | (1) |
|
When Are Audit Trails Applicable for Electronic Records? |
|
|
131 | (1) |
|
|
132 | (1) |
|
|
132 | (1) |
|
|
133 | (1) |
|
|
133 | (1) |
|
Electronic Records Authenticity |
|
|
134 | (1) |
|
|
135 | (2) |
|
|
137 | (4) |
|
|
137 | (1) |
|
|
137 | (1) |
|
Password-Based Signatures |
|
|
138 | (1) |
|
|
138 | (3) |
|
Technologies Supporting Part 11 |
|
|
141 | (6) |
|
Paper-Based versus Electronic-Based Solutions |
|
|
141 | (1) |
|
|
142 | (1) |
|
|
142 | (3) |
|
|
145 | (1) |
|
|
145 | (2) |
|
|
147 | (6) |
|
|
147 | (1) |
|
|
148 | (1) |
|
|
148 | (2) |
|
|
150 | (1) |
|
|
150 | (3) |
|
|
153 | (88) |
|
|
|
|
157 | (8) |
|
B Abbreviations and Acronyms |
|
|
165 | (2) |
|
C Applicability of a Computer Validation Model |
|
|
167 | (6) |
|
D Criticality and Complexity Assessment |
|
|
173 | (10) |
|
E Sample Development Activities Grouped by Project Periods |
|
|
183 | (26) |
|
F Administrative Procedures Mapped to Part 11 |
|
|
209 | (6) |
|
G Sample Audit Checklist for a Closed System |
|
|
215 | (4) |
|
H Computer Systems Regulatory Requirements |
|
|
219 | (20) |
|
I Technical Design Key Practices |
|
|
239 | (2) |
Index |
|
241 | |