Unit 5: Quality Assurance and Quality Management

B.Sc. 3rd Year • Pharmaceutical Microbiology

Unit Weight: 20 Hours

Study focus: This is one of the largest and most important units of Pharmaceutical Microbiology. The main areas include quality risk management, HACCP, GHP, GMP, GLP, ISO 9001, ISO 22000, auditing and quality assurance. For examination, understand the concepts, differences, processes and practical examples rather than memorizing definitions alone.

5.1 Introduction to Quality Assurance and Quality Management

Quality is essential in pharmaceutical and food-related industries because the final product must be safe, effective, consistent and suitable for its intended use. Microbiological contamination, incorrect processing, poor documentation, inadequate cleaning or failure of equipment can reduce product quality and may create a risk to consumers.

Quality management is therefore not limited to testing the final product. It involves planning, prevention, monitoring, documentation, risk control, trained personnel, appropriate facilities and continuous improvement throughout the entire process.

Simple concept:
Quality management means controlling the whole system so that a product is consistently made and controlled according to established quality requirements.

Quality Assurance

Quality assurance (QA) is the planned and systematic set of activities used to provide confidence that a product or process will meet specified quality requirements. QA is mainly preventive in nature.

For example, instead of waiting until a medicine is found contaminated at the end of production, QA attempts to prevent contamination by controlling personnel hygiene, cleaning procedures, equipment, environmental conditions, documentation and validated processes.

Quality Control

Quality control (QC) is concerned mainly with sampling, testing and examination of materials, products and processes to determine whether they meet specified standards. QC therefore provides evidence about the quality of a product through testing and inspection.

Quality Assurance

Prevention-oriented
System and process focused
Includes documentation and training
Includes validation and audits
Controls quality throughout production

Quality Control

Testing-oriented
Product and sample focused
Includes laboratory testing
Detects deviations and failures
Confirms whether requirements are met

Exam point: QA asks mainly, “How can we prevent failure?” while QC asks mainly, “Does the product meet the required specification?”

5.2 Quality Risk Management

Definition

Quality risk management (QRM) is a systematic process for assessing, controlling, communicating and reviewing risks to the quality of a product or process.

The purpose is not to assume that every risk can be completely eliminated. Instead, the objective is to identify important risks, understand their possible effects and reduce them to an acceptable level.

Risk: The combination of the probability of occurrence of harm and the severity of that harm.

Hazard and Risk

Term	Meaning	Example
Hazard	A potential source of harm.	Pathogenic microorganism present in raw material.
Risk	The possibility that the hazard will cause harm, considering its likelihood and severity.	Contaminated raw material causing microbial contamination of a sterile product.

Why is Quality Risk Management Important?

Helps identify potential quality problems before they occur.
Helps prioritize important risks.
Supports preventive action.
Reduces contamination and cross-contamination.
Improves product and patient safety.
Supports efficient use of resources.
Helps in decision-making during deviations and changes.
Supports continuous improvement.

5.3 Principles of Quality Risk Management

Quality risk management should be based on scientific knowledge and should ultimately protect product quality and, where applicable, patient or consumer safety.

Main Principles

Risk evaluation should be based on scientific knowledge.
The level of effort should be proportional to the level of risk.
Important risks should be identified systematically.
Risk decisions should be documented.
Risk should be communicated to relevant personnel.
Risks should be reviewed when new information becomes available.
Risk management should support continuous improvement.

Example: A small risk associated with a non-critical office activity does not require the same level of investigation as microbial contamination of an injectable pharmaceutical product. The effort should therefore be proportional to the potential impact.

5.4 Quality Risk Management Process

The quality risk management process can be understood as a continuous cycle rather than a single one-time activity.

Risk Identification → Risk Analysis → Risk Evaluation → Risk Control → Risk Communication → Risk Review

Step 1: Risk Identification

Risk identification involves finding hazards or situations that may negatively affect product quality.

Sources of information may include previous deviations, complaints, environmental monitoring results, laboratory results, equipment failures, scientific literature and expert knowledge.

Example: Repeated microbial counts above the acceptable level in a pharmaceutical water system may indicate a contamination risk that requires investigation.

Step 2: Risk Analysis

Risk analysis determines the nature and level of risk. The likelihood of occurrence and the possible severity of consequences are considered.

Step 3: Risk Evaluation

The analyzed risk is compared with predefined criteria to determine whether it is acceptable or requires further action.

Step 4: Risk Control

Risk control involves deciding how the identified risk should be reduced, eliminated, transferred or accepted.

Step 5: Risk Communication

Relevant information about the risk and control measures should be communicated to appropriate personnel and departments.

Step 6: Risk Review

Risk should be periodically reviewed to determine whether the control measures remain effective and whether new information has changed the level of risk.

5.5 Risk Assessment

Risk assessment is the systematic process of identifying hazards, analyzing their possible consequences and evaluating whether the resulting risk is acceptable.

Hazard Identification → Risk Analysis → Risk Evaluation

1. Hazard Identification

Identify what could go wrong and what could cause harm.

2. Risk Analysis

Estimate the likelihood and severity associated with the identified hazard.

3. Risk Evaluation

Compare the estimated risk with established criteria and determine whether additional control is necessary.

Risk Ranking

Risks may be classified as low, medium or high depending on the organization's defined criteria.

Risk Level	General Interpretation	Example
Low	Limited effect and low probability	Minor documentation error without impact on product quality.
Medium	Potentially significant quality effect	Temporary failure of a monitoring system requiring investigation.
High	Potential serious impact on product safety or quality	Loss of microbial control in a sterile manufacturing area.

Exam tip: Remember the sequence: Identify → Analyze → Evaluate. These three together form the core of risk assessment.

5.6 Risk Control and Risk Communication

Risk Control

Risk control means implementing measures to reduce a risk to an acceptable level. Controls should be selected according to the importance of the risk.

Common approaches to risk control

Eliminating the source of risk where possible.
Reducing the probability of occurrence.
Reducing the severity of consequences.
Introducing monitoring systems.
Establishing preventive procedures.
Providing training.
Using appropriate equipment and engineering controls.

Example: If microbial contamination is associated with poor personnel movement between clean and less-clean areas, controlled entry, gowning procedures and personnel training can reduce the risk.

Risk Communication

Risk communication is the sharing of information about identified risks, their assessment, control measures and decisions among relevant personnel.

Good communication ensures that production, microbiology, quality control, engineering, maintenance and management understand their responsibilities.

5.7 Risk Management Methodology and Tools

Different tools may be selected depending on the nature and complexity of the problem. The purpose of risk tools is to make risk identification and decision-making more systematic.

Important Risk Management Tools

Tool	Main Purpose	Example
FMEA	Identifies possible failure modes and evaluates their effects.	Failure analysis of a tablet coating process.
FTA	Analyzes how different failures can lead to a major unwanted event.	Investigating possible causes of sterile product contamination.
HACCP	Identifies hazards and controls critical points in a process.	Microbiological safety of pasteurized milk.
Risk ranking	Prioritizes risks according to predefined criteria.	Ranking contamination risks in manufacturing areas.
HAZOP	Systematically examines process deviations and their possible consequences.	Evaluation of process and utility systems.

Failure Mode and Effects Analysis (FMEA)

FMEA is a preventive technique used to identify possible ways in which a process, equipment or system can fail and to determine the consequences of those failures.

Basic FMEA approach

Process Step → Possible Failure → Effect → Cause → Risk Priority → Control

Example: During pharmaceutical manufacturing, a failure of a cleaning procedure may leave microbial contamination on equipment. The possible effect is contamination of the next batch. FMEA helps identify the failure and establish preventive controls.

Fault Tree Analysis (FTA)

FTA starts with an undesirable event and works backward to identify possible causes. It is therefore a useful method for analyzing complex failures.

Example: Top event: Microbial contamination of sterile product
Possible causes may include contaminated equipment, inadequate environmental control, poor personnel practices or failure of sterilization.

5.8 HACCP

Meaning

HACCP stands for Hazard Analysis and Critical Control Point. It is a systematic preventive approach used to identify, evaluate and control hazards that are significant for food safety.

HACCP is especially important in food microbiology because many food hazards can be controlled during processing before the final product reaches the consumer.

Types of Hazards in HACCP

Biological Hazards

Bacteria
Viruses
Parasites
Fungi and their toxins

Chemical Hazards

Cleaning chemical residues
Pesticide residues
Heavy metals
Natural toxins

Physical Hazards

Glass
Metal fragments
Stones
Other foreign materials

Seven Principles of HACCP

Conduct hazard analysis.
Identify critical control points (CCPs).
Establish critical limits.
Establish monitoring procedures.
Establish corrective actions.
Establish verification procedures.
Establish record-keeping and documentation procedures.

Explanation of the Seven Principles

1. Conduct Hazard Analysis

Identify biological, chemical and physical hazards associated with each stage of the process.

2. Identify Critical Control Points

A critical control point is a step at which control can be applied to prevent, eliminate or reduce a significant food safety hazard to an acceptable level.

3. Establish Critical Limits

A measurable limit is established for each CCP. The limit may involve temperature, time, pH, concentration or another appropriate parameter.

4. Establish Monitoring Procedures

Monitoring determines whether the CCP remains within its critical limit.

5. Establish Corrective Actions

If monitoring shows that a critical limit has not been met, predetermined corrective action should be taken.

6. Establish Verification Procedures

Verification confirms that the HACCP system is functioning effectively.

7. Record Keeping and Documentation

Records provide evidence that hazards were assessed, CCPs were monitored and corrective actions were taken when required.

Example: HACCP in Pasteurized Milk

Raw Milk → Reception → Heat Treatment → Cooling → Packaging → Storage

A major biological hazard in milk is pathogenic microorganisms. Heat treatment can serve as an important control step because appropriate pasteurization reduces microbial hazards. Monitoring the relevant processing conditions provides evidence that the control step is functioning.

Exam tip: For a 10-mark HACCP question, always write the full form, definition, importance, three types of hazards, seven principles and at least one practical example.

5.9 Quality Risk Management for Facilities, Equipment and Utilities

Facilities, equipment and utilities can directly affect pharmaceutical product quality. Poorly designed premises or poorly maintained equipment may introduce contamination, mix-ups, cross-contamination or process failure.

Facilities

Pharmaceutical facilities should be designed to support appropriate personnel flow, material flow, cleaning, environmental control and prevention of contamination.

Important considerations

Appropriate layout and workflow
Controlled access
Suitable surfaces
Effective cleaning and sanitation
Environmental monitoring
Temperature and humidity control where required
Control of cross-contamination
Proper waste handling

Equipment

Equipment should be suitable for its intended purpose and should be cleaned, maintained, calibrated and, where required, qualified.

Control	Purpose
Cleaning	Removes residues and microorganisms.
Maintenance	Keeps equipment functioning correctly.
Calibration	Ensures measuring instruments provide reliable measurements.
Qualification	Provides documented evidence that equipment or systems perform as intended.

Utilities

Utilities are systems that support pharmaceutical operations. Important utilities may include water, HVAC systems, compressed gases, steam and electrical systems.

Example: Pharmaceutical Water

Water can be a major source of microbial contamination if it is not appropriately designed, maintained and monitored. Therefore, water systems require suitable control, sanitation and monitoring.

Example: HVAC

Heating, ventilation and air-conditioning systems can influence temperature, humidity, air movement, particulate levels and contamination control.

Important: Poor HVAC control can contribute to contamination or cross-contamination, especially where different products or controlled environments are involved.

5.10 Good Hygiene Practices (GHP)

Definition

Good Hygiene Practices are basic hygienic measures used to maintain cleanliness and reduce contamination during food or pharmaceutical-related activities.

Major Components of GHP

Personal hygiene
Proper hand washing
Suitable protective clothing
Clean premises
Clean equipment and utensils
Safe water supply
Proper waste disposal
Pest control
Proper cleaning and sanitation
Health monitoring of personnel where appropriate

Example: A microbiology laboratory worker should wash and sanitize hands, wear appropriate protective clothing and avoid practices that could contaminate sterile materials.

Importance of GHP

GHP reduces the entry and spread of microorganisms, helps maintain hygienic conditions and provides the basic foundation for more advanced quality systems.

5.11 Good Manufacturing Practices (GMP)

Definition

Good Manufacturing Practices are principles and requirements designed to ensure that products are consistently produced and controlled according to appropriate quality standards.

GMP is especially important in pharmaceutical manufacturing because poor manufacturing practices can affect the safety, identity, strength, purity and quality of products.

Main Elements of GMP

Element	Importance
Personnel	Qualified and trained personnel are essential for correct operations.
Premises	Proper layout and cleanliness reduce contamination and mix-ups.
Equipment	Suitable and properly maintained equipment supports consistent production.
Materials	Raw materials must be appropriately controlled and identified.
Production	Processes should be controlled and performed according to approved procedures.
Documentation	Records provide evidence of what was done and support traceability.
Quality control	Materials and products are tested according to established requirements.
Validation	Provides evidence that important processes consistently achieve intended results.
Complaints and recalls	Problems in marketed products can be investigated and controlled.

Example of GMP

Suppose a pharmaceutical company manufactures tablets. GMP requires controlled raw materials, clean facilities, suitable equipment, trained personnel, approved procedures, appropriate documentation, in-process controls and final quality testing.

Exam tip: In a GMP answer, do not write only “maintain cleanliness.” Explain personnel, premises, equipment, materials, production, documentation, quality control, validation and complaint/recall systems.

5.12 Good Laboratory Practices (GLP)

Definition

Good Laboratory Practices are principles concerned with the organization, personnel, facilities, equipment, procedures, records and reporting of laboratory studies so that laboratory data are reliable, traceable and of appropriate quality.

Important Elements of GLP

Proper laboratory organization
Qualified and trained personnel
Suitable facilities
Appropriate equipment
Standard operating procedures
Proper identification and handling of test and reference materials
Study plans
Accurate recording of raw data
Quality assurance activities
Proper reporting
Archiving of records and materials where required

Example: During a microbiological assay of an antibiotic, GLP requires proper identification of samples, calibrated equipment, appropriate culture conditions, accurate recording of observations and preservation of relevant laboratory records.

Why GLP is Important

Improves reliability of laboratory results.
Provides traceability.
Reduces errors.
Supports reproducibility.
Ensures proper documentation.
Improves confidence in laboratory data.

5.13 GHP vs GMP vs GLP

Feature	GHP	GMP	GLP
Main focus	Hygiene	Manufacturing quality	Laboratory quality
Main purpose	Prevent contamination	Ensure consistent product quality	Ensure reliable laboratory data
Application	Personnel, premises, sanitation	Production and control systems	Laboratory studies and testing
Important components	Cleaning, hygiene, waste, pest control	Production, documentation, validation, QC	SOPs, records, equipment, study plans

Easy memory:
GHP = Hygiene
GMP = Manufacturing
GLP = Laboratory

5.14 ISO 9001 – Quality Management System

ISO 9001 is an international standard for a quality management system (QMS). It provides a systematic framework for organizations to establish, implement, maintain and improve their quality management processes.

Important Quality Management Principles

Customer focus – understanding and meeting applicable customer requirements.
Leadership – establishing direction and commitment to quality.
Engagement of people – involving competent personnel.
Process approach – managing activities as interconnected processes.
Improvement – continuously improving the system.
Evidence-based decision making – using reliable information and data.
Relationship management – managing relevant external and internal relationships.

Example

A pharmaceutical company may use a quality management system to control documents, training, purchasing, complaints, corrective actions, internal audits and continual improvement.

Remember: ISO 9001 is primarily a quality management system standard. It is not simply a laboratory testing method.

5.15 ISO 22000 – Food Safety Management System

ISO 22000 is a standard for food safety management systems. It provides a structured approach for organizations involved in the food chain to identify and control food safety hazards.

Main Concepts

Food safety management system
Communication throughout the food chain
Prerequisite programmes
Hazard analysis
Control of food safety hazards
HACCP-based principles
System management and continual improvement

Example

A dairy processing company can use a food safety management system to control hazards from raw milk reception through processing, packaging, storage and distribution.

ISO 9001 vs ISO 22000

Feature	ISO 9001	ISO 22000
Main focus	Quality management	Food safety management
Application	Broad range of organizations	Organizations in the food chain
Major concern	Consistent quality and customer requirements	Control of food safety hazards
HACCP relationship	Not specifically a HACCP standard	Uses HACCP-based food safety principles

5.16 Safety and Quality Auditing

Definition of Audit

An audit is a systematic and documented examination of activities, records, systems or processes to determine whether specified requirements are being fulfilled.

Auditing is important because written procedures alone cannot guarantee that an organization is actually following those procedures.

Types of Audits

Type	Meaning	Example
Internal audit	Conducted within the organization to evaluate its own system.	Pharmaceutical company audits its microbiology laboratory.
External audit	Conducted by an external organization or party.	Supplier or certification audit.
Supplier audit	Evaluates the quality system or performance of a supplier.	Audit of a raw material supplier.
Regulatory inspection	Assessment by an appropriate regulatory authority.	Inspection of a pharmaceutical manufacturing facility.

Audit Process

Planning → Opening Meeting → Evidence Collection → Findings → Closing Meeting → Report → Corrective Action → Follow-up

1. Audit Planning

Define the objective, scope, criteria, team and schedule of the audit.

2. Opening Meeting

The audit team explains the purpose and scope and communicates with responsible personnel.

3. Evidence Collection

Evidence may be collected through observation, interviews, document review, record examination and sampling.

4. Identification of Findings

Auditors compare observed practices with defined requirements and document conformities and nonconformities.

5. Closing Meeting

Major findings are discussed with responsible personnel.

6. Audit Report

The findings and conclusions are formally documented.

7. Corrective Action and Follow-up

The organization addresses identified problems and verifies whether corrective actions have been effectively implemented.

5.17 Quality Assurance

Definition

Quality assurance is a planned and systematic approach used to ensure that processes and systems are capable of consistently producing products that meet established quality requirements.

Major Components of Quality Assurance

Preventive Activities

Training
Good practices
Validation
Risk assessment
Process control
Qualification

Monitoring and Improvement

Audits
Deviation investigation
CAPA
Change control
Complaint handling
Product recall systems

CAPA

CAPA stands for Corrective and Preventive Action. Corrective action addresses the cause of an identified problem, while preventive action aims to prevent potential problems from occurring.

Example: If repeated microbial contamination occurs because a cleaning procedure is inadequate, corrective action may involve revising the procedure and retraining personnel. Preventive measures may include improved monitoring and periodic review of the cleaning system.

Change Control

Change control is a systematic approach for evaluating, approving, implementing and documenting changes that may affect product quality.

For example, changing a disinfectant used in a pharmaceutical production area should be assessed before implementation because it may affect microbial control.

5.18 Quality Assurance vs Quality Control

Basis	Quality Assurance	Quality Control
Nature	Preventive	Detection/testing oriented
Focus	Processes and systems	Materials and products
Purpose	Prevent defects	Detect defects
Activities	Audits, validation, training, documentation, risk management	Sampling, testing, inspection
Example	Validating a sterilization process	Testing a pharmaceutical product for microbial contamination

Very important exam point: QA and QC are related but they are not the same. QC is an important part of an overall quality system, while QA is broader and focuses on ensuring that the complete system is capable of producing consistent quality.

5.19 Integrated Quality Management Approach

In real pharmaceutical and food industries, these concepts do not operate separately. They work together as an integrated quality system.

GHP → GMP → GLP → Risk Management → HACCP → Auditing → QA → Continuous Improvement

GHP establishes basic hygienic conditions. GMP controls manufacturing activities. GLP ensures reliable laboratory work. Risk management identifies and controls quality risks. HACCP is particularly useful for food safety hazards. Auditing checks whether the system is being followed. QA brings these activities together into a systematic quality framework.

5.20 Important Practical Examples

Situation	Possible Quality Risk	Control
Contaminated pharmaceutical water	Microbial contamination	Water-system monitoring, sanitation and maintenance
Poor personnel hygiene	Microbial contamination	GHP, training and hygiene monitoring
Inadequately cleaned equipment	Carryover and cross-contamination	Validated cleaning procedure
Incorrect equipment calibration	Incorrect measurement	Calibration and maintenance
Failure of pasteurization control	Survival of microbial hazards	HACCP monitoring and corrective action
Missing batch record	Loss of traceability	GMP documentation system
Unreliable laboratory result	Incorrect quality decision	GLP, SOPs, calibration and documentation
Repeated deviation	Systemic quality problem	Root-cause investigation and CAPA

5.21 10-Mark Long Answer Preparation

Q1. Define quality risk management. Discuss its principles and process.

Quality risk management is a systematic process for assessing, controlling, communicating and reviewing risks to product quality. It is used to identify potential quality problems and determine appropriate controls based on scientific knowledge and the level of risk.

The major principles of QRM include scientific decision-making, proportionality of effort to risk, systematic identification of risks, documentation, communication and periodic review. The process begins with risk identification, followed by risk analysis and risk evaluation. Appropriate control measures are then selected and implemented. The results are communicated to relevant personnel and the risk is reviewed periodically to ensure that the controls remain effective.

Answer structure: Definition → importance → principles → risk identification → analysis → evaluation → control → communication → review → example → conclusion.

Q2. Explain HACCP and discuss its seven principles.

HACCP stands for Hazard Analysis and Critical Control Point. It is a preventive food safety system used to identify, evaluate and control significant biological, chemical and physical hazards.

The seven principles are: conducting hazard analysis, identifying critical control points, establishing critical limits, establishing monitoring procedures, establishing corrective actions, establishing verification procedures and establishing appropriate record-keeping and documentation.

For example, in pasteurized milk processing, microbial hazards are considered and appropriate processing conditions are monitored as part of the food safety control system.

High-scoring structure: Full form → definition → importance → hazards → seven principles → example → advantages → conclusion.

Q3. Discuss GHP, GMP and GLP.

GHP, GMP and GLP are important good-practice systems used to maintain hygiene, manufacturing quality and laboratory reliability.

Good Hygiene Practices focus on personal hygiene, premises, cleaning, sanitation, water, waste management and pest control. Good Manufacturing Practices focus on controlled manufacturing, suitable premises and equipment, materials, personnel, documentation, validation and quality control. Good Laboratory Practices focus on laboratory organization, trained personnel, SOPs, equipment, study plans, raw data, reports and record management.

Together, these practices reduce contamination, errors and unreliable results and support an effective quality system.

Q4. Explain quality assurance and discuss its major components.

Quality assurance is a planned and systematic approach that provides confidence that products and processes will consistently meet established quality requirements. It is primarily preventive and covers the complete quality system rather than only final-product testing.

Major QA activities include training, documentation, risk management, validation, qualification, audits, deviation investigation, CAPA, change control, complaint handling, recall systems and continual improvement.

For example, validation of a sterilization process helps provide documented evidence that the process can consistently achieve its intended result.

Q5. Explain ISO 9001 and ISO 22000 and differentiate between them.

ISO 9001 provides a framework for a quality management system and emphasizes systematic control of organizational processes, customer requirements, evidence-based decision-making and continual improvement.

ISO 22000 provides a framework for food safety management and focuses specifically on controlling food safety hazards throughout the food chain. It incorporates HACCP-based principles together with prerequisite programmes and management-system elements.

Therefore, ISO 9001 has a broad quality-management focus, whereas ISO 22000 is specifically concerned with food safety management.

Q6. Describe safety and quality auditing and explain the audit process.

An audit is a systematic and documented examination of activities, records and processes against defined requirements. Audits help identify conformity, nonconformity and opportunities for improvement.

The audit process includes planning, opening meeting, collection of objective evidence, evaluation of findings, closing meeting, preparation of the audit report, corrective action and follow-up.

Audits may be internal, external, supplier-based or regulatory. They are important because they determine whether documented quality systems are actually implemented.

5.22 5-Mark Preparation

1. Quality Risk Management

Define QRM and explain risk identification, analysis, evaluation, control, communication and review.

2. FMEA

Define FMEA, state its purpose and explain failure identification, effects, causes, risk ranking and control.

3. HACCP

Write full form, definition, importance and seven principles with a brief example.

4. GMP

Define GMP and discuss personnel, premises, equipment, materials, documentation, production and quality control.

5. GLP

Define GLP and explain laboratory organization, personnel, SOPs, equipment, records and reporting.

6. GHP

Explain personal hygiene, sanitation, water, waste disposal, cleaning and pest control.

7. ISO 9001

Define ISO 9001 and discuss the major quality-management principles.

8. Auditing

Define audit and describe planning, evidence collection, findings, reporting and follow-up.

9. Quality Assurance

Define QA and explain validation, training, documentation, audits, CAPA and change control.

10. ISO 22000

Explain the food safety management system and its relationship with HACCP.

5.23 2-Mark Important Questions

Question	Key Answer
What is quality assurance?	Planned and systematic activities providing confidence that quality requirements will be met.
What is quality risk management?	A systematic process for assessing, controlling, communicating and reviewing quality risks.
Define hazard.	A potential source of harm.
Define risk.	The possibility of harm considering likelihood and severity.
What is FMEA?	Failure Mode and Effects Analysis; a systematic method for identifying possible failures and their effects.
What is HACCP?	Hazard Analysis and Critical Control Point.
What is CCP?	A step where control can be applied to prevent, eliminate or reduce a significant food safety hazard.
What is GHP?	Good Hygiene Practices used to maintain hygienic conditions and reduce contamination.
What is GMP?	Good Manufacturing Practices for consistent production and control of quality products.
What is GLP?	Good Laboratory Practices for reliable and traceable laboratory work and data.
What is CAPA?	Corrective and Preventive Action.
What is ISO 9001?	An international standard for a quality management system.
What is ISO 22000?	A standard for food safety management systems.
What is an audit?	A systematic and documented examination against defined requirements.

5.24 Most Important Comparisons

Risk Assessment vs Risk Control

Risk Assessment	Risk Control
Identifies and evaluates risk.	Reduces or manages identified risk.
Includes identification, analysis and evaluation.	Includes selection and implementation of control measures.
Answers: “How serious is the risk?”	Answers: “What should we do about it?”

QA vs GMP

QA	GMP
Broad quality system.	Good manufacturing practice system.
Includes preventive and systematic activities.	Focuses strongly on controlled manufacturing.
Includes audits, CAPA, risk management and validation.	Includes premises, personnel, equipment, materials and production controls.

HACCP vs GMP

HACCP	GMP
Hazard-based preventive food safety system.	Broad manufacturing practice system.
Focuses on significant hazards and CCPs.	Covers manufacturing systems and practices.
Especially important in food safety.	Widely used in pharmaceutical manufacturing.

5.25 Quick Revision Table

Topic	Remember
QRM	Assess, control, communicate and review risk.
Risk assessment	Identify → Analyze → Evaluate.
FMEA	Failure modes and their effects.
FTA	Works backward from an unwanted event to possible causes.
HACCP	Hazard analysis + CCP control.
GHP	Hygiene.
GMP	Manufacturing.
GLP	Laboratory.
ISO 9001	Quality management system.
ISO 22000	Food safety management system.
Audit	Systematic examination against requirements.
QA	Prevention and systematic quality management.
QC	Sampling, testing and examination.
CAPA	Corrective and Preventive Action.
Change control	Controlled evaluation and implementation of changes.

5.26 Exam Tips

Tip 1: For long answers, start with a clear definition and then organize the answer using headings and subheadings.

Tip 2: For HACCP, memorize all seven principles in the correct order.

Tip 3: For risk management, remember: Identify → Analyze → Evaluate → Control → Communicate → Review.

Tip 4: Do not confuse GHP, GMP and GLP: Hygiene → Manufacturing → Laboratory.

Tip 5: In questions on GMP or QA, always include practical examples. Examples make the answer more understandable and demonstrate application of the concept.

Tip 6: For ISO 9001 and ISO 22000, clearly state their different focuses: quality management versus food safety management.

Tip 7: For auditing questions, write the process in sequence: Planning → Evidence → Findings → Report → Corrective Action → Follow-up.

Common mistake: Do not write that QA and QC are identical. QA is broader and preventive/system-oriented, while QC mainly involves testing and examination of materials and products.

Common mistake: Do not describe HACCP as simply “testing food.” HACCP is primarily a preventive hazard-control system.

Common mistake: Do not confuse a hazard with risk. A hazard is a potential source of harm, while risk considers the likelihood and severity of that harm.

5.27 Most Important Exam Questions

Define quality risk management and discuss its principles and process.
Explain risk assessment and risk control with suitable examples.
Discuss FMEA and other important quality risk management tools.
What is HACCP? Explain its seven principles with a suitable example.
Discuss quality risk management for pharmaceutical facilities, equipment and utilities.
Define GHP and explain its major components.
Define GMP and discuss its important elements.
Define GLP and explain its major components.
Differentiate between GHP, GMP and GLP.
Explain ISO 9001 as a quality management system.
Explain ISO 22000 and its importance in food safety management.
Differentiate between ISO 9001 and ISO 22000.
Define audit and explain the audit process.
Discuss quality assurance and its major components.
Differentiate between quality assurance and quality control.

5.28 Most Important Points for Final Revision

QRM Systematic management of quality risk.

Assessment Identify → Analyze → Evaluate.

Control Reduce or manage unacceptable risks.

FMEA Failure Mode and Effects Analysis.

FTA Fault Tree Analysis.

HACCP Seven principles.

GHP Hygiene and sanitation.

GMP Controlled manufacturing.

GLP Reliable laboratory work.

ISO 9001 Quality management system.

ISO 22000 Food safety management system.

Audit Systematic examination against requirements.

QA Prevention and systematic quality management.

QC Testing and examination.

CAPA Corrective and Preventive Action.

Change Control Controlled management of changes.

Final exam strategy: For a 10-mark question, do not write only definitions. Use the sequence: Definition → Principle → Main components → Process/steps → Example → Advantages/importance → Conclusion.