In the world of clinical trials, ensuring the safety of participants and the reliability of study results is the highest priority. The structured approach to identifying and managing the risks to ensuring safety and data quality is known as Risk Management. Risk Management is not just a best practice—it is a core regulatory requirement.
The process is guided by industry standards, primarily the ICH Guideline for Good Clinical Practice (GCP) E6(R3), which requires that “clinical trial processes and risk mitigation strategies implemented to support the conduct of the trial should be proportionate to the importance of the data being collected and the risks to trial participant safety and reliability of trial results.” Furthermore, this is underpinned by Quality by Design (QbD) methodologies. This means thinking about quality from the start.
Effective risk management relies on strong communication and collaboration from everyone involved and is applied throughout the entire life cycle of the project. This blog breaks down PROMETRIKA’s approach to integrated quality risk management throughout each phase of the clinical trial life cycle.
Study Startup Phase
At PROMETRIKA, the risk management process starts early, beginning with protocol development. This initial phase is fundamentally about integrating QbD, a principle emphasized in ICH E6(R3), into the protocol design.
During the study startup, a trial risk assessment meeting is held to bring together the key project stakeholders, who will use a tool like the Transcelerate Biopharma Inc. Risk Assessment and Categorization Tool (RACT) to identify, document, and measure study risks.
Regulatory Context: ICH E6(R3) Section 3.10.1.1 (Risk Identification) The sponsor should identify risks that may have a meaningful impact on critical-to-quality factors prior to trial initiation and throughout trial conduct. Risks should be considered across the processes and systems, including computerized systems, used in the clinical trial.
The team assesses each risk category by evaluating three key components, which align with regulatory expectations for evaluating risks (ICH E6 (R3) Section 3.10.1.2):
-
Impact: How serious would the consequence be?
-
Probability: How likely is it to happen?
-
Detectability: How easily can we spot the issue if it occurs?
The RACT generates a risk score based on the team’s evaluation. The risks are scored as High, Medium or Low. Risk mitigation and control strategies are developed for medium and high-level risks. Quality Tolerance Limits (QTLs) are set for trial-level risks and represent an acceptable threshold or a “safe operating range.” In addition to QTLs, the team agrees to risk responses if QTLs are triggered during the study conduct. This supports a decentralized and nimble clinical operations approach.
Regulatory Context: ICH E6(R3) Section 3.10.1.3 (Risk Control) Risk control should be proportionate to the importance of the risk to participant’s rights, safety and well-being, and the reliability of trial results. Risk mitigation activities may be incorporated, for example, in protocol design and implementation, monitoring plans, agreements between parties defining roles and responsibilities, and training. Where relevant, the sponsor should set prespecified acceptable ranges (e.g., quality tolerance limits at the trial level) to support the control of risks to critical-to-quality factors.
Once risks are assessed, the Trial Risk Manager develops an Integrated Quality and Risk Management Plan (IQRMP). This short, tailored document outlines how risks specific to the project will be managed across all functional areas.
Study Conduct Phase
During the trial, an approach called Risk Based Quality Management (RBQM) is used to manage quality across all stages. A key part of this is Risk Based Central Monitoring, which involves remote evaluation of data to detect issues early.
Key risk indicators (KRIs) are reviewed on an agreed upon cadence. If a QTL for a KRI crosses a pre-set threshold, the team acts based on the agreed upon trial risk responses.
Risk review and control outcomes are reviewed with the Sponsor on a regular basis, with focus on continual improvements being implemented as needed.
Regulatory Context: ICH E6(R3) Section 3.10.01.4 (Risk Communication) The sponsor should document and communicate the identified risks and mitigating activities, if applicable, to those who are involved in taking action or are affected by such activities. Communication also facilities risk review and continual improvement during clinical trial conduct.
Regulatory Context: ICH E6(R3) Section 3.10.1.5 (Risk Review) requires the sponsor to periodically review whether the risk control measures are still effective and relevant, especially as new information emerges during the study. Furthermore, Section 3.10.1.6 (Risk Reporting) requires that sponsors summarize all important quality issues and remedial actions in the final clinical study report.
Risk management is a continuous process, and the risk management approach may evolve as the clinical trial progresses. Regular risk re-assessments are performed to confirm the risk scores, KRIs, QTLs and responses remain fit for purpose and accurate. This is done annually at minimum but could be performed more frequently depending on the needs of the study and external risk factors.
Regulatory Context: ICH E6(R3) Section 3.10.1.5 (Risk Review) The sponsor should periodically review risk control measures to ascertain whether the implemented quality management activities remain effective and relevant, taking into account emerging knowledge and experience. Additional risk control measures may be implemented as needed.
Study Closeout
Throughout the course of the project all risk reviews are documented and filed to the electronic trial master file (eTMF). At the end of the study significant risks and/or issues, and how they were addressed should be summarized in the clinical study report (CSR).
Regulatory Context: ICH E6(R3) Section 3.10.1.6 (Risk Reporting) The sponsor should summarize and report important quality issues (including instances in which acceptable ranges are exceeded) and the remedial actions taken, and document them in the clinical trial report.
The team also holds a lessons-learned meeting at the end of the study to support continuous learning and improvement for new and ongoing studies.
The Value of an Experienced CRO Partner
For many Sponsors, partnering with an experienced Contract Research Organization (CRO) is essential for successfully navigating the complexities of a regulatory-driven risk management approach. The CRO acts as an extension of the Sponsor’s team, bringing specialized knowledge and infrastructure.
An experienced CRO brings value by:
- Providing Deep Expertise and Lessons Learned: A CRO has typically managed hundreds of trials across various therapeutic areas. This broad experience means they can quickly identify and anticipate risks that a Sponsor new to a field might miss. They have a deep, practical understanding of what usually goes wrong (common pitfalls) and how to fix it before it becomes a problem.
- Applying Advanced Technology and Tools: A CRO typically invests in specialized technologies for risk-based quality management (RBQM). These central monitoring systems are designed to:
- Use analytics to target activities (e.g., focusing on-site monitoring time on the highest-risk centers);
- Identify trends and outliers in data earlier;
- Meet the R3 mandate for proactive, continuous monitoring.
- Ensuring Proportionality and Efficiency: By using a structured risk assessment approach, the CRO helps the Sponsor allocate resources efficiently. This fulfills the ICH E6(R3) requirement that trial risk management processes must be proportionate to the risks to participant safety and data reliability, helping to prevent unnecessary burden or cost.
The Big Picture: Communication and Collaboration
Successful risk management is a team effort. Everyone is responsible for contributing to this success throughout the project’s life cycle.
Experienced partners, like PROMETRIKA, support Sponsors’ clinical trial teams with regulatory-aligned, proactive processes to effectively manage risks, better protect trial participants, and maintain reliability of the study results.