From Checklists to Common Sense:How ICH GCP E6(R3) and QSMR Finally Made Quality Grow Up

For years, “quality” in clinical research and regulated product development has had an identity problem. It was often confused with:

• More SOPs
• More forms
• More signatures
• And everyone’s favorite metric: how many findings we closed this quarter

If it felt like quality was something you survived rather than used, you weren’t wrong.

Enter ICH GCP E6(R3) and the FDA’s Quality System Management Review (QSMR), two frameworks that quietly but decisively change the question from: “Did you follow the process?” to “Did your system actually work?” Progress, At last.

Quality Isn’t a Department. It’s a System

Both E6(R3) and QSMR make one thing painfully clear: Quality is not a function. It’s an operating model. Under these frameworks:

• Sponsors can’t “audit quality in” at the end
• CROs can’t hide behind delegation
• Leaders can’t outsource accountability to SOPs

Instead, regulators are looking for an intentional system that shows decisions are made, risks are prioritized, and learning is fed back into the product lifecycle. In other words: Show me how you think, not just what you filed.

Product Lifecycle Thinking: Because Stuff Changes

A radical idea embedded in both E6(R3) and QSMR is that products and trials evolve. Shocking, I know. Rather than freezing decisions at study start-up and pretending nothing unexpected will happen, these frameworks expect:

• Risks to be reassessed
• Controls to adapt
• Oversight to change based on real performance

This applies across the lifecycle:

• Protocol design
• Trial conduct
• Data integrity
• Post-study learning
• And, for combination products, feeding clinical insights back into design controls and risk files

Quality is no longer a snapshot. It’s a continuous feedback loop.

Risk Management: Fewer Spreadsheets, More Judgment

If your risk management process involves a 47-tab spreadsheet that no one reads after approval, E6(R3) and QSMR have some bad news. Risk management is no longer about listing every conceivable risk. It’s about identifying what could actually matter.

Both frameworks align squarely with ICH Q9 principles:

• Focus on what is Critical to Quality (CtQ)
• Evaluate the impact on participants and data
• Apply controls proportionate to risk
• Accept some risks on purpose, with documentation

Yes, that last one is important. Risk acceptance is not failure. Undocumented risk acceptance is.

Monitoring: Less “Where’s Waldo,” More “What’s the Signal?”

One of the quiet victories of E6(R3) is finally admitting that: “Looking at everything all the time” is not the same as “effective oversight.” Risk-based monitoring shifts the focus to:

• Trends
• Outliers
• Key risk indicators
• Early warning signals

Instead of heroic CRAs checking every data point, the expectation is targeted oversight that prevents problems before they metastasize. QSMR echoes this same philosophy at the system level:

• Are you detecting issues early?
• Are you learning from them?
• Or are you just closing CAPAs efficiently?

CAPA Is Not a Fitness Program

Let’s address the elephant in the room. If your CAPA system generates more CAPAs than actual improvements, congratulations, you’ve built a very efficient hamster wheel. E6(R3) and QSMR both refocus issue management on:

• Systemic root causes
• Impact on CtQs
• Effectiveness of actions (not speed of closure)

Minor issues with no real impact should not consume senior leadership time. Major risks absolutely should. This may sound obvious. History suggests otherwise.

Combination Products: Welcome to the Crossroads

For combination products, this shift is especially meaningful. Clinical trials are no longer a parallel universe disconnected from:

• Design controls
• Human factors
• Risk management files
• Software lifecycle management
•  Errors inform design changes
• Device performance trends inform risk controls
• Clinical quality feeds product quality—and vice versa

Yes, this requires coordination. No, regulators are not sympathetic if you didn’t plan for it. See https://consultwing.com/cw-483-combo-qsmr/ for additional insight.

What Inspectors Are Really Asking Now

Inspections under E6(R3 and QSMR) sound less like interrogations and more like therapy sessions:

• Why did you decide this risk mattered?
• How did you know your controls were working?
• What changed during the trial—and why?
• What did you learn, and where did it go?

If your answer is “because the SOP says so,” the conversation may get uncomfortable. Details on addressing key FDA observations can be found in https://consultwing.com/cw-483-combo-qsmr/

The Bottom Line

ICH GCP E6(R3) and QSMR don’t demand perfection. They demand intentionality.

They reward organizations that:

• Think critically
• Manage risk intelligently
• Build quality into systems
• Learn across the product lifecycle

And perhaps most importantly, they finally acknowledge what seasoned professionals have known for years: Real quality isn’t louder, bigger, or more complex. It’s smarter.

Consult Wing LLC partners with life sciences companies to design, remediate, and sustain robust Quality Management Systems across medical devices, pharmaceutical, biotech, and combination product portfolios. We align regulatory compliance with business objectives to support product lifecycle execution, inspection readiness, and long-term operational performance. For further discussion on how we can support your organization’s Combination Product strategy, visit www.ConsultWing.com