Data Integrity Compliance Project Completed Ahead of Schedule and Under Budget

Data Integrity

An internal audit of a top generic pharmaceutical manufacturer identified deficiencies in their legacy computerized systems related to SDLC requirements (GAMP standards, FDA 21 CFR Part 11 & Data Integrity). Brevitas consultants were enlisted to deliver an effective solution to bring the existing systems into regulatory compliance.



Area of Expertise

Regulatory Compliance


9 months

Services Provided

  • Project Management
  • FDA 21 CFR Part 11 & Data Integrity Compliance
  • Computer System Validation
  • Organizational Change Management


During Phase 1, 13 legacy systems were brought into FDA 21 CFR Part 11 and data integrity compliance, at par with industry best practices. These results spanned the Greater Toronto Area, and came in three months ahead of schedule and under budget.

Business Challenge

Our client is a top generic pharmaceutical manufacturer that identified several technical & procedural deficiencies after an internal audit. The deficiencies were related to legacy computerized manufacturing & packaging systems, in relation to system security, audit trail, and electronic record management and they rendered the equipment non-compliant with most FDA 21 CFR Part 11 and data integrity requirements. The challenge was to perform a comprehensive review of each system; each with widely differing software capabilities, and develop a software lifecycle management plan that would comprehensively address these issues, incite a perceptible change in organizational awareness, and spur adoption of industry best practices.

Our Approach

Brevitas was selected to prepare a complete compliance package for each of the impacted legacy systems. A total of 61 pieces of equipment were to be covered in a 3-phase project with stringent deadlines for each phase. The first stage of each project phase involved identifying as-built computer system capabilities, gap assessments, risk analyses, and development of a detailed mitigation plan. The second stage involved the execution and implementation of the mitigation plan to bring the legacy systems into FDA 21 CFR Part 11 and data integrity compliance, at par with industry best practices.

Results Achieved

  • Infused a system development lifecycle (SDLC) culture throughout Engineering, QA, and Production
  • Developed templates for use in system & equipment qualification, including:
    • URS integrated with computerized system requirements
    • Gap analysis and remediation plans for legacy computerized systems with emphasis on FDA 21 CFR Part 11 and data integrity compliance
    • Computerized system test procedures to be incorporated into qualification
    • Validation summary report with traceability matrix
  • Updated internal policies & procedures for user access management and data back-up/ archival/ retention to ensure alignment with corporate SDLC standards
  • Provided training to Engineering, QA, and Production on computerized system development lifecycle requirements

More Case Studies

Untitled design (25)

Airflow Visualization Study to Address Audit Observations

science-7788808_1280 (1)

Validation Framework and Data Integrity Program for CGT Non-Profit Organization

Serialization and Aggregation Project

Serialization and Aggregation Readiness for US Products

GMP Drug Manufacturing

GMP Drug Manufacturing Policy Development

Data Integrity Risk Assessment

FT-IR Instrument Data Integrity Risk Assessment

Autoclave Validation

Autoclave Qualification to Achieve Regulatory Compliance

logistics transportation services

Sortation Code Upgrade Enhances Sortation Functionality & Efficiency

SOp consolidation

SOP Consolidation across Multiple Global Sites Promotes Move towards Lean Operations

Let's Get Started!

Our expert consultants will guide you step-by-step through the process of achieving tangible results and long-lasting improvements.