If the system is already qualified, why do we need additional validation?

IQ/OQ confirms installation and basic functionality from factory default settings. CSV confirms the system performs correctly in your specific use case, including SOPs, user roles / system configuration, data workflows, and architecture. The FDA requires validation for intended use (FDA Data Integrity Guidance).

Do we need to validate our system if we use it out-of-the-box?

Yes. Even default configurations must be validated for your intended use. FDA states that validation must be commensurate with risk and use (21 CFR 211.68(b)).

Isn’t the ACE IQ/OQ enough for regulatory compliance?

No. IQ/OQ is qualification, which is a component of validation, not the entirety. EMA Annex 11 and PIC/S PI 041-1 require user-specific validation, including risk assessments, user requirements, and procedural controls.

What happens if we don’t do CSV? Have labs ever been penalized for this??

Yes. Numerous FDA warning letters cite lack of CSV as a root cause of data integrity failures. Penalties include product recalls, import alerts, and consent decrees.

If we perform the Agilent CSV, are we guaranteed to pass an audit?

No vendor can guarantee audit success. However, a robust CSV aligned with regulatory expectations significantly reduces risk. Validation must include your user roles, SOPs, and data workflows.

Do I need to re-validate after every software patch?

Not necessarily. Use a risk-based approach. Minor patches may require impact assessment; major upgrades often require partial or full re-validation (PIC/S PI 041-1 Section 9.3).

What’s the risk if I skip validation after an upgrade?

You risk using a system that no longer performs as intended. This can lead to data integrity issues and audit findings. Assess your risk

Why can’t we reuse the ACE IQ/OQ for our validation?

You can incorporate it, but it must be supplemented with user-specific validation activities (e.g., URS, risk assessments, SOP alignment).

If our lab fails an audit, will you support us?

Agilent can provide documentation and technical support, but ultimate responsibility for CSV lies with the regulated user. Regulatory bodies expect the manufacturers of controlled products (drugs, biologics, medical devices) to validate systems within their quality framework.

Why is CSV costly and time-consuming?

CSV creates the foundation for data integrity, product quality, and patient safety. Regulatory bodies expect thorough documentation, testing, and risk management. The cost of non-compliance (e.g., recalls, warning letters) is far greater.

style