CCDM Quality Control & Regulatory Compliance 2 — Questions and Answers
Question 1: Under 21 CFR Part 11, which technical control is required to ensure electronic records cannot be altered without detection?
- Password expiration policies
- Audit trails that capture date, time, and operator identity (Correct answer)
- Encrypted storage of all records
- Dual-factor authentication for all users
Correct answer: Audit trails that capture date, time, and operator identity
21 CFR Part 11 mandates audit trails that record the date, time, and identity of individuals who create, modify, or delete electronic records.
Question 2: A sponsor receives a critical finding during an FDA inspection that a required source data verification (SDV) step was skipped for 30% of CRF entries. Which CDISC standard directly governs the expectation for SDV documentation?
- CDASH
- SDTM
- CDMIG
- ICH E6(R2) (Correct answer)
Correct answer: ICH E6(R2)
ICH E6(R2) GCP guidelines set expectations for source data verification procedures and documentation as part of monitoring activities.
Question 3: Which of the following best describes a 'critical data element' in clinical data management?
- Any field collected in the eCRF regardless of its impact on outcomes
- Data that directly affects subject safety assessments or primary efficacy endpoints (Correct answer)
- Laboratory data collected at baseline visits only
- Demographic variables used for stratification in randomization
Correct answer: Data that directly affects subject safety assessments or primary efficacy endpoints
Critical data elements are those that directly impact subject safety or primary efficacy endpoints and therefore require the highest level of quality control scrutiny.
Question 4: During a CAPA investigation following a data quality audit, the root cause is identified as inadequate CRF completion guidelines. What is the most appropriate immediate corrective action?
- Retrain all site staff on GCP principles
- Revise the completion guidelines and issue updated site training before data collection resumes (Correct answer)
- Lock the database and halt the study
- Notify the IRB of the deficiency
Correct answer: Revise the completion guidelines and issue updated site training before data collection resumes
Revising the completion guidelines and retraining site staff directly addresses the identified root cause and prevents recurrence of the quality issue.
Question 5: Which regulatory agency guidance specifically addresses risk-based monitoring (RBM) strategies in clinical trials?
- FDA Guidance for Industry: Adaptive Design Clinical Trials
- EMA Reflection Paper on Risk-Based Quality Management
- FDA Guidance on Oversight of Clinical Investigations: A Risk-Based Approach to Monitoring (Correct answer)
- ICH Q10 Pharmaceutical Quality System
Correct answer: FDA Guidance on Oversight of Clinical Investigations: A Risk-Based Approach to Monitoring
The FDA's 2013 Guidance on Oversight of Clinical Investigations introduced a risk-based approach to monitoring, encouraging sponsors to focus resources on critical data and processes.
Question 6: A data manager identifies that a site consistently enters laboratory values in mg/dL when the protocol specifies mmol/L. Which QC process should have caught this earliest?
- Database lock review
- Edit check programming during eCRF build (Correct answer)
- Medical coding reconciliation
- Final SAE narrative review
Correct answer: Edit check programming during eCRF build
Edit checks programmed during eCRF build can validate units at the point of entry, catching unit inconsistencies before they propagate through the dataset.
Question 7: Under ICH E6(R2) GCP, the sponsor's obligation to retain essential documents from a clinical trial is:
- 2 years after the last approval of a marketing application
- Until 2 years after the last subject's last visit
- As required by applicable regulatory requirements, typically at least 2 years after marketing approval or study discontinuation (Correct answer)
- 5 years after database lock regardless of regulatory status
Correct answer: As required by applicable regulatory requirements, typically at least 2 years after marketing approval or study discontinuation
ICH E6(R2) requires sponsors to retain essential documents per applicable regulatory requirements, which typically means at least 2 years after the last marketing approval or 2 years after discontinuation.
CCDM Quality Control & Regulatory Compliance 2
Under 21 CFR Part 11, which technical control is required to ensure electronic records cannot be altered without detection?