CCDM Quality Control & Regulatory Compliance 3 — Questions and Answers
Question 1: A data cleaning plan (DCP) for a Phase III trial should primarily be developed at which stage of the data management lifecycle?
- After database lock, to document what was done
- After first patient in, to address emerging data issues
- Before the study begins, concurrently with protocol and CRF development (Correct answer)
- During the interim analysis, to prioritize cleaning efforts
Correct answer: Before the study begins, concurrently with protocol and CRF development
The data cleaning plan should be developed before the study begins so that QC strategies, edit checks, and query thresholds are defined prospectively rather than reactively.
Question 2: Which of the following is an example of a preventive quality control measure in clinical data management?
- Generating data listings after database lock to identify outliers
- Implementing automated range checks and logical edit checks during eCRF design (Correct answer)
- Issuing queries to sites after data entry to correct identified errors
- Conducting a final reconciliation of SAEs before study close-out
Correct answer: Implementing automated range checks and logical edit checks during eCRF design
Automated range checks and logical edit checks during eCRF design are preventive controls because they prevent erroneous data from being entered in the first place.
Question 3: In risk-based quality management (RBQM), what is the primary purpose of defining Key Risk Indicators (KRIs)?
- To determine the financial budget for monitoring activities
- To provide early warning signals of quality issues that could impact subject safety or data integrity (Correct answer)
- To replace site visits entirely with remote monitoring
- To score investigator sites for performance bonuses
Correct answer: To provide early warning signals of quality issues that could impact subject safety or data integrity
KRIs serve as early warning signals, allowing sponsors to detect emerging quality or safety issues and intervene before they become systemic problems.
Question 4: A sponsor's data management team receives the database lock checklist. Which item, if incomplete, is the most critical reason to delay database lock?
- Not all paper newsletters have been filed in the TMF
- Outstanding critical protocol deviation queries that could affect the primary endpoint dataset (Correct answer)
- The final site close-out visit report has not been archived
- Investigator signature pages for non-critical optional PRO instruments are missing
Correct answer: Outstanding critical protocol deviation queries that could affect the primary endpoint dataset
Outstanding queries on critical data that could affect the primary endpoint dataset represent an unresolved data quality issue that must be resolved before database lock to ensure analysis integrity.
Question 5: Which regulatory requirement mandates that clinical trial data submitted to the FDA must be in a standardized electronic format?
- 21 CFR Part 50
- 21 CFR Part 312.23 with CDISC SDTM/ADaM standards mandated for NDA/BLA submissions (Correct answer)
- 45 CFR Part 46
- 21 CFR Part 803
Correct answer: 21 CFR Part 312.23 with CDISC SDTM/ADaM standards mandated for NDA/BLA submissions
FDA regulations under 21 CFR Part 312 combined with FDA guidance require CDISC SDTM and ADaM formats for electronic data submission in NDA and BLA applications.
Question 6: During a quality audit of an eClinical system, it is discovered that user access privileges were not deactivated for three staff members who left the organization 6 months ago. Which regulation is most directly violated?
- ICH E3 (Structure and Content of Clinical Study Reports)
- 21 CFR Part 11 (Electronic Records; Electronic Signatures) (Correct answer)
- ICH E8 (General Considerations for Clinical Studies)
- 21 CFR Part 50 (Protection of Human Subjects)
Correct answer: 21 CFR Part 11 (Electronic Records; Electronic Signatures)
21 CFR Part 11 requires controls to ensure that only authorized individuals can access electronic records and systems, and access must be revoked when individuals are no longer authorized.
Question 7: What distinguishes a 'validation' from a 'verification' in the context of clinical data management system qualification?
- Validation confirms the system meets user requirements; verification confirms it was built according to design specifications (Correct answer)
- Validation is performed only by the vendor; verification is performed only by the sponsor
- Verification is required by FDA; validation is only required by EMA
- They are interchangeable terms with no practical distinction
Correct answer: Validation confirms the system meets user requirements; verification confirms it was built according to design specifications
Validation (are we building the right thing?) confirms a system meets user requirements and intended use, while verification (are we building it right?) confirms the system was built according to its design specifications.
A data cleaning plan (DCP) for a Phase III trial should primarily be developed at which stage of the data management lifecycle?