CHA Computer Systems & Software Updates 2 — Questions and Answers
Question 1: Under 21 CFR Part 11, which feature is REQUIRED to ensure electronic records used in HACCP monitoring are trustworthy?
- Color-coded dashboards
- Audit trails that record who changed data and when (Correct answer)
- Automatic email alerts to supervisors
- Cloud-based storage with unlimited capacity
Correct answer: Audit trails that record who changed data and when
21 CFR Part 11 mandates secure, computer-generated audit trails that capture date, time, and identity of any record creator or modifier.
Question 2: What is the primary purpose of computer system validation (CSV) in a HACCP-controlled food facility?
- To reduce the need for manual monitoring
- To demonstrate that software consistently performs its intended function within defined limits (Correct answer)
- To satisfy IT department requirements for upgrades
- To replace physical CCP monitoring instruments
Correct answer: To demonstrate that software consistently performs its intended function within defined limits
CSV provides documented evidence that a computer system reliably and reproducibly performs its intended food safety functions.
Question 3: A food manufacturer replaces its temperature logging software with a new version. Which step must occur BEFORE going live in production?
- Notify the local health department
- Complete installation qualification and operational qualification testing (Correct answer)
- Archive all previous electronic records permanently
- Rewrite the HACCP plan to reference the new software
Correct answer: Complete installation qualification and operational qualification testing
IQ and OQ testing confirm the software is installed correctly and operates as specified before it is used for official CCP monitoring.
Question 4: In the context of HACCP electronic monitoring, what does 'data integrity' specifically require?
- Data must be stored on servers within the country of production
- Records must be accurate, complete, consistent, and unaltered after creation (Correct answer)
- Monitoring data must be reviewed by a microbiologist daily
- All records must be printed and signed within 24 hours
Correct answer: Records must be accurate, complete, consistent, and unaltered after creation
Data integrity means HACCP records are attributable, legible, contemporaneous, original, and accurate (ALCOA principles) throughout their lifecycle.
Question 5: Which type of software change is MOST likely to require a full revalidation of a HACCP monitoring system?
- Updating the user interface color scheme
- Changing the algorithm that calculates CCP limit deviations (Correct answer)
- Adding a new user login account
- Updating the printer driver for report output
Correct answer: Changing the algorithm that calculates CCP limit deviations
Any change that affects how the system calculates or determines CCP compliance constitutes a critical functional change requiring full revalidation.
Question 6: A HACCP auditor discovers that the facility's electronic HACCP records can be edited without generating an audit trail entry. What is the correct audit finding classification?
- Observation only — no corrective action needed
- Major nonconformance — system does not meet 21 CFR Part 11 requirements (Correct answer)
- Minor nonconformance — acceptable if paper backups exist
- Not applicable if the facility is not FDA-regulated
Correct answer: Major nonconformance — system does not meet 21 CFR Part 11 requirements
The inability to capture data changes in an audit trail is a major nonconformance under 21 CFR Part 11 and undermines HACCP record reliability.
Question 7: What does 'electronic signature' mean under 21 CFR Part 11 as applied to HACCP records?
- A scanned image of a handwritten signature attached to a PDF
- A computer data compilation legally equivalent to a handwritten signature (Correct answer)
- An email confirmation sent after record creation
- A typed name in any text field of a form
Correct answer: A computer data compilation legally equivalent to a handwritten signature
21 CFR Part 11 defines an electronic signature as a computer-compiled set of symbols executed with legal intent, equivalent to a handwritten signature.
CHA Computer Systems & Software Updates 2
Under 21 CFR Part 11, which feature is REQUIRED to ensure electronic records used in HACCP monitoring are trustworthy?