Standard Operating Procedure Development of Requirement Specifications for Computer Systems This is an example of a Standard Operating Procedure. It is a proposal and starting point only. The type and extent of documentation depends on the process environment. The proposed documentation should be adapted accordingly and should be based on individual risk assessments. There is no guarantee that this document will pass a regulatory inspection. Publication from www.labcompliance.com Global on-line resource for validation and compliance Copyright by Labcompliance. This document may only be saved and viewed or printed for personal use. Users may not transmit or duplicate this document in whole or in part, in any medium. Additional copies and licenses for department, site or corporate use can be ordered from www.labcompliance.com/solutions. While every effort has been made to ensure the accuracy of information contained in this document, Labcompliance accepts no responsibility for errors or omissions. No liability can be accepted in any way. Labcompliance offers books, master plans, complete Quality Packages with validation procedures, scripts and examples, SOPs, publications, training and presentation material, user club membership with more than 300 downloads and audio/web seminars. For more information and ordering, visit www.labcompliance.com/solutions
STANDARD OPERATING PROCEDURE Page 2 of 7 Company Name: Controls: Superseded Document Reason for Revision N/A, new N/A Effective Date August 1, 2006 Signatures: Author Approver Reviewer I indicate that I have authored or updated this SOP according to applicable business requirements and our company procedure: Preparing and Updating Standard Operating Procedures. Name: Signature: Date: I indicate that I have reviewed this SOP, and find it meets all applicable business requirements and that it reflects the procedure described. I approve it for use. Name: Signature: Date: I indicate that I have reviewed this SOP and find that it meets all applicable quality requirements and company standards. I approve it for use. Name: Signature: Date:
STANDARD OPERATING PROCEDURE Page 3 of 7 1. PURPOSE The first and most important step of validation and qualification is writing the specifications. Without clear specifications computer systems cannot be fully tested. Well-written System Requirement Specifications (SRS) or User Requirement Specifications (URS) facilitate all consecutive validation/qualification steps and help to meet business objectives. Alternative approaches to this SOP can be applied as long as they are scientifically sound, comply with GxP requirements and are approved and documented. 2. SCOPE The SOP applies to the development of Requirement Specifications (URS or SRS) for Computer Systems used in GxP regulated environments. The SOP is limited to commercial systems. It is not applicable for equipment developed in-house. 3. GLOSSARY/DEFINITIONS Item Specifications URS FS SRS Explanation In the context of this SOP can be URS or SRS. User Requirement Specification Functional Specifications System Requirement Specifications. Typically combine URS and FS Note: For other definitions, see www.labcompliance.com/glossary. 4. REFERENCE DOCUMENTS 4.1. Validation Master Plan. Available from LabCompliance: www.labcompliance.com/books/masterplan.htm 4.2. SOP S-27!: Validation of Commercial Off-the-Shelf (COTS) Computer Systems. Available through www.labcompliance.com/solutions/sops.
STANDARD OPERATING PROCEDURE Page 4 of 7 5. RESPONSIBILITIES 5.1. Anticipated Users 5.1.1. Give input to the Specifications. 5.1.2. Review Specifications draft and final documents. 5.2. System Owner 5.2.1. Takes the lead in getting user inputs into the Specifications. 5.2.2. Collects information from potential suppliers, e.g., specification sheets, data sheets etc. 5.2.3. Writes draft specifications. 5.2.4. Distributes draft specifications, collects inputs and updates the Specifications. 5.3. Operations Manager 5.3.1. Drafts initial proposal for the project. 5.3.2. Reviews drafts and approves final Specifications. 5.4. Quality Assurance Department 5.4.1. Advises on regulations and guidelines related to Specifications, if necessary. 5.4.2. Checks if process and documentation are in compliance with internal policies and regulations/guidelines. 5.5. Validation Group 5.5.1. Checks compliance of specifications with internal validation guidelines. 5.5.2. Reviews and approves Specifications. 6. PROCEDURE 6.1. Proposal 6.1.1. The Operations manager describes the need for a new computer system. This includes information on current solution, existing limitations and how the new system can solve the problem. It also includes a list with key features.
STANDARD OPERATING PROCEDURE Page 5 of 7 6.1.2. The proposal is approved by higher-level management and submitted to the validation group. 6.1.3. The validation group reviews the proposal and asks for clarification, if necessary. 6.2. Draft 6.2.1. A person with supervisor function from the operation is identified as the system owner. 6.2.2. The system owner describes the computer system in more detail. This includes the intended environment, the intended use and the type of anticipated users. 6.2.3. The system owner collects information on required functions from a selection of other anticipated users. Use template in Attachment 7.1 6.2.4. The system owner drafts preliminary Specifications. 6.2.5. Required functions are numbered and entered in a table using the template in Attachment 7.2. This is the starting point for the traceability matrix. Vendor specification and data sheets can be helpful as inputs for the draft. 6.2.6. The preliminary Specifications are approved by the operations manager and passed onto the validation group. 6.2.7. The validation group reviews and approves or rejects the draft. 6.3. Final Document 6.3.1. The system owner distributes the document to other users and asks for inputs. 6.3.2. The system owner arranges for a meeting with anticipated users to discuss and agree on final requirements. 6.3.3. The system owner evaluates the user inputs and updates the document. 6.4. Approvals 6.4.1. The Specifications are reviewed and approved by the validation group. 6.4.2. The Specifications are reviewed and approved by the lab manager. 6.4.3. The Specifications are evaluated for compliance with regulations and internal policies by the QA department.
STANDARD OPERATING PROCEDURE Page 6 of 7 7. ATTACHMENTS 7.1. Attachment - Collecting Information for Specifications Employee: Supervisor: Department: Date: System ID: System Location: Category Requirement Must/Want
STANDARD OPERATING PROCEDURE Page 7 of 7 7.2. Attachment Specifications Template Validation Group Leader/Author: Department: Date: System ID: System Location: Specifications Number/Identifier Requirement (This column should be used later on as link to test case)