Skip to main content

Quality management

What is ICH Q10, and what are the elements of a pharmaceutical quality system?

ICH Q10 is the harmonised model for a pharmaceutical quality system, finalised by ICH in June 2008 and published by FDA as guidance in April 2009; in the EU it sits in Part III of the GMP guidelines. It builds on GMP and ISO quality concepts across the product lifecycle. Its four elements are process performance and product quality monitoring, corrective and preventive action, change management, and management review, supported by knowledge management and quality risk management.

Illustration of a seal examining a circled change in a trace alongside run, sample and procedure records.

1What ICH Q10 is.

ICH Q10 describes “one comprehensive model for an effective pharmaceutical quality system”. The model is based on ISO quality concepts, includes applicable GMP regulations, and complements ICH Q8 on pharmaceutical development and ICH Q9 on quality risk management.¹ It reached Step 4 of the ICH process on 4 June 2008.¹

It applies to the systems that support the development and manufacture of drug substances (APIs) and drug products, including biotechnology and biological products. It covers four lifecycle stages: pharmaceutical development, technology transfer, commercial manufacturing and product discontinuation.¹ Its three objectives are to achieve product realisation, to establish and maintain a state of control, and to facilitate continual improvement.¹

Q10 is guidance. It says it “is not intended to create any new expectations beyond current regulatory requirements”, and that its content beyond regional GMP requirements is optional. Much of what it describes for manufacturing sites is already required by regional GMP.¹

2Where Q10 sits in US and EU rules.

JurisdictionWhat is bindingWhere Q10 sits
United StatesThe drug CGMP regulations in 21 CFR Part 211. Section 211.22 requires a quality control unit with the authority to approve or reject materials and drug products, and to review production records so that any errors “have been fully investigated”.²FDA published Q10 as final guidance in April 2009, issued by CDER and CBER.³
European UnionCommission Directive (EU) 2017/1572, Article 6: Member States ensure that manufacturers “establish, implement and maintain an effective pharmaceutical quality system, involving the active participation of the senior management and the personnel of the different departments”.⁴EU GMP Chapter 1 was revised to align with Q10 and has applied since 31 January 2013. Q10 itself is reproduced in Part III of the GMP guidelines and “can be used to supplement” Chapter 1.⁵⁶

In the EU, GMP applies from the manufacture of investigational medicinal products onward. Chapter 1 says the quality system can extend to pharmaceutical development as Q10 describes, which, “while optional”, should strengthen the link between development and manufacturing.⁵ ICH also keeps a questions and answers document on Q8, Q9 and Q10; its latest version, R5, was approved by the ICH Assembly in October 2024.⁷

3The four elements.

Section 3.2 names four elements of the pharmaceutical quality system, to be applied “in a manner that is appropriate and proportionate” to each lifecycle stage. The table summarises sections 3.2.1 to 3.2.4.¹

ElementWhat Q10 asks for
Process performance and product quality monitoringUse quality risk management to set the control strategy. Measure and analyse its parameters and attributes to verify a state of control, identify sources of variation, and take in feedback from complaints, product rejections, non-conformances, recalls, deviations, audits and inspections.
Corrective action and preventive action (CAPA)Implement actions arising from investigations of complaints, rejections, non-conformances, recalls, deviations, audits, inspections and monitoring trends. Use “a structured approach” to find the root cause, with effort “commensurate with the level of risk”. In commercial manufacturing, “the effectiveness of the actions should be evaluated”.
Change managementEvaluate proposed changes with quality risk management and against the marketing authorisation. Have expert teams review them against prospective criteria, then evaluate each change after implementation to confirm its objectives were met with no deleterious impact on product quality.
Management review of process performance and product qualityReview inspection and audit results and commitments to regulators, periodic quality reviews (complaints and recalls, monitoring conclusions, and the effectiveness of changes, including those from CAPA) and follow-up from earlier reviews. Decide actions on processes, resources and knowledge.

Each element comes with a table showing how it applies at each stage. For CAPA, Q10 says the methodology is useful in development “where corrective actions and preventive actions are incorporated into the iterative design and development process”. It also says CAPA should continue after a product is discontinued, considering product still on the market and other products that might be affected.¹

4Management responsibility and the quality manual.

Section 2 puts the system on senior management, which “has the ultimate responsibility to ensure an effective pharmaceutical quality system is in place”, with roles, responsibilities and authorities defined, communicated and implemented.¹ Q10 asks management to:

  • set a quality policy that includes an expectation of regulatory compliance, and review it periodically;
  • define quality objectives, with performance indicators that are monitored, communicated and acted on;
  • provide resources and make sure quality issues are escalated in time;
  • conduct management reviews of process performance, product quality and the quality system itself;
  • control outsourced activities and purchased materials: assess suppliers and contract acceptors before use, set responsibilities in a written agreement, and monitor their performance and incoming materials;
  • define responsibilities and transfer the necessary information when product ownership changes.¹

Q10 notes that an independent quality unit “is required by regional regulations”.¹ EU GMP Chapter 1 asks for “periodic management review, with the involvement of senior management”.⁵

The system is described in a quality manual or equivalent documentation. It covers the quality policy, the scope of the system, its processes with “their sequences, linkages and interdependencies”, and management responsibilities.¹ Chapter 1 also asks for a quality manual or equivalent documentation, describing the quality management system and management responsibilities.⁵

5The enablers, and improving the system itself.

Two enablers support the elements. Knowledge management is a “systematic approach to acquiring, analysing, storing and disseminating information” about products, processes and components, from development to discontinuation. Quality risk management is “integral to an effective pharmaceutical quality system”, and Q10 points to ICH Q9 for its principles and tools.¹ ICH revised Q9 as Q9(R1), adopted on 18 January 2023.⁸

Section 4 turns the review onto the quality system itself. Management should review it periodically, measuring whether its objectives are met and assessing performance indicators: the complaint, deviation, CAPA and change management processes, feedback on outsourced activities, self-assessments such as risk assessments, trending and audits, and external assessments such as inspections.¹ Management should also watch emerging regulations and guidance, innovations, changes in the business and changes in product ownership. The outcome can be improvements to the system, new resources or training, or revised quality policy and objectives.¹

Annex 1 sets out what a company might gain by showing an effective quality system and product and process understanding, such as more use of risk-based inspections and optimised post-approval change processes. It adds that “the actual regulatory process will be determined by region”.¹

6How it runs in Seal.

Seal’s QMS covers deviations, CAPA, change control, documents, training, audits, suppliers, complaints and risk, and the platform runs laboratory, manufacturing and quality work on one record. A CAPA keeps its source event, investigation, actions, controlled change and follow-up evidence together, and closure can be configured to require the approved effectiveness review. In change control, approval, implementation and permission to use the new revision are separate decisions, and effectiveness is defined before implementation.

An APR or PQR draws on batch, laboratory and quality records for a defined reporting period and population, with missing data reconciled before the results are interpreted. Neil, Seal’s AI agent, assembles evidence for investigations, drafts CAPAs and prepares trend reviews; everything it produces is a proposal for a qualified person to review, and approvals stay with your team.

References

  1. 1ICH Q10, Pharmaceutical Quality System, ICH, Step 4 version of 4 June 2008. https://database.ich.org/sites/default/files/Q10%20Guideline.pdf (read 6 November 2026)
  2. 221 CFR 211.22, Responsibilities of quality control unit, eCFR. https://www.ecfr.gov/current/title-21/section-211.22 (read 6 November 2026)
  3. 3Q10 Pharmaceutical Quality System, guidance for industry, FDA, April 2009. https://www.fda.gov/regulatory-information/search-fda-guidance-documents/q10-pharmaceutical-quality-system (read 6 November 2026)
  4. 4Commission Directive (EU) 2017/1572 of 15 September 2017 supplementing Directive 2001/83/EC as regards the principles and guidelines of good manufacturing practice for medicinal products for human use, Article 6, EUR-Lex. https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32017L1572 (read 6 November 2026)
  5. 5EudraLex Volume 4, Part I, Chapter 1: Pharmaceutical Quality System, European Commission, in operation since 31 January 2013. https://health.ec.europa.eu/system/files/2016-11/vol4-chap1_2013-01_en_0.pdf (read 6 November 2026)
  6. 6EudraLex Volume 4, Good Manufacturing Practice guidelines, European Commission. https://health.ec.europa.eu/medicinal-products/eudralex/eudralex-volume-4_en (read 6 November 2026)
  7. 7Quality Guidelines, ICH. https://www.ich.org/page/quality-guidelines (read 6 November 2026)
  8. 8ICH Q9(R1), Quality Risk Management, ICH, 18 January 2023. https://database.ich.org/sites/default/files/ICH_Q9%28R1%29_Guideline_Step4_2022_1219.pdf (read 6 November 2026)

AQuestions and answers

Is ICH Q10 mandatory?

Q10 itself is guidance. It says it creates no new expectations beyond current regulatory requirements, and that its content beyond regional GMP is optional. Much of it is required anyway: EU law requires manufacturers to keep an effective pharmaceutical quality system, EU GMP Chapter 1 is aligned with Q10, and the US CGMP regulations require a quality control unit, written procedures and investigations.

How does ICH Q10 relate to ISO 9001?

Q10 is built on ISO quality concepts and takes several definitions, such as corrective action, preventive action and quality manual, from ISO 9000. It is written for pharmaceutical companies, is meant to be used with regional GMP requirements, and adds pharmaceutical ideas such as the control strategy, the state of control and evaluating changes against the marketing authorisation.

Does ICH Q10 apply during clinical development?

Its scope includes pharmaceutical development, including the manufacture of investigational products, and it asks for its elements to be applied in proportion to each stage. Regional GMP applies to the manufacture of investigational products. In the EU, extending the quality system to the wider development stage is optional.

What are the enablers in ICH Q10?

Knowledge management and quality risk management. Knowledge management acquires, analyses, stores and shares product and process knowledge across the lifecycle. Quality risk management, described in ICH Q9(R1), gives a proactive way to identify, evaluate and control risks to quality.

Has ICH Q10 been revised?

The guideline is still the Step 4 version of 4 June 2008. ICH has since revised the companion guideline on quality risk management as Q9(R1), adopted in January 2023, and updated the joint Q8, Q9 and Q10 questions and answers, most recently as R5 in October 2024.

See your process in Seal.

Bring a procedure or a recurring problem. See how your team configures it with Neil and improves the next run.

Book a demo