QPPV and Audit Oversight

Introduction

The QPPV occupies a unique position within the pharmacovigilance system.

Unlike operational teams, the QPPV is not expected to personally perform every pharmacovigilance activity.

Unlike auditors, the QPPV is not expected to independently assess every process.

Instead, the QPPV is expected to maintain oversight.

This creates an important challenge.

As pharmacovigilance systems grow, become more global and rely increasingly on outsourcing, direct visibility becomes more difficult.

Audit programmes help address this challenge.

They provide structured, independent evidence regarding whether the pharmacovigilance system is operating effectively.

For many QPPVs, audits represent one of the most important sources of assurance available.

Why Audits Matter to QPPVs

A fundamental question for every QPPV is:

How do I know the pharmacovigilance system is functioning effectively?

The answer cannot depend solely on:

• Verbal assurances
• Operational reports
• Informal discussions

Effective oversight requires evidence.

Audit programmes provide that evidence.

They help the QPPV understand:

• Compliance performance
• Governance effectiveness
• Control effectiveness
• Emerging risks
• Organisational weaknesses

Oversight Versus Operations

One of the most important distinctions in pharmacovigilance governance is the difference between oversight and operations.

Operations

Operational teams:

• Process cases
• Review literature
• Prepare reports
• Manage vendors

Oversight

The QPPV:

• Evaluates visibility
• Reviews risks
• Challenges assumptions
• Assesses effectiveness

Audits support the second function.

They help transform oversight from opinion into evidence.

Audits as Sources of Assurance

Audit programmes provide independent assessment.

For a QPPV this means access to information that is:

• Structured
• Objective
• Evidence-based
• Risk-focused

Without audits, visibility often becomes dependent upon self-reporting.

Audits provide an additional layer of confidence.

A useful principle is:

Audits verify what governance reports describe.

What the QPPV Should Know

The QPPV does not need to review every audit report in detail.

However, visibility regarding significant audit outcomes is important.

Examples include:

Critical Findings

Issues with significant compliance or patient safety implications.

Major Findings

Systemic weaknesses requiring management attention.

Repeat Findings

Recurring deficiencies suggesting ineffective remediation.

Significant CAPAs

Actions addressing important risks.

Emerging Trends

Patterns indicating deterioration or improvement.

These areas support informed oversight.

Audit Information That Supports QPPV Oversight

Several audit outputs are particularly valuable.

Audit Plans

Help identify where assurance activities are occurring.

Audit Reports

Provide evidence regarding system effectiveness.

CAPA Reports

Demonstrate remediation efforts.

Trend Reports

Identify recurring issues.

Governance Summaries

Provide executive-level visibility.

Together these outputs create a more complete picture of system health.

The QPPV and Risk-Based Auditing

Risk-based auditing aligns closely with QPPV responsibilities.

Both activities seek to answer:

Where are the greatest risks within the pharmacovigilance system?

Audit programmes often identify:

• High-risk vendors
• Weak controls
• Governance deficiencies
• Compliance vulnerabilities

This information supports risk-based decision making.

For additional discussion see:

[[risk-based-audit-planning]]

Vendor Audits and QPPV Oversight

Many pharmacovigilance systems depend heavily upon outsourcing.

Consequently, vendor audits frequently provide critical assurance.

Areas of interest may include:

• Case processing vendors
• Literature surveillance vendors
• Aggregate reporting vendors
• Safety database providers

Audit outcomes help the QPPV determine whether outsourced activities remain under effective control.

For additional discussion see:

[[vendor-audits]]

[[vendor-oversight-for-qppvs]]

CAPAs and QPPV Visibility

Audit findings only create value if they lead to improvement.

The QPPV should therefore maintain visibility regarding:

• Critical CAPAs
• Major CAPAs
• Overdue CAPAs
• Repeat deficiencies

CAPAs often provide insight into broader governance maturity.

Persistent CAPA weaknesses frequently indicate systemic issues.

For additional discussion see:

[[audit-capas]]

Audit Trends and System Health

Individual findings are useful.

Trends are often more useful.

Examples include:

Increasing Findings

May indicate declining controls.

Stable Findings

May indicate consistent performance.

Repeat Themes

May indicate unresolved systemic weaknesses.

Improving Metrics

May indicate successful remediation.

Trend analysis helps the QPPV move from reactive oversight to proactive oversight.

The PSMF and Audit Oversight

The Pharmacovigilance System Master File should accurately describe the pharmacovigilance system.

Audit programmes help verify whether:

• Processes operate as described.
• Responsibilities remain clear.
• Governance arrangements are functioning.

In this way, audits contribute directly to maintaining confidence in the PSMF.

For additional discussion see:

[[psmf-qppv-oversight]]

Inspection Perspective

Inspectors frequently explore the relationship between the QPPV and audit activities.

Common questions include:

• Does the QPPV receive audit information?
• Does the QPPV understand significant findings?
• Are critical risks visible?
• Are CAPAs monitored appropriately?

The objective is not determining whether the QPPV performs audits.

The objective is determining whether audit outputs support effective oversight.

Common QPPV Audit Oversight Failures

Several weaknesses appear repeatedly.

Limited Audit Visibility

The QPPV receives insufficient information.

Information Overload

Large volumes of data obscure important risks.

Weak Escalation

Critical findings are not communicated appropriately.

Poor Trend Analysis

Recurring issues remain undetected.

Limited CAPA Visibility

Significant remediation activities are not monitored.

These weaknesses often reduce oversight effectiveness.

Characteristics of Mature Audit Oversight

High-performing organisations generally demonstrate:

Structured Reporting

Important information reaches the QPPV consistently.

Risk-Based Visibility

Attention focuses on significant risks.

Effective Escalation

Critical issues are communicated rapidly.

Trend Monitoring

Patterns are reviewed regularly.

CAPA Governance

Remediation remains visible.

Integration with PV Governance

Audit information supports broader decision making.

These characteristics strengthen pharmacovigilance oversight considerably.

A Practical Question for Every QPPV

A useful self-assessment question is:

If a major compliance failure occurred today, would the audit programme have identified the warning signs earlier?

The answer often provides insight into audit programme maturity.

Strong programmes provide early visibility.

Weak programmes often identify issues only after significant consequences occur.

Key Takeaways

• Audit programmes provide important assurance for QPPV oversight.
• Audits help verify whether pharmacovigilance controls remain effective.
• QPPVs should maintain visibility regarding significant findings, CAPAs and trends.
• Vendor audits are particularly important in outsourced environments.
• Trend analysis often provides greater value than individual findings.
• Audit outputs should support governance and decision making.
• Inspectors frequently evaluate how audit information reaches the QPPV.
• Mature organisations integrate audit activities into broader pharmacovigilance governance frameworks.

References

1. EMA Good Pharmacovigilance Practices (GVP) Module IV – Pharmacovigilance Audits.
2. EMA Good Pharmacovigilance Practices (GVP) Module I – Pharmacovigilance Systems and Their Quality Systems.
3. EMA Good Pharmacovigilance Practices (GVP) Module II – Pharmacovigilance System Master File.
4. EMA Good Pharmacovigilance Practices (GVP) Module III – Pharmacovigilance Inspections.
5. Regulation (EC) No 726/2004.
6. Directive 2001/83/EC.
7. Commission Implementing Regulation (EU) No 520/2012.
8. ICH Q9 Quality Risk Management.
9. ICH Q10 Pharmaceutical Quality System.