Types of Risk Management Plans

A practical guide to the various types of Risk Management Plans used in the European Union and how they are maintained throughout the product lifecycle.

Types of Risk Management Plans

Introduction

Not all Risk Management Plans are created in the same way.

The Risk Management Plan submitted for a new active substance is fundamentally different from the RMP maintained for a generic product. Similarly, products authorised through hybrid applications, biosimilar applications and line extensions may require different approaches to risk management documentation.

Understanding the different RMP models is important because the structure, content and maintenance requirements vary depending upon the legal basis of the marketing authorisation and the characteristics of the product.

Many practical RMP discussions relate less to the template itself and more to determining which type of RMP is appropriate.

Why Different Types of RMPs Exist

The objective of risk management is to identify and manage uncertainties relating to medicinal product safety.

For innovative products, substantial uncertainties may exist at the time of authorisation.

For generic products, many safety concerns may already be well characterised through years of clinical use of the reference product.

Consequently, regulators generally expect different levels of risk management documentation depending upon the product and available evidence.

Full RMPs

A full RMP is generally prepared for products with substantial safety uncertainties.

Examples include:

A full RMP typically contains:

These RMPs often evolve significantly during the early post-authorisation period.

Characteristics of Full RMPs

Full RMPs commonly contain:

The level of justification and supporting evidence is generally extensive.

These documents may undergo frequent updates as safety knowledge develops.

Generic Product RMPs

Generic products usually rely upon substantial existing knowledge relating to the reference medicinal product.

Consequently, generic RMPs are often significantly simpler than those for innovative products.

The central question becomes:

Are there product-specific safety concerns that require additional risk management activities?

If not, a simplified RMP approach may be appropriate.

Generic RMP Principles

Generic RMPs typically:

However, generic products do not automatically avoid RMP obligations.

Product-specific risks may still exist.

Examples include:

Hybrid Product RMPs

Hybrid applications frequently occupy an intermediate position between innovative and generic products.

A hybrid application may involve differences relating to:

Because differences exist relative to the reference product, additional safety uncertainties may arise.

Hybrid RMPs therefore often require a more detailed safety specification than traditional generic products.

Biosimilar RMPs

Biosimilar products generally utilise a risk management strategy informed by both:

Potential areas of focus may include:

Biosimilar RMPs often resemble abbreviated versions of innovative product RMPs while maintaining product-specific justification.

Line Extension RMPs

Line extensions may require updates to existing RMPs.

Examples include:

The primary consideration is whether the extension introduces new safety concerns or changes existing risk profiles.

In many cases, the existing RMP forms the foundation for the updated document.

Reference RMPs

Large organisations frequently maintain a reference RMP.

A reference RMP serves as the master risk management document from which national or regional versions may be derived.

Advantages include:

Many global pharmacovigilance organisations use reference RMPs as the basis for maintaining large product portfolios.

Global Core RMP Concepts

Some companies maintain global risk management documents that support multiple jurisdictions.

These documents may:

However, regional regulatory requirements must still be addressed separately where necessary.

Global documents do not replace jurisdiction-specific requirements.

Country-Specific Annexes

Country-specific annexes are among the most important practical aspects of RMP management.

Although the core safety profile of a product may remain consistent globally, local regulatory requirements may differ.

Country annexes allow local requirements to be incorporated without modifying the global core document.

Why Annexes Exist

Annexes may be required because of:

The annex structure helps maintain consistency while accommodating local obligations.

European National Annexes

Within Europe, national requirements occasionally supplement the core EU-RMP.

Examples may include:

The extent of annex content varies considerably between products and Member States.

Non-EU Annexes

Outside the European Union, separate annexes may support compliance with:

Many multinational companies manage extensive annex structures linked to a single global safety strategy.

Governance of Multiple RMP Versions

Managing multiple RMP versions presents significant operational challenges.

Governance frameworks should address:

Poor governance may result in inconsistencies between regional versions.

Common Challenges

Several challenges arise frequently.

Excessive Duplication

Multiple versions become difficult to maintain.

Divergent Safety Concerns

Regional documents evolve independently.

Weak Version Control

Updates are applied inconsistently.

Unclear Ownership

Responsibilities for local annexes are poorly defined.

Regulatory Misalignment

Regional requirements are not incorporated appropriately.

These challenges become more significant as product portfolios grow.

Role of the QPPV

The QPPV should understand:

The expectation is oversight of the risk management strategy rather than direct authorship of every document version.

Key Takeaways

Different categories of Risk Management Plans exist depending upon the nature of the product and regulatory pathway.

Full RMPs are generally used for innovative products with substantial safety uncertainties.

Generic, hybrid and biosimilar products often utilise modified approaches that reflect existing knowledge while addressing product-specific concerns.

Country-specific annexes allow local requirements to be incorporated while maintaining a consistent core risk management strategy.

Effective governance and version control are essential when managing multiple RMP versions across jurisdictions.

References

  1. EMA Good Pharmacovigilance Practices (GVP) Module V – Risk Management Systems.
  2. EMA Risk Management Plan Template.
  3. Commission Implementing Regulation (EU) No 520/2012.
  4. Directive 2001/83/EC.
  5. Regulation (EC) No 726/2004.
  6. CMDh Guidance on Risk Management Plans.
  7. EMA Guidance on Safety Concerns and Risk Management Planning.

Last reviewed: 2026-06-11