Web of Pharma • Pharmaceutical Quality & Validation
Commissioning and Qualification in Pharmaceutical Manufacturing
A practical guide to commissioning and qualification (C&Q): how engineering handover evidence supports GMP qualification, where IQ/OQ/PQ fit, and how a risk-based lifecycle keeps facilities, utilities and equipment ready for intended use.
What Do Commissioning and Qualification Mean?
Commissioning and qualification are connected but distinct parts of the lifecycle for pharmaceutical facilities, utilities and equipment. Commissioning is usually led by engineering and project teams. It checks whether the installed system matches its design, operates as specified and can be handed over with complete technical information. Common commissioning work includes inspections, loop checks, functional tests, balancing, flushing, safety checks and vendor testing.
Qualification is the documented demonstration that a facility, utility, equipment item or system is suitable for its intended GMP function. It considers product and process risks, verifies relevant requirements, confirms appropriate installation and operation, and establishes the procedures and controls needed for routine use. This work connects engineering evidence to the site's pharmaceutical quality system and cGMP responsibilities.
In practice, an integrated C&Q program coordinates both activities so that useful engineering tests are planned early and GMP-specific evidence is not left until the end of a construction project. The goal is neither to duplicate every test nor to treat a commissioning certificate as automatic GMP approval. The team evaluates each record and test for its intended purpose, scope, method, acceptance criteria, traceability, data quality and review status.
Commissioning vs Qualification: What Is the Difference?
| Aspect | Commissioning | Qualification |
|---|---|---|
| Primary purpose | Confirm the system is built, installed and functions according to engineering design and project specifications. | Demonstrate and document fitness for a defined GMP intended use and support a controlled state. |
| Typical lead | Engineering, construction, automation and supplier teams. | Cross-functional team with Engineering, Operations, Validation and Quality Unit oversight. |
| Typical evidence | Construction checks, vendor test results, loop checks, balancing, functional tests, punch lists and turnover package. | Approved requirements, risk rationale, traceable qualification tests, deviations, reports, procedures, training and release approval. |
| Acceptance basis | Design specifications, contract requirements, codes and engineering criteria. | Approved GMP requirements and criteria tied to intended use, product/process risks and applicable controls. |
| Use in the other activity | Suitable records may be assessed and leveraged as qualification evidence. | Qualification determines whether the combined evidence is adequate for GMP use. |
There is overlap: a commissioning functional test may also verify a GMP-critical OQ requirement. The team can leverage the test if it was planned and executed under controlled conditions, meets the approved criterion, is attributable and traceable, and has adequate review. If it does not meet the qualification need, add or repeat an appropriate test.
Regulatory Framework for C&Q
Regulations generally state the required outcomes—suitable design, controlled installation and operation, documented procedures, maintenance and quality oversight—while technical guidance describes accepted ways to demonstrate those outcomes. Requirements depend on product type, market and applicable GMP framework, so a global manufacturer should map the project to the relevant national rules and guidance.
FDA and 21 CFR Part 211
For U.S. drug manufacturing, relevant provisions include 21 CFR 211.63 on equipment design, size and location; 211.65 on equipment construction; 211.67 on cleaning and maintenance; 211.68 on automatic, mechanical and electronic equipment; 211.100 on written production and process-control procedures; and 211.22 on the quality unit. See our overview of 21 CFR regulations for pharmaceuticals. FDA's 2011 Process Validation: General Principles and Practices guidance describes a lifecycle. Stage 2, Process Qualification, includes facility design and qualification of equipment and utilities along with process performance qualification.
FDA guidance describes the agency's recommendations and does not replace the binding CGMP regulations. FDA's equipment Q&A says firms have flexibility to select equipment capable of meeting relevant CGMP requirements and responsible for choosing the appropriate intended use.
PIC/S and EU GMP
PIC/S PI 006-4, Recommendations on Qualification and Validation, entered into force on 1 October 2026 and supplements the principles described in GMP Annex 15. It recognizes that established IQ/OQ/PQ terminology is not the only possible approach: scientifically and engineering-based alternatives, such as ASTM E2500, may be suitable in appropriate circumstances. Whatever model is used, the evidence should demonstrate that the facility, utility, equipment or system performs as expected and is fit for purpose. The extent of qualification should reflect complexity and criticality.
PI 006-4 also stresses that qualification tests should connect to the URS and design, use predefined criteria, be formally reviewed and support authorized release decisions. PIC/S status does not remove the need to check how local authorities adopt or apply the document. See the Equipment Validation guide for related practical topics.
Risk-Based Commissioning and Qualification Lifecycle
A practical C&Q plan starts before construction or equipment delivery. Early planning allows project teams to identify which design or commissioning checks can generate useful qualification evidence and where separate GMP testing is still needed.
| Lifecycle stage | Commissioning contribution | Qualification/GMP decision |
|---|---|---|
| 1. Define intended use and criticality | Set project boundaries, system interfaces and technical scope. | Assess product impact, process role, GMP functions, failure risks and evidence depth. |
| 2. URS and design | Turn needs into technical specifications and drawings. | Approve testable URS; document design review or DQ evidence. |
| 3. Factory/site testing | Run suitable factory acceptance testing (FAT), site acceptance testing (SAT), inspections and functional tests. | Evaluate data, criteria, instruments, traceability and whether transport or installation could affect results. |
| 4. Installation and turnover | Complete construction, utilities, installation checks and turnover documentation. | Review IQ evidence; close GMP-relevant gaps and verify calibration and materials as applicable. |
| 5. Functional verification | Test operating modes, control loops, alarms and interlocks. | Complete or leverage OQ evidence against predefined GMP criteria and risk. |
| 6. Performance demonstration | Support trial runs and establish stable operational capability. | Complete PQ or appropriate performance evidence under representative conditions. |
| 7. Release and routine operation | Handover to asset owner and maintenance organization. | Quality-approved release, approved procedures, trained users, change control and lifecycle monitoring. |
Sequence and document names may vary where an alternative model is justified. The important control is that every requirement and identified risk is addressed by suitable evidence, with clear acceptance criteria and approval before the system is used for GMP operations.
How to Leverage Commissioning Evidence for Qualification
Leveraging means reviewing existing engineering or supplier evidence and using it to meet a qualification objective when it is fit for that purpose. It can reduce redundant testing, schedule delays and paperwork, but only when the rationale is documented and Quality agrees that the evidence is adequate.
Review each record for these attributes
- Requirement link: Can the test be traced to an approved user, design or GMP requirement?
- Correct configuration: Was the same equipment, software, instrument, utility and operating condition tested as the delivered/installed configuration?
- Predefined criteria: Were pass/fail criteria approved before execution and suitable for the GMP use?
- Reliable method and instruments: Were methods fit for purpose and instruments calibrated or otherwise verified as required?
- Complete data: Are raw data, exceptions, calculations, signatures and timestamps retained and attributable?
- Deviation disposition: Are failures, retests and unresolved items explained, investigated and approved?
- Independent quality review: Has an authorized reviewer assessed whether the evidence supports the qualification conclusion?
- Scope boundaries: Does the record cover only engineering criteria or does it also demonstrate the needed GMP function? Identify and test any gap.
A supplier FAT may show a machine can run under factory conditions, but it may not prove the installed system works with site utilities or in the local environment. Similarly, a commissioning loop check can confirm wiring and signal response but may not demonstrate that an alarm threshold is appropriate for product quality. Use a documented gap assessment to determine which checks can be leveraged and which qualification activities remain.
Data should be controlled throughout the C&Q project. Apply sound ALCOA+ data integrity practices to paper and electronic records, including supplier records incorporated into the final package.
Roles, Quality Oversight and the VMP
Effective C&Q requires clear ownership. Engineering understands the design and installation; Operations understands intended process use; Automation/IT supports controls and interfaces; Validation coordinates evidence and traceability; Quality reviews GMP impact, protocols, deviations and release status. Suppliers and contractors may execute defined work, but the manufacturer remains responsible for ensuring the resulting evidence meets its requirements.
The Validation Master Plan (VMP) or equivalent site plan should define scope, strategy, responsibilities, risk approach, document hierarchy, acceptance criteria governance, change control, deviation handling, data integrity expectations and lifecycle review. A project-specific C&Q plan can detail asset groups, milestones and deliverables while remaining consistent with the VMP.
Review the relationship between C&Q, process validation and other qualification activities. A qualified production line does not by itself prove the process is validated. Process-specific studies should be planned separately and coordinated with equipment performance testing. See Process Validation.
Protocols, Acceptance Criteria and C&Q Records
Protocols should be approved before execution and state what is tested, why the test matters, how it will be performed and what constitutes an acceptable result. Acceptance criteria need to be measurable and connected to intended use, approved design information, risk assessment or applicable product/process requirements. Avoid inserting limits after the result is known.
Core documents to plan and control
- C&Q strategy or VMP reference, project plan and system boundary diagram.
- Approved URS, design specifications, drawings and risk assessments.
- Supplier documentation, FAT/SAT protocols and reports, and commissioning test records.
- Qualification protocols, traceability matrix, test forms and calibrated instrument evidence.
- Deviation records, retest justifications, change controls and punch-list disposition.
- IQ/OQ/PQ or alternative qualification reports with quality review and release recommendation.
- Approved operation, cleaning, maintenance and calibration SOPs, training records and asset logs.
- Periodic review or requalification plan and documented lifecycle changes.
The report should describe testing performed, summarize results against criteria, explain deviations, identify open actions, state any limits of the evidence, and conclude whether the facility or system is ready for intended GMP use. Records should remain legible, complete, attributable and retrievable. An open action should have an owner and risk assessment; it must not be hidden in a commissioning punch list without quality disposition.
Practical Example: Purified Water System
For a new purified-water system, commissioning may include pipework installation checks, weld inspection, flushing, instrument loop tests, pump rotation checks, control-sequence tests and supplier start-up. These records can supply useful qualification evidence if the site confirms that the tests are traceable to approved requirements, use suitable methods and instruments, include complete data, and match the final installed configuration.
Qualification adds the GMP-focused demonstration: confirm the system design and materials suit intended use; verify installation and critical instruments; test operating functions and alarms; assess water quality at representative points; and demonstrate performance over the planned qualification period and operating conditions. The site then approves sampling, sanitization, maintenance, calibration, operating and excursion procedures, trains responsible staff, reviews deviations and formally releases the system for use.
The specific sampling locations, operating conditions, microbial or chemical criteria and duration must come from applicable specifications, system design, risk assessment and relevant standards—not from a generic example. The C&Q team should coordinate with the site's water-system program and any associated cleaning validation needs.
Commissioning and Qualification Readiness Checklist
- Define the system boundary and intended use. Include connected equipment, utilities, software functions and GMP interfaces.
- Classify criticality and assess risk. Identify functions that can affect product quality, patient safety, contamination control or reliable records.
- Approve requirements and design evidence. Ensure requirements are testable and design decisions address them.
- Plan commissioning and qualification together. Identify test ownership, evidence use, approvals, hold points and release criteria before execution.
- Review supplier and project records. Confirm version, asset configuration, instruments, raw data and deviation status.
- Establish protocol acceptance criteria in advance. Make each criterion technically justified and tied to risk or requirement.
- Complete installation and operational checks. Address site conditions, utility interfaces, alarms, interlocks and operating ranges.
- Demonstrate performance. Use representative material, products or qualified simulations with a justified sampling plan.
- Resolve and assess deviations. Investigate failures, repeat tests only under approved rules and document impact.
- Finalize procedures and training. Ensure users can operate, clean, maintain and calibrate the system consistently.
- Approve release for GMP use. Confirm that Quality has reviewed the complete package and residual risk.
- Protect the qualified state. Start maintenance, calibration, change control, periodic review and requalification processes.
Common C&Q Mistakes and Compliance Gaps
- Using “commissioned” as the release status: engineering handover is treated as final GMP approval without qualification review.
- Duplicating every engineering test: suitable records are repeated without assessing whether they already meet the qualification objective.
- Accepting all vendor documents: reports are filed without confirming configuration, criteria, raw data, deviations or traceability.
- Vague intended use: the team cannot explain which product/process functions matter or what qualified range is justified.
- Late Quality involvement: protocols, risk decisions and acceptance criteria are reviewed after field testing starts.
- Uncontrolled open items: punch-list issues with possible GMP impact remain unresolved or lack documented risk evaluation and approval.
- Weak linkage: test results cannot be traced from user requirements through design, commissioning and qualification to release.
- Outdated procedures: equipment is released before operation, cleaning, maintenance or calibration documents are approved and staff trained.
- Qualification treated as a one-time event: changes, breakdowns, calibration failures and cumulative modifications do not trigger impact assessment.
- Confusing equipment PQ with process PPQ: equipment capability is mistaken for validated process performance.
When a gap affects a GMP function or may affect product already manufactured, assess product and process impact through the quality system and open CAPA where warranted. The corrective action should address the cause, define interim controls and establish an effectiveness check.
Frequently Asked Questions
1. What is commissioning and qualification in pharmaceutical manufacturing?
Commissioning verifies that a facility, utility or equipment system is built, installed and functions according to design. Qualification documents that it is suitable for its intended GMP use and supported by controls to remain in a controlled state.
2. Is commissioning the same as qualification?
No. Commissioning is primarily engineering verification; qualification is a GMP suitability decision supported by controlled, traceable evidence and quality review. Some commissioning tests may be leveraged when they meet qualification needs.
3. Can commissioning documents be used for IQ or OQ?
Yes, when a documented assessment shows the record is relevant, traceable to approved requirements, technically sound, complete and applicable to the final installed configuration. Any evidence gap should be addressed with additional testing.
4. What are the main phases of pharmaceutical C&Q?
A typical lifecycle includes intended-use and risk definition, URS and design review, supplier and site testing, installation verification, operational testing, performance demonstration, quality release and continued lifecycle control.
5. Is IQ/OQ/PQ always mandatory as separate protocols?
Not every framework prescribes separate documents for every asset. The selected approach should address applicable GMP requirements and demonstrate fitness for intended use. PIC/S PI 006-4 allows other appropriate science- or engineering-based approaches with suitable justification.
6. What is the role of risk assessment in commissioning and qualification?
Risk assessment identifies product, patient, process and data risks and helps set the scope, depth and priority of testing. It should explain why tests and acceptance criteria are sufficient for the asset's intended use.
7. What is the difference between equipment PQ and process PPQ?
Equipment PQ demonstrates that an asset performs as intended under representative conditions. Process PPQ demonstrates that the manufacturing process can reproducibly make product that meets quality requirements.
8. When can a facility or equipment system be released for GMP use?
After required commissioning and qualification evidence is reviewed, deviations and open items are assessed, procedures and training are in place, and authorized quality personnel approve release under the site's quality system.
9. Does commissioning and qualification include computer system validation?
It may cover equipment functions and interfaces, but it does not automatically complete computerized-system validation. Regulated software functions, records and interfaces need a separate scope assessment and applicable validation evidence.
10. How is the qualified state maintained after project handover?
Use approved operating, cleaning, maintenance and calibration procedures; train personnel; control changes; investigate deviations; review trends; and perform risk-based periodic review or requalification when needed.
Continue the Validation Series
Official References and Further Reading
- PIC/S PI 006-4: Recommendations on Qualification and Validation (effective 1 October 2026)
- FDA: Process Validation—General Principles and Practices
- FDA: Questions and Answers on Current Good Manufacturing Practice Requirements—Equipment
- Electronic Code of Federal Regulations: 21 CFR Part 211
- European Commission: EudraLex Volume 4, EU Guidelines for Good Manufacturing Practice
This article is an educational summary, not a substitute for current regulations, applicable GMP guidance, or a site-specific quality risk assessment. Confirm the current requirements in each market and the controlled versions used by your quality system.
.webp)
