Brownfield CQV: 5 Ways to Reduce GMP Compliance Risks
Brownfield CQV is the commissioning, qualification, and validation work performed when an existing GMP facility, utility, equipment item, or control system is modified, upgraded, or expanded, while the rest of the site retains its established qualified status. The term is industry usage rather than a defined term in EU GMP, so this article uses it as a working definition.
The central compliance risk in pharmaceutical brownfield projects is that changing one system can alter another's validated state. EU GMP Annex 15 states that planned changes to facilities, equipment, utilities, and processes that may affect product quality should be formally documented and that the impact on the validated status or control strategy should be assessed. The five approaches below turn that expectation into practical engineering controls.
What Makes Brownfield CQV Different from CQV for a New Facility?
In a new facility, qualification builds a qualified state from user requirements through performance testing. In a brownfield project, the existing qualified state must be protected while new work is added, so impact assessment, interface testing, and change control carry more weight.
Approach 1: Perform a Documented GMP Change Impact Assessment
The problem. Brownfield changes are often scoped by the project rather than by the systems they touch. A new isolator, a relocated wall, or an added utility load can affect systems that never appear in the project scope.
The compliance risk. Annex 15, section 11.4, expects quality risk management to be used to evaluate planned changes for their potential impact on product quality, the pharmaceutical quality system, documentation, validation, regulatory status, calibration, maintenance, and other systems. The purpose is to avoid unintended consequences and plan any necessary process validation, verification, or requalification. An assessment limited to the project scope does not meet that intent.
The practical response. Start with a system boundary and an interface list, then assess each affected system.
What the Assessment Should Examine
For each system, ask whether the change alters intended use, operating range, capacity, materials of construction, software or control logic, cleaning or sterilisation methods, or environmental classification. Include utilities, HVAC, calibration and maintenance programmes, SOPs and training. Whether a change affects a marketing authorisation is a separate determination, made with regulatory affairs.
Annex 15, Section 1.7, requires a quality risk management approach for qualification and validation activities. Revisit the assessment when design details or the understanding of potential impacts change.
Evidence Expected
Expect to hold an approved change record, a documented risk assessment that explains what is in and out of scope, a list of affected qualified systems, and a recorded decision on the verification or requalification required. Each exclusion needs a written rationale.
Planning a Brownfield CQV Project?
Changes to existing equipment and systems require a documented assessment of their impact on the qualified state. IncepBio's CQV services can support relevant qualification and verification activities.
Approach 2: Use Risk-Based Qualification and Requalification Planning
The problem. Teams often default to one of two extremes: repeating full qualification for every change or testing only the new item. Both are hard to justify.
The compliance risk. Annex 15 says the scope and extent of qualification and validation should rest on a justified and documented risk assessment. Over-testing wastes shutdown time. Under-testing, or reducing scope without a written rationale, leaves the qualified state unsupported.
When Is Requalification Needed?
Requalification is needed when a change or an evaluation of the system's state shows that previously demonstrated performance may no longer be assured. It is not automatic for every modification; the required scope should be justified through a documented risk assessment and applicable site procedures.
Two triggers apply. Annex 15, section 4, expects equipment, facilities, utilities, and systems to be evaluated at an appropriate frequency to confirm they remain in a state of control. Section 11 links the extent of verification or requalification to the outcome of the change risk assessment.
Matching Test Depth to the Change
Risk-based qualification means test depth follows the nature of the change. The three categories below are illustrative engineering practice, not regulatory classes. Define them in the site's own procedure.
Like-for-Like Replacement
A replacement with an identical specification may need a documented comparison with the original, installation verification, calibration, and targeted functional checks, rather than full OQ and PQ, if the risk assessment supports this.
Modification of an Existing System
Test the changed function and the functions it can influence. Regression testing, which repeats selected existing tests, confirms unchanged functions still perform. Where a change moves operating limits, challenge the new limits, consistent with Annex 15's expectation that OQ confirms upper and lower operating limits.
New Equipment on Existing Utilities
Qualify the new equipment through its own stages. Separately, assess whether the utility still delivers the required capacity and quality at the new combined load. Annex 15, section 3.6 allows some FAT tests to avoid repetition at IQ/OQ where justified and where functionality is shown to be unaffected by transport and installation.
Approach 3: Assess Facility, HVAC and Utility Interfaces
The problem. Facility and utility systems are shared. Added rooms, equipment, heat load, extraction or process connections can change airflow patterns, pressure cascades, temperature and humidity control, and utility demand in areas outside the project.
The compliance risk. Annex 15, section 8, expects utility quality to be confirmed after installation using the qualification steps in section 3, with the period and extent reflecting intended use and any seasonal variation. It expects a risk assessment where utilities may contact the product directly or indirectly, naming HVAC as an example. For sterile manufacture, Annex 1 (2022) refers to Annex 15 for qualifying cleanrooms and clean air equipment and addresses periodic requalification.
Environmental and Cleanroom Effects
Assess whether the change affects air change rates, supply and return balance, room pressure differentials, temperature, humidity, room classification, or personnel and material flow.
Relevant verification may include airflow and pressure differential measurements, HEPA filter integrity tests, particle counts for classification, airflow visualisation where critical zones are affected, and a review of environmental monitoring data. Select only tests that address the identified risk. A change confined to an unclassified area does not need cleanroom classification testing. ISO 14644 defines recognised methods for cleanroom classification and testing.
Identified HVAC or cleanroom impacts?
IncepBio’s cleanroom validation and CQV services can support relevant verification activities, including HEPA filter integrity testing and particle counting.
Approach 4: Control Automation and System Changes
Not every brownfield project involves automation changes. Where one does, the risk is that a change to logic or configuration affects functions that were previously verified.
EU GMP Annex 11, Section 4, addresses computerised-system validation, while Section 10 requires changes to computerised systems and configurations to be controlled under a defined procedure. Section 9 addresses risk-based audit trails for GMP-relevant changes and deletions.
Where Automation Is in Scope
Typical triggers are new equipment integrated into an existing PLC/SCADA or BMS, changes to alarm limits, setpoints, interlocks, or sequence logic, new network connections, additional EMS sensors in a monitored area, and changes to user roles.
Assess each against GMP criticality, whether the function is configured or custom-coded, the effect on data and records, and interaction with existing interlocks.
Evidence Expected for Automation Changes
Maintain a controlled record of software and configuration changes. Depending on the change and its documented risk assessment, evidence may include a baseline configuration backup, updated functional specifications, testing of changed functions, regression testing of related functions, and challenge testing of affected alarms and interlocks.
Where relevant, verify backup restoration, review audit trails, and confirm that access controls remain appropriate. For systems exchanging GMP-relevant data, assess the accuracy and security of data transfers. These checks help demonstrate that the modified system continues to operate as intended and that relevant GMP records remain reliable.
GAMP 5 is industry guidance that supports a risk-based approach to computerised-system validation; it does not replace applicable regulations.
Planning an automation change in an existing GMP facility?
IncepBio supports pharmaceutical automation and computerised system validation to help manage system changes, testing, and GMP documentation.
Approach 5: Maintain Traceable Documentation and Controlled Handover
The problem. Brownfield work involves many parties, including designers, contractors, vendors, validation teams, QA, and operations, and documents change while the site keeps running.
The compliance risk. Annex 15 sets specific documentation expectations:
Key Documentation Requirements
- Qualification documents should be approved by appropriate personnel (Section 2.2).
- Significant changes to an approved protocol during execution should be recorded as a deviation and scientifically justified (Section 2.7).
- Results that fail acceptance criteria should be recorded as a deviation and investigated (Section 2.8).
- A formal release should be authorised before the next stage (Section 2.10).
- Supporting data should be reviewed before final approval of a change, and the change’s effectiveness evaluated afterwards (Sections 11.6 and 11.7).
Building the Traceability Chain
Link each element to the next: change record, risk assessment, requirements, protocols, test evidence, deviations, reports, and the updated master documents. These include drawings, SOPs, equipment lists, and the validation master plan. A traceability matrix shows that each requirement has a test, and each deviation has a closed assessment of its effect on the qualified state.
For computerised systems, Annex 11, Section 4.2, requires validation documentation to include applicable change-control records and reports of deviations observed during validation. Section 9 addresses risk-based audit-trail controls for GMP-relevant changes and deletions, including documentation of the reason for the change or deletion and regular review of audit trails
Controlled Handover and Release
A controlled handover gives operations the approved reports, updated SOPs, completed training records, calibration and maintenance schedules, alarm lists, and an updated system status record. Annex 15, section 2.10, allows conditional approval to proceed only where a documented assessment shows no significant impact on the next activity. Track open items with owners and due dates, and keep release to GMP use as a decision for the responsible quality personnel.
How IncepBio Supports Brownfield Pharmaceutical Projects
IncepBio publishes CQV services covering CQV engineering, equipment qualification, facility qualification, and utility qualification and lists risk assessment among its CQV service areas. For brownfield work, these services can support planning and executing the activities that the change impact assessment defines. See IncepBio’s CQV services and its guide to pharmaceutical equipment qualification.
Where cleanroom performance is affected, IncepBio’s cleanroom validation includes airborne particle counts, HEPA filter integrity tests, airflow visualisation and environmental monitoring. Where computerised systems change, IncepBio’s CSV/CSA services address their validation.
The manufacturer's quality unit stays responsible for change approval and GMP release. External support adds engineering and documentation capacity. Annex 15, section 2.6, also expects site personnel to confirm that third-party protocols are suitable before approving them.
Conclusion
Brownfield CQV protects an established, qualified state while new work is added. The five controls work together:
- A documented change impact assessment defines scope.
- Risk-based qualification sets proportionate testing.
- Interface assessment covers HVAC and utilities.
- Automation change control covers control systems where they are affected.
- Traceable documentation and controlled handover show the result.
None replace the site's own quality decisions, and none remove the need for a justified rationale.
Frequently Asked Questions
When should the change control record be raised in a brownfield project?
Raise change control before work begins on changes that could affect qualified systems, so the impact assessment can guide the project scope and testing.
Can supplier FAT and SAT data replace on-site testing?
Some FAT tests may replace repeated IQ/OQ tests when justified, documented, and approved, provided transport and installation do not affect the tested functions.
What is Brownfield CQV in pharmaceutical manufacturing?
Brownfield CQV is commissioning, qualification, and validation work performed when an existing GMP facility, equipment, utility, or control system is modified or expanded while maintaining the qualified state of affected systems.
What happens if a test fails during qualification of a modification?
Record the failure as a deviation, investigate the cause, assess its impact on the qualified state, and document the corrective actions before release decisions.
5. Who approves qualification documents written by a contractor?
Appropriately authorised site personnel must review third-party protocols for suitability and compliance with internal procedures before approving them.