How to Conduct a Data Integrity Audit of Your Method Validation Records

By Dr. Zubair Khalid, DVM, MS, PhD ·

How to Conduct a Data Integrity Audit of Your Method Validation Records

Quick Answer

  • Audit method validation records against ALCOA+ criteria to verify that data are attributable, legible, contemporaneous, original, and accurate, with completeness, consistency, enduring availability, and traceability as supporting attributes.
  • Begin with a risk-based inventory of validation records, then examine each record for audit trail completeness, documented changes, and raw data traceability before issuing any compliance decision.
  • A data integrity audit assesses record quality, not assay performance, so a passing audit does not confirm that a method is scientifically valid or clinically fit for purpose.

At a Glance

Audit ElementWhat to ExamineCommon Finding That Requires Escalation
Audit trail completenessElectronic records showing who performed each action, when, and what changedMissing timestamps or user identifiers for critical data entries
Raw data linkageTraceability from final results back to original instrument outputFinal values reported without corresponding raw data files
Change documentationJustification and authorization for any data modificationUndocumented corrections or overwritten entries
Metadata integrityInstrument parameters, method settings, and run conditionsMetadata altered without a documented reason
Record retentionStorage duration and accessibility of validation recordsRecords stored in personal drives or deleted after reporting
Signature and reviewEvidence that a qualified individual reviewed and approved the recordMissing signatures or review dates on approval pages

Scope and Purpose of a Data Integrity Audit

A data integrity audit of method validation records examines whether the documentation supporting a laboratory method is complete, accurate, and trustworthy. The audit focuses on the records themselves, not on whether the method produces correct results. This distinction matters because a method can be scientifically sound while its documentation is deficient, and a well-documented method can still be analytically flawed.

The audit applies to validation records for diagnostic assays, analytical methods, and molecular biology workflows. These records include validation protocols, raw data, instrument outputs, calculations, and final reports. The audit also covers the electronic systems that generate, store, and process these records, because data integrity failures often originate in system design instead of individual actions.

Laboratory professionals conducting an audit should understand the distinction between data integrity and data quality. Data quality refers to whether the data accurately reflects the measurement being made. Data integrity refers to whether the data has been preserved and reported without unauthorized alteration. A data integrity audit focuses on the latter, although the two concepts interact when missing or altered data undermines confidence in the quality of the results.

The audit process described here follows the ALCOA+ framework, which is a widely used standard for data integrity in regulated laboratories. The framework requires that data be attributable, legible, contemporaneous, original, and accurate, with additional attributes of completeness, consistency, durability, and availability. These attributes provide a structured way to evaluate whether validation records meet the standards expected for scientific documentation.

Core Principles of Data Integrity

Attributable Data

Every data entry in a validation record must be traceable to the person who performed the action. This requirement applies to manual entries, such as a technician recording a pipetting volume, and to electronic entries, such as an instrument logging a temperature reading. The attribution must include the identity of the individual, the date and time of the action, and the context of the action.

In electronic systems, attribution is typically achieved through user accounts and audit trails. Each user has a unique login, and the system records which user performed each action. In paper-based systems, attribution is achieved through signatures and initials. The audit should verify that attribution is present for every data entry, including entries that appear minor, such as a buffer preparation note or a sample dilution calculation.

Legible and Contemporaneous Data

Validation records must be readable and recorded at the time the activity occurs. Legibility applies to handwritten records, which must be clear enough for another person to read and interpret. Contemporaneity requires that data be recorded at the time of the measurement, not reconstructed later from memory or from separate notes.

The audit should check whether the date and time stamps on records match the expected sequence of activities. For example, if a validation protocol requires a 30 minute incubation, the record should show that the incubation start and end times are consistent with that requirement. A record that shows an incubation time inconsistent with the protocol may indicate that the data was recorded after the fact.

Original and Accurate Data

Original data is the first recorded observation, before any transformation, calculation, or interpretation. The audit should verify that the validation record contains the original data, not a summary or a transcription. If the original data is stored electronically, the audit should verify that the electronic file is the original and that no intermediate copies have been altered.

Accurate data is data that correctly reflects the measurement that was made. The audit should check whether the data in the record matches the data in the instrument output, the calculations are correct, and the reported results are consistent with the raw data. The audit should also check whether any data transformations, such as unit conversions or baseline corrections, are documented and justified.

Completeness and Consistency

Complete data includes all observations, including those that are unexpected or that fall outside the expected range. The audit should check whether the validation record includes all data points, or whether some data has been excluded without documentation. Excluding data without a documented reason is a data integrity concern.

Consistent data is data that is internally coherent. The audit should check whether the data in different parts of the record is consistent, such as whether the sample identifiers in the raw data match the sample identifiers in the final report. Inconsistencies can indicate transcription errors or unauthorized changes.

Durability and Availability

Durable data is data that remains intact and readable over time. The audit should check whether the data is stored in a format that can be read by current software and whether the storage medium is stable. Data stored in outdated formats or on unstable media may not be available for future review.

Available data is data that can be accessed when needed. The audit should check whether the data is stored in a location that is accessible to authorized personnel and whether the data can be retrieved in a timely manner. Data that is stored in a personal drive or in a format that requires special software may not be available for audit or inspection.

Preparing for the Audit

Define the Audit Scope

Before beginning the audit, define the scope of the audit. The scope should specify which validation records will be audited, which time period the audit covers, and which data systems are included. The scope should also specify the audit criteria, which are the standards against which the records will be assessed.

The scope should be based on risk. Records that support high-risk methods, such as diagnostic assays that affect patient care, should be audited more thoroughly than records that support low-risk methods. The scope should also consider the age of the records, the complexity of the method, and the history of data integrity issues in the laboratory.

Assemble the Audit Team

The audit team should include people with the appropriate expertise. The team should include a person who understands the method being validated, a person who understands the data systems, and a person who understands the data integrity requirements. The team should also include a person who is independent of the laboratory that generated the records, to avoid conflicts of interest.

The audit team should have access to the records and the systems that contain them. The team should also have the authority to ask questions of the laboratory staff and to request additional documentation.

Gather the Records

The audit team should gather the records that are within the scope of the audit. This includes the validation protocol, the raw data, the calculations, the final report, and any other documentation that supports the validation. The team should also gather the audit trails from the electronic systems that contain the data.

The team should verify that the records are complete before beginning the audit. If records are missing, the team should document the missing records and determine whether the missing records affect the audit.

Step-by-Step Audit Process

Step 1: Review the Validation Protocol

The audit begins with a review of the validation protocol. The protocol should describe the purpose of the validation, the method being validated, the acceptance criteria, and the procedures for the validation. The protocol should also describe the data that will be collected and the analysis that will be performed.

The audit should verify that the protocol is complete and that it was approved before the validation began. The audit should also verify that the protocol is consistent with the method that was actually performed. If the protocol was changed during the validation, the audit should verify that the change was documented and approved.

Step 2: Examine the Raw Data

The raw data is the original data that was collected during the validation. The audit should examine the raw data to verify that it is complete, accurate, and attributable. The audit should also verify that the raw data is consistent with the protocol and with the final report.

The audit should check whether the raw data includes all the observations that were made, or whether some observations are missing. The audit should also check whether the raw data is legible and whether it is recorded in a way that is consistent with the protocol.

Step 3: Verify the Audit Trail

The audit trail is the electronic record of who performed each action in the system, when the action was performed, and what the action was. The audit should verify that the audit trail is complete, that it is not disabled, and that it is not altered.

The audit should check whether the audit trail includes all the actions that were performed in the system, including actions that were performed by the system itself, such as automatic calculations. The audit should also check whether the audit trail is readable and whether it is stored in a format that can be reviewed.

Step 4: Check the Calculations

The audit should verify that the calculations in the validation record are correct and that they are consistent with the raw data. The audit should also verify that the calculations are documented and that the formulas are correct.

The audit should check whether the calculations are performed by the instrument system or by a person. If the calculations are performed by the system, the audit should verify that the system is validated and that the calculations are correct. If the calculations are performed by a person, the audit should verify that the calculations are correct and that they are documented.

Step 5: Review the Final Report

The final report is the document that summarizes the validation results. The audit should verify that the final report is consistent with the raw data and the calculations. The audit should also verify that the final report is complete and that it includes all the required information.

The audit should check whether the final report includes the acceptance criteria and whether the results meet the acceptance criteria. The audit should also check whether the final report is signed and dated by the appropriate personnel.

Step 6: Document the Audit Findings

The audit should document the findings of the audit, including any data integrity issues that were identified. The findings should be documented in a clear and concise manner, and they should include the evidence that supports the findings.

The audit should also document the recommendations for corrective action. The recommendations should be specific and actionable, and they should be prioritized based on the risk of the issue.

Records and Measurements

What to Record During the Audit

The audit team should record the following information during the audit:

  • The name and version of the validation protocol
  • The date and time of the audit
  • The names of the audit team members
  • The records that were reviewed
  • The findings of the audit
  • The recommendations of the audit

The audit team should also record the evidence that supports the findings, such as the specific data entries that are missing or the specific audit trail entries that are inconsistent.

How to Measure Data Integrity

Data integrity can be measured by the number of data integrity issues found during the audit. The audit team should count the number of issues and categorize them by type, such as missing audit trail entries, undocumented changes, or incomplete records.

The audit team should also measure the severity of the issues. A missing audit trail entry for a critical data point is more severe than a missing audit trail entry for a minor data point. The severity of the issues should be used to prioritize the recommendations.

How to Use the Audit Findings

The audit findings should be used to improve the data integrity of the laboratory. The findings should be shared with the laboratory staff, and the recommendations should be implemented. The audit findings should also be used to update the laboratory's data integrity procedures.

The audit findings should be reviewed by the laboratory management, and the management should decide whether the findings require corrective action. The management should also decide whether the findings affect the validity of the validation.

Common Failure Patterns

Missing Audit Trails

A common data integrity issue is a missing audit trail. This can occur when the audit trail is disabled, when the audit trail is not configured correctly, or when the audit trail is not reviewed. A missing audit trail makes it impossible to verify the attribution of the data.

The audit should check whether the audit trail is enabled and whether it is configured to capture all the required actions. The audit should also check whether the audit trail is reviewed on a regular basis.

Undocumented Changes

Another common issue is undocumented changes to the data. This can occur when a person changes a data entry without documenting the change, or when a person changes a data entry without authorization. Undocumented changes make it impossible to verify the accuracy of the data.

The audit should check whether the data has been changed and whether the changes are documented. The audit should also check whether the changes are authorized.

Incomplete Records

Incomplete records are a common issue in validation records. This can occur when the raw data is not recorded, when the calculations are not documented, or when the final report is not complete. Incomplete records make it impossible to verify the validity of the method.

The audit should check whether the records are complete and whether the missing records are documented. The audit should also check whether the missing records affect the validity of the validation.

Data that is not attributable

Data that is not attributable is a common issue in validation records. This can occur when the data is not signed, when the data is not dated, or when the data is not linked to a specific person. Data that is not attributable makes it impossible to verify the data.

The audit should check whether the data is attributable and whether the attribution is complete. The audit should also check whether the attribution is consistent with the data.

Limitations and Interpretation

What the Audit Does Not Cover

A data integrity audit does not cover the analytical validity of the method. The audit does not verify that the method is accurate, precise, or specific. The audit only verifies that the data supporting the method is accurate and complete.

The audit also does not cover the clinical validity of the method. The audit does not verify that the method is clinically useful or that it is appropriate for the intended use. The audit only verifies that the data supporting the method is accurate and complete.

How to Interpret the Audit Findings

The audit findings should be interpreted in the context of the validation. A data integrity issue does not necessarily mean that the method is invalid. The issue may be a minor documentation issue that does not affect the validity of the method.

The audit findings should be interpreted by a qualified person who understands the method and the data. The person should consider the severity of the issues and the impact of the issues on the validity of the method.

When to Escalate the Audit Findings

The audit findings should be escalated when the issues are severe or when the issues affect the validity of the method. The findings should be escalated to the laboratory management, and the management should decide whether the method needs to be revalidated.

The findings should also be escalated when the issues are systemic, such as when the audit trail is disabled or when the data is consistently not attributable. Systemic issues require a broader corrective action.

Biosafety and Regulatory Context

Biosafety Considerations

The audit should be conducted in a manner that is consistent with the biosafety requirements of the laboratory. The audit should not compromise the safety of the laboratory staff or the integrity of the samples.

The audit should be conducted in accordance with the biosafety principles of the laboratory, which are based on the Biosafety in Microbiological and Biomedical Laboratories guidelines. The audit should also be conducted in accordance with the NIH Guidelines for Recombinant or Synthetic Nucleic Acid Molecules if the laboratory works with recombinant or synthetic nucleic acids.

Regulatory Context

The audit should be conducted in accordance with the regulatory requirements of the laboratory. The audit should be conducted in accordance with the requirements of the NIST Laboratory Programs when the laboratory is a NIST laboratory.

The audit should also be conducted in accordance with the requirements of the MIQE Guidelines when the laboratory performs qPCR. The MIQE guidelines provide a framework for the reporting of qPCR data, and they include requirements for the documentation of the data.

Common Failure Patterns

Missing Audit Logs

A common data integrity issue is a missing audit log. This can occur when the audit log is disabled, when the audit log is not configured correctly, or when the audit log is not captured. A missing audit log makes it impossible to verify the attribution of the data.

The audit should check whether the audit log is enabled and whether it is configured correctly. The audit should also check whether the audit log is reviewed on a regular basis.

Undocumented Changes

A common issue is undocumented changes to the data. This can occur when a person changes a data entry without documenting the change, or when a person changes a data entry without authorization. The audit should check whether the data has been changed and whether the changes are documented.

Incomplete Records

Incomplete records are a common issue in validation records. This can occur when the raw data is not recorded, when the calculations are not documented, or when the final report is not complete. The audit should check whether the records are complete and whether the missing records are documented.

Practical Implementation Steps

Step 1: Create an Audit Checklist

Create an audit checklist that includes all the elements of the audit. The checklist should include the data integrity attributes, the audit steps, and the records that should be reviewed. The checklist should be used to guide the audit and to document the audit findings.

Step 2: Conduct a Pilot Audit

Conduct a pilot audit on a small set of records to test the audit process. The pilot audit should be used to identify any issues with the audit process and to refine the audit checklist. The pilot audit should also be used to train the audit team.

Step 3: Conduct the Full Audit

Conduct the full audit based on the audit checklist and the audit process. The audit should be conducted in a systematic manner, and the findings should be documented. The audit should be conducted by a qualified team.

Step 4: Report the Audit Findings

Report the audit findings to the laboratory management. The report should include the findings, the recommendations, and the evidence that supports the findings. The report should be reviewed by the management, and the management should decide whether the corrective action is required.

Step 5: Implement the Corrective Action

Implement the corrective action based on the audit findings. The corrective action should be implemented in a timely manner, and the corrective action should be documented. The corrective action should be verified to be effective.

Common Failure Patterns

Missing Audit Logs

A common data integrity issue is a missing audit log. This can occur when the audit log is disabled, when the audit log is not configured correctly, or when the audit log is not captured. A missing audit log makes it impossible to verify the attribution of the data.

The audit should check whether the audit log is enabled and whether it is configured correctly. The audit should also check whether the audit log is reviewed on a regular basis.

Undocumented Changes

A common issue is undocumented changes to the data. This can occur when a person changes a data entry without documenting the change, or when a person changes a data entry without authorization. The audit should check whether the data has been changed and whether the changes are documented.

Incomplete Records

Incomplete records are a common issue in validation records. This can occur when the raw data is not recorded, when the calculations are not documented, or when the final report is not complete. The audit should check whether the records are complete and whether the missing records are documented.

Records and Measurements

What to Record During the Audit

The audit team should record the following information during the audit:

  • The identity and version of the validation protocol
  • The date and time of the audit
  • The names of the audit team members
  • The records that were reviewed
  • The findings of the audit
  • The recommendations of the audit

The audit team should also record the evidence that supports the findings, such as the specific audit log entries that are missing or the specific data entries that are not documented.

How to Measure Data Integrity

Data integrity can be measured by the number of data integrity issues found during the audit. The audit team should count the number of issues and categorize them by severity. The audit team should also measure the severity of the issues, such as whether the issue affects the validity of the method.

How to Use the Audit Findings

The audit findings should be used to improve the data integrity of the laboratory. The findings should be shared with the laboratory team, and the recommendations should be implemented. The findings should also be used to update the audit procedures and the data integrity policies.

Limitations of the Audit

The Audit Does Not Verify the Method

The audit does not verify that the method is valid. The audit only verifies that the data supporting the method is accurate and complete. A method can be well-documented but still be analytically flawed.

The Audit Does Not Verify the Clinical Utility

The audit does not verify that the method is clinically useful. The audit only verifies that the data supporting the method is accurate and complete. A method can be well-documented but still be clinically inappropriate.

The Audit Is a Snapshot

The audit is a snapshot of the data at a specific point in time. The audit does not verify that the data will remain intact in the future. The audit should be repeated on a regular basis to ensure that the data integrity is maintained.

Professional Escalation Criteria

The audit findings should be escalated to the laboratory management when the findings are serious or when the findings affect the validity of the method. The findings should be escalated when the audit trail is missing, when the data is consistently incomplete, or when the data is not attributable.

The findings should also be escalated when the audit identifies a systemic issue, such as a lack of training or a lack of procedures. Systemic issues require a broader investigation and a corrective action plan.

Decision Framework for Triage and Escalation of Data Integrity Findings

A data integrity audit produces a list of findings, but the findings do not carry equal weight. Laboratory quality auditors need a structured method to decide which findings require immediate corrective action, which can be scheduled for routine improvement, and which indicate that the validation itself may be compromised. Without a decision framework, auditors risk either overreacting to minor documentation gaps or underreacting to systemic failures that undermine the entire validation record.

Severity Classification System

Classify each audit finding into one of three severity levels based on the potential impact on the reliability of the validation data. The classification should be recorded at the time the finding is identified, and the rationale for the classification should be documented in the audit report.

Critical findings are those that directly compromise the integrity of the data or make it impossible to verify the validity of the method. Examples include a disabled audit trail, raw data files that cannot be located, data entries that cannot be attributed to any individual, or evidence that data was altered without authorization. A critical finding means that the validation record cannot be relied upon to support the method.

Major findings are those that create uncertainty about the data but do not completely invalidate the record. Examples include missing timestamps on a subset of entries, undocumented changes that appear to be minor corrections, or a final report that omits a required acceptance criterion. A major finding requires corrective action but does not necessarily require revalidation.

Minor findings are those that do not affect the reliability of the data but indicate a gap in documentation practice. Examples include a signature that is not dated, a handwritten entry that is difficult to read, or a file name that does not follow the laboratory naming convention. A minor finding should be corrected but does not affect the validation outcome.

Decision Matrix for Corrective Action

Use the following decision matrix to determine the appropriate response to each finding. The matrix combines the severity of the finding with the scope of the issue, which is the number of records or data points affected.

Finding SeverityIsolated OccurrenceSystemic Pattern
CriticalEscalate immediately and suspend reliance on the affected validationEscalate immediately and suspend reliance on all validations in the affected system
MajorSchedule corrective action within 30 daysEscalate to management and require a root cause investigation
MinorDocument and address during the next procedure reviewAddress through staff training and procedure revision

The scope determination requires the auditor to examine whether the finding is an isolated event or part of a broader pattern. For example, a single missing timestamp on one data entry is an isolated occurrence. Missing timestamps on multiple entries across different validation runs indicate a systemic issue with the instrument configuration or the staff training.

Root Cause Analysis for Systemic Findings

When a finding is classified as systemic, the audit team should conduct a root cause analysis before recommending corrective action. The root cause analysis should identify the underlying reason for the data integrity failure, instead of only addressing the visible symptom.

The analysis should examine the following areas:

  • System configuration. Determine whether the instrument or software was configured to capture the required data. For example, an audit trail may be missing because the system was installed with the audit trail function disabled, not because a user intentionally disabled it.
  • Training and procedures. Determine whether the laboratory staff understood the data integrity requirements. A pattern of undocumented changes may indicate that the laboratory procedure does not describe how to document a change, instead of that the staff intentionally failed to document the change.
  • Workload and workflow. Determine whether the laboratory workflow allows for contemporaneous data recording. If the staff are required to record data at a time that is physically impossible, the workflow should be revised.
  • Supervision and review. Determine whether the laboratory has a process for reviewing data before it is reported. A systemic pattern of missing signatures may indicate that the review process is not being followed.

The root cause analysis should be documented in the audit report, and the corrective action should address the root cause instead of the visible symptom. For example, if the root cause of missing audit trail entries is a system configuration issue, the corrective action should include a system configuration change and a verification that the change is effective. If the root cause is a training gap, the corrective action should include training and a post-training assessment.

Escalation Criteria

Escalate the audit findings to the laboratory management when any of the following conditions are present. The escalation should be documented in writing and should include the evidence that supports the escalation.

  • A critical finding is identified, regardless of whether the finding is isolated or systemic.
  • A major finding is identified in a validation that supports a method used for patient care or for a regulatory submission.
  • A systemic finding is identified that affects more than one validation record.
  • The root cause analysis identifies a gap in the laboratory procedures or the laboratory management system.
  • The audit team determines that the validation record cannot be relied upon to support the method.

The escalation should be made to the laboratory management, and the management should decide whether the validation needs to be repeated. The management should also decide whether the data integrity issue affects other validations that were conducted using the same system or the same staff.

Revalidation Decision

The decision to revalidate a method should be based on the severity of the finding and the impact of the finding on the validation data. The audit team should not make the revalidation decision alone. The decision should be made by the laboratory management in consultation with the audit team and the personnel who performed the validation.

Revalidation is required when the data integrity issue affects the ability to determine whether the method meets the acceptance criteria. For example, if the raw data for the accuracy assessment is missing, the laboratory cannot verify that the method is accurate, and the validation must be repeated. Revalidation is not required when the data integrity issue affects only a minor portion of the data and the remaining data is sufficient to support the validation.

The revalidation decision should be documented, and the documentation should include the reason for the decision and the evidence that supports the decision. The documentation should be retained with the validation records.

Corrective Action Plan

The corrective action plan should be developed after the audit findings are classified and the root cause analysis is complete. The plan should include the following elements.

  • The specific finding that is being addressed
  • The root cause of the finding
  • The corrective action that will be taken
  • The person responsible for the corrective action
  • The date by which the corrective action will be completed
  • The method for verifying that the corrective action is effective

The corrective action plan should be reviewed by the laboratory management and approved before it is implemented. The plan should be tracked to completion, and the completion should be documented.

Verification of Corrective Action

The corrective action should be verified to be effective before the audit is closed. The verification should confirm that the data integrity issue has been resolved and that the issue does not recur. The verification should be documented, and the documentation should be retained with the audit records.

The verification method depends on the nature of the corrective action. If the corrective action is a system configuration change, the verification should confirm that the system is configured correctly and that the audit trail is capturing the required data. If the corrective action is a training program, the verification should confirm that the staff have completed the training and that the staff can demonstrate the required knowledge.

Audit Closure

The audit is closed when all findings have been classified, the corrective actions have been implemented and verified, and the audit report has been issued. The audit closure should be documented, and the documentation should include the date of the closure and the name of the person who closed the audit.

The audit closure should not be interpreted as a confirmation that the validation is valid. The audit closure only confirms that the audit process is complete and that the findings have been addressed. The validity of the validation is a separate decision that is made by the laboratory management.

Relationship to the ALCOA+ Framework

The decision framework is aligned with the ALCOA+ attributes. A critical finding is a finding that affects the attribution, accuracy, or completeness of the data. A major finding is a finding that affects the legibility, contemporaneity, or consistency of the data. A minor finding is a finding that affects the durability or availability of the data.

The decision framework also supports the ALCOA+ attribute of traceability. The framework requires that the audit findings be traceable to the evidence that supports the findings, and that the corrective action be traceable to the findings. The traceability is documented in the audit report and in the corrective action plan.

Practical Implementation

The decision framework should be implemented as part of the audit process. The audit team should use the framework to classify the findings, to determine the corrective action, and to decide whether the findings require escalation. The framework should be documented in the audit procedure, and the audit team should be trained on the framework.

The framework should be reviewed on a regular basis to ensure that it is effective. The review should consider whether the framework is being used consistently and whether the framework is producing the expected outcomes. The review should also consider whether the framework needs to be updated to reflect changes in the laboratory or the regulatory requirements.

The decision framework is a practical tool for the audit team. The framework provides a structured method for the audit team to decide which findings require immediate action and which findings can be addressed during the next audit cycle. The framework also provides a method for the audit team to communicate the findings to the laboratory management in a way that is clear and actionable.

Frequently Asked Questions

What is the difference between data integrity and data quality?

Data integrity refers to whether the data is complete, accurate, and attributable. Data quality refers to whether the data accurately represents the measurement being made. A data integrity audit focuses on the integrity of the data, not the quality of the data.

How often should a data integrity audit be conducted?

The audit should be conducted on a regular basis, such as annually or when there is a significant change to the method or the system. The audit should also be conducted when there is a data integrity issue or when the laboratory is inspected.

What is the ALCOA+ framework?

The ALCOA+ framework is a set of data quality attributes that are used to assess data integrity. The attributes are attributable, legible, contemporaneous, original, and accurate, with the additional attributes of complete, consistent, durable, and available.

What is an audit trail?

An audit trail is an electronic record of the actions that are performed in a system. The audit trail records who performed the action, when the action was performed, and what the action was. The audit trail is used to verify the attribution of the data.

What is the difference between raw data and processed data?

Raw data is the original data that is collected during the validation. Processed data is the data that has been transformed or calculated. The audit should verify that the raw data is present and that the processed data is consistent with the raw data.

What is the difference between a validation protocol and a validation report?

A validation protocol is a document that describes the purpose of the validation, the methods, and the acceptance criteria. A validation report is a document that summarizes the results of the validation. The audit should verify that the protocol is consistent with the report.

What is the role of the audit team?

The audit team is responsible for conducting the audit and documenting the findings. The audit team should be qualified and independent of the laboratory that generated the records. The audit team should have access to the records and the systems.

What is the role of the laboratory management?

The laboratory management is responsible for implementing the corrective action and for ensuring that the data integrity is maintained. The management should review the audit findings and decide whether the corrective action is required.

Related Diagnostic Guides

References and Further Reading

This article is educational and does not replace validated laboratory procedures, institutional biosafety review, manufacturer instructions, or professional interpretation.