Annex 1 is not a checklist - No deviation

Annex 1 is not a checklist

Annex 1 is not a checklist…

It’s a system of decisions, and the CCS is its backbone.

For years, compliance in sterile manufacturing was often approached as a destination.
A milestone reached once the documents were approved, the equipment qualified, and the inspectors satisfied.

The 2022 revision of EU/PIC/s GMP Annex 1 changed that paradigm.
Not by adding more requirements, but by reframing how contamination control must be designed, governed, and sustained.

The GPMLF Annex 1 White Paper makes one thing unmistakably clear: sterility assurance is no longer about isolated controls. It is about coherence.

At the center of that coherence sits the Contamination Control Strategy (CCS).

The real role of the CCS

The Contamination Control Strategy is often still misunderstood as a regulatory deliverable.
A structured document prepared for inspections, updated periodically, then archived.

That interpretation no longer holds.

Annex 1 explicitly positions the CCS as a living, risk-based system, embedded into the Pharmaceutical Quality System (PQS).
Its purpose is not to describe controls in isolation, but to explain how design choices, operational practices, monitoring, and human behaviors collectively reduce contamination risk.

In other words, the CCS is not what you show inspectors. It is what you use daily to stay in control.

When properly integrated:

  • investigations feed back into CCS assumptions,
  • deviations trigger reassessment of mitigation layers,
  • changes are evaluated against their cumulative impact on contamination risk,
  • senior management gains a clear, structured view of where risk truly sits.

This is why the White Paper insists on CCS visibility at leadership level.
Not as a compliance artifact, but as a governance tool.

Design comes first. Monitoring confirms, it never compensates.

One of the most consistent regulatory messages of recent years is also one of the most uncomfortable: monitoring does not fix weak design.

Environmental monitoring, APS, PUPSIT, sterility testing all play essential roles.
But Annex 1, reinforced by this White Paper, is explicit: they are confirmation mechanisms, not risk eliminators.

Aseptic assurance is built upstream:

  • through barrier technologies that limit human intervention,
  • through equipment designed for cleanability, sterilization, and logical assembly,
  • through closed or intrinsically sterile connections,
  • through airflow patterns that protect first air by design, not by procedure.

The White Paper’s discussion on RABS versus isolators is particularly telling.
There is no dogma. Both can be acceptable.
But acceptance depends entirely on how consistently the system performs its intended protective function.

A poorly operated RABS can negate its own purpose.
An isolator, if overcomplicated or poorly integrated, can introduce different risks.

The CCS is where those choices must be justified, transparently and technically.

Grey zones demand clarity, not silence

Several Annex 1 topics remain deliberately open to interpretation. This is not a weakness. It is an acknowledgment of manufacturing reality.

PUPSIT (Pre-Use Post-Sterilization Integrity Testing), filter positioning, indirect contact part sterilization, background classifications for closed systems…
These are not binary questions with universal answers.

What regulators now expect is not uniformity, but well-articulated, product- and process-specific rationale.

The White Paper reinforces this point repeatedly:

  • risk assessments must be patient-focused, not operationally convenient,
  • design intent must be clearly explained and consistently executed,
  • temporary gaps may be tolerated only if they are owned, mitigated, and governed at senior level.

Silence, assumptions, or “historical acceptance” are no longer defensible strategies.

The human factor remains the most fragile layer

Despite advances in automation, robotics, and closed systems, the human remains central to contamination risk.

The White Paper is unusually explicit on this point:
training alone is not enough.

Qualification does not guarantee understanding.
Procedures do not ensure judgement.

Regulatory observations continue to highlight:

  • inappropriate gowning behaviors,
  • deviations from aseptic technique,
  • lack of supervision and feedback,
  • gradual erosion of standards over time.

What makes the difference is quality culture made visible:

  • leaders present on the shop floor,
  • supervisors actively correcting drift,
  • quality teams embedded as partners, not auditors,
  • operators trained not only on the “how”, but on the “why”.

A CCS that ignores human behavior is incomplete.
One that actively integrates training, coaching, monitoring, and feedback becomes a powerful cultural anchor.

Annex 1 beyond sterility: applying principles without overreaching

One of the most valuable contributions of the White Paper lies in its treatment of low bioburden biologic manufacturing.

Annex 1 was written for sterile products. Yet it has become the only detailed EU GMP reference for contamination-controlled environments.

The message is nuanced but firm:

  • Annex 1 principles may be applied where relevant,
  • they should not be blindly imposed where they add no patient benefit.

Risk-based application is not regulatory avoidance. It is regulatory intent.

Closed systems, appropriate environmental classifications, validated filtration strategies, and robust CCS governance allow manufacturers to:

  • protect product quality,
  • avoid unnecessary complexity,
  • reduce waste and inefficiency,
  • and maintain supply continuity.

Again, the CCS is the mechanism that makes this balance defendable.

What many organizations still underestimate

Across sites and projects, similar patterns emerge:

  • CCS ownership is unclear,
  • integration with PQS (Pharmaceutical Quality System) is partial,
  • design decisions are documented too late,
  • CAPEX discussions are disconnected from contamination risk,
  • leadership visibility is episodic.

Annex 1 does not demand perfection. It demands intentionality, consistency, and accountability.

The longer gaps remain unmanaged, the narrower regulatory tolerance becomes. At the same time, regulators remain acutely aware of supply risk.

Navigating this tension requires experience, structure, and honest technical dialogue.

CCS as a shared language

At its core, the GPMLF White Paper reframes Annex 1 as a system of decisions, not a checklist of controls.

The CCS is the language that connects:

  • quality and engineering,
  • operations and leadership,
  • current constraints and future investments.

When used well, it enables clarity. When treated as paperwork, it creates blind spots.

How No deviation supports this journey

At No deviation, we work alongside teams to:

  • structure and operationalize CCS as a living system,
  • align Annex 1 expectations with real manufacturing constraints,
  • support design, qualification, and remediation strategies,
  • strengthen inspection readiness without losing operational coherence.

Because Annex 1 compliance is not achieved on paper. It is built, operated, and sustained on the floor.

If you are revisiting your CCS, facing Annex 1 gaps, or preparing future investments, our teams can support you in translating regulatory intent into durable, defensible execution.

Let’s make compliance work in the real world. Write us at hello@nodeviation.com

Leave a Comment

Your email address will not be published. Required fields are marked *