Revised Schedule M: what Indian manufacturers must change, and how software helps

The revised text is organised around the same ideas as WHO GMP and the PIC/S guide. The headline changes for most plants are these.

A pharmaceutical quality system (PQS)

Manufacturers must operate a documented quality system with senior management responsibility, rather than a set of disconnected QC checks. In practice that means management review, defined quality objectives and processes that feed each other: deviations lead to investigations, investigations to CAPA, CAPA to changes, and changes to updated SOPs and training.

Quality risk management

Decisions about controls, validation scope, supplier oversight and change impact are expected to be risk-based and documented — for example with FMEA-style assessments rather than informal judgement.

Product quality review

A regular review of each product’s quality data — batches, deviations, OOS results, changes, CAPAs, complaints, returns and stability — to confirm the process remains consistent and to identify improvements.

Qualification and validation

Equipment, utilities and premises must be qualified, and processes, cleaning and analytical methods validated. Computerised systems used for GMP records fall in scope too.

Deviation, CAPA, change control and OOS

Each must be a formal, documented process with investigation, approval and closure — and with evidence that the corrective action worked.

Suppliers, materials and stability

Approved suppliers, quarantine and release of starting materials, and an ongoing stability programme are expected as standard, along with complaint handling, recall procedures and self-inspection.

Most gaps found during Revised Schedule M upgrades are not about missing documents. They are about records that do not connect, and decisions that cannot be traced. Typical findings include:

• Deviations recorded in a register but never trended, and CAPAs closed without an effectiveness check.
• Change controls approved without a documented impact assessment on validation, stability or regulatory filings.
• OOS results retested until they pass, with no Phase I laboratory investigation on file.
• Batch records that cannot show who verified a critical weighing, or that were completed after the event.
• Raw materials used before QC release because quarantine status lives in a ledger nobody checks at dispensing.
• Training records that show attendance but not that the person was trained on the current SOP version.
• Spreadsheets used for GMP calculations with no access control, version control or audit trail.

Each of these can be fixed on paper, but paper makes the links expensive to maintain. That is where software earns its place.

Revised Schedule M includes expectations for computerised systems that are close to EU GMP Annex 11: systems used for GMP should be validated, access should be controlled, changes to data should be recorded, and data should be backed up and remain readable for the retention period. Inspectors increasingly apply ALCOA+ principles — attributable, legible, contemporaneous, original and accurate, plus complete, consistent, enduring and available — to Indian sites, just as MHRA and FDA inspectors do.

For exporters this matters twice. The same records are read by CDSCO, by WHO prequalification inspectors and by importing-country regulators. A system that meets the strictest of these once saves preparing for each separately.

Questions to ask of any GMP software

• Does every change keep the old value, the new value, the user, the time and a reason?
• Are approvals restricted so that the person who did the work cannot approve it?
• Are electronic signatures linked to the record and protected by re-authentication?
• Can you export complete records and audit trails for an inspector, in a readable format?
• What validation support does the vendor provide, and what remains your responsibility?

Trying to fix everything at once is the most common reason upgrades stall. A sequence that works for many plants:

1. Gap assessment against the revised text, product by product, with risks ranked.
2. Quality foundation first: deviation, CAPA, change control, OOS, SOP control and training — these are what inspectors test first.
3. QC laboratory next: specifications, sample testing, instrument calibration, stability and controlled raw data.
4. Materials and manufacturing: approved suppliers, quarantine-to-release, dispensing verification and batch records.
5. Review and improvement: product quality reviews, risk assessments, self-inspection and management review.

Run the quality system on real data for a few months before an inspection. Inspectors look for evidence that the processes are used, trended and improved — not just that SOPs exist.

Swat iQua Suite is designed to comply with Revised Schedule M, WHO GMP, 21 CFR Part 11 and EU GMP Annex 11 and Annex 1, following ALCOA+ data-integrity principles. It covers the quality, laboratory and manufacturing records on one platform, so the links the regulation expects are built into the records themselves.

Quality system

• Deviation management with four-person segregation of duties, verified actions and interim close with an e-signed justification.
• A single CAPA register fed by deviations, OOS results, audits, stability failures and audit-trail review, with per-action verification, overdue gates and optional effectiveness review.
• Change control with impact categories, verified change actions and an effectiveness review after closure.
• OOS investigation in up to three levels, each with its own review and approval, and lab incident records.
• Internal, external and supplier audits, with one CAPA per observation.
• FMEA-based quality risk registers, with the risk priority number always calculated by the system.
• Product quality review that gathers batch, deviation, CAPA, OOS, change control and EM figures for the period into a frozen, e-signed snapshot.

Documents, training and suppliers

• SOP control with separate approval and go-live steps and controlled copies that cannot be altered.
• Training created from the effective SOP version, with read-and-accept and server-graded online exams.
• Supplier qualification with risk ratings, versioned quality agreements and expiry reminders, and purchase orders that only accept approved sources.

Laboratory, materials and batches

• Specifications, sample testing with second-person review, stability studies and instrument calibration reminders.
• Goods received into quarantine; only QA-released stock can be dispensed, with second-person verification and calibrated-scale checks.
• Step-by-step electronic batch records, evidence-based e-signed batch release and one-click forward and backward traceability.

Every record shares one audit trail with a reason for every change, electronic signatures and server-enforced segregation of duties. Implementation runs in phases you choose — many Indian plants start with the quality foundation — and typical go-live is 1–3 months, depending on the modules and sites in scope.