Since you have 15 years experience, your interview preparation for QMS (Quality Management
System) in API pharma industry will be slightly different than a fresher or junior person. You will be
expected to show not only your technical expertise but also your leadership, problem-solving,
compliance knowledge, audit handling experience, and your practical exposure to systems.
Let me guide you step-by-step how to prepare for this interview:
1️⃣ Know the JD (Job Description) Thoroughly
Understand the exact role: QMS Head / Senior Manager / AGM / GM etc.
Which QMS functions are involved? (Change Control, Deviation, CAPA, Risk Management,
Documentation, Internal Audit, Regulatory Audit Handling, Supplier Qualification, Training,
etc.)
If possible, talk to HR/recruiter to get the JD beforehand.
2️⃣ Revise Core QMS Elements in API Industry
a. Deviation & CAPA Management
Types of deviations: planned / unplanned / major / minor.
Root cause analysis tools: 5-Why, Fishbone, FMEA.
How to implement CAPA effectively and how you verify effectiveness.
b. Change Control
Types of changes: Facility, Equipment, Process, Utility, Analytical.
How to evaluate impact assessment.
Regulatory filing considerations for changes.
c. Documentation
Document hierarchy: SOP → Protocols → Reports → Records → Logbooks → BMR/BPR.
Control of Master Documents.
Data Integrity principles: ALCOA+.
d. Risk Management
How you perform risk assessment.
Use of tools: FMEA, Risk Matrix, HAZOP, HACCP.
e. Audit Management
Handling regulatory audits: USFDA, EDQM, WHO, MHRA, PIC/S.
Facing auditors confidently.
How you manage audit observations and prepare compliance reports.
f. Supplier Qualification & Vendor Audits
Vendor audit process.
Supplier approval system.
How you monitor supplier performance.
g. Training System
How you conduct training.
Training effectiveness evaluation.
Handling skill matrix.
h. Investigation Handling
Market complaint investigations.
OOS, OOT investigations.
Product Recall management.
3️⃣ Prepare Practical Case Studies
The interviewer will definitely ask practical questions.
Prepare 4-5 real examples from your experience:
Situation Example
Deviation How you handled a critical deviation
Audit An example of regulatory audit you faced
OOS OOS investigation you conducted
Change Control Major change handled by you
Vendor Audit How you disqualified or approved a vendor
CAPA How you verified effectiveness of a CAPA
4️⃣ Regulatory Guidelines Revision
ICH Q7 — for GMP in API industry.
ICH Q10 — for Pharmaceutical Quality System.
WHO GMP.
USFDA 21 CFR Part 210/211.
Data Integrity Guidance.
PIC/S guidelines.
Be ready to quote these guidelines when needed. This creates a strong technical impression.
5️⃣ Prepare for Managerial & Leadership Questions
Since you have 15 years experience, they will also assess:
Your team handling skills.
How you train juniors.
Conflict resolution.
Communication with cross-functional teams (Production, QC, Engineering, RA, Purchase).
Decision making in crisis.
Soft Skills Preparation
Confidence: Speak clearly.
Clarity: Give structured answers.
Honesty: Admit if you don't know something.
Documentation Support: Where possible, say "As per SOP or guideline XYZ..."
7️⃣ Company Background Preparation
Learn about the company's:
o API product list.
o Regulatory markets (US, Europe, ROW).
o Recent inspection status (if available online).
o Any news or expansion plans.
8️⃣ Mock Interview Practice
Practice with a friend or mentor.
Record yourself answering questions.
Time your answers: ideally 2-3 mins per question.
9️⃣ Common Interview Questions
Here are few frequently asked questions for QMS in API industry:
Tell me about yourself and your QMS experience.
What are major challenges you faced in deviation/CAPA management?
How do you handle critical market complaint investigations?
How do you ensure data integrity compliance?
Explain your experience with regulatory inspections.
How do you handle change controls for API processes?
How do you train and develop your QA/QMS team?
What are the most common audit findings in API QMS system?
How do you manage supplier qualification and vendor audits?
How do you manage Product Quality Review (PQR)?
API QMS Manager – Interview Preparation Guide (15+ Years Experience)
1️⃣ Core Technical Topics You Must Revise
Sr Topic Sub Topics
1 Deviation & CAPA Management Types of deviation, 5-Why, Fishbone, FMEA, CAPA life cycle
2 Change Control Management Evaluation, Impact assessment, Regulatory filing
3 Investigation Handling OOS, OOT, Market Complaints, Root cause analysis
4 Document Management SOP preparation, Review, Approval, Data Integrity, ALCOA+
5 Risk Management FMEA, HACCP, Risk Matrix, Quality Risk Management
USFDA, MHRA, EDQM, WHO-GMP, Audit preparation, Response
6 Regulatory Audits
handling
Vendor Audits, Supplier Corrective Action Request (SCAR),
7 Supplier Qualification
Requalification
21 CFR Part 11, ALCOA+, Audit Trails, Computer System
8 Data Integrity
Validation
Training need identification, Skill matrix, Evaluation of
9 Training Management
effectiveness
Product Quality Review
10 Data trending, Review of stability, complaints, deviations
(PQR/APQR)
2️⃣ Regulatory Guidelines to Revise
Guideline Use
ICH Q7 API GMP guideline
ICH Q10 Pharmaceutical Quality System
Guideline Use
WHO TRS 957 Annex 2 GMP for APIs
21 CFR Part 210/211 USFDA Drug GMPs
21 CFR Part 11 Electronic Records/Data Integrity
EU GMP Part II API GMP guideline
3️⃣ Top 50 Interview Questions You May Face
Technical QMS Questions
1. Describe your experience with deviation handling.
2. How do you perform root cause analysis?
3. How do you ensure CAPA effectiveness?
4. Explain the Change Control system you manage.
5. How do you manage cross-functional deviations?
6. Give an example of a serious investigation you handled.
7. Explain how you prepare for regulatory audits.
8. What is ALCOA+? Explain its importance.
9. How do you ensure data integrity compliance?
10. How do you conduct risk assessments?
Regulatory Knowledge
11. What is ICH Q7 and how does it apply to APIs?
12. Describe 21 CFR Part 11 compliance.
13. Explain the role of QMS in regulatory inspections.
14. How do you handle regulatory observations?
15. What steps do you take for audit readiness?
Vendor & Supplier Qualification
16. How do you qualify a vendor?
17. What steps are involved in vendor audits?
18. How do you manage vendor deviations or complaints?
Documentation & Record Control
19. Explain how you manage GMP documentation.
20. How do you control master documents and templates?
21. How do you handle obsolete SOPs?
22. How do you manage controlled copies?
Investigation Handling
23. Share your experience of handling market complaints.
24. Explain your approach for OOS/OOT investigations.
25. How do you manage product recall?
Leadership & Team Management
26. How do you train your team on QMS?
27. How do you handle team conflicts?
28. How do you develop junior staff for future leadership?
Process Improvement
29. How do you identify QMS gaps?
30. What continuous improvement projects have you led?
Personal Competence & Behavior
31. Why do you want to join our company?
32. What are your strengths & weaknesses?
33. Where do you see yourself in 5 years?
34. How do you handle work pressure?
35. Describe a difficult situation you successfully handled.
Situational / Practical
36. What will you do if production releases a batch without QMS clearance?
37. How do you handle deviations during regulatory inspections?
38. What action will you take if data falsification is identified?
39. Explain your role in regulatory submission for APIs.
40. How do you ensure closure of audit CAPAs within timelines?
API-Specific QMS
41. What is the difference between API GMP and Finished Dosage GMP?
42. How do you control starting materials for APIs?
43. What are your controls for cross-contamination in API plant?
44. Explain cleaning validation approach for multi-product API facility.
45. How do you ensure control of critical process parameters?
Advance/High-level
46. What is Quality Culture? How do you promote it?
47. What are quality metrics you track as a QMS Head?
48. How do you assess effectiveness of QMS?
49. What is your approach for Quality Risk Management in APIs?
50. How do you deal with management in case of major GMP non-compliance?
4️⃣ Real Life Case Study Examples to Prepare
Scenario Example to Prepare
Deviation Equipment failure during granulation, handled via cross-functional team
CAPA Process optimization after multiple deviations
OOS High assay failure investigation
Change Control Change in vendor for critical starting material
Audit Handling Faced USFDA audit, handled data integrity observation
Vendor Qualification Disqualification of raw material supplier due to repeated failures
Training Periodic GMP training for cross-functional teams
5️⃣ STAR Method for Answering
Always answer experience-based questions using:
S - Situation → Explain the situation/problem
T - Task → Your responsibility
A - Action → What action you took
R - Result → Outcome/result
This makes your answers structured, mature, and impressive.
6️⃣ Soft Skills to Demonstrate
Skill How to Show
Leadership Talk about team management
Communication Clear, precise, technical language
Decision Making Show ownership of decisions
Skill How to Show
Audit Facing Explain how you handle audits
Conflict Resolution Share examples
API QMS Manager – Bonus Materials for Interview
1️⃣ QMS Notes (Quick Revision PDF)
Major QMS Elements You Must Remember
QMS Element Key Points
Classify (minor/major/critical), immediate action, RCA, CAPA, closure within
Deviation
timeline
Corrective & Preventive, SMART CAPA (Specific, Measurable, Achievable,
CAPA
Realistic, Timely)
Change Control Impact assessment, cross-functional evaluation, regulatory impact
Investigation OOS, OOT, Complaints — RCA tools (5-Why, Fishbone, FMEA)
Risk Management ICH Q9 approach, Risk Matrix, Severity-Probability-Detectability
Training Skill matrix, periodic refreshers, effectiveness check
Vendor
Risk based, vendor audit, performance monitoring
Qualification
Audit Handling Readiness, gap assessment, mock audits, real-time documentation
Data Integrity (DI) ALCOA+, audit trails, computerized system validation
PQR/APQR Annual quality review, trend analysis, continual improvement
4️⃣ Data Integrity Compliance Quick Chart
Meaning
ALCOA+ Principle
A Attributable
Meaning
ALCOA+ Principle
L Legible
C Contemporaneous
O Original
A Accurate
+ Complete, Consistent, Enduring, Available
👉 Be ready to explain real examples where you ensured DI compliance.
5️⃣ Regulatory Guideline Summary Table
Guideline Applicability
ICH Q7 GMP for API manufacturing
ICH Q10 Pharmaceutical Quality System
ICH Q9 Quality Risk Management
21 CFR Part 210/211 Drug GMP
21 CFR Part 11 Electronic Records / Signatures
WHO TRS 957 Annex 2 GMP for APIs (WHO Prequalification)
EU GMP Part II API GMP (EU markets)
6️⃣ Key Phrases to Use in Interview
✅ "As per ICH Q7, in API manufacturing…"
✅ "We follow a risk-based approach in line with ICH Q9…"
✅ "Data Integrity is ensured through compliance with ALCOA+ principles…"
✅ "We conduct periodic internal audits to verify system compliance…"
✅ "Our CAPA system ensures effective closure and periodic verification…"
Deviation Handling — Complete Note with Example
1️⃣ Definition of Deviation
A Deviation is any departure from approved procedures, specifications, or GMP requirements that
occurs during manufacturing, testing, storage, or distribution processes.
2️⃣ Types of Deviation
Type Description Examples
Planned A deviation known in advance and Equipment under maintenance, using
Deviation approved prior to execution alternate raw material temporarily
Unplanned Unintentional / unexpected departure Machine breakdown, power failure, process
Deviation from approved processes error, missing document
3️⃣ Classification of Deviation
Classification Description Example
No impact on product quality, safety, or Slight temperature excursion within
Minor
compliance acceptable range
Potential impact on product quality or Process parameter deviation beyond
Major
regulatory compliance limits
Direct impact on patient safety, product Cross-contamination, mix-up, batch
Critical
quality, or regulatory violations release without QC approval
4️⃣ Deviation Handling Procedure
a. Detection & Documentation
Any personnel noticing the deviation must immediately inform supervisor.
Record deviation details in deviation register / electronic system.
b. Initial Assessment
Immediate impact assessment:
o Is product impacted?
o Is safety involved?
o Is compliance violated?
c. Investigation (Root Cause Analysis)
Use tools:
o 5-Why Analysis
o Fishbone Diagram (Ishikawa)
o FMEA (for complex deviations)
Collect all supporting data: BMR, logbooks, calibration records, training records,
environmental data, etc.
d. Corrective and Preventive Action (CAPA)
Corrective Action: Immediate fix to prevent recurrence.
Preventive Action: Long-term system improvement.
CAPA must be SMART (Specific, Measurable, Achievable, Relevant, Timely).
e. Risk Assessment
Evaluate product impact.
Determine if batch disposition is required: Rework / Reject / Accept with justification.
f. Approval & Closure
Deviation investigation report to be approved by QA Head / QMS Head.
Closure must be within defined timeline (typically 30 calendar days).
g. Trending
Deviation data should be trended periodically (monthly, quarterly).
Identify repeat deviations or patterns.
5️⃣ Real-Life Example
Situation:
During API manufacturing, a deviation was observed:
Reactor temperature exceeded by 3°C for 15 minutes during critical reaction phase.
Initial Impact Assessment:
Reaction stability data indicated acceptable variability up to +5°C for up to 30 minutes.
No immediate product rejection.
Investigation (RCA):
5-Why Analysis revealed:
o Cooling water flow was partially blocked.
o Blockage due to improper cleaning of filter.
o Inadequate preventive maintenance schedule for cooling system.
CAPA:
Corrective: Replaced clogged filter; retrained maintenance staff.
Preventive: Revised preventive maintenance SOP; introduced filter inspection checklist.
Risk Assessment:
Based on stability data and QA review, batch was accepted.
Closure:
Deviation closed within 20 days with complete documentation.
Trending:
Similar deviations reviewed — maintenance schedule strengthened across all equipment.
6️⃣ Key Documents Involved
Deviation Form / Electronic Log
Investigation Report
CAPA Form
Risk Assessment Report
Supporting data: BMR, logbooks, training records, equipment logs
Deviation Closure Approval
7️⃣ Key Regulatory References
Guideline Section
ICH Q7 2.3, 5.1
WHO GMP Section 17
21 CFR Part 211 211.100, 211.192
✅ Important Closing Line (for Interview):
"Our deviation system ensures early detection, thorough investigation, timely CAPA, and prevention
of recurrence through data trending, fully aligned with ICH Q7 and WHO GMP requirements."
CAPA (Corrective and Preventive Action) — Interview Note (With Example)
🔷 1️⃣ What is CAPA?
CAPA stands for:
Corrective Action (CA): Action taken to eliminate the cause of an existing non-conformity.
Preventive Action (PA): Action taken to eliminate the cause of a potential non-conformity.
👉 Main objective: Prevent recurrence (CA) and prevent occurrence (PA).
CAPA is a key element of pharmaceutical QMS to ensure continuous improvement and GMP
compliance.
🔷 2️⃣ When CAPA is Required?
CAPA is typically initiated based on:
Deviation / Incident investigations
OOS / OOT investigations
Internal or external audits (regulatory or customer audits)
Market complaints
Product recall
Process failures or repeated trends
Risk assessments
Vendor/supplier issues
🔷 3️⃣ CAPA Process Flow
Step Description
1. Issue Identification Source of problem identified
2. Investigation / RCA Determine root cause (e.g., using 5-Why, Fishbone)
3. CAPA Plan Preparation Define specific actions
4. Approval QA/QMS approves CAPA plan
5. Implementation Actions executed as per plan
6. Verification of Effectiveness (VoE) Confirm effectiveness
7. Closure Official closure after VoE
Step Description
8. Trending Regular monitoring of CAPA data
🔷 4️⃣ SMART CAPA Approach
CAPA actions must always be SMART:
Letter Meaning Example
S Specific Update calibration SOP for Reactor R-101
M Measurable Action to be completed within 15 days
A Achievable All resources available
R Realistic Action aligned with company capability
T Time-bound Target completion date defined
🔷 5️⃣ Interview Example of CAPA
Situation:
During API manufacturing, an unplanned deviation occurred:
Reactor temperature exceeded by 4°C for 10 minutes.
Investigation revealed uncalibrated temperature sensor.
Root Cause Analysis (RCA):
5-Why Analysis:
o Why did temperature rise? → Sensor malfunctioned.
o Why malfunctioned? → Sensor not calibrated.
o Why not calibrated? → Missed in the monthly calibration schedule.
o Why missed? → Calendar reminder not set in system.
o Why no system alert? → No automatic calibration management system in place.
CAPA:
Corrective Action:
Immediate recalibration of the sensor.
Review all equipment calibration status.
Preventive Action:
Implement electronic calibration management system with automatic reminders.
Revise Calibration SOP.
Train engineering staff on revised procedure.
Verification of Effectiveness (VoE):
Monitored calibration compliance for 3 consecutive months.
No calibration overdue observed.
Audit confirmed compliance.
CAPA Closure:
CAPA closed after successful VoE, fully documented.
🔷 6️⃣ Key Documents Involved
Deviation report
Investigation/RCA report
CAPA form (Plan, Action, VoE, Closure)
SOP revisions
Training records
Calibration records
CAPA trending reports
🔷 7️⃣ Regulatory Reference
Guideline Section
ICH Q10 3.2.2 Corrective Action and Preventive Action
ICH Q7 Section 2.3
21 CFR Part 211 211.192 (Quality control responsibilities)
🔷 8️⃣ Key Interview Phrases to Use:
“CAPA is the heart of continuous improvement in QMS.”
“We always link CAPA directly to properly identified root causes.”
“SMART CAPA ensures realistic and effective implementation.”
“Verification of effectiveness is mandatory before CAPA closure.”
“CAPA trending helps us identify systemic weaknesses.”
✅ Strong Closing Statement (for Interview):
"In my 15 years of QMS experience, I always ensure that CAPAs are based on thorough investigation,
are SMART, and verified for long-term effectiveness. CAPA is not just a formality — it is a tool for
strengthening the overall quality system."
Change Control – Interview Note (With Example)
🔷 1️⃣ What is Change Control?
Change Control is a formal system for:
Proposing,
Evaluating,
Approving,
Implementing,
Documenting, and
Verifying changes
...to ensure product quality, safety, and regulatory compliance are not compromised.
Goal: To control changes in a planned, systematic, and documented manner.
🔷 2️⃣ Types of Changes
Type Examples
Document Changes SOP revision, BMR template change
Process Changes Process parameter modification, equipment upgrade
Equipment Changes New equipment installation, replacement
Raw Material Changes Vendor change, specification change
Facility Changes Area modification, HVAC change
Regulatory Changes Specification update as per pharmacopeial revision
Computer System Changes Software upgrades
🔷 3️⃣ Change Control Process Flow
Step Activity
1️⃣ Change initiation (Change request form raised)
2️⃣ Impact assessment (Cross-functional team evaluates impact)
3️⃣ Risk assessment (Quality Risk Management applied)
4️⃣ Regulatory assessment (Is regulatory filing required?)
5️⃣ Approval (QA/QMS and functional heads approve)
6️⃣ Implementation (As per approved plan)
7️⃣ Verification of implementation
8️⃣ Closure (After effectiveness verification)
9️⃣ Trending of change control data
🔷 4️⃣ Key Elements of Change Control
Change description (clear and detailed)
Justification for change
Affected documents/processes
Impact assessment
Cross-functional evaluation (CFT involvement)
Regulatory impact assessment
Risk assessment (as per ICH Q9)
Implementation plan
Training (if applicable)
Verification of effectiveness (VoE)
Proper documentation and closure
🔷 5️⃣ Cross-Functional Teams Involved
QA / QMS
Production
QC / Analytical
Regulatory Affairs
Engineering / Maintenance
Validation
IT / CSV
Supply Chain / Procurement
🔷 6️⃣ Regulatory Impact Assessment
No impact → Internal approval only.
Reportable change → Notify regulatory authorities (variation filing may be needed).
Major change → Prior regulatory approval required.
👉 This assessment depends on market-specific regulatory requirements (USFDA, EU, WHO, etc.).
🔷 7️⃣ Real Interview Example of Change Control
Situation:
Vendor of a key starting material for an API process is being changed.
Reason for Change:
Old vendor discontinued supply.
Change Initiation:
Change request raised by Procurement, reviewed by QA/QMS.
Impact Assessment (CFT discussion):
Area Impact
Process Potential variation in raw material quality
Quality Comparative analysis required
Validation Raw material equivalency study
Regulatory Filing variation required
Stability Stability data comparison
Risk Assessment:
Performed as per ICH Q9 — medium risk identified.
Action Plan:
Perform vendor qualification.
Conduct raw material comparative studies.
Execute process validation batches.
Update related documents: MFC, BMR, specifications.
Inform Regulatory Affairs for submission.
Verification:
No quality difference found after 3 validation batches.
Stability data supported equivalence.
Regulatory submission approved.
Closure:
Change control closed after all activities completed and documented.
🔷 8️⃣ Key Documents Involved
Change request form
Impact assessment form
Risk assessment report
Validation protocol and report
Updated SOPs/BMRs/specifications
Regulatory filing documents
Change control closure report
🔷 9️⃣ Regulatory Guidelines Reference
Guideline Reference
ICH Q10 Section 3.2.3 Change Management
ICH Q7 Section 13 Change Control
WHO GMP Section 17 Change Control
21 CFR Part 211 Section 211.100 and 211.180
🔷 🔥 Key Phrases to Use in Interview
“All changes are evaluated through cross-functional impact assessment.”
“Regulatory impact is assessed based on ICH Q10 and applicable guidelines.”
“Risk-based approach is applied as per ICH Q9 before implementing any change.”
“Verification of effectiveness is mandatory before closure of change control.”
“We maintain change control trending to identify frequent system changes.”
✅ Strong Closing Statement for Interview:
“In my 15 years of QMS experience, I have handled numerous changes by applying cross-functional
risk assessments, regulatory evaluation, and proper validation to ensure that changes never
compromise product quality, safety, or compliance.”
Investigation — Interview Note (With Example)
🔷 1️⃣ What is Investigation?
Investigation is a structured approach to identify:
The root cause of a problem,
Its impact on product quality and compliance,
Corrective and preventive actions (CAPA) to prevent recurrence.
Investigation is a critical component of QMS to ensure product safety, efficacy, and regulatory
compliance.
🔷 2️⃣ When Investigation is Required
OOS (Out of Specification): Results outside approved specifications.
OOT (Out of Trend): Results within specification but outside expected trend.
Market Complaints: Product defect reported from market.
Deviations / Incidents: Process, equipment, documentation errors.
Stability Failures: During stability studies.
Audits Observations: Internal or regulatory audits.
🔷 3️⃣ Key Investigation Steps
Step Activity
1️⃣ Problem identification
2️⃣ Immediate action (if required)
3️⃣ Data collection (documents, logbooks, BMRs, environmental data, personnel interviews)
4️⃣ Root Cause Analysis (RCA)
5️⃣ Impact assessment
6️⃣ CAPA recommendation
7️⃣ Implementation of CAPA
Step Activity
8️⃣ Verification of effectiveness
9️⃣ Documentation and closure
🔷 4️⃣ RCA Tools Commonly Used
Tool Purpose
5-Why Analysis Simple, identifies direct root cause
Fishbone (Ishikawa Diagram) Systematic, identifies multiple contributing factors
FMEA (Failure Mode and Effects Analysis) Quantitative risk assessment for complex issues
Pareto Analysis Prioritize multiple causes based on frequency
Brainstorming Cross-functional team idea generation
🔷 5️⃣ Areas to Check During Investigation
Manufacturing process records
Analytical method and instrument logs
Calibration and maintenance records
Environmental monitoring data
Utility parameters (HVAC, water system, etc.)
Material quality (RM, PM)
Personnel training and qualification
Change control or recent modifications
🔷 6️⃣ Real Interview Example of Investigation
Situation:
OOS observed in Assay of API batch:
Specification: 98.0% to 102.0%
Result obtained: 97.5%
Immediate Action:
Batch placed on hold.
Inform QA and QMS.
Phase-I Laboratory Investigation:
Rechecked calculations: Found correct.
Verified instrument calibration: In compliance.
Analytical method: Verified — no deviation.
Analyst interview: Competent and followed SOP.
Phase-II Full Investigation (Manufacturing Investigation):
Reviewed BMR: No process deviation recorded.
Raw material COA: Within specifications.
Equipment log: All parameters within range.
Environmental data: Acceptable.
RCA using 5-Why and Fishbone:
Possible Root Cause Outcome
Weighing error Ruled out
Sampling error Ruled out
Process deviation Ruled out
Analytical method Ruled out
Degradation? Found likely (storage issue)
Investigation found that material was stored temporarily in uncontrolled area during
maintenance work, leading to mild degradation.
CAPA:
Corrective Action:
Discard batch as per quality decision.
Preventive Action:
SOP updated to ensure controlled storage during maintenance.
Engineering to ensure HVAC remains operational during maintenance.
Additional training to production and warehouse staff.
Verification of Effectiveness:
No such event observed in next 6 months.
CAPA trending showed zero repeat occurrence.
🔷 7️⃣ Key Documents Involved
OOS Investigation form
BMR review records
Instrument calibration records
Environmental data reports
CAPA forms
Training records
Deviation report (if linked)
🔷 8️⃣ Regulatory References
Guideline Reference
ICH Q7 Section 2.3, 14.2
ICH Q10 Section 3.2.1 Investigation System
WHO GMP Section 17
21 CFR 211.192 Investigation of discrepancies
🔷 🔥 Key Phrases to Use in Interview
“We always apply root cause tools like 5-Why, Fishbone, and FMEA for thorough
investigations.”
“Investigation starts with data collection and ends with effective CAPA.”
“Verification of effectiveness is mandatory before closing any investigation.”
“Our investigation procedure is fully aligned with ICH Q10 expectations.”
✅ Strong Closing Statement for Interview:
“In my 15 years of QMS experience, I always ensure that investigations are handled systematically,
root causes are properly established, and preventive actions are taken to strengthen the entire
system.”
Risk Management — Interview Note (With Example)
🔷 1️⃣ What is Risk Management?
Risk Management is a systematic process for:
Identifying,
Evaluating,
Controlling, and
Communicating
potential risks that may affect product quality, patient safety, or regulatory compliance.
👉 It helps in decision making throughout the product lifecycle.
🔷 2️⃣ Regulatory Reference
ICH Q9: Quality Risk Management (QRM) — Core global guideline.
WHO GMP, EU GMP Part I & II, and USFDA also refer to ICH Q9 principles.
🔷 3️⃣ When to Apply Risk Management?
Change Control
Deviation and Investigation Handling
OOS / OOT Management
CAPA Prioritization
Vendor Qualification
Validation Activities
Audit Preparation
Process Design and Scale-up
Cleaning Validation
🔷 4️⃣ Risk Management Process (As per ICH Q9)
Step Activity
1️⃣ Risk Identification — What can go wrong?
2️⃣ Risk Analysis — Understand causes, consequences
3️⃣ Risk Evaluation — Assess the level of risk
4️⃣ Risk Control — Mitigate or eliminate risks
5️⃣ Risk Communication — Share with stakeholders
6️⃣ Risk Review — Ongoing monitoring and reassessment
🔷 5️⃣ Risk Assessment Tools
Tool Description
Risk Matrix Visual assessment of risk level
FMEA (Failure Mode and Effects Analysis) Quantitative scoring
Fault Tree Analysis (FTA) Logical evaluation of failure pathways
HACCP (for contamination risks) Control points for hazards
5-Why, Fishbone For root cause analysis during investigation
🔷 6️⃣ Risk Scoring — Severity × Probability × Detectability
Severity (S): How serious is the impact?
Probability (P): How likely is the failure to occur?
Detectability (D): How easily can it be detected before affecting product quality?
👉 Risk Priority Number (RPN) = S × P × D
Risk Score Action
Low Acceptable with routine monitoring
Medium Requires control measures
High Immediate mitigation needed
🔷 7️⃣ Risk Matrix Example
Probability ↓ / Severity → Minor Major Critical
Unlikely Low Medium High
Possible Medium High High
Likely High High Very High
🔷 8️⃣ Real-Life Interview Example — Risk Management in Change Control
Situation:
A proposal to upgrade a reactor from SS316 to Hastelloy in an API intermediate stage.
Risk Identification:
Material compatibility
Leachables
Cleaning validation
Process consistency
Regulatory reporting
FMEA Scoring:
Failure Mode S P D RPN
Corrosion risk 8 3 5 120
Cross-contamination 9 2 3 54
Validation failure 7 4 4 112
👉 Corrosion risk and validation failure identified as high risks.
Risk Control:
Conduct material compatibility study.
Full-scale validation batches.
Enhanced cleaning validation protocol.
Notify regulatory authorities of equipment change.
Risk Review:
Post-implementation monitoring.
Stability studies continued for 6 months — no adverse findings.
🔷 9️⃣ Key Documents in Risk Management
Risk Assessment Form
FMEA Worksheet
Risk Control Plan
Risk Review Reports
Change Control Linkage
CAPA Linkage (if applicable)
🔷 🔥 Key Phrases to Use in Interview
“We follow ICH Q9 guidelines for structured risk-based decision making.”
“We use FMEA with Severity-Probability-Detectability scoring to prioritize risks.”
“High-risk items are addressed through enhanced control measures and ongoing review.”
“Risk management is embedded in all QMS processes including change control,
investigations, and validation.”
✅ Strong Closing Statement for Interview:
“In my 15 years of experience, I have extensively applied risk management principles across QMS
functions, ensuring that all decisions are scientifically justified, properly documented, and regulatory
compliant.”
Training – Interview Note (With Example)
🔷 1️⃣ Why Training is Critical in Pharma QMS
Training ensures that:
Personnel are competent to perform assigned tasks.
Procedures, GMP standards, and regulatory requirements are understood and followed.
Human errors, deviations, and non-compliances are minimized.
👉 Training is directly linked with product quality, patient safety, and regulatory compliance.
🔷 2️⃣ Regulatory Requirements
ICH Q10 — Pharmaceutical Quality System:
Section 2.2 — Personnel training and qualification
ICH Q7 — GMP for API:
Section 3 — Personnel
21 CFR 211.25:
Personnel qualifications
WHO GMP:
Section 12 — Personnel
🔷 3️⃣ Types of Training
Type Examples
Induction Training For new employees
GMP Training Regular GMP updates
SOP Training Before performing any task
Technical Training Equipment handling, process operations
QMS Training Deviation, Change Control, CAPA, Risk Management
Regulatory Training Updates on guidelines (ICH, FDA, WHO, EU GMP)
Refresher Training Periodic re-training
Type Examples
Behavioral / Soft Skill Training For leadership, communication
🔷 4️⃣ Key Components of Effective Training Program
Training Need Identification (TNI): Based on job profile and responsibility.
Skill Matrix: Tracks individual competence against required skills.
Training Calendar: Annual plan for scheduled training sessions.
Training Material Preparation: SOPs, presentations, videos, case studies.
Qualified Trainers: Experienced personnel or SMEs (Subject Matter Experts).
Attendance Recording: Proper documentation of participation.
Effectiveness Check: Assessment after training.
Retraining Plan: For failures or procedural changes.
🔷 5️⃣ Skill Matrix (Very Important for Interview)
Employee Process Knowledge SOP Compliance Equipment Handling Documentation
Mr. A ✓✓✓ ✓✓ ✓✓✓ ✓✓✓
Ms. B ✓✓ ✓✓✓ ✓✓ ✓✓
Helps to identify who is qualified, needs training, or requires retraining.
Used during audits to show employee qualification.
🔷 6️⃣ Effectiveness Check Methods
Method Example
Written Test MCQs, short questions
Practical Demonstration Observation on shop floor
Case Studies Problem-solving exercises
Oral Discussion One-to-one discussion with trainer
On-the-Job Observation Performance monitoring after training
🔷 7️⃣ Real-Life Interview Example — Training Program
Situation:
During internal audit, multiple documentation errors observed by new operators.
Investigation:
Root cause identified: Inadequate understanding of new documentation SOP.
CAPA Plan:
Corrective Action: Conduct immediate retraining on documentation SOP.
Preventive Action:
o Update skill matrix.
o Introduce effectiveness checks through mock documentation exercises.
o Monthly verification of documentation practices for 3 months.
Effectiveness Check:
Written test (minimum passing 80%).
Shop floor observation by QA.
Zero errors observed in next 3 months.
Closure:
CAPA closed successfully.
Audit observation marked as compliant.
🔷 8️⃣ Key Documents Involved
Training Need Identification (TNI)
Training Calendar
Skill Matrix
Attendance Sheet
Training Material
Effectiveness Check Records
CAPA (if linked to investigation)
Training Certificates
🔷 🔥 Key Phrases to Use in Interview
“We maintain a skill matrix to ensure every employee is qualified for assigned tasks.”
“All SOPs are read and understood (R&U) before task assignment.”
“Training effectiveness is verified through written tests and practical assessments.”
“Retraining is done whenever there’s a procedural change, audit finding, or investigation
outcome.”
“Training records are audit-ready at all times.”
✅ Strong Closing Statement for Interview:
“In my 15 years of experience, I ensure that training is not treated as a formality but as a continuous
system to maintain competence, prevent errors, and ensure ongoing GMP compliance.”
Vendor Qualification — Interview Note (With Example)
🔷 1️⃣ What is Vendor Qualification?
Vendor Qualification is a formal system to:
Evaluate,
Approve,
Monitor
suppliers of raw materials, packaging materials, intermediates, solvents, and services, to ensure they
consistently supply materials meeting GMP, regulatory, and quality requirements.
👉 Vendor Qualification = First gate of quality control.
🔷 2️⃣ Why Vendor Qualification is Critical?
Ensures consistency and reliability of incoming materials.
Reduces risk of contamination, mix-ups, and quality failures.
Ensures regulatory compliance for API manufacturing.
Minimizes market complaint, batch rejection, and recalls.
Mandatory under ICH Q7, Q10, WHO, USFDA & EU GMP.
🔷 3️⃣ Regulatory References
Guideline Section
ICH Q7 Section 7.3 — Supplier Qualification
ICH Q10 Section 2.7 — Supplier Management
WHO GMP Section 12
21 CFR 211.84 Testing and approval of components
Guideline Section
🔷 4️⃣ Vendor Qualification Process
Step Activity
1️⃣ Vendor Request Initiation (Procurement or QA initiates)
2️⃣ Risk Assessment (Criticality of material and vendor history)
3️⃣ Document Review (DMF, GMP compliance certificates, ISO certificates, previous audit reports)
4️⃣ Questionnaire Evaluation (Vendor self-assessment)
5️⃣ On-site Vendor Audit (Performed by QA audit team)
6️⃣ Audit Report & CAPA Review (If gaps found)
7️⃣ Approval Decision (Based on risk assessment, audit outcome, technical evaluation)
Performance Monitoring (Ongoing evaluation through material performance, complaint
8️⃣
history, deviations, and audit history)
🔷 5️⃣ Risk-Based Vendor Qualification
👉 Risk-based approach depends on:
Risk Factor Criteria
Material Type API, Excipients, Solvents, Packaging
Material Criticality Direct vs. indirect impact on product quality
Vendor Type Manufacturer vs. Trader
Regulatory Filing DMF status, audit history
History Past compliance & performance
High-risk vendors always require full audit and detailed evaluation.
🔷 6️⃣ Vendor Performance Monitoring (Post-Qualification)
Parameter Frequency
Material quality trend Every batch
OOS/OOT/deviation involvement Continuous
Complaints from production or market Continuous
Parameter Frequency
Delivery timeline compliance Monthly/Quarterly
Regulatory inspection outcomes As applicable
Requalification audit 2-3 years (risk-based)
🔷 7️⃣ Real-Life Interview Example — Vendor Qualification
Situation:
Company planning to qualify a new vendor for an excipient (e.g. Microcrystalline Cellulose — MCC
PH 102).
Qualification Process:
Risk Assessment:
o Critical excipient, directly impacts tablet hardness & dissolution.
o Categorized as High Risk.
Document Review:
o Vendor GMP certificate, ISO 9001, COA, Stability data.
Questionnaire Evaluation:
o Vendor submitted technical questionnaire with full manufacturing details.
Vendor Audit:
o On-site audit conducted by QA team.
o Observations:
Calibration documentation missing for sieve machine.
SOP revision control system needs improvement.
CAPA Review:
o Vendor submitted acceptable CAPA with documented evidence.
Approval Decision:
o Vendor approved for commercial supply after CAPA closure.
Performance Monitoring:
o First 3 batches under heightened sampling & full testing.
o Vendor performance reviewed quarterly for 1 year.
🔷 8️⃣ Key Documents Involved
Vendor Approval SOP
Vendor Questionnaire
Risk Assessment Form
Vendor Audit Plan & Report
CAPA from vendor
Approval Certificate / Master Vendor List
Vendor Performance Monitoring Reports
🔷 🔥 Key Phrases to Use in Interview
“We follow risk-based vendor qualification as per ICH Q7 and ICH Q10.”
“High-risk vendors undergo comprehensive audit, while low-risk may be qualified through
document evaluation.”
“Vendor performance is monitored continuously via complaint data, OOS trends, and
regulatory updates.”
“Approved vendor list (AVL) is reviewed periodically and updated.”
“Vendor qualification is not one-time; it is a lifecycle process.”
✅ Strong Closing Statement for Interview:
“In my 15 years of QMS experience, I’ve ensured that vendor qualification is always aligned with
product criticality, regulatory requirements, and risk management principles to protect product
quality at the source.”
Audit Handling — Interview Note (With Example)
🔷 1️⃣ Why Audit Handling is Critical?
Demonstrates site's state of control.
Ensures regulatory compliance (USFDA, WHO, EU, MHRA, TGA, etc.).
Strengthens internal QMS robustness.
Reduces risk of major observations / warning letters / import alerts.
👉 A well-managed audit protects company reputation, business continuity & patient safety.
🔷 2️⃣ Types of Audits Faced
Audit Type Conducted by
Regulatory Audit USFDA, EU, WHO, etc.
Customer Audit Clients or Marketing Authorization Holders
Internal Audit Corporate QA or site QA
Third Party Audit Certification agencies (ISO, GMP, etc.)
🔷 3️⃣ Audit Handling Strategy
🔶 Pre-Audit Readiness
Gap Assessment:
o Review of previous audits, open CAPAs, recent changes.
Mock Audits / Readiness Audits:
o Conducted internally by cross-functional team.
Training:
o Train staff on audit handling, communication, and data presentation.
Document Readiness:
o Ensure all SOPs, records, logbooks, validation, deviations, CAPAs, change controls,
etc. are updated.
Data Integrity Review:
o Check ALCOA+ compliance.
Facility Readiness:
o Cleanliness, gowning, calibration status, labeling, equipment ID, area status boards
updated.
🔶 During Audit
DOs DON'Ts
Be honest Hide facts
Answer to the point Provide unnecessary information
Show controlled documents Show uncontrolled or draft documents
Provide traceable records Provide incomplete data
Escalate doubts to SME Guess answers
Maintain positive body language Show nervousness
👉 Always ensure Real-Time Documentation:
Data generated, reviewed, and recorded at the time of activity — no back-dating or retrospective
entries.
🔶 Post-Audit
Observation Categorization:
o Critical, Major, Minor.
CAPA Development:
o Root cause analysis and robust CAPA submission.
Commitment Timelines:
o Realistic timelines to be committed to agency.
CAPA Effectiveness Review:
o Ensure CAPA closure with effectiveness verification.
Audit Trend Review:
o Periodic trending for recurring issues.
🔷 4️⃣ Real-Time Documentation — The Key
Perform activity → Record immediately → Review → Approve.
No data gaps, overwriting, or retrospective entries.
Follows ALCOA+ principles:
o Attributable, Legible, Contemporaneous, Original, Accurate + Complete, Consistent,
Enduring, Available.
🔷 5️⃣ Real-Life Interview Example — Audit Handling
Situation:
USFDA announced short-notice surveillance audit.
Preparation:
Conducted full site gap assessment.
Conducted 2 mock audits involving QA, QC, Production, Engineering, Warehouse.
Verified:
o SOP currency.
o BMR / BPR completeness.
o Deviation closure.
o Change control status.
o Validation documentation.
o Data Integrity trails in QC.
o Environmental monitoring records.
During Audit:
Audit covered:
o Raw material receipt → Manufacturing → QC release → Packing → Dispatch → QMS
documentation.
Major questions on:
o OOS investigation process.
o Cleaning validation.
o Vendor qualification.
o Training records.
o Data Integrity.
Audit Outcome:
2 minor observations:
o Operator ID badge labeling discrepancy.
o Preventive maintenance minor delay justification.
CAPA submitted within timeline.
CAPA effectiveness demonstrated in subsequent internal audit.
🔷 6️⃣ Key Documents to Maintain Ready for Audit
Site Master File
Organizational Chart
Validation Master Plan
Approved SOPs
Master BMRs/BPRs
Deviation Register
CAPA Master List
Change Control Register
Training Records
Audit Trail Reports (QC systems)
Vendor Qualification Records
Environmental Monitoring Records
🔷 🔥 Key Phrases to Use in Interview
“We follow a state of perpetual readiness — audit ready every day.”
“Mock audits and gap assessments are part of our proactive compliance culture.”
“Data integrity and real-time documentation are non-negotiable principles.”
“Cross-functional teams are trained on proper audit behavior and interaction.”
“CAPAs are built using root cause analysis tools like 5-Why and Fishbone to ensure robust
compliance.”
✅ Strong Closing Statement for Interview:
“In my 15 years of QMS experience, I have successfully handled several regulatory and customer
audits by maintaining proactive readiness, ensuring data integrity, empowering the team through
training, and driving continual QMS improvements.”
Data Integrity — Interview Note (With Example)
🔷 1️⃣ What is Data Integrity?
Data Integrity (DI):
The assurance that all data (written, electronic, printed) is:
Complete
Consistent
Accurate
Reliable
Available throughout the data lifecycle
👉 Data Integrity ensures product quality, patient safety, and regulatory compliance.
🔷 2️⃣ Regulatory Guidelines
Guideline Agency
MHRA "GxP Data Integrity" UK MHRA
FDA 21 CFR Part 11 USFDA
Guideline Agency
WHO Annex 4 "Data Integrity" WHO
PIC/S PI-041 PIC/S
EU GMP Annex 11 EMA
ICH Q7 & Q10 Global
🔷 3️⃣ Core Principles of Data Integrity: ALCOA+
Principle Meaning
A Attributable → Who performed the action?
L Legible → Data is readable, permanent
C Contemporaneous → Recorded at the time of activity
O Original → Original data or true copy
A Accurate → Error-free, truthful
+ Complete, Consistent, Enduring, Available
👉 Use ALCOA+ language in interview — highly appreciated by regulators.
🔷 4️⃣ Where Data Integrity Applies
Manufacturing records (BMR, BPR)
Laboratory records (analytical data)
Electronic systems (LIMS, CDS, ERP, SCADA, HPLC, GC)
Cleaning records
Environmental monitoring
Deviations, CAPA, Change Control
Validation documents
🔷 5️⃣ Data Lifecycle
Phase Example
Data Creation Sampling, testing, recording
Data Processing Calculation, interpretation
Data Review Verification, approval
Phase Example
Data Retention Storage, archiving
Data Retrieval Recall for audit, investigation
🔷 6️⃣ Key Controls for Data Integrity
🔶 Audit Trails
Captures:
o Who did what, when, why.
o Changes, deletions, corrections.
Should be:
o Enabled.
o Reviewed regularly (periodic audit trail review).
o Secure, time-stamped.
🔶 Computerized System Validation (CSV)
Validates that software performs as intended.
User Access Control (passwords, roles).
Backup & recovery procedures.
Electronic signatures compliant with 21 CFR Part 11.
🔶 Physical Data Controls
Controlled printouts.
Approved master copies.
Controlled logbooks with unique identification.
🔶 Procedural Controls
SOPs on DI.
Training of personnel.
Periodic self-inspections on DI.
🔷 7️⃣ Real-Life Interview Example — Data Integrity Incident
Situation:
During internal audit, analyst was found backdating entries in HPLC system.
Investigation:
RCA using 5-Why:
o Analyst pressure to meet batch release timelines.
o Inadequate training on DI principles.
o Lack of periodic audit trail review.
CAPA:
Analyst retrained and given warning letter.
Implemented periodic audit trail review by QA (weekly).
Strengthened SOP for HPLC usage.
Enhanced DI training program.
CSV verification of audit trail functionality.
Verification:
No DI observations in next external audit.
Strengthened organizational DI culture.
🔷 8️⃣ DI Risks Commonly Cited by Regulators
Backdating entries.
Sharing login credentials.
Missing original data.
Uncontrolled worksheets or unofficial notebooks.
Disabling audit trails.
Inadequate access control.
Unauthorized data deletion.
🔷 9️⃣ Key Documents for Data Integrity System
Data Integrity Policy
ALCOA+ Training Records
System Validation Protocols (CSV)
User Access Control Matrix
Periodic Audit Trail Review Reports
Backup & Restore SOP
Incident Logs (linked to investigations)
🔷 🔥 Key Phrases to Use in Interview
“We operate under a strong ALCOA+ culture for data integrity compliance.”
“All computerized systems are validated as per CSV protocol and 21 CFR Part 11.”
“QA performs periodic audit trail reviews to detect any irregularities proactively.”
“We conduct periodic Data Integrity awareness training for all GxP personnel.”
“In our system, every data point is fully traceable, reviewable, and audit-ready.”
✅ Strong Closing Statement for Interview:
“In my 15 years of experience managing QMS, I consider Data Integrity not only a compliance
requirement but a culture that starts with leadership and flows down to every level, ensuring
trustworthy, accurate, and compliant records across the product lifecycle.”
APQR (Annual Product Quality Review) — Interview Note (With Example)
🔷 1️⃣ What is APQR / PQR?
Annual Product Quality Review (APQR) is a periodic quality evaluation conducted for every
marketed product to:
Verify the consistency of the existing manufacturing process.
Detect any trends.
Identify areas for continual improvement.
Ensure product remains within its validated state.
👉 APQR is a regulatory requirement for continued product lifecycle monitoring.
🔷 2️⃣ Regulatory References
Guideline Reference
ICH Q10 Pharmaceutical Quality System
WHO GMP Section 1.4
EU GMP Chapter 1.10 - Product Quality Review
21 CFR Indirectly implied under process control
🔷 3️⃣ Purpose of APQR
Confirm process consistency.
Detect product/process drifts or variations.
Review critical quality attributes (CQAs).
Identify recurring deviations or complaints.
Evaluate stability data trends.
Ensure regulatory compliance.
Recommend improvements.
🔷 4️⃣ APQR Content (Typical Format)
Section Includes
Batch History List of all batches manufactured/released
Deviations & Non-conformances Number, nature, trends
Out of Specification (OOS) / Out of Trend
Summary, RCA, CAPA
(OOT)
Change Controls Implemented changes and impact assessment
CAPAs Status and effectiveness
Complaints Market complaints and their investigation outcomes
Stability Study Data Summary & trends
Validation & Revalidation Status of ongoing validation
Analytical Data Assay, dissolution, impurities trends
Microbiological trends (for sterile/non-sterile as
Environmental Monitoring
applicable)
Vendor Qualification Changes or performance updates
Recall Information If any
Regulatory Changes Updated requirements reviewed
Conclusion Process state, recommendation for improvements
🔷 5️⃣ Frequency
At least once per year for each marketed product.
Some companies perform rolling quarterly reviews feeding into annual summary.
🔷 6️⃣ Review Responsibility
QA (Owner of APQR process)
Input from:
o Production
o QC / Microbiology
o Engineering / Maintenance
o Regulatory Affairs
o Warehouse
o Procurement (for vendor data)
🔷 7️⃣ Real-Life Interview Example — APQR Use
Situation:
During APQR of an API product, rising trend of impurity level observed near upper limit.
Action:
Investigation:
o Reviewed batch records, raw material certificates, process parameters.
o Identified that moisture content of one intermediate was higher than historical data.
Change Control Raised:
o Modified drying parameters for intermediate.
o Added moisture content limit as in-process control.
CAPA:
o Vendor performance re-evaluated for intermediate supplier.
Post-implementation review:
o Subsequent 6 batches showed impurity level back to historical average.
Outcome:
Continuous improvement achieved.
Stability of process validated.
Documented in APQR report.
🔷 8️⃣ Benefits of APQR
Early detection of potential issues.
Strengthens ongoing process verification (OPV).
Supports continual improvement.
Improves regulatory compliance.
Reduces risk of product recalls.
Helps prepare for regulatory audits.
🔷 9️⃣ APQR Trending Examples
Parameter Year 1 Year 2 Year 3 Trend
Assay 98.5% 98.6% 98.7% Consistent
Impurity A 0.12% 0.15% 0.18% Increasing
Dissolution 95% 96% 96% Stable
🔷 🔥 Key Phrases to Use in Interview
“APQR is a key continual improvement tool under our QMS.”
“We use statistical trending to detect early signs of process drift.”
“Cross-functional inputs ensure APQR robustness.”
“APQR conclusions feed into our Management Review and process improvement cycles.”
“APQR reports are fully audit-ready and regularly reviewed during regulatory inspections.”
✅ Strong Closing Statement for Interview:
“In my 15 years of QMS experience, I ensure APQRs are not just a compliance document but a living
system for proactively monitoring process health, maintaining validated state, and driving continual
improvement.”