Situation
A cloud data platform consolidates deviation, CAPA, complaint, and training data for monthly Quality management review.
Intended Use
Produce approved trend metrics and drill-down records used to prioritize investigation and corrective action. Source systems remain authoritative.
Decision Summary
| Decision element | Case record |
|---|---|
| GxP assessment | Incorrect lineage, transformation, denominator, refresh, filter, or access can mislead Quality oversight decisions. |
| Potential impact | Management can miss a negative quality trend or act on an incorrect metric. |
| Known issue | A fictional site-rate denominator excludes contractors because identity groups differ across sources. |
| Validation conclusion | The affected metric is withheld until identity rules and denominator specification are corrected and independently verified. |
GxP Assessment
Incorrect lineage, transformation, denominator, refresh, filter, or access can mislead Quality oversight decisions.
Affected GxP Functions
- Source extraction and lineage
- Metric transformation and denominator
- Refresh and late-arriving data
- Drill-down and source reconciliation
- Access and approved report version
Failure Scenarios
- Closed deviations are omitted
- Duplicate CAPA records inflate a rate
- Site filter uses inconsistent timezone
- Stale refresh appears current
- Unauthorized users view complaint details
Potential Impact
Management can miss a negative quality trend or act on an incorrect metric.
Existing Controls
- Approved metric definitions
- Source-system ownership
- Data-pipeline monitoring
- Role-based access
- Monthly Quality review
Existing Evidence
- Cloud platform assurance report
- Pipeline code review
- Source extracts
- Existing metric calculations
Evidence Gaps
- Cross-source identity resolution
- Late-arriving record handling
- Timezone boundary
- Drill-down completeness
Testing Approach
- Trace representative records from source to metric and drill-down
- Independently calculate known-answer and boundary datasets
- Challenge duplicate, missing, late, stale, and unauthorized cases
- Reconcile totals and investigate every unexplained variance
Deviations or Known Issues
A fictional site-rate denominator excludes contractors because identity groups differ across sources.
Validation Conclusion
The affected metric is withheld until identity rules and denominator specification are corrected and independently verified.
Reassessment Criteria
- Metric or source change
- Pipeline or platform release
- Identity or access change
- New site or timezone
- Unexplained reconciliation variance