At its core, (Good Automated Manufacturing Practice) provides a risk-based approach to validating computerized systems. Instead of treating every piece of software the same, GAMP 5 sorts systems into four distinct categories .
Low (provided you use standard, commercially available versions). Category 3: Non-Configured Products Note: GAMP 5 originally included Category 2 (Firmware), but the latest GAMP 5 guide (Second Edition) has merged legacy Category 2 into Categories 1 and 3. We'll focus on the active categories.
Category 5 carries the highest risk because there is no operational history. You are the developer, so you are responsible for every bug. gamp 5 categories of software
This is the foundation. Category 1 software is the underlying operating system or basic infrastructure that your GxP applications run on top of.
Disclaimer: This post is for educational purposes. Always refer to the official ISPE GAMP 5 guide (Second Edition) and consult your quality assurance team for specific validation requirements. Category 3: Non-Configured Products Note: GAMP 5 originally
This is the "sweet spot" for most pharma companies. Category 4 software is complex, off-the-shelf software that is to your specific business process.
You generally do not validate the OS itself. Instead, you qualify it. You record the version number, verify the installation was successful, and ensure basic security settings are applied (like user access controls). You are the developer, so you are responsible for every bug
Why? Because the way you validate a commercial off-the-shelf printer driver should be different from how you validate custom sterilization control software.