2.2 Individualized Quality Control Plans, Risk Assessment & CLSI EP23

Individualized Quality Control Plans, Risk Assessment & CLSI EP23

Purpose and regulatory context

The Individualized Quality Control Plan (IQCP) is the CLIA quality-control option that replaced Equivalent Quality Control in 2016. It allows a laboratory to design a risk-based QC system for an eligible nonwaived test, but it is not a waiver from quality requirements. The plan must support accurate, reliable, and timely results for the laboratory's actual setting, operators, specimens, environment, and workflow.

CLSI EP23, Laboratory Quality Control Based on Risk Management, provides a useful framework. Use the current edition; the second edition replaced the older EP23-A document.

Scope and limits

IQCP may be considered for eligible moderate- and high-complexity tests when the manufacturer supplies less than two levels of external control each day of patient testing or when the laboratory wants a documented risk-based plan. Three boundaries govern every plan:

1. Manufacturer instructions are the floor. An IQCP may add controls but cannot reduce maintenance, calibration, function checks, or QC below the manufacturer's instructions for use.
2. Other law still applies. More stringent state requirements and applicable accreditation requirements remain in force.
3. Specialty rules remain in force. Pathology is not eligible for IQCP. Immunohematology is not categorically excluded from every IQCP use, but IQCP cannot replace the specific control requirements in 42 CFR 493.1271. The laboratory must identify which general QC provision is being addressed and preserve every applicable blood-bank requirement.

The safe exam approach is to reject answers that treat IQCP as permission to ignore package inserts or specialty-specific regulations.

Component 1: Risk Assessment

The risk assessment documents reasonably foreseeable failures and existing controls across the entire testing process. CMS identifies five sources:

• Specimen: identification, collection, transport, preparation, stability, interference, and suitability.
• Test system: hardware, software, calibration, internal controls, failure modes, maintenance, and result flags.
• Reagent: shipping, storage, preparation, lot variability, expiration, contamination, and onboard stability.
• Environment: temperature, humidity, power, lighting, vibration, dust, water, space, and electromagnetic effects.
• Testing personnel: qualifications, training, competency, workload, human factors, and interpretation.

Review preexamination, examination, and postexamination steps. Sources of evidence include manufacturer risk information, package inserts, historical QC and complaints, proficiency testing, regulatory requirements, published data, and the laboratory's own verification and incident records.

A team can use a qualitative matrix or an FMEA-style score. No federal rule establishes one universal RPN cutoff. The laboratory defines and documents its rating method, prioritizes intolerable risk and high-severity hazards, and does not allow arithmetic to hide a catastrophic failure mode.

Component 2: Quality Control Plan

The QCP converts the assessment into specified controls. It should state control materials, levels, frequency, acceptance criteria, built-in controls, procedural controls, calibration and maintenance checks, action when controls fail, result-hold and patient-impact steps, records, responsibilities, and escalation paths.

The plan must meet at least the manufacturer's instructions and all applicable requirements. The laboratory director reviews, approves, signs, and dates the QCP before use. A technical consultant, supervisor, POCT coordinator, or quality manager may develop and administer the plan but does not replace the director's approval responsibility.

Component 3: Quality Assessment

Quality Assessment is the ongoing feedback loop. Monitor whether the selected controls actually detect and prevent error. Useful indicators include QC failures, calibration problems, corrected reports, complaints, specimen rejections, PT results, environmental excursions, operator errors, downtime, and unexpected patient-result patterns.

Reassess the plan when a new instrument, reagent, operator group, location, or specimen type is introduced; the manufacturer changes instructions; a PT failure, complaint, adverse event, or significant QC trend occurs; environmental or workflow conditions change; or routine review shows that a control is ineffective.

Material changes require renewed laboratory-director review and approval. An IQCP is therefore a controlled, living quality document—not a one-time form used to justify reduced external QC.

Applying the framework

Suppose a point-of-care analyzer operates near its maximum validated room temperature on weekends. The team should verify the instrument's environmental limits, measure actual exposure, and determine how the instrument signals an out-of-range condition. Controls might include a calibrated room-temperature monitor, alert response, suspension of testing outside limits, alternate testing access, operator training, and QA review of excursions. Continuous monitoring or software lockout can be strong controls, but they are design choices based on risk and capability—not universal requirements for every IQCP.