24.3 Audits, Inspections and Closure Planning

Audits, Inspections and Closure Planning

Under ICH E6(R3), if non-compliance that significantly affects or has the potential to significantly affect human subject protection or trial integrity is discovered, the sponsor must perform a formal Root Cause Analysis (RCA) and implement appropriate Corrective and Preventive Actions (CAPA).

• Root Cause Analysis: Rather than simply punishing an individual error, the CRA and site examine systemic factors using structured methodologies such as the 5 Whys Technique or the Ishikawa (Fishbone) Diagram. RCA explores whether the failure stemmed from inadequate staffing, ambiguous protocol language, lack of role-specific training, software malfunction, or cognitive misunderstanding.
• CAPA Architecture: Corrective actions remediate the immediate historical defect (e.g., re-consenting affected subjects, performing omitted safety labs), while preventive actions modify standard operating procedures, implement automated scheduling safeguards, or mandate re-training to prevent future recurrence.

Risk-proportionate escalation

The sponsor should act promptly, evaluate causes and implement appropriate remediation. Serious risks may require immediate escalation or a pause; do not insist on a fixed sequence of informal counselling before protecting participants. If significant noncompliance persists despite remediation efforts, E6(R3) says the sponsor should consider terminating participation and notify relevant authorities/ethics bodies as appropriate. It is not an automatic rule that every serious finding immediately terminates a site.

The investigator and sponsor must plan continuity of care and reliable records if participation is suspended or ended. A pause should specify its scope: recruitment, screening, dosing, procedures or a particular cohort. Protect participants from both continued unsafe activity and abrupt withdrawal of necessary care. Document decisions, responsibilities, communication and resumption conditions.

Sponsor audits and authority inspections

An audit is an independent systematic examination, separate from routine monitoring or quality control, to evaluate trial-related activities and records. An inspection is an official review by a regulatory authority. Both require truthful cooperation and accessible evidence, but their authority and reporting processes differ.

Before a review, locate the current protocol and approval history, source records, consent evidence, qualifications, product records, monitoring communications and unresolved issue records. Identify a records coordinator and ensure authorised access works. Preparation means organising existing evidence, not manufacturing records or backdating missing signatures.

During the review, answer within your knowledge, distinguish observed facts from inference and retrieve requested records through the documented process. If an answer is unknown, obtain it rather than speculate. Do not coach staff to hide concerns or replace an original record with a cleaner undocumented version. Preserve participant confidentiality and the blind while respecting lawful authorised access.

After findings are received, the responsible entity reviews the evidence, evaluates immediate risk, investigates causes and assigns corrective actions, owners and deadlines. Responses should address each finding with supporting evidence and an appropriate effectiveness plan. Follow the actual authority/audit communication deadline; a national form number or 15-business-day policy is not a universal ICH examination rule. The CRA can facilitate follow-up within their assigned role without approving independent audit conclusions.

Site Close-Out Visit (COV) Execution & Archiving under E6(R3)

The Site Close-Out Visit (COV) is the final on-site monitoring milestone conducted by the CRA, marking the formal conclusion of the clinical investigation at that participating institution.

Planning closure against the actual trial status

A close-out visit can occur at different stages according to the sponsor's plan, including early termination. Global database lock is not a universal prerequisite. Determine what can be completed and what remains: participant follow-up, unresolved safety information, queries, product reconciliation, essential records, site data retention and continued access. Assign outstanding work explicitly rather than pretending that closure erases it.

Confirm participant care and notifications, authorised product/supply disposition, study equipment return, relevant final reports and appropriate archive arrangements. Do not return a device or terminate a portal before required data and metadata have been preserved. A remote close-out can be appropriate when the objectives can be achieved; a visit label alone does not prove closure.

Detailed Step-by-Step Close-Out Procedures

Product disposition

Reconcile products using mutually exclusive stock categories, accounting for participant returns separately from consumption. Follow sponsor-authorised return or destruction procedures and investigate discrepancies. The evidence should identify quantities, batches/kit identifiers, disposition and responsible parties. Do not count a returned participant tablet both as consumed and as returned to the depot.

Official sources

Checked October 18, 2026: ICH E6(R3), Principles and Annex 1.