EU GMP Annex 1 and the Contamination Control Strategy

The revised Annex 1 of the EU GMP Guide, on the manufacture of sterile medicinal products, was published in 2022 and came into operation in 2023. The same text has been adopted by PIC/S, and WHO GMP guidance on sterile products follows similar principles. One of its most discussed features is the expectation that a manufacturer has a contamination control strategy, usually shortened to CCS.

This article explains, from an engineering point of view, what a CCS is meant to connect and how design decisions feed into it. It is not a summary of the full annex, and it does not replace reading the current text and the expectations of the relevant authority.

What a contamination control strategy is

A CCS is a planned, documented set of controls for microbial, endotoxin or pyrogen, and particle contamination, built on an understanding of the product and the process. Its value is not in any single control. It is in showing how the controls fit together, which risks each one addresses, and how the manufacturer knows that the whole set is working.

The annex expects the strategy to be developed using quality risk management principles, such as those described in ICH Q9, to cover the whole facility and process rather than one room, and to be reviewed and updated so that it stays current as the process, the facility and the knowledge around them change.

What the strategy connects

The annex lists the elements a CCS should consider. Grouped from an engineering perspective, they cover:

• Design of the plant and processes, including premises, equipment and the barrier technology chosen for aseptic steps.
• Utilities: HVAC, water systems, clean steam and process gases.
• Personnel: training, gowning, behaviour and the flows they follow.
• Materials: raw material controls, primary packaging components and closures, and the suppliers and outsourced activities behind them.
• Process risk assessment, process validation and the validation of sterilization processes.
• Cleaning and disinfection, and preventive maintenance.
• Monitoring systems, including environmental monitoring and utility monitoring.
• Prevention and response: trending, investigations, root-cause analysis, CAPA, and continuous improvement based on that information.

How engineering decisions feed the CCS

Facility layout and flows

Zoning by cleanliness grade, the placement of airlocks and pass-throughs, and the separation of personnel, material and waste routes are the first layer of contamination control. In the CCS, each of these is a control with a stated purpose: for example, a material airlock that lets the outer packaging layer be removed before components enter a higher grade.

HVAC and pressure cascade

Filtration, airflow patterns, air change strategy, pressure relationships and recovery performance support the room classifications. The CCS should record what each grade is protected against, how airflow visualization and qualification demonstrate it, and what monitoring and alarms detect a loss of control.

Barrier technology and sterilization

The annex places strong emphasis on separating the operator from the critical zone, through isolators or restricted access barrier systems where appropriate, and on validated sterilization of product, components and equipment. These choices shape the layout, the utilities and the monitoring plan, so they need to be settled early in design.

Cleaning, disinfection and materials of construction

Surfaces, joints, ceilings and equipment must withstand the cleaning and disinfection regime the operator intends to use, including sporicidal agents. Selecting finishes without knowing that regime is a common source of later problems.

Monitoring and data

Environmental and utility monitoring provide the evidence that the strategy is working. Their locations, frequencies and limits should be justified by risk assessment, and the systems that record the data must be designed with data integrity in mind.

Qualification and lifecycle

Qualification shows that each control performs as designed; routine monitoring, deviations and CAPA show whether it keeps doing so. A CCS that is linked to these records can be reviewed with evidence rather than opinion.

Putting a CCS together in practice

Many organisations structure the CCS as a summary document that references the detailed procedures, risk assessments and qualification reports rather than repeating them. A practical approach is to map contamination sources and routes for each process step, list the controls that address each route, and show for each control how it is designed, qualified and monitored. Gaps then become visible as routes with weak or unverified controls.

For a new facility, the design team can contribute by keeping a design-stage register of contamination controls that later becomes part of the CCS. For an existing facility, a gap assessment against the revised annex usually produces a set of engineering, procedural and monitoring actions that are managed through CAPA.

Common gaps when a CCS is first written

• A list of existing procedures with no analysis of which contamination routes they control.
• Utilities, especially water and compressed gases, treated as outside the strategy.
• Environmental monitoring locations chosen by habit rather than by a documented risk assessment.
• Controls that rely on behaviour, such as gowning or material transfer, without evidence that they are trained and observed.
• No defined trigger for reviewing the strategy after a deviation, a change or a new trend in the data.

Each of these gaps is easier to close when the engineering record already explains why a control exists. A room data sheet that states what a grade protects against, or a P&ID that shows why a sample point sits where it does, gives the quality team the rationale it needs to write the strategy.

Who owns it

The CCS belongs to the manufacturer and its quality system. Engineering consultants, equipment suppliers and contractors contribute information and design solutions, but they cannot make a facility compliant on the owner’s behalf. Compliance is demonstrated by the manufacturer, through its own documentation, operations and inspections by the relevant authority.

Key points

• A CCS is a connected, risk-based set of controls, not a single procedure.
• Layout, HVAC, barrier technology, utilities and finishes are contamination controls and should be recorded as such from design onwards.
• Each control should be traceable to its qualification evidence and its monitoring.
• Review the strategy when the process, the facility or the data change.