Gamp 5 Category 4 • Ultra HD

The core challenge of Category 4 validation lies in its hybrid nature. Because the software code is standard, the supplier is primarily responsible for the quality of the base product (following GAMP Category 3 principles). However, because the configuration is specific to the user, the pharmaceutical company takes on significant responsibility for ensuring the configured system functions correctly within their specific environment.

"Plug and play" systems. You use them as they come (e.g., a simple firmware-based pH meter). gamp 5 category 4

The key distinction of Category 4 is that Instead, the user or vendor modifies the system’s behavior using tools provided by the software developer, such as: Defining user roles and permissions. Setting up workflows or data entry forms. Configuring alarm limits or reporting parameters. Mapping data fields. The core challenge of Category 4 validation lies

To understand Category 4, it helps to see where it sits on the spectrum: "Plug and play" systems

You must clearly define what the system needs to do. For Category 4, your URS should focus heavily on the . What workflows need to be active? What are the specific user roles? 2. Risk Assessment

At its core, GAMP 5 categorizes software based on complexity and risk. Category 4 is defined as software that is already developed and commercially available (off-the-shelf) but is designed to be configured by the user to meet specific business processes. Common examples include Laboratory Information Management Systems (LIMS), Electronic Document Management Systems (EDMS), Manufacturing Execution Systems (MES), and many Supervisory Control and Data Acquisition (SCADA) systems.

GAMP 5 Category 4 systems, such as , MES , SCADA , and ERP systems, present a moderate-to-high risk because their complexity lies in the configuration of workflows, business rules, and parameters. The validation strategy emphasizes a risk-based approach that leverages supplier documentation while focusing user testing on the specific configurations implemented for the business process. 2. System Classification & Examples