PIC/S PE 009-17 / Annex 1 Alignment

PIC/S issued PE 009-17 in February 2023, with an effective date of 1 September 2023. This revision aligns the PIC/S GMP Guide Annex 1 (Manufacture of Sterile Medicinal Products) with the EU GMP Annex 1 finalized in 2022 and applicable from August 2023. Manufacturers operating in jurisdictions whose inspectorates follow PIC/S should now expect EU-style sterile expectations during inspections.

The alignment centers on three pillars. First, a formal, integrated Contamination Control Strategy that spans facilities, utilities, process design, people, and suppliers. Second, barrier-based aseptic concepts emphasizing isolators or RABS and minimizing human interventions. Third, robust controls for sterilizing filtration including Pre-Use Post-Sterilization Integrity Testing (PUPSIT) where required.

The practical effect is a more prescriptive, risk-based standard. Expect increased scrutiny of environmental monitoring design, transfer and decontamination practices, integrity of air and water systems, and the traceability of decisions embedded in your Pharmaceutical Quality System. EU-centric expectations now serve as the common reference point for many non-EU inspectors through PIC/S.

• Direct adoption of EU Annex 1 concepts, terminology, and structures for sterile manufacture.
• Mandatory, documented Contamination Control Strategy linked to quality risk management and PQS.
• Preference for isolators or RABS, reduced manual interventions, and controlled transfers.
• Expectation for PUPSIT, scientifically justified exceptions, and filter integrity traceability.
• Expanded environmental and utility controls with trending and rapid remediation.
• Data governance that demonstrates contemporaneous, reliable, and reviewable records.

For detailed cross-references, see EU GMP Annex 1 (2022), EU GMP Annex 1: Sterile, Contamination Control Strategy, and PUPSIT.

PIC/S is a cooperative arrangement among inspectorates. Its GMP Guide is not law, yet many participating authorities adopt it by reference, align their national GMP frameworks to it, or apply it as the inspection standard for inspections at home and abroad. This creates a de facto harmonized benchmark for sterile products.

The EU GMP Annex 1 is published in EudraLex Volume 4 and is legally binding within the EU. The United Kingdom has maintained alignment through national guidance following EU exit. Other authorities that participate in PIC/S, such as Health Canada, Australia’s TGA, and Korea’s MFDS, calibrate inspection programs to PIC/S PE 009-17 while maintaining national legal texts.

WHO’s GMP texts provide a global baseline, and ICH quality guidelines inform the risk and systems approach embedded in Annex 1. Together, these sources underpin consistent expectations for contamination control, aseptic process design, and data governance in sterile manufacturing.

For regulator-specific context, see MHRA, Health Canada, TGA Australia, MFDS, and WHO’s consolidated GMP view in WHO TRS 1044 (2022).

Annex 1 applies to sterile medicinal products manufactured by aseptic processing and by terminal sterilization. It covers all sterile dosage forms, including injectables, ophthalmics, and inhaled products, and applies to clinical and commercial manufacturing. The expectations span the lifecycle from facility and utility design through routine operations and ongoing verification.

The text also provides direction for the application of contamination control principles to related non-sterile steps that can influence sterility assurance, such as component preparation or intermediate handling. Organizations should define the boundary between aseptic and ancillary operations and document the interfaces, controls, and acceptance criteria governing transfers and responsibilities.

Annex 1’s scope includes cleanroom classification and qualification, environmental monitoring, personnel gowning and behaviors, sterilization and depyrogenation processes, integrity of closures and containers, equipment and line design, material transfer, and utilities such as HVAC and pharmaceutical water. The expectations are system-wide and explicitly link to the site’s Contamination Control Strategy.

• Aseptic processing and terminal sterilization, including lyophilization and closed processing.
• Cleanroom classification, qualification, and environmental monitoring across Grades A–D.
• Personnel gowning, training, behaviors, and qualification for aseptic operations.
• Material and equipment preparation, transfer, and decontamination methods and frequencies.
• Utilities supporting sterility assurance, including HVAC and pharmaceutical water systems.
• Container-closure integrity, visual inspection, and defect classification and trending.
• Application of contamination control principles to interfaces with non-sterile operations.

For related context, see Sterile–Aseptic Supplement Boundary, Pharmaceutical Water Systems, Visual Inspection of Injectables, and WHO’s GMP TRS 1044 (2022).

Annex 1 requires each site to maintain a documented, living Contamination Control Strategy. The CCS synthesizes process and facility knowledge, risks, and controls into a coherent plan that explains how sterility assurance is achieved and maintained. It must be demonstrably used to drive decisions, improvements, and investigations.

The CCS must be grounded in quality risk management and the Pharmaceutical Quality System concepts articulated in ICH guidance. Authorities expect the CCS to show how risks are identified, ranked, mitigated, monitored, and reviewed, with traceability to procedures, validation reports, change controls, and training.

Risk-based design should connect barriers, airflows, utilities, cleaning, transfer, and human factors to process performance. Data should be trended and used proactively, with clear accountability for ownership, review cadence, and escalation criteria. The CCS should be periodically revalidated to confirm that design assumptions continue to hold in routine use.

• Facility and equipment design assumptions tied to airflow, segregation, and first-air protection.
• Environmental monitoring strategy, alert/action levels, and statistical trending methods.
• Cleaning, disinfection, sporicidal rotation, and verification of efficacy against site flora.
• Material and personnel flow, transfer and decontamination methods, and intervention minimization.
• Utility controls for air and water systems with critical limits and response plans.
• Supplier controls for components, filters, and single-use assemblies linked to release decisions.
• Linkage to CAPA, deviation management, and management review within the PQS.

Link CCS content to your Control Strategy, enable process verification through Process Analytical Technology, and use modern Analytics to detect weak signals early.

Annex 1 emphasizes separation between operators and the aseptic core. Isolators are generally preferred when feasible, with RABS as an alternative where design and controls achieve comparable risk reduction. In either case, minimizing and classifying interventions is critical, with documented risk assessments and validation of any unavoidable open activities.

Material transfer must preserve sterility assurance, using validated decontamination methods such as hydrogen peroxide vapor, and well-defined hold times. Glove integrity programs, leak testing, and decontamination cycles must be justified with data, and failures should trigger investigation and enhanced monitoring. Layout and airflow must protect first air at critical points.

Single-use systems can reduce cleaning and cross-contamination risks but must be controlled through supplier qualification, leachables and extractables assessments, and integrity verification. All design choices should be embedded in procedures, training, and batch execution steps that prevent deviation from the validated aseptic model.

• Define intervention classes, document frequency, and validate mitigations for unavoidable tasks.
• Qualify decontamination methods for materials transfer, including cycles, loads, and residues.
• Implement robust glove integrity and RABS/isolator maintenance and monitoring programs.
• Demonstrate airflow protection of critical points and control of first-air pathways.
• Control single-use assemblies via qualification, integrity checks, and change control.
• Embed critical aseptic steps into enforced execution with clear acceptance criteria.

Operationalize controls through maintained SOPs in Document Control, enforce critical sequences with Step Sequence Enforcement, and instrument critical points using Sensors & IoT.

Annex 1 expects Pre-Use Post-Sterilization Integrity Testing (PUPSIT) for sterilizing grade filters used in aseptic processing. The intent is to confirm filter integrity after sterilization and before product exposure, and again after use. This reduces the risk that a compromised filter could pass a post-use test due to product effects or fouling.

Authorities may consider scientifically justified exceptions where PUPSIT would itself create greater risk, but these are rare and must be supported by rigorous risk assessments, process and filter characterization, and enhanced controls. Post-use integrity testing alone is not sufficient. Expect deeper review of filter selection, loading, preconditioning, wetting, and hold-up volume impacts.

• Integrate pre-use and post-use integrity tests with defined limits, methods, and metrology controls.
• Justify filter type, pore rating, and compatibility; validate sterilization and worst-case load.
• Control assemblies, connectors, and pre-sterilized paths; verify integrity of all critical joints.
• Define response plans for integrity failures, including product impact assessment and recall triggers.
• Trend integrity results and link outliers to deviations, CAPA, and process changes.

Ensure records are contemporaneous and reviewable through Lab/QC and EBMR/eDHR. For related visual quality controls, see Visual Inspection of Injectables and the dedicated PUPSIT entry.

Annex 1 introduces tighter expectations for environmental monitoring. Continuous particle monitoring in Grade A, expanded Grade B vigilance, and targeted viable monitoring are expected. Sites should define alert and action levels with statistical justification and trend the data to detect subtle degradations, not only excursions.

Utilities are critical to sterility assurance. Water for Injection systems require validated designs, robust sanitization, and routine verification of chemical and microbiological quality. Air handling and pressure differentials must protect the aseptic core, with documented responses to deviations and demonstrated recovery times.

Cleaning and disinfection programs must use agents effective against site flora and include rotation with sporicides. Validation of contact times, residues, and material compatibility is expected. For parenteral products, visual inspection programs must classify and trend defect types and rates, and demonstrate operator or automated system capability.

• A defined EM plan covering locations, frequencies, and methods across Grades A–D with trending.
• Rapid investigation pathways for alert/action level events and recovery verification.
• Validated WFI and clean steam systems with routine bioburden and endotoxin control.
• Cleaning and disinfection rotation including sporicidal agents supported by efficacy data.
• Visual inspection capability studies, defect libraries, and routine performance monitoring.
• Linkage of EM, utilities, and inspection data to the CCS with management review.

Helpful references include Pharmaceutical Water Systems, Sanitation and Cleaning Schedule, Visual Inspection of Injectables, and the USP Microbial Supplement. For trending norms, see Out-of-Trend Handling.

Inspectorates aligned with PIC/S PE 009-17 will examine how Annex 1 expectations are embedded into your PQS and operations. They will look for a genuine CCS that informs decisions, end-to-end traceability from risk assessments to batch release, and prompt, well-documented responses to deviations and environmental signals.

Data integrity remains foundational. Records must be attributable, legible, contemporaneous, original, and accurate, with controls that prevent and detect manipulation. Electronic systems should demonstrate compliance with applicable electronic records and signatures requirements and support secure, audit-trailed review.

Prior to and during inspections, be ready to show how you qualified your facility, trained operators, validated aseptic processes, and control suppliers of critical components such as filters and single-use assemblies. Expect sampling of batches, logs, and investigations, and deeper inquiries when trends indicate emerging risks.

• A current CCS with ownership, review cadence, and links to SOPs, validation, and CAPA.
• EM and utility trending with justified limits, excursions, investigations, and effectiveness checks.
• Aseptic process simulations, media fills, and intervention studies with rationales and outcomes.
• Filter and PUPSIT records, including failures, impact assessments, and batch dispositions.
• Training, qualification, and gowning records for aseptic operators and key support staff.
• Data integrity controls, computerized system validation, and Part 11-relevant documentation.

Strengthen evidence with Document Control, EBMR/eDHR, and Structured Deviations. Prepare teams using Inspection Readiness and Audit Readiness, and align with guidance such as MHRA Data Integrity and FDA PAI. For electronic controls, see 21 CFR Part 11.

Successful Annex 1 alignment is a cross-functional program that touches design, operations, quality, and suppliers. Begin with a structured gap assessment against PE 009-17 and the 2022 EU text, prioritize remediation by product and risk, and define an execution plan that protects ongoing supply while raising sterility assurance.

Translate risks into controls and verification activities through a living CCS, refreshed validation packages, and updated procedures and training. Build reliable data flows from environmental monitoring, utilities, and batch execution into trending and management review. Lock in critical behaviors with enforced execution and effective change control.

1. Perform a documented Annex 1 gap assessment and risk rank findings by product and line.
2. Author or refresh the CCS, linking risks to controls, monitoring, and response plans.
3. Update validation (facility, utilities, process, filtration) and media fills to reflect the CCS.
4. Harden aseptic behaviors via training, qualifications, and enforced critical step execution.
5. Qualify and control suppliers of critical components, filters, and single-use assemblies.
6. Strengthen data integrity, trending, and management review across EM, utilities, and batch data.
7. Prove effectiveness via targeted metrics, internal audits, and pre-inspection walkthroughs.