QbDQuality by Design (ICH Q8(R2))

ICH Q8(R2) defines Quality by Design (QbD) as a systematic approach to development that begins with predefined objectives and emphasises product and process understanding and process control, based on sound science and quality risk management. The fundamental shift versus traditional development is from 'test it at the end' to 'design it in from the start' — and from univariate one-factor-at-a-time experimentation to a multivariate understanding of how Critical Material Attributes (CMAs) and Critical Process Parameters (CPPs) combine to drive Critical Quality Attributes (CQAs).

QbD is not optional dressing on a development programme. FDA, EMA and PMDA all expect a QbD-style submission for new drug applications and Type II variations; a non-QbD CMC dossier triggers narrower approved ranges, more frequent post-approval changes, and a heavier in-process inspection burden.

• QTPP (Quality Target Product Profile) — the prospective summary of the quality characteristics of a drug product that ideally will be achieved to ensure desired quality, taking into account safety and efficacy. The QTPP is the patient-facing definition of 'good'.
• CQA (Critical Quality Attribute) — a physical, chemical, biological or microbiological property/characteristic that should be within an appropriate limit, range or distribution to ensure the desired product quality. Examples: assay, content uniformity, dissolution, impurities, endotoxin.
• CMA (Critical Material Attribute) — a property/characteristic of an input material (API, excipient, packaging) that should be within an appropriate limit to ensure the desired quality of the output material/intermediate. Particle size of the API is a classic CMA.
• CPP (Critical Process Parameter) — a process parameter whose variability has an impact on a CQA and therefore should be monitored or controlled. Compression force in tableting, mixing time in granulation, temperature in drying are typical CPPs.
• Design space — the multidimensional combination and interaction of input variables (CMAs) and process parameters (CPPs) that have been demonstrated to provide assurance of quality. Working within the design space is not a regulatory change.
• Control strategy — the planned set of controls derived from current product and process understanding that assures process performance and product quality, including controls on materials, parameters, in-process tests, finished-product tests and the associated monitoring/control frequency.

1. Define QTPP — dosage form, route, strength, container/closure, pharmacokinetic profile, stability/shelf life, sterility/microbial limits — anchored to the patient and the indication.
2. Identify CQAs from the QTPP — every property that, if outside its target, would change the safety or efficacy profile of the product.
3. Initial risk assessment — link each CQA to the candidate CMAs and CPPs that could plausibly drive it. Tools: Ishikawa, risk-ranking matrix, FMEA. The output is a prioritised list of high-risk parameters to study.
4. Design of Experiments (DoE) — multivariate experimentation (full or fractional factorial, response-surface, mixture designs) over the prioritised CMAs and CPPs to build quantitative models linking inputs to CQAs.
5. Propose design space — the multivariate region inside which the model predicts all CQAs meet their acceptance criteria with adequate assurance (often visualised as a 2D contour with the proven acceptable range overlaid).
6. Define control strategy — controls on input materials (CMA specs + supplier qualification), on the process (CPP set-points and ranges, IPC tests), on the finished product (release specs), on the facility (cleaning, EM) and on the data (PAT, SPC, periodic review).
7. PPQ (Stage 2) — Process Performance Qualification confirms the control strategy delivers a reproducible, capable process at commercial scale.
8. CPV (Stage 3) — Continued Process Verification provides ongoing assurance the process stays in a state of control over the product lifecycle, feeding back into the next development cycle and APR.

A Proven Acceptable Range (PAR) is a univariate concept — for each individual parameter, the range over which acceptable product was demonstrated when other parameters were held constant. A design space is multivariate — it allows the parameters to vary jointly within a defined region. The regulatory upside of a filed and approved design space is that movement within the design space is not considered a change requiring prior regulatory approval (ICH Q8(R2) §2.4). Movement outside the design space requires a regulatory submission. A combination of PARs is not equivalent to a design space and does not carry the same flexibility.

1. Calling it QbD without doing the multivariate work — submitting a list of unit operations and PARs from OFAT studies and labelling it 'QbD'. Reviewers spot this on Module 3.2.P.2.
2. CQAs defined too narrowly — picking only what the legacy spec already controls and missing patient-relevant attributes (e.g. for an inhalation product, omitting fine particle dose or emitted dose uniformity).
3. Risk assessment without follow-through — running an FMEA, ranking parameters as high risk, then not studying them experimentally.
4. Design space defined from a single batch — the model has no replication, no edge-of-failure characterisation, and no statistical power. A regulator will not buy it.
5. Control strategy that doesn't match the design space — claiming a wide multivariate space in Module 3 but writing the batch record to a tight univariate setpoint with no flexibility to move within the space.
6. No prior knowledge cited — Q8(R2) explicitly invites the use of prior knowledge (platform technology, related products) but most filings rely entirely on de novo experimentation, leaving valuable evidence on the table.
7. CPV evidence not linked back — the Stage 3 trending data accumulate but never trigger an update to the design space, control strategy or risk register.

• Formula/MMR holds CQA targets and CPP set-points + ranges; release shadows the linked design space, so an operator entering a CPP outside the approved range is hard-blocked at the kiosk.
• Risk register links each CQA to its CMAs and CPPs with the QRM rationale (ICH Q9(R1)) and the supporting studies — the FMEA isn't a one-off PDF, it's the live model that drives parameter criticality.
• Specification module separates 'critical' vs 'non-critical' attributes; CoA and supplier qualification are built off the CMA layer so a change in supplier triggers a CMA-impact review automatically.
• PAT / SPC integration: in-line measurements feed the CPV trend, and the platform flags drift toward the edge of the design space (not just the spec limit) so the response happens before a CQA fails.
• PPQ + APR (Annual Product Review) pulls the full batch population for the year — CQAs, CPPs, deviations, OOS/OOT, change-control history, supplier-quality events — and packages it for the ICH Q10 management-review loop.