Configuration and Risk Management of GAMP Category 4 Software: Moving Beyond Black-Box Validation
| Feature | GAMP Category 4 (Configured) | GAMP Category 5 (Custom/Bespoke) | | :--- | :--- | :--- | | | None (no source code changes) | Yes (new code written) | | Configuration | Parameter setting, tables, workflows | Not applicable or minimal | | Supplier role | Provide standard product + config tools | Provide development services | | Validation risk | Medium (focused on correct config) | High (requires unit/integration testing) | | Reusability of evidence | High (supplier documentation) | Low (project-specific) | gamp 4 category
GAMP Category 4 software represents the most common and arguably most misunderstood category in computerized system validation. The original GAMP 4 paper-based model provided a foundation, but it is insufficient for today’s complex, connected, and frequently updated systems. Configuration and Risk Management of GAMP Category 4