Tag Archives: QMS

ASTM Proposes New Standard on Change Control Process Management

By Cannabis Industry Journal Staff
No Comments

Change control, when it comes to quality management systems in manufacturing, processing and producing products such as cannabis edibles or vape pens, is a process where changes to a product or production line are introduced in a controlled and coordinated manner. The purpose of change control process management is to reduce the possibility of unneeded changes disrupting a system, introducing errors or increasing costs unnecessarily.

ASTM International, the international standards development organization, is developing a new standard guide that will cover change control process management for the cannabis and hemp market. The guide is being developed through the D37 cannabis committee.

The WK77590 guide will establish a standardized method for change control process management for cannabis companies so that they can document and track important decisions in manufacturing and quality systems.

For example, an edibles manufacturer would utilize change control process management if they want to use a different type of processing equipment or introduce a new shape or design of their product. Without change control process management, that edibles producer might switch to a new piece of processing equipment without knowing that it requires more energy or uses different raw materials, thus making production unexpectedly more expensive.

While that’s a very cursory example, the premise is simple: Before you undergo a change to your process, plan it out, analyze it, review it, test it out, implement it and make sure it works.

Change control process management can often be summarized in six steps:

Food processing and sanitation
Change control is designed to coordinate changes to manufacturing so they don’t disrupt a process. 
  1. Plan/Scope
  2. Assess/Analyze
  3. Review/Approval
  4. Build/Test
  5. Implement
  6. Close

Maribel Colón, quality assurance consultant and vice chair of the ASTM subcommittee on cannabis quality management systems, says producers and testing labs will benefit the most from the guide. “As the cannabis industry grows, the quality, expectations, and control challenges grow within,” says Colón. “The creation and implementation of this standard guide will increase cannabis business efficiency and minimize risk, time, and potential cost of poorly managed changes.”

According to a press release, ASTM International is open to collaboration on this as well. Specifically, they are looking for professionals with change control who might be interested in helping advance and develop this guide.

How Effective is Your Internal Auditing Program?

By David Vaillencourt
No Comments

The word “audit” evokes various emotions depending on your role in an organization and the context of the audit. While most are familiar with and loathe the IRS’s potential for a tax audit, the audits we are going to discuss today are (or should be) welcomed – proactive internal quality audits. A softer term that is also acceptable is “self-assessment.” These are independent assessments conducted to determine how effective an organization’s risk management, processes and general governance is. 

“How do you know where you’re going if you don’t know where you’ve been” – Maya Angelou

Internal quality audits are critical to ensuring the safety of products, workers, consumers and the environment. When planned and performed periodically, these audits provide credible, consistent and objective evidence to inform the organization of its risks, weaknesses and opportunities for improvement. Ask yourself the question: do your clients/vendors rely on you to produce reliable, consistent and safe products? Assuming the answer is yes, what confidence do you have, and where is the documented evidence to support it?

Compliance units within cannabis businesses are typically responsible for ensuring a business stays legally compliant with state and federal regulations. This level of minimum compliance is critical to prevent fines and ensure licenses are not revoked. However, compliance audits rarely include fundamental components that leave cannabis operators exposed to many unnecessary risks.

Internal quality audits are critical to ensuring the safety of products, workers, consumers and the environment.

As a producer of medical and adult-use products that are ingested, inhaled or consumed in other forms by our friends, family and neighbors, how can you be sure that these products are produced safely and consistently? Are you confident that the legal requirements mandated by your state cannabis control board are sufficient? Judging by the number of recalls and frustrations voiced by the industry regarding the myriad of regulations, I would bet the answer is no.

What questions do internal audits address? Some examples include:

  • Are you operating as management intends?
  • How effective is your system in meeting specified objectives? These objectives could include quality metrics of your products, on-time delivery rates and other client/customer satisfaction metrics.
  • Are there opportunities to improve?
  • Are you doing what you say you do (in your SOPs), and do you have the recorded evidence (records) to prove it?
  • Are you meeting the requirements of all applicable government regulations?

There are potential drawbacks to internal audits. For one, as impartiality is essential in internal audits, it may be challenging to identify an impartial internal auditor in a small operation. If your team always feels like it is in firefighting mode, it may feel like a luxury to take the time to pull members out of their day-to-day duties and disrupt ongoing operations for an audit. Some fear that as internal assessments are meant to be more thorough than external assessments, a laundry list of to-do items may be uncovered due to the audit. But, these self-assessments often uncover issues that have resulted in operational efficiencies in the first place. This resulting “laundry list” then affords a proactive tool to implement corrective actions in an organized manner that can prevent the recurrence of major issues, as well as prevent new issues. The benefits of internal audits outweigh the drawbacks; not to mention, conducting internal audits is required by nearly every globally-recognized program, both voluntary (e.g. ISO 9001 or ASTM Internationals’s Cannabis Certification Program) and government required programs such as 21 CFR 211 for Pharmaceuticals.

Internal Auditing is a catalyst for improving an organization’s effectiveness and efficiency by providing insight and recommendations based on analyses and assessments of data and business processes. Additional benefits of internal audits include giving your organization the means to:

  • Ensure compliance to the requirements of internal, international and industry standards as well as regulations and customer requirements
  • Determine the effectiveness of the implemented system in meeting specified objectives (quality, environmental, financial)
  • Explore opportunities for improvement
  • Meet statutory and regulatory requirements
  • Provide feedback to Top Management
  • Lower the cost of poor quality

Findings from all audits must be addressed. This is typically done in accordance with a CAPA (Corrective Action Preventive Action) program. To many unfamiliar with Quality Management Systems, this may be a new term. As of Jan 1, 2021, this is now a requirement for all cannabis licensed operators in Colorado. Many other states require a CAPA program or similar. Continuing education units (CEUs) are available through ASTM International’s CAPA training program, which was developed specifically for the cannabis industry.

Examples of common audit findings that require CAPAs include:

  • Calibration – Production and test equipment must be calibrated to ensure they provide accurate and repeatable results.
  • Document and record control – Documents and records need to be readily accessible but protected from unintended use.
  • Supplier management – Most standards have various requirements for supplier management that may include auditing suppliers, monitoring supplier performance, only using suppliers certified to specific standards, etc.
  • Internal audits – Believe it or not, since internal audits are required by many programs, it’s not uncommon to have a finding related to internal audits! Findings from an internal audit can include not conducting audits on schedule, not addressing audit findings or not having a properly qualified internal auditor. Are you looking for more guidance? Last year, members of ASTM International’s D37 Committee on Cannabis approved a Standard Guide for Cannabis and Hemp Operation Compliance Audits, ASTM D8308-21.

If you are still on the fence about the value of an internal audit, given the option of an inspector uncovering a non-conformance or your own team discovering and then correcting it, which would you prefer? With fines easily exceeding $100,000 by many cannabis enforcement units, the answer should be clear. Internal audits are a valuable tool that should not be feared.

ISO/IEC 17025 Accreditation Falls Short for Cannabis Testing Laboratories

By Kathleen May
2 Comments

What is the role of the Quality Control (QC) Laboratory?

The Quality Control (QC) laboratory serves as one of the most critical functions in consumer product manufacturing. The QC laboratory has the final say on product release based on adherence to established product specifications. Specifications establish a set of criteria to which a product should conform to be considered acceptable for its intended use. Specifications are proposed, justified and approved as part of an overall strategy to ensure the quality, safety, and consistency of consumer products. Subsequently, the quality of consumer products is determined by design, development, Good Manufacturing Practice (GMP) controls, product and process validations, and the specifications applied throughout product development and manufacturing. These specifications are specifically the validated test methods and procedures and the established acceptance criteria for product release and throughout shelf life/stability studies.

The Code of Federal Regulations, 21 CFR Part 211, Good Manufacturing Practice for Finished Pharmaceuticals, provides the minimum requirements for the manufacture of safe products that are consumed by humans or animals. More specifically, 21 CFR Part 211: Subpart I-Laboratory Controls, outlines the requirements and expectations for the quality control laboratory and drug product testing. Additionally, 21 CFR Part 117, Current Good Manufacturing Practice, Hazard Analysis, and Risk-Based Preventative Controls for Human Food: Subpart B-Processes and Controls states that appropriate QC operations must be implemented to ensure food products are safe for consumption and food packing materials and components are safe and fit for purpose. Both food and drug products must be tested against established specifications to verify quality and safety, and laboratory operations must have the appropriate processes and procedures to support and defend testing results.

ISO/IEC 17025, General Requirements for the Competence of Testing and Calibration Laboratories is used to develop and implement laboratory management systems. Originally known as ISO/IEC Guide 25, first released in 1978, ISO/IEC 17025 was created with the belief that “third party certification systems [for laboratories] should, to the extent possible, be based on internationally agreed standards and procedures”7. National accreditation bodies are responsible for accrediting laboratories to ISO/IEC 17025. Accreditation bodies are responsible for assessing the quality system and technical aspects of a laboratory’s Quality Management System (QMS) to determine compliance to the requirements of ISO/IEC 17025. ISO/IEC 17025 accreditation is pursued by many laboratories as a way to set them apart from competitors. In some cannabis markets accreditation to the standard is mandatory.

The approach to ISO/IEC 17025 accreditation is typically summarizing the standard requirements through the use of a checklist. Documentation is requested and reviewed to determine if what is provided satisfies the item listed on the checklist, which correlate directly to the requirements of the standard. ISO/IEC 17025 covers the requirements for both testing and calibration laboratories. Due to the wide range of testing laboratories, the standard cannot and should not be overly specific on how a laboratory would meet defined requirements. The objective of any laboratory seeking accreditation is to demonstrate they have an established QMS. Equally as critical, for product testing laboratories in particular, is the objective to establish GxP, “good practices”, to ensure test methods and laboratory operations verify product safety and quality. ISO/IEC 17025 provides the baseline, but compliance to Good Laboratory Practice (GLP), Good Manufacturing Practice (GMP) and even Good Safety Practices (GSP) are essential for cannabis testing laboratories to be successful and demonstrate testing data is reliable and accurate.

Where ISO/IEC 17025 accreditation falls short

Adherence to ISO/IEC 17025, and subsequently receiving accreditation, is an excellent way to ensure laboratories have put forth the effort to establish a QMS. However, for product testing laboratories specifically there are a number of “gaps” within the standard and the accreditation process. Below are my “Top Five” that I believe have the greatest impact on a cannabis testing laboratory’s ability to maintain compliance and consistency, verify data integrity and robust testing methods, and ensure the safety of laboratory personnel.

Standard Operating Procedures (SOPs)

The understanding of what qualifies as a Standard Operating Procedure (SOP) is often misunderstood by cannabis operators. An SOP is a stand-alone set of step-by-step instructions which allow workers to consistently carry out routine operations, and documented training on SOPs confirms an employee’s comprehension of their job tasks. Although not required per the current version of the standard, many laboratories develop a Quality Manual (QM). A QM defines an organization’s Quality Policy, Quality Objectives, QMS, and the procedures which support the QMS. It is not an uncommon practice for cannabis laboratories to use the QM as the repository for their “procedures”. The intent of a QM is to be a high-level operations policy document. The QM is NOT a step-by-step procedure, or at least it shouldn’t be.

Test Method Transfer (TMT)

Some cannabis laboratories develop their own test methods, but a common practice in many cannabis laboratories is to purchase equipment from vendors that provide “validated” test methods. Laboratories purchase equipment, install equipment with pre-loaded methods and jump in to testing products. There is no formal verification (what is known as a Test Method Transfer (TMT)) by the laboratory to demonstrate the method validated by the vendor on the vendor’s equipment, with the vendor’s technicians, using the vendor’s standards and reagents, performs the same and generates “valid” results when the method is run on their own equipment, with their own technician(s), and using their own standards and reagents. When discrepancies or variances in results are identified (most likely the result of an inadequate TMT), changes to test methods may be made with no justification or data to support the change, and the subsequent method becomes the “validated” method used for final release testing. The standard requires the laboratory to utilize “validated” methods. Most laboratories can easily provide documentation to meet that requirement. However, there is no verification that the process of either validating in house methods or transferring methods from a vendor were developed using any standard guidance on test method validation to confirm the methods are accurate, precise, robust and repeatable. Subsequently, there is no requirement to define, document, and justify changes to test methods. These requirements are mentioned in ISO/IEC 17025, Step 7.2.2, Validation of Methods, but they are written as “Notes” and not as actual necessities for accreditation acceptance.

Change Control

The standard speaks to identifying “changes” in documents and authorizing changes made to software but the standard, and subsequently the accreditation criteria, is loose on the requirement of a Change Control process and procedure as part of the QMS. The laboratory is not offered any clear instruction of how to manage change control, including specific requirements for making changes to procedures and/or test methods, documented justification of those changes, and the identification of individuals authorized to approve those changes.

Out of Specification (OOS) results

The documentation and management of Out of Specification (OOS) testing results is perhaps one of the most critical liabilities witnessed for cannabis testing laboratories. The standard requires a procedure for “Nonconforming Work”. There is no mention of requiring a root cause investigation, no requirement to document actions, and most importantly there is no requirement to document a retesting plan, including justification for retesting. “Testing into compliance”, as this practice is commonly referred to, was ruled unacceptable by the FDA in the highly publicized 1993 court case United States vs. Barr Laboratories.

Laboratory Safety

FDAlogoSafe laboratory practices are not addressed at all in ISO/IEC 17025. A “Culture of Safety” (as defined by the Occupational Safety and Health Administration (OSHA)) is lacking in most cannabis laboratories. Policies and procedures should be established to define required Personal Protective Equipment (PPE), the safe handling of hazardous materials and spills, and a posted evacuation plan in the event of an emergency. Gas chromatography (GC) is a common test method utilized in an analytical testing laboratory. GC instrumentation requires the use of compressed gas which is commonly supplied in gas cylinders. Proper handling, operation and storage of gas cylinders must be defined. A Preventative Maintenance (PM) schedule should be established for eye wash stations, safety showers and fire extinguishers. Finally, Safety Data Sheets (SDSs) should be printed and maintained as reference for laboratory personnel.

ISO/IEC 17025 accreditation provides an added level of trust, respect and confidence in the eyes of regulators and consumers. However, the current process of accreditation misses the mark on the establishment of GxP, “good practices” into laboratory operations. Based on my experience, there has been some leniency given to cannabis testing laboratories seeking accreditation as they are “new” to standards implementation. In my opinion, this is doing cannabis testing laboratories a disservice and setting them up for failure on future accreditations and potential regulatory inspections. It is essential to provide cannabis testing laboratory owners and operators the proper guidance from the beginning and hold them up to the same rigor and scrutiny as other consumer product testing laboratories. Setting the precedence up front drives uniformity, compliance and standardization into an industry that desperately needs it.

References:

  1. 21 Code of Federal Regulations (CFR) Part 211- Good Manufacturing Practice for Finished Pharmaceuticals.
  2. 21 Code of Federal Regulations (CFR) Part 117;Current Good Manufacturing Practice, Hazard Analysis, and Risk-Based Preventative Controls for Human Food: Subpart B-Processes and Controls.
  3. ICH Q7 Good Manufacturing Practice Guidance for Active Pharmaceutical Ingredients; Laboratory Controls.
  4. World Health Organization (WHO).
  5. International Building Code (IBC).
  6. International Fire Code (IFC).
  7. National Fire Protection Association (NFPA).
  8. Occupational Safety and Health Administration; Laboratories.
  9. ASTM D8244-21; Standard Guide for Analytical Operations Supporting the Cannabis/Hemp Industry.
  10. org; ISO/IEC 17025.

Integrating a Culture of Quality Into the Cannabis Industry

By David Vaillencourt
1 Comment

The culture of the cannabis industry is filled with passion that many envy, and for valid reasons. The roots of the cannabis plant go back thousands of years. As of this writing, there are no documented human deaths that were caused by a phytocannabinoid overdose. However, it is not all rainbows and unicorns.

Before breaking ground, fundraising, proper facility design, competitive application and permitting requirements are just the start. Once operating, businesses struggle to stay current with regulations that continue to evolve. Cannabis cultivators struggle to scale while mitigating pest infestations, which is a part of life in the conventional agricultural industry. A lack of consistent products frustrates consumers, while regulators and policy makers continue to struggle on the best way to regulate a commodity that has seemingly endless demand. The reality is dizzying!

However, amidst all of the challenges and opportunities, a continually overlooked tool stands out: a Quality Management System (QMS). Merriam-Webster defines a system as “an organized set of doctrines, ideas, or principles usually intended to explain the arrangement or working of a systematic whole.”

A QMS documents processes, procedures and responsibilities that ultimately direct an organization’s activities to meet customer and regulatory requirements as well as continually improve its effectiveness and efficiency. In other words – it steers innovation through the collection of data while ensuring products are safe for the consumer. For further reading, the American Society for Quality (ASQ), now over 70 years old, is an excellent resource and provider of resources and formal training programs that are recognized and revered around the world.

Step 1: Define your stakeholder requirements

This all starts with knowing your stakeholder (e.g., customer, regulatory body) requirements. For simplicity’s sake, let’s start with your customer; at a fundamental level, they expect safe, consistent and reliable products that impart a certain experience.

How does that translate into specifications? Let’s look at them one at a time.

What does “safe” mean? For an edible, safe means the product is free of physical, chemical and microbial hazards. Knowing what potential impurities could be in your product requires understanding your raw materials (inputs) and the manufacturing process. To take a deeper dive, some of the aspects of safety and quality, product specifications and testing considerations are discussed in this recent Cannabis Industry Journal article by Dr. Roggen and Mr. Skrinskas here.

An example of a compliant label in Oregon

What does “consistent” mean? This builds off and complements the safety profile. It could mean a consistent fill level, an acceptable range of cannabinoid concentration, and so on. For example, in the US Pharmacopeia’s peer-reviewed article about quality attributes of cannabis inflorescence (commonly known as flower or bud), they recommend 20% as the acceptable variance in cannabinoid content. For a product labeled as having 25% THC, the product will actually test to between 20% and 30%. This may be surprising, and discomforting for some, but the reality is that products on the market consistently fail to meet label claims.

What does “reliable” mean? That could mean that you always have inventory of certain products on the shelves at your dispensary. Defining “always” as a SMART goal – perhaps it means that you will have your top 3 products in stock at least 90% of the time. Customers need to feel like they can rely on your business to provide them with the products they want. Take the time to capture the data on what your customers want and work to satisfy their needs and you’ll watch your business really accelerate.

Step 2: Build your processes to meet these expectations

This is where your written standard operating procedures (SOPs), forms and records come into play. Your SOPs serve to memorialize your operations for consistency. Most SOPs in the cannabis industry are not written by the actual operators of a process. Rather, they are written by the legal and compliance team without review by the operators to confirm that what they are stating reflects operational reality. The audience needs to be the operators. Without effective SOPs that are utilized by your employees, your business will struggle to meet the established specifications. Cannabis businesses in Colorado, the oldest regulated adult-use cannabis market in the United States, continue to see 1 in 8 of their products fail final product testing! Cannabis businesses that understand their processes, document them in SOPs and have records to prove they follow their SOPs (see Step 3) are able to reduce errors that ultimately lead to costly rework and product failures.

Consistency in quality standards requires meticulous SOPs

Step 3: Monitor and improve

You have your requirements, you have your process, but how do you know that they are being adhered to? By the time you have results from a third-party lab, it’s too late. Look internally. Records and logs that show preventive maintenance was performed, room and canopy temperature and humidity checks, inventory reports, production records, extraction equipment report and employee training records shouldn’t be filled out only to be filed away. These records are data, which is your most valuable tool. Unfortunately, records are one of the most overlooked assets in today’s cannabis business. A team independent from operations (typically a Quality Unit) should be regularly reviewing these for inconsistencies and trends that can alert you to catastrophic failures before they occur.

Initially, the additional expenditure and learning curve may make this seem like an added burden, but keep in mind that succeeding in today’s cannabis industry requires long-term customer retention. By biting off one piece at a time, you can slowly implement a QMS that will improve your business, increase customer satisfaction, and ensure your brand is a staple for years to come. Remember, quality and compliance is a journey, not a “set it and forget it” situation.

The definition of a Quality Management System includes ‘continuous improvement’. Look forward to a future article which will discuss the importance of tools like a CAPA Program – Corrective Action Preventive Action (which all cannabis license holders in Colorado are required to have in place as of January 1, 2021) and how they complete your QMS, keeping you compliant and mitigating your business risks!

Moving Towards Greater Competency in Cannabis Testing

By Ravi Kanipayor
No Comments

While legalization of recreational cannabis remains in a fluid state in the United States, the medical application of cannabis is gaining popularity. As such, the  diversification of  pharmaceutical and edible cannabis products will inevitably lead to increased third party testing, in accordance with Food and Drug Administration (FDA) mandates. Laboratories entering into cannabis testing, in addition to knowing the respective state mandates for testing procedures, should be aligned with Federal regulations in the food and pharmaceutical industries.

In 2010, the American Herbal Products Association (AHPA)1 established a cannabis committee with the primary objective of addressing issues related to the practices and safe use of legally-marketed cannabis and cannabis-related products. The committee issued a set of recommendations, outlining best practices for the cultivation, processing, testing and distribution of cannabis and cannabis products. The recommendations for laboratory operations sets some basic principles for those performing analysis of cannabis products. These principles, complementary to existing good laboratory practices and international standards, focus on the personnel, security, sample handling/disposal, data management and test reporting unique to laboratories analyzing cannabis samples.

As local and federal regulations continue to dictate medical and recreational cannabis use, many will venture into the business of laboratory testing to meet the demands of this industry. Thus, it is not surprising that cannabis producers, distributors and dispensaries will need competent testing facilities to provide reliable and accurate results. In addition, our understanding of cannabis from an analytical science perspective will derive from test reports received from these laboratories. Incorrect or falsified results can be costly to their business and can even lead to lawsuits when dealing with consumer products. Examples of fines and/or suspensions related to incorrect/false reporting of results have already gained coverage in news media. This sets up the need for the cannabis industry to establish standardized protocols for laboratory competency.

The international standard, ISO 17025 – ‘General requirements for the competence of testing and calibration laboratories’ – plays an important role in providing standard protocols to distinguish labs with proven quality, reliability and competency. The industry needs to rely not only on the initial accreditation received, but also on the ongoing assessment of the labs to ensure continuous competency.

Receiving accreditation involves an assessment by an International Laboratory Accreditation Cooperation (ILAC) recognized accrediting body, which ensures that laboratories have the competency, resources, personnel and have successfully implemented a sound quality management system that complies with the international standard ISO/IEC 17025:2017. This ISO standard is voluntary, but recognized and adopted globally by many industries for lab services. Cannabis companies can ensure that the test services they receive from accredited laboratories will meet the requirements of the industry, as well as the state and federal regulatory agencies. The International Organization for Standardization (ISO) is an independent, non-governmental organization with over 160 memberships of national standards bodies, and all with a unified focus on developing world-class standards for services, systems, products, testing to ensure quality, safety, efficiency and economic benefits.

ILAC is a non-profit organization made up of accreditation bodies (ABs) from various global economies. The member bodies that are signatories to the ILAC Mutual Recognition Arrangement (ILAC MRA) have been peer evaluated to demonstrate their competence. The ILAC MRA signatories, in turn, assess testing labs against the international standard, ISO/IEC 17025 and award accreditation. Accreditation is the independent evaluation of conformity assessment in accordance with the standard and related government regulations to ensure the lab carry out specific activities (called the ‘Scope’) impartially and competently. Through this process, cannabis industry stakeholders and end users can have confidence in the test results they receive from the labs.

Understanding the principles of accreditation and conformity to ISO standards is the beginning of the ISO 17025 accreditation process. Similar to other areas of testing, accreditation gives cannabis testing labs global recognition such that their practices meet the highest standards in providing continuous consistency, reliability and accuracy.

Many government agencies (state and federal) in the US and around the world are mandating cannabis testing laboratories to seek accreditation to ISO/IEC 17025:2017, in an effort to standardize their practice and provide the industry with needed assurance. Conformance with the standard enables labs to demonstrate their competency in generating reliable results, thereby providing assurance to those who hire their services.

Testing of cannabis can be very demanding and challenging given that state and federal regulations require that the performance and quality of the testing activities must provide consistent, reliable and accurate results. Hence, labs deciding to set up cannabis testing will have to take extra care in setting up a laboratory facility, acquiring all necessary and appropriate testing equipment, hiring qualified and experience staff and developing and implementing test methods to ensure the process, sample throughput, data integrity and generated output are continuously reliable, accurate and meet the need of the clients and requirements of the regulatory bodies. This demands the lab to establish and implement very sound quality assurance program, good laboratory practices and a quality management system (QMS).

Some expected challenges are:

  1. Standardization of test methods and protocols
    1. Since there is no federal guidance in standardization of test methods and protocols for cannabis testing in US, it is challenging for laboratories to research and validate other similar, established methods and gain approval from the local and state authorities.
  2. Facility
    1. Cannabis testing activities must be physically isolated from other testing activities for those labs conducting business in other areas of testing such as environment, food, mining, etc.
    2. Microbiological testing requires additional physical isolation within the testing facility, maintaining sterility of the environment, test area and test equipment.
  3. Equipment
    1. The test equipment such as Chromatographs (GC/LC), Spectrometers (ICP-MS, ICP-OES, UV-Vis), and other essential analytical instruments must meet the specifications required to detect and quantify and statistically justify the test parameters at the stipulated concentration levels. That means the limit of detection and limit of quantitation of each parameter must be well below the regulatory limits and the results are statistically sound.
    2. Calibration, maintenance and operation of analytical equipment must be appropriate to produce results traceable to international standards such as International System of Units and National Institute of Standards and Technology (SI and NIST).
  4. Staff
    1. The qualification and experience of the staff should ensure standard test methods are implemented and verified to meet the specifications.
    2. They should have a sound understanding of the QA/QC protocols and effective implementation of a quality management system which conforms to ISO/IEC 17025:2017 standard.
    3. Staff should be properly trained in all standard operating procedures (SOPs) and receiving schedule re-training as needed. Training should be accurately documented.
  5. QMS
    1. The QMS should not only meet the requirements of ISO 17025, but also be appropriate to the scope of the laboratory activities. Such a system must be planned, implemented, verified and continuously improved to ensure effectiveness.

Finally, stakeholders should seek expert advice in establishing a cannabis testing lab prior to initiating the accreditation. This can be achieved through a cyclic PLAN-DO-CHECK-ACT process. Labs that are properly established can attain the accreditation process in as little as 3-5 months. An initial ‘Gap Analysis’ can be extremely helpful in this matter.

IAS, an ILAC MRA signatory and international accrediting body based in California is one such organization that provides training programs for those interested in attaining accreditation to ISO/IEC 17025:2017. It is a nonprofit, public-benefit corporation that has been providing accreditation services since 1975. IAS accredits a wide range of companies and organizations including governmental entities, commercial businesses, and professional associations worldwide. IAS accreditation programs are based on recognized national and international standards that ensure domestic and/or global acceptance of its accreditations.2

References

  1. American Herbal Products Association , 8630 Fenton Street, Suite 918 , Silver Spring, MD 20910 , ahpa.org.
  2. International Accreditation Services, iasonline.org.

Aphria, Inc. Implements Quality Management Systems

By Cannabis Industry Journal Staff
1 Comment

According to a press release published today, Aphria Inc. has implemented Rootstock Software’s cloud Enterprise Resource Planning (ERP) solutions and ComplianceQuest’s Enterprise Quality Management System (EQMS). Aphria, one of the largest cannabis companies in the world, trades on both the Toronto Stock Exchange and the New York Stock Exchange.

Rootstock’s cloud ERP software includes things like order processing, production management, supply chain management, lot and serial number trackability and traceability, compliance reporting, costing and financial management. ComplianceQuest’s EQMS software provides support for GMP compliance and can help improve efficiencies in operations. The EQMS focuses on quality and risk management across Aphria’s business platforms, from sourcing to manufacturing to supply chain management.

Aphria is using the entire EQMS platform, which includes software to handle documents, training, changes, inspections, nonconformance, corrective actions (CAPA) and customer complaints which integrates to Rootstock’s ERP. According to the press release, the company is currently working to roll-out audit, equipment, incident and supplier management functions and will be fully live with the entire quality system in the next few months.

According to Tim Purdie, chief information officer & chief information security officer of Aphria Inc., both platforms delivered on their implementation. “Grounded in the scalability of the force.com platform, CQ transformed our quality management operating capabilities overnight and we are delighted at the fully integrated partnership result,” says Purdie. “We now have fully digital real-time informatics and ability to implement change in a highly transparent manner to meet the demands of our high growth business.”

Adding that Rootstock ERP will help facilitate their company’s production, inventory and supply chain management, Purdie says both platforms will enable Aphria to be increasingly responsive to market needs. “Aphria is setting the standard as a worldwide leader in the cannabis industry through a diversified approach to innovation, corporate citizenship, strategic partnerships and global expansion,” Purdie says. “With these system implementations, we’re now technologically equipped to take our competitive advantage to new levels of market leadership.”

How a Cloud QMS Can Get Cannabis Startups ISO 9001-Certified

By Mike Hansen
1 Comment

When it comes to compliance for cannabis startups, the ISO 9000 family of standards reigns supreme. Providing the guidelines for the concepts that make up a quality management system (QMS), the ISO family is composed of five standards: ISO 9000, 9001, 9002, 9003 and 9004. Outside of ISO 9001, ISO 9000 is the most important because it creates the foundation that guides all of the other standards.

ISO 9000 is split into two sections: fundamentals and vocabulary. Fundamentals covers the basic principles of quality management and the vocabulary section is a dictionary of quality management terminology. ISO 9000 is crucial because it provides direction on proper QMS implementation that will lead to achieving an ISO 9001 certification.

While the entire ISO 9000 family is focused on quality management systems that aim to help organizations “ensure that their products and services consistently meet customer’s requirements and that quality is consistently improved,” ISO 9001 is the only standard that lists actual requirements and requires certification.Cloud-based quality management software provides the flexibility and scalability, that cannabis startups need to comply with ISO 9001

Quality Management Systems (QMS)

When conceptualizing “quality management,” it is best to think of it as an organization’s definition of how it will meet the quality requirements of customers and other stakeholders who are affected by its work. Implementing this requires an extensive alignment of company processes and procedural governance.

It’s easiest to think of a QMS as the facilitator of outlined processes that are required to fulfill ISO 9001 requirements. For example, if an organization has defined a change request process, it could use a cloud-based QMS to put that process in place. However, the benefits of a cloud-based QMS don’t have to end at ISO 9001. It can also help organizations comply with other regulations like GxP.

ISO 9001 Requirements

ISO 9001 requirements can sound very generic because they’re meant to be applied to any organization, big or small, in any industry. The key to ISO 9001 is the concept of continuous improvement, which is why specific requirements for what “quality” is are not defined. Rather, companies must create objectives and work toward improving processes to meet those objectives. That said, a certified QMS still must do the following:

  • Meet the requirements of other stakeholders, for example, customer requirements and regulatory standards
  • Ensure that employees receive training outlining the quality requirements
  • Determine and document the processes, their interactions and their results
  • Be able to produce records to prove that system requirements have been met
  • Constantly monitor quality management software performance
  • Address any risks that could result from changes
  • Perform internal audits and correct any issues
  • Continuously improve the QMS

From creation to disposal, document protocols must be clear and properly followed.With that in mind, ISO 9001’s purpose is to evaluate whether or not a QMS does a good job of managing processes while also being able to help organizations identify areas that need improvement. In simple terms, ISO 9001 helps companies who were making an excellent product most of the time, make an excellent product every time.

How can cloud quality management software help you get your ISO 9001 certification? Once you create processes that adhere to ISO 9001 quality management standards, you have to put them into practice. Enter: quality management software. But, how exactly does it help?

Optimal Time to Value

First, cloud-based software is the most cost-efficient to implement. Secondly, since a QMS needs to be accessible to every employee regardless of whether they work at HQ or on-site, cloud QMS are built to be mobile-friendly and easily accessed from any location.

Automated Document Lifecycles & Version Control

From creation to disposal, document protocols must be clear and properly followed. As up-to-date documents are an important factor in maintaining high levels of quality, the most recent versions of approved documents should be readily available while previous editions should be hidden away.

With cloud quality management software, workflows can automate the review and approval processes by automatically sharing documents with the right reviewers. Then, after the document has been approved, the changes will automatically be applied to the master document while the obsolete version is archived, helping to remove any chance of it being accidentally used after the update.

Easy Document Location & Metadata

According to ISO 9001, searching through an organization’s documents should be as easy as searching with Google. It’s an added bonus when the quality management software enables users to add custom metadata to documents. Metadata is just extra information that helps to define a document (like file size, type, date modified). With certain cloud-based QMS’, you can add custom metadata fields to make documents easier to find. For example, you can add an “expiration date” field that allows you to look up policies based on when they are set to expire.With the growing number of data breaches happening every year, it’s important to address the security components of a QMS.

Document Traceability

In order to pass any ISO 9001 audit, there needs to be a complete audit trail for every document, including active documents and the earlier archived versions. While this might seem like a big ask, cloud quality management software helps make this simple. Every single change to a document, regardless of whether it’s the current or past version, is tracked. When combined with automated workflows, you’re able to produce a precise log of every change made by every user.

Advanced User Permissions & Central File Ownership

With the growing number of data breaches happening every year, it’s important to address the security components of a QMS. Many of these issues can be resolved with user permissions, which is generally related to managing users’ editing and sharing access. The proper view, edit, and approval rights go a long way to reducing the risk of human error.

Another feature that may seem like common sense is central file ownership. When the organization owns all of its documents, there’s no need to worry that important files will be lost or deleted. With one owner, the damage that can be inflicted by malicious third-parties is also limited.

Cloud-based quality management software provides the flexibility and scalability, that cannabis startups need to comply with ISO 9001. With the cloud as a foundation, these systems will continue to be assets for the cannabis industry as it gains momentum and expands more.

Beleave Achieves ISO 9001 Certification

By Aaron G. Biros
No Comments

According to a press release, Beleave Inc. announced recently that their subsidiary, Beleave Kannabis Corporation, received the ISO 9001:2015 certification. The facility that received the certification, based in Hamilton, Ontario, was certified “for the research, development, and production of cannabis products for medicinal and recreational purposes,” reads the press release.

Beleave is a vertically-integrated cannabis business headquartered in Oakville, Ontario that cultivates cannabis as well as producing oils and extracts. The company operates in both medical and recreational sectors of the market. They have been working on developing cannabis food and beverage products, such as infused powders and sugars, expecting that the recreational cannabis market in Canada will soon open its doors to infused products in 2019.

ISO 9001:2015 is an international standard that stipulates requirements for a quality management system (QMS), showing that a facility can provide products that meet customer and regulatory requirements. ISO 9001:2015 is the most up-to-date version for the standard, which can help show a company’s commitment to quality, efficiency and consistency. The 2015 version uses criteria with an emphasis on risk-based thinking to aid in the application of the process approach, improved applicability for services and increased leadership requirements.

“We continue to develop international partnerships and plan to enter global markets”The company’s facility was certified by Bureau Veritas Certification Holding SAS in late January of 2019. According to Roger Ferreira, chief science officer at Beleave, the process of certification was no easy undertaking. “After many months of hard work and preparation, we are extremely proud to be one of the few licensed producers of cannabis to have received ISO 9001:2015 accreditation,” says Ferreira. “This certification reflects Beleave’s ongoing commitment to quality across key elements of our business, which includes research, innovation, and production of cannabis products.”

Going beyond Canada, Ferreira says they are building the foundation of a company preparing to expand internationally. “Further, this internationally recognized certification for our quality management system positions us well as we continue to develop international partnerships and plan to enter global markets,” says Ferreira. Through their ownership in Procannmed S.A.S., they are licensed to cultivate and produce medical cannabis products out of Colombia, with the goal to export products to the Latin American market. They have also partnered with Canymed GmbH, based in Germany, to further explore opportunities in the European medical cannabis market.