>

ICH Q9(R1) — Gap Analysis

Quality Risk Management — ICH Q9(R1) 2023 Revision
ICH Q9 2023 Edition All Gaps only
Compliant
Partial
Non-compliant
Not assessed

About ICH Q9(R1)

ICH Q9(R1) is the harmonised framework for Quality Risk Management in the pharmaceutical industry, originally adopted in 2005 and revised in January 2023. It provides principles and examples of tools applicable across the product lifecycle: development, manufacturing, distribution, inspection, regulatory submission, complaints, deviations, and product transfer/discontinuation. Q9(R1) clarified subjectivity in risk assessments, the formality of QRM, and risk-based decision-making.

Issuing Body

International Council for Harmonisation (ICH) — adopted by EMA, FDA, PMDA, MHRA, Health Canada and others

Edition

2023

Coverage

Systematic process for assessment, control, communication, review of risks to quality across the lifecycle of medicinal products and APIs.

Typical Users

Pharmaceutical manufacturers, API producers, contract manufacturers, biopharma, ATMP developers, marketing authorisation holders, inspectors, regulators.

How to use this tool

1. Work through each clause. For each requirement, choose Compliant, Partial, Non-compliant, or leave as Not assessed.

2. Add notes against any requirement to record evidence, gaps, or corrective actions.

3. Click Save progress — data is stored locally in your browser, never uploaded.

4. Export the report as TXT, CSV, JSON or print to PDF for your audit file.

Note: This tool is a guided self-assessment. It does not replace a third-party audit and the authoritative version of the standard must be obtained from the issuing body.

ISO Xpert — Get in touch

UK-based consultancy specialising in management-system gap analysis, training and certification preparation across ISO, API, Halal, GFSI, ESG, cybersecurity and industry-specific standards.

Phone / WhatsApp

+44 7853 109840

Office

71-75 Shelton Street, Covent Garden, London WC2H 9JQ, UK

Common Questions

ICH Q9(R1) Pharma Quality Risk Management — Frequently Asked Questions

Quick answers about the ICH Q9(R1) Pharma Quality Risk Management gap analysis tool, data privacy, audit preparation, and ISO Xpert consulting.

What is the ICH Q9(R1) Pharma Quality Risk Management gap analysis tool and how does it work?
The ICH Q9(R1) Pharma Quality Risk Management gap analysis tool is a free browser-based checklist that compares your current management system against the clauses of ICH Q9(R1) Pharma Quality Risk Management. You answer clause-by-clause questions and rate each requirement as Compliant, Partial or Non-compliant. The tool calculates a live compliance score, highlights gaps on a heat-map, captures evidence and corrective-action notes, and exports the full assessment as JSON, CSV, TXT or print-ready PDF for management review and Stage 1 / Stage 2 audit preparation.
Is the ICH Q9(R1) Pharma Quality Risk Management gap analysis tool really free to use?
Yes — the ICH Q9(R1) Pharma Quality Risk Management tool is 100% free with no sign-up, no email capture, no credit card, no watermarks, and no usage limits. It runs entirely in your browser; nothing is transmitted to ISO Xpert servers. You can clear or export your data at any time.
Where is my ICH Q9(R1) Pharma Quality Risk Management assessment data stored?
All ICH Q9(R1) Pharma Quality Risk Management assessment data is stored locally in your browser’s storage. Nothing is uploaded to our servers. This makes the tool GDPR-friendly and suitable for confidential audit data classified up to Restricted. Export anytime as JSON (re-importable), CSV (Excel-pivotable), TXT (executive summary) or PDF (audit-trail evidence).
Can I use this tool to prepare for ICH Q9(R1) Pharma Quality Risk Management certification or surveillance audits?
Yes. The ICH Q9(R1) Pharma Quality Risk Management gap analysis is designed to support preparation for certification by UKAS-, IAS- or ANAB-accredited bodies. Use the exported report as evidence of internal audit, feed it into management review, and prioritise high-severity non-conformities ahead of Stage 1 / Stage 2 visits. ISO Xpert consultants can assist with documented information, internal audits and full implementation if required.
How long does a ICH Q9(R1) Pharma Quality Risk Management gap analysis typically take?
Most users complete an initial ICH Q9(R1) Pharma Quality Risk Management gap analysis in 60 to 120 minutes for a single site, depending on system maturity and clause depth. The tool auto-saves continuously, so you can pause, switch devices via JSON export/import, and resume at any time. Re-assessments after corrective action usually take 20 to 40 minutes.
Does ISO Xpert offer ICH Q9(R1) Pharma Quality Risk Management consulting or training?
Yes. ISO Xpert Ltd (London, UK) provides ICH Q9(R1) Pharma Quality Risk Management gap analysis consulting, internal audits, Stage 1 and Stage 2 certification preparation, lead auditor / internal auditor training, and full management-system implementation. Contact info@iso-xpert.com or WhatsApp +44 7853 109840.

More questions? Contact ISO Xpert or browse other medical-gap-analysis tools.