GAMP 5 Second Edition: a reform, not a revolution.
In Pharm. Ind. (ECV), Oliver Herrmann and Frank Henrichmann (QFINITY) explain what the second edition of the GAMP 5 guide really changes - and what stays the same by design: critical thinking before formal compliance, CSA as a scalable testing and documentation approach, and efficiency from risk rather than routine.
Validate differently and more precisely - not just more.
The second edition of the GAMP 5 guide (July 2022) is not a replacement for the 2008 First Edition - it carries the First Edition forward: the same direction, tuned more sharply to risk, patient benefit and modern technology. That does not make validation cheaper - it makes validation prioritized: effort follows risk and patient proximity, not a checklist worked through identically for every system. What the path looks like in practice is laid out on our guide page on GAMP 5 validation.
What stays - and why no "GAMP 6" is needed.
The Second Edition confirms the core principles unchanged - product and process understanding leads to requirements, requirements lead to fitness for the intended use, and the entire lifecycle stays anchored, scalably, in the quality management system. Because this foundation has held up, the guide did not need a new generation - it needed an update in how it is applied: the purpose of a validation still comes from the process and its intended use, not from the tool.
Judgment before formal compliance.
The key innovation is the new Appendix M12: critical thinking comes to the fore; patient safety, product quality and data integrity rank ahead of merely satisfying formal compliance. To make this work in a team, the article points to practical tools such as process mapping, data flow diagrams and planning poker - and addresses the reality of today's system landscapes beyond classic on-premise applications:
CSA/CSV: align effort with risk.
The Second Edition integrates CSA (Computer Software Assurance) seamlessly: a scalable, risk-based testing and documentation approach - scripted, unscripted or ad-hoc testing depending on risk - that reduces over-documentation and delivers higher test coverage with the same resources. It also fits international regulation: the FDA CSA guidance (published as a draft in September 2022, final since September 2025) is consistent with the GAMP principles, and representatives of the regulatory authorities reviewed the Second Edition.
From control body to enabler.
The article describes a new role for the quality organization: away from the perceived "control organization" and toward an enabler with an early seat at the table - because judgment that arrives at the end of a project arrives too late. The real challenge is implementation: making the case for working differently and more precisely, rather than simply doing more across the board, takes management support, regulatory acceptance, a pilot project that proves the point - and critical thinking anchored in the quality culture, not in a single role.
Written by co-shapers of the standard.
Frank Henrichmann, Senior Executive Consultant at QFINITY with more than 24 years in quality management for computerized systems (including Schering AG and Parexel), and Oliver Herrmann, Founder and CEO of QFINITY with 20 years of GxP experience and Chair of the ISPE GAMP Europe Steering Committee, both served on the core team for the GAMP 5 Second Edition revision - here they write about a standard they helped shape.
Both are qualified ISPE GAMP trainers and members of the GAMP Global Steering Committee; the article is their in-house publication, published in Pharm. Ind., Vol. 86, No. 12, pp. 1154-1159 (2024), ECV - Editio Cantor Verlag.
From reform to everyday practice.
GAMP 5 Second Edition - validate differently and more precisely.
We bring critical thinking and CSA into your validation: align effort with risk, reduce over-documentation, secure regulatory acceptance. Free initial consultation, about 30 minutes, directly with one of the authors.
Arrange an initial consultation
