{"id":4894,"date":"2021-03-02T15:04:17","date_gmt":"2021-03-02T14:04:17","guid":{"rendered":"https:\/\/q-finity.de\/bereiche\/it-infrastruktur-qualifizierung\/"},"modified":"2026-09-04T13:57:41","modified_gmt":"2026-09-04T11:57:41","slug":"it-infrastructure-qualification","status":"publish","type":"page","link":"https:\/\/q-finity.de\/en\/service-areas\/it-infrastructure-qualification\/","title":{"rendered":"IT Infrastructure Qualification"},"content":{"rendered":"\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":2,"featured_media":16444,"parent":4876,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"inline_featured_image":false,"footnotes":""},"class_list":["post-4894","page","type-page","status-publish","has-post-thumbnail","hentry"],"yoast_head":"\nIT Infrastructure Qualification to the Cloud | QFINITY<\/title>\n<meta name=\"description\" content=\"IT infrastructure qualification: a controlled state instead of a point-in-time protocol - risk-based, evidence from tools and monitoring, plus IT\/OT.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/q-finity.de\/en\/service-areas\/it-infrastructure-qualification\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"IT Infrastructure Qualification to the Cloud | QFINITY\" \/>\n<meta property=\"og:description\" content=\"IT infrastructure qualification: a controlled state instead of a point-in-time protocol - risk-based, evidence from tools and monitoring, plus IT\/OT.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/q-finity.de\/en\/service-areas\/it-infrastructure-qualification\/\" \/>\n<meta property=\"og:site_name\" content=\"QFINITY\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-04T11:57:41+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/07\/it-infrastruktur-qualifizierung-hero-v7.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1024\" \/>\n\t<meta property=\"og:image:height\" content=\"576\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:title\" content=\"IT Infrastructure Qualification\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/service-areas\\\/it-infrastructure-qualification\\\/\",\"url\":\"https:\\\/\\\/q-finity.de\\\/en\\\/service-areas\\\/it-infrastructure-qualification\\\/\",\"name\":\"IT Infrastructure Qualification to the Cloud | QFINITY\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/service-areas\\\/it-infrastructure-qualification\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/service-areas\\\/it-infrastructure-qualification\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/q-finity.de\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/it-infrastruktur-qualifizierung-hero-v7.png\",\"datePublished\":\"2021-03-02T14:04:17+00:00\",\"dateModified\":\"2026-09-04T11:57:41+00:00\",\"description\":\"IT infrastructure qualification: a controlled state instead of a point-in-time protocol - risk-based, evidence from tools and monitoring, plus IT\\\/OT.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/service-areas\\\/it-infrastructure-qualification\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/q-finity.de\\\/en\\\/service-areas\\\/it-infrastructure-qualification\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/service-areas\\\/it-infrastructure-qualification\\\/#primaryimage\",\"url\":\"https:\\\/\\\/q-finity.de\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/it-infrastruktur-qualifizierung-hero-v7.png\",\"contentUrl\":\"https:\\\/\\\/q-finity.de\\\/wp-content\\\/uploads\\\/2026\\\/07\\\/it-infrastruktur-qualifizierung-hero-v7.png\",\"width\":1024,\"height\":576,\"caption\":\"IT-Infrastruktur Qualifizierung - QFINITY\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/service-areas\\\/it-infrastructure-qualification\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Startseite\",\"item\":\"https:\\\/\\\/q-finity.de\\\/en\\\/home\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Areas\",\"item\":\"https:\\\/\\\/q-finity.de\\\/en\\\/service-areas\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"IT Infrastructure Qualification\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/q-finity.de\\\/en\\\/\",\"name\":\"QFINITY\",\"description\":\"Qualit\u00e4tsmanagement & - sicherung\",\"publisher\":{\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/q-finity.de\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/#organization\",\"name\":\"QFINITY\u221e\",\"url\":\"https:\\\/\\\/q-finity.de\\\/en\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/mlsqau6zetur.i.optimole.com\\\/cb:frAi.c2d9\\\/w:512\\\/h:512\\\/q:mauto\\\/f:best\\\/https:\\\/\\\/q-finity.de\\\/wp-content\\\/uploads\\\/2021\\\/03\\\/cropped-cropped-signet_PAN_orange.png\",\"contentUrl\":\"https:\\\/\\\/mlsqau6zetur.i.optimole.com\\\/cb:frAi.c2d9\\\/w:512\\\/h:512\\\/q:mauto\\\/f:best\\\/https:\\\/\\\/q-finity.de\\\/wp-content\\\/uploads\\\/2021\\\/03\\\/cropped-cropped-signet_PAN_orange.png\",\"width\":512,\"height\":512,\"caption\":\"QFINITY\u221e\"},\"image\":{\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/company\\\/q-finity-quality-management\\\/\",\"https:\\\/\\\/www.instagram.com\\\/qfinity_official\\\/\",\"https:\\\/\\\/www.wikidata.org\\\/wiki\\\/Q141257555\"],\"founder\":{\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/#founder\"}},{\"@type\":\"FAQPage\",\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/service-areas\\\/it-infrastructure-qualification\\\/#faq\",\"mainEntity\":[{\"@type\":\"Question\",\"name\":\"May GxP systems run in the cloud?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Yes. No regulation prohibits cloud operation. What is required is demonstrable control over the provider. The regulated company remains accountable. It exercises that accountability through its assessment of the provider, its agreements with the provider and ongoing monitoring. That is how it evidences control. The cloud is then open to GxP-critical applications as well.\"}},{\"@type\":\"Question\",\"name\":\"Does IT infrastructure need the classic phase model of equipment qualification?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"No. The DQ\\\/IQ\\\/OQ\\\/PQ phase model comes from qualifying stable equipment. IT infrastructure is qualified according to risk. Standard components need only lean evidence, configured building blocks more, and the qualified state is maintained in operation. The evidence comes from the tools' records, from build report to monitoring log.\"}},{\"@type\":\"Question\",\"name\":\"Do we have to audit the cloud provider on site?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Not necessarily. What level of assessment is appropriate depends on the risk. The range runs from certificates and standard reports through postal audits to on-site or joint audits where risk is high. An audit only evidences the point in time it was held, so the service and quality agreements and ongoing monitoring of performance have to sustain control continuously.\"}},{\"@type\":\"Question\",\"name\":\"Does GxP infrastructure have to be separated from non-regulated infrastructure?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"No. Such a separation is neither practicable nor required. The same infrastructure runs regulated and non-regulated applications alike and is controlled as a whole, to the same IT standards. The differentiation happens one level up, because the intended use of the supported processes determines how deep the evidence for individual components goes.\"}},{\"@type\":\"Question\",\"name\":\"What does the draft Annex 11 revision change for outsourced infrastructure?\",\"acceptedAnswer\":{\"@type\":\"Answer\",\"text\":\"Annex 11 has regulated suppliers and service providers in a dedicated section since 2011: formal agreements with clear responsibilities, the need for an audit based on a risk assessment, and audit information available to inspectors. The 2025 draft expands this section considerably. It makes clear that the regulated company retains full responsibility. In addition it provides for ongoing oversight against agreed service levels and key performance indicators, regular and ad hoc reporting, agreed support during inspections and access to the documentation from the company's own site. Until adoption, the 2011 version of Annex 11 applies. A company that already runs its controlled state this way is prepared for both versions.\"}}],\"isPartOf\":{\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/service-areas\\\/it-infrastructure-qualification\\\/\"}},{\"@type\":\"Service\",\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/service-areas\\\/it-infrastructure-qualification\\\/#service\",\"name\":\"IT Infrastructure Qualification\",\"serviceType\":\"IT Infrastructure Qualification\",\"url\":\"https:\\\/\\\/q-finity.de\\\/en\\\/service-areas\\\/it-infrastructure-qualification\\\/\",\"areaServed\":[{\"@type\":\"Country\",\"name\":\"Germany\"},{\"@type\":\"Country\",\"name\":\"Austria\"},{\"@type\":\"Country\",\"name\":\"Switzerland\"}],\"description\":\"IT infrastructure qualification: a controlled state instead of a point-in-time protocol - risk-based, evidence from tools and monitoring, plus IT\\\/OT.\",\"provider\":{\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/#organization\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/service-areas\\\/it-infrastructure-qualification\\\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/#founder\",\"name\":\"Oliver Herrmann\",\"jobTitle\":\"Founder & CEO\",\"url\":\"https:\\\/\\\/q-finity.de\\\/en\\\/\",\"worksFor\":{\"@id\":\"https:\\\/\\\/q-finity.de\\\/en\\\/#organization\"},\"sameAs\":[\"https:\\\/\\\/www.linkedin.com\\\/in\\\/olherrmann\\\/\",\"https:\\\/\\\/virtual.ispe.org\\\/b\\\/sp\\\/oliver-herrmann-4399\",\"https:\\\/\\\/www.wikidata.org\\\/wiki\\\/Q141257562\"],\"knowsAbout\":[\"GxP-Compliance\",\"Computer System Validation\",\"Computer Software Assurance\",\"Data Integrity\",\"ALCOA++\",\"AI Governance\",\"GAMP 5\"],\"image\":\"https:\\\/\\\/q-finity.de\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/oliver-herrmann-qfinity-ceo-scaled.jpg\",\"description\":\"Founder and CEO of QFINITY, GAMP Europe Chair, qualified GAMP 5 and GAMP Data Integrity trainer, GQMA auditor and international speaker. Co-author of several ISPE GAMP guides, including the GAMP 5 Guide (2nd Edition).\",\"memberOf\":{\"@type\":\"Organization\",\"name\":\"International Society for Pharmaceutical Engineering (ISPE)\",\"url\":\"https:\\\/\\\/ispe.org\"},\"hasCredential\":[{\"@type\":\"EducationalOccupationalCredential\",\"credentialCategory\":\"degree\",\"name\":\"Graduate Computer Scientist (Dipl.-Inf.)\"},{\"@type\":\"EducationalOccupationalCredential\",\"credentialCategory\":\"certification\",\"name\":\"Microsoft Certified Systems Engineer (MCSE)\"},{\"@type\":\"EducationalOccupationalCredential\",\"credentialCategory\":\"certification\",\"name\":\"SAFe (Scaled Agile Framework)\"}]}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"IT Infrastructure Qualification to the Cloud | QFINITY","description":"IT infrastructure qualification: a controlled state instead of a point-in-time protocol - risk-based, evidence from tools and monitoring, plus IT\/OT.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/q-finity.de\/en\/service-areas\/it-infrastructure-qualification\/","og_locale":"en_US","og_type":"article","og_title":"IT Infrastructure Qualification to the Cloud | QFINITY","og_description":"IT infrastructure qualification: a controlled state instead of a point-in-time protocol - risk-based, evidence from tools and monitoring, plus IT\/OT.","og_url":"https:\/\/q-finity.de\/en\/service-areas\/it-infrastructure-qualification\/","og_site_name":"QFINITY","article_modified_time":"2026-09-04T11:57:41+00:00","og_image":[{"width":1024,"height":576,"url":"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/07\/it-infrastruktur-qualifizierung-hero-v7.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_title":"IT Infrastructure Qualification","twitter_misc":{"Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/q-finity.de\/en\/service-areas\/it-infrastructure-qualification\/","url":"https:\/\/q-finity.de\/en\/service-areas\/it-infrastructure-qualification\/","name":"IT Infrastructure Qualification to the Cloud | QFINITY","isPartOf":{"@id":"https:\/\/q-finity.de\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/q-finity.de\/en\/service-areas\/it-infrastructure-qualification\/#primaryimage"},"image":{"@id":"https:\/\/q-finity.de\/en\/service-areas\/it-infrastructure-qualification\/#primaryimage"},"thumbnailUrl":"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/07\/it-infrastruktur-qualifizierung-hero-v7.png","datePublished":"2021-03-02T14:04:17+00:00","dateModified":"2026-09-04T11:57:41+00:00","description":"IT infrastructure qualification: a controlled state instead of a point-in-time protocol - risk-based, evidence from tools and monitoring, plus IT\/OT.","breadcrumb":{"@id":"https:\/\/q-finity.de\/en\/service-areas\/it-infrastructure-qualification\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/q-finity.de\/en\/service-areas\/it-infrastructure-qualification\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/q-finity.de\/en\/service-areas\/it-infrastructure-qualification\/#primaryimage","url":"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/07\/it-infrastruktur-qualifizierung-hero-v7.png","contentUrl":"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/07\/it-infrastruktur-qualifizierung-hero-v7.png","width":1024,"height":576,"caption":"IT-Infrastruktur Qualifizierung - QFINITY"},{"@type":"BreadcrumbList","@id":"https:\/\/q-finity.de\/en\/service-areas\/it-infrastructure-qualification\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Startseite","item":"https:\/\/q-finity.de\/en\/home\/"},{"@type":"ListItem","position":2,"name":"Areas","item":"https:\/\/q-finity.de\/en\/service-areas\/"},{"@type":"ListItem","position":3,"name":"IT Infrastructure Qualification"}]},{"@type":"WebSite","@id":"https:\/\/q-finity.de\/en\/#website","url":"https:\/\/q-finity.de\/en\/","name":"QFINITY","description":"Qualit\u00e4tsmanagement & - sicherung","publisher":{"@id":"https:\/\/q-finity.de\/en\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/q-finity.de\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/q-finity.de\/en\/#organization","name":"QFINITY\u221e","url":"https:\/\/q-finity.de\/en\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/q-finity.de\/en\/#\/schema\/logo\/image\/","url":"https:\/\/mlsqau6zetur.i.optimole.com\/cb:frAi.c2d9\/w:512\/h:512\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2021\/03\/cropped-cropped-signet_PAN_orange.png","contentUrl":"https:\/\/mlsqau6zetur.i.optimole.com\/cb:frAi.c2d9\/w:512\/h:512\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2021\/03\/cropped-cropped-signet_PAN_orange.png","width":512,"height":512,"caption":"QFINITY\u221e"},"image":{"@id":"https:\/\/q-finity.de\/en\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.linkedin.com\/company\/q-finity-quality-management\/","https:\/\/www.instagram.com\/qfinity_official\/","https:\/\/www.wikidata.org\/wiki\/Q141257555"],"founder":{"@id":"https:\/\/q-finity.de\/en\/#founder"}},{"@type":"FAQPage","@id":"https:\/\/q-finity.de\/en\/service-areas\/it-infrastructure-qualification\/#faq","mainEntity":[{"@type":"Question","name":"May GxP systems run in the cloud?","acceptedAnswer":{"@type":"Answer","text":"Yes. No regulation prohibits cloud operation. What is required is demonstrable control over the provider. The regulated company remains accountable. It exercises that accountability through its assessment of the provider, its agreements with the provider and ongoing monitoring. That is how it evidences control. The cloud is then open to GxP-critical applications as well."}},{"@type":"Question","name":"Does IT infrastructure need the classic phase model of equipment qualification?","acceptedAnswer":{"@type":"Answer","text":"No. The DQ\/IQ\/OQ\/PQ phase model comes from qualifying stable equipment. IT infrastructure is qualified according to risk. Standard components need only lean evidence, configured building blocks more, and the qualified state is maintained in operation. The evidence comes from the tools' records, from build report to monitoring log."}},{"@type":"Question","name":"Do we have to audit the cloud provider on site?","acceptedAnswer":{"@type":"Answer","text":"Not necessarily. What level of assessment is appropriate depends on the risk. The range runs from certificates and standard reports through postal audits to on-site or joint audits where risk is high. An audit only evidences the point in time it was held, so the service and quality agreements and ongoing monitoring of performance have to sustain control continuously."}},{"@type":"Question","name":"Does GxP infrastructure have to be separated from non-regulated infrastructure?","acceptedAnswer":{"@type":"Answer","text":"No. Such a separation is neither practicable nor required. The same infrastructure runs regulated and non-regulated applications alike and is controlled as a whole, to the same IT standards. The differentiation happens one level up, because the intended use of the supported processes determines how deep the evidence for individual components goes."}},{"@type":"Question","name":"What does the draft Annex 11 revision change for outsourced infrastructure?","acceptedAnswer":{"@type":"Answer","text":"Annex 11 has regulated suppliers and service providers in a dedicated section since 2011: formal agreements with clear responsibilities, the need for an audit based on a risk assessment, and audit information available to inspectors. The 2025 draft expands this section considerably. It makes clear that the regulated company retains full responsibility. In addition it provides for ongoing oversight against agreed service levels and key performance indicators, regular and ad hoc reporting, agreed support during inspections and access to the documentation from the company's own site. Until adoption, the 2011 version of Annex 11 applies. A company that already runs its controlled state this way is prepared for both versions."}}],"isPartOf":{"@id":"https:\/\/q-finity.de\/en\/service-areas\/it-infrastructure-qualification\/"}},{"@type":"Service","@id":"https:\/\/q-finity.de\/en\/service-areas\/it-infrastructure-qualification\/#service","name":"IT Infrastructure Qualification","serviceType":"IT Infrastructure Qualification","url":"https:\/\/q-finity.de\/en\/service-areas\/it-infrastructure-qualification\/","areaServed":[{"@type":"Country","name":"Germany"},{"@type":"Country","name":"Austria"},{"@type":"Country","name":"Switzerland"}],"description":"IT infrastructure qualification: a controlled state instead of a point-in-time protocol - risk-based, evidence from tools and monitoring, plus IT\/OT.","provider":{"@id":"https:\/\/q-finity.de\/en\/#organization"},"isPartOf":{"@id":"https:\/\/q-finity.de\/en\/service-areas\/it-infrastructure-qualification\/"}},{"@type":"Person","@id":"https:\/\/q-finity.de\/en\/#founder","name":"Oliver Herrmann","jobTitle":"Founder & CEO","url":"https:\/\/q-finity.de\/en\/","worksFor":{"@id":"https:\/\/q-finity.de\/en\/#organization"},"sameAs":["https:\/\/www.linkedin.com\/in\/olherrmann\/","https:\/\/virtual.ispe.org\/b\/sp\/oliver-herrmann-4399","https:\/\/www.wikidata.org\/wiki\/Q141257562"],"knowsAbout":["GxP-Compliance","Computer System Validation","Computer Software Assurance","Data Integrity","ALCOA++","AI Governance","GAMP 5"],"image":"https:\/\/mlsqau6zetur.i.optimole.com\/cb:mN7M.c4bb\/w:auto\/h:auto\/q:mauto\/f:best\/https:\/\/q-finity.de\/wp-content\/uploads\/2026\/06\/oliver-herrmann-qfinity-ceo-scaled.jpg","description":"Founder and CEO of QFINITY, GAMP Europe Chair, qualified GAMP 5 and GAMP Data Integrity trainer, GQMA auditor and international speaker. Co-author of several ISPE GAMP guides, including the GAMP 5 Guide (2nd Edition).","memberOf":{"@type":"Organization","name":"International Society for Pharmaceutical Engineering (ISPE)","url":"https:\/\/ispe.org"},"hasCredential":[{"@type":"EducationalOccupationalCredential","credentialCategory":"degree","name":"Graduate Computer Scientist (Dipl.-Inf.)"},{"@type":"EducationalOccupationalCredential","credentialCategory":"certification","name":"Microsoft Certified Systems Engineer (MCSE)"},{"@type":"EducationalOccupationalCredential","credentialCategory":"certification","name":"SAFe (Scaled Agile Framework)"}]}]}},"_links":{"self":[{"href":"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/pages\/4894","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/comments?post=4894"}],"version-history":[{"count":16,"href":"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/pages\/4894\/revisions"}],"predecessor-version":[{"id":16447,"href":"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/pages\/4894\/revisions\/16447"}],"up":[{"embeddable":true,"href":"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/pages\/4876"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/media\/16444"}],"wp:attachment":[{"href":"https:\/\/q-finity.de\/en\/wp-json\/wp\/v2\/media?parent=4894"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}