Naga MounikaDrug Product · Validation · CMC
Menu
Working document

CCIT Method Selection and MALL Risk Assessment

A plug-and-play risk assessment for choosing a container closure integrity test method and deriving its maximum allowable leakage limit (MALL): the three-question USP <1207.1> selection logic, a scored method-fit register, MALL derivation, and a filled specimen.

Document typeRisk Assessment
Topic areaDrug Product
LevelAdvanced
UpdatedSeptember 2026
How to use this document

Copy the template below into your quality system. Replace every <<FILL: ...>> placeholder with your company, system, and process specifics, then route it through your own document control, review, and approval. The filled specimen shows one worked example; adapt the numbers and scope to your operation and verify each cited regulation or standard against the current source before you rely on it.

This is a generic, originally worded starting point. It contains no confidential, proprietary, or employer material, it is drafted with AI assistance and reviewed, it is not legal or compliance advice, and adopting it does not by itself create or prove compliance. See the Disclaimer and Terms.

This is a ready-to-use risk assessment for selecting a container closure integrity test (CCIT) method and deriving its maximum allowable leakage limit (MALL), the document the CCIT Study Protocol’s “linked method selection risk assessment” field points back to. Replace every <<FILL: ...>> placeholder with your own specifics and route it through your normal document control, review, and approval. A worked filled specimen follows. Verify each cited reference against the current source before you rely on it.

Document control header

FieldEntry
Document titleCCIT Method Selection and MALL Risk Assessment for <<FILL: product / container system>>
Document number<<FILL: e.g. RA-CCIT-009>>
Version<<FILL>>
Effective date<<FILL>>
Linked CCIT study protocol<<FILL: ref>>
Document owner<<FILL: e.g. Analytical / Packaging SME>>

1. Purpose

This assessment documents the basis for the CCIT method selected for <<FILL: product>>, and derives the maximum allowable leakage limit (MALL) that method has to detect below, so both decisions rest on a scored, evidenced rationale rather than default practice or the equipment already on hand.

2. Scope

DimensionDecision
Product / presentation<<FILL: liquid, lyophilized, suspension>>
Container closure system(s)<<FILL: vial, prefilled syringe, cartridge, cryobag, blow-fill-seal>>
Seal locations to be independently evaluated<<FILL: e.g. stopper/crimp, needle shield, weld/seam>>
Out of scope<<FILL: e.g. seal quality (RSF/torque) monitoring, covered under its own log>>

3. Responsibilities

RoleResponsibility
Analytical / packaging SMEFacilitates the assessment, derives the MALL, scores candidate methods, documents the selection rationale
Formulation / drug product developmentSupplies conductivity, oxidation-sensitivity, and other product-compatibility data the scoring depends on
Quality AssuranceApproves the MALL basis and the final method selection
Stability / CMCConfirms the selected method fits the stability protocol’s testing points

4. Method selection logic

Work the three USP <1207.1> questions in order; each answer narrows the field before the next is asked.

QuestionAnswer for this product/container
What critical attribute does this package protect?<<FILL: e.g. sterility; headspace oxygen state; both>>
Does the fill and format give a candidate method physical access to detect a leak against that attribute?<<FILL: e.g. headspace present for HGA; fill is conductive for HVLD>>
Does the format require 100 percent in-line testing, or does a statistically justified sample hold up?<<FILL>>

5. MALL derivation

FieldEntry
Primary critical attribute<<FILL: e.g. sterility>>
Basis for the sterility-driven MALL<<FILL: e.g. correlation studies placing microbial ingress onset in the sub-micron range; confirm via current literature, not assumed>>
Secondary critical attribute, if applicable<<FILL: e.g. oxidation sensitivity, moisture sensitivity>>
Basis for the secondary MALL<<FILL: e.g. stability data showing the ingress level that drives an assay or oxidation-marker excursion by end of shelf life>>
Governing MALL (the tighter of the two)<<FILL>>

6. Candidate method scoring

Score each candidate method against the container system in scope. A method scoring “No” on physical applicability is eliminated regardless of how it scores elsewhere.

Candidate methodPhysically applicable to this container?Sensitivity vs. MALLProduct compatibility confirmed?In-line capable?Selected?
<<FILL: e.g. vacuum decay>><<FILL: Yes/No>><<FILL>><<FILL>><<FILL>><<FILL>>
<<FILL: e.g. HVLD>><<FILL>><<FILL>><<FILL>><<FILL>><<FILL>>
<<FILL: e.g. headspace gas analysis>><<FILL>><<FILL>><<FILL>><<FILL>><<FILL>>
Dye ingress (probabilistic)<<FILL>><<FILL>>N/A<<FILL>><<FILL: default No; document rationale if Yes>>

7. Positive control basis

FieldEntry
Positive control type<<FILL: e.g. laser-drilled hole, certified>>
Sizes selected and why<<FILL: must bracket the MALL from section 5, with a vendor certificate for the actual lot used>>
Number of hole sizes for the probability-of-detection curve<<FILL>>

8. Residual risk and acceptance

FieldEntry
Risks not fully resolved by the selected method (e.g. a seal location the method cannot independently interrogate)<<FILL>>
Mitigation<<FILL>>
Acceptable to proceed to method validation with this selectionYes / No
Accepted by (QA, name, date)<<FILL>>

9. References

USP General Chapter <1207>, Package Integrity Evaluation, General Considerations. USP General Chapter <1207.1>, Package Integrity Testing in the Container-Closure System. USP General Chapter <1207.2>, Package Integrity Leak Test Technologies.

Confirm the current version and status of each reference before issue.

10. Revision history

VersionDateAuthorSummary of change
<<FILL: 1.0>><<FILL>><<FILL>>Initial issue.

11. Approvals

RoleNameSignatureDate
Author (Analytical / Packaging)<<FILL>>
Reviewer (Formulation)<<FILL>>
Approver (QA)<<FILL>>

Filled specimen

Extract for an example 1 mL prefilled syringe of a conductive, oxygen-sensitive biologic, glass barrel, staked needle, rigid needle shield, no nitrogen overlay. Company and product are illustrative.

Method selection logic: critical attributes are sterility and oxygen ingress, the latter carried entirely by the seal since there is no headspace nitrogen overlay. The fill is conductive, confirmed by a bench conductivity check, which gives HVLD physical access; no headspace exists, which eliminates headspace gas analysis outright regardless of its other merits. The format’s line speed supports 100 percent in-line HVLD scanning rather than a sampled off-line program.

Candidate methodPhysically applicable?Sensitivity vs. MALLCompatibility confirmed?In-line capable?Selected?
HVLDYes, conductive fillDetects to 2 micron at plunger and needle-shield seals (see linked protocol POD data)Yes, pre/post oxidation-marker assay showed no measurable degradation at the qualified voltageYesYes
Vacuum decayYes, but liquid fill complicates the pressure signalNot characterized for this fillNot evaluatedYesNo, HVLD scored better on sensitivity and speed
Headspace gas analysisNo, no headspace existsN/AN/AN/ANo, eliminated on physical applicability

MALL derivation: the sterility-driven MALL follows standard sub-micron, correlation-study-anchored logic, confirmed separately by helium correlation during development. The oxygen-driven MALL is tighter than a larger-headspace format would require, landing in the low single-digit micron range because the same absolute oxygen ingress represents a larger fractional change in this syringe’s small effective headspace. The governing MALL for routine HVLD acceptance criteria is the oxygen-driven limit; the sterility MALL is carried by the separate helium correlation data, not claimed against the routine HVLD curve.

Residual risk: HVLD independently interrogates the plunger seal and the needle-shield seal as two separate scan zones, closing the single-seal-thinking gap common to PFS programs; no residual risk accepted without mitigation.

Common inspection findings this risk assessment prevents

  • A method selected because it was already on hand, with no record that the three USP <1207.1> selection questions were actually asked.
  • A MALL asserted with no stated basis, sterility or otherwise.
  • A probabilistic method retained by default with no documented rationale for why no deterministic method was feasible.
  • A multi-seal container’s second seal never separately scored in the method-fit register.

How to adapt this risk assessment

  1. Set your document number, product, and container system in the header.
  2. Work section 4’s three questions honestly and in order; do not skip to a method because it is familiar.
  3. Derive both MALLs in section 5 from real risk logic, sterility correlation data and a stability-driven gas or moisture limit, not a copied number.
  4. Score every seal location on a multi-seal format separately in section 6; do not let one seal’s result stand in for another.
  5. Confirm every USP chapter reference in section 9 against the current published version before issue.
Add this site to your home screen Full screen, works offline, one tap from your home screen.