This is a ready-to-use container closure integrity testing (CCIT) study protocol built around USP General Chapter <1207> and its subchapters. Replace every <<FILL: ...>> placeholder with your own specifics and route it through your normal document control, review, and approval. A worked filled specimen follows. Verify each cited reference against the current source before you rely on it.
Document control header
| Field | Entry |
|---|---|
| Document title | CCIT Study Protocol for <<FILL: product / container system>> |
| Document number | <<FILL: e.g. CCIT-2026-04>> |
| Version | <<FILL>> |
| Effective date | <<FILL>> |
| Linked method selection risk assessment | <<FILL: ref>> |
| Protocol owner | <<FILL: e.g. Analytical / Packaging SME>> |
1. Purpose
This protocol defines the method, positive control strategy, sample matrix, and acceptance criteria used to demonstrate that the container closure system for <<FILL: product>> maintains a validated barrier to microbial ingress and to loss of product quality-relevant headspace gases or moisture, across the conditions and lifecycle points in scope.
2. Scope
| Dimension | Decision |
|---|---|
| Product / presentation | <<FILL: liquid, lyophilized, suspension>> |
| Container closure system(s) | <<FILL: vial/stopper/seal, syringe, cartridge, blow-fill-seal>> |
| Conditions in scope | <<FILL: initial, stability timepoints, post-shipping, post-change>> |
| Out of scope | <<FILL: e.g. sterility testing itself, covered under its own method>> |
3. Responsibilities
| Role | Responsibility |
|---|---|
| Analytical / packaging SME | Selects and qualifies the method, authors this protocol, executes or oversees testing. |
| Quality Assurance | Approves the method selection rationale, acceptance criteria, and results. |
| Stability / CMC | Confirms which lifecycle timepoints require CCIT per the stability protocol. |
4. Method selection rationale
Select a deterministic (physicochemical, quantitative) method over a probabilistic (microbial or dye ingress, qualitative) method wherever technically feasible, consistent with USP <1207> and current regulatory expectation. Base the choice on the product and container type, per USP <1207.1>, and on the specific candidate technology’s applicability and sensitivity, per USP <1207.2> for leak detection or USP <1207.3> for seal quality. Confirm the physical basis of the candidate method actually applies to this container before selecting it: headspace gas analysis requires a real headspace with an optical path (it does not apply to a fully liquid-filled or opaque container), high-voltage leak detection (HVLD) requires a conductive fill and documented product-compatibility data showing the applied voltage does not degrade the product, and vacuum decay’s detection range is instrument- and container-specific per USP <1207.2>, not a fixed number assumed from the method’s name.
| Factor | Entry |
|---|---|
| Candidate method | <<FILL: e.g. vacuum decay, headspace gas analysis (HGA), high-voltage leak detection (HVLD), helium leak>> |
| Why this method fits this container/product | <<FILL: e.g. rigid vial, liquid fill, compatible with vacuum decay>> |
| Maximum allowable leakage limit (MALL) | <<FILL: value and basis, e.g. from a microbial ingress risk model>> |
| Method sensitivity vs. MALL | <<FILL: demonstrated detection limit must be at or below MALL>> |
| Method qualification / validation reference | <<FILL: ref>> |
Where a probabilistic method is used because no deterministic method is feasible for the container type, document that determination explicitly; it is not a default choice. The paired CCIT method selection and MALL risk assessment works this section’s decision in full, scored across candidate methods, and is the document the “linked method selection risk assessment” field above should point to.
5. Positive control strategy
Demonstrate the method actually detects a defect at or below the MALL, using physical defect standards sized to that limit, for example a laser-drilled hole at a defined diameter or an intentionally under-seated or under-torqued closure. A positive control run with no result showing detection at or below the MALL invalidates the negative results in the same study.
Laser-drilled hole standards used across the industry commonly cluster in roughly the 2 to 20 micron range, with 5 and 10 micron holes the most common workhorse sizes; treat that as a description of common practice, not a certified figure to copy in without a basis. The actual sizes entered below must come from the vendor’s certificate for the specific lot used, chosen because they bracket this product’s own MALL from section 4, not because a round number looked defensible.
| Positive control type | Defect size / basis | Expected result | Actual result |
|---|---|---|---|
<<FILL: e.g. laser-drilled hole>> | <<FILL: at or below MALL>> | Detected (fail signal) | <<FILL>> |
<<FILL: e.g. under-crimped closure>> | <<FILL>> | Detected (fail signal) | <<FILL>> |
| Negative control (known-good unit) | N/A | Pass | <<FILL>> |
6. Sample matrix
Cross every container closure system in scope against every condition in scope; a method proven on one combination is not automatically proven on another fill volume, closure lot, or storage orientation.
| Container system | Condition | n | Rationale |
|---|---|---|---|
<<FILL>> | Initial (time zero) | <<FILL>> | Baseline integrity |
<<FILL>> | Stability, <<FILL: timepoint>> | <<FILL>> | Integrity across shelf life |
<<FILL>> | Post-shipping simulation | <<FILL>> | Integrity after transport stress |
<<FILL>> | Post-change (if applicable) | <<FILL>> | Confirms a closure, stopper, or torque change did not compromise the seal |
7. Acceptance criteria
| Criterion | Requirement |
|---|---|
| Positive controls | All positive control units show a detectable fail signal at or below the MALL. |
| Negative controls | All negative control units pass. |
| Test units | <<FILL: e.g. zero units exceed the MALL / signal threshold>> |
| System suitability | Instrument qualification and calibration current at time of test. |
A study does not pass on test-unit results alone; positive and negative controls must both behave as expected, or the run is invalid regardless of the test-unit outcome.
8. Lifecycle testing points
| Stage | CCIT activity |
|---|---|
| Development | Method feasibility screening against candidate container systems |
| Method validation | Full validation per USP <1207.1>/<1207.2> or <1207.3>, including sensitivity demonstration |
| Process validation / PPQ | CCIT on PPQ batches to confirm the commercial sealing process produces integral containers |
| Stability program | CCIT at each protocol timepoint, often in place of or alongside sterility testing, per ICH Q1A(R2) |
| Post-approval change | Re-verification after any change to the container, closure, sealing parameters, or supplier |
| Commercial / periodic monitoring | <<FILL: ongoing monitoring frequency, if applicable>> |
9. References
USP General Chapter <1207>, Package Integrity Evaluation, General Considerations. USP General Chapter <1207.1>, Package Integrity Testing in the Container-Closure System. USP General Chapter <1207.2>, Package Integrity Leak Test Technologies. USP General Chapter <1207.3>, Package Seal Quality Test Technologies. FDA guidance, “Container and Closure System Integrity Testing in Lieu of Sterility Testing as a Component of the Stability Protocol for Sterile Products” (February 2008). FDA draft guidance, “Container Closure Systems for Human Drugs and Biological Products” (August 14, 2026, docket FDA-2026-D-7957; comment period open through October 13, 2026, confirm status before citing). Once finalized, this replaces FDA’s May 1999 guidance, “Container Closure Systems for Packaging Human Drugs and Biologics,” and its 2002 companion questions-and-answers document; it sets CMC and quality-testing expectations for the container closure system itself and is a companion reference to the CCIT-specific guidance above, not a substitute for it. ICH Q1A(R2), Stability Testing of New Drug Substances and Products.
Confirm the current version and status of each reference before issue.
10. Revision history
| Version | Date | Author | Summary of change |
|---|---|---|---|
<<FILL: 1.0>> | <<FILL>> | <<FILL>> | Initial issue. |
11. Approvals
| Role | Name | Signature | Date |
|---|---|---|---|
| Author (Analytical / Packaging) | <<FILL>> | ||
| Reviewer (Stability / CMC) | <<FILL>> | ||
| Approver (QA) | <<FILL>> |
Filled specimen
Extract for an example lyophilized biologic in a glass vial with an elastomeric stopper and aluminum crimp seal. Company, product, and numbers are illustrative.
| Field | Entry |
|---|---|
| Product / container | Acme Therapeutics, ATX-101 lyophilized vial, 13 mm stopper, aluminum flip-off seal |
| Method | Headspace gas analysis (oxygen ingress), selected over dye ingress per the method selection risk assessment RA-CCIT-009 |
| MALL | 5 micrometers equivalent diameter, based on a microbial ingress risk model for this container class |
Positive controls used laser-drilled vials at 2 and 5 micrometer equivalent diameters; both were correctly detected as failing, confirming method sensitivity at or below the MALL. All 3-year stability timepoint test units (n=10) passed with no unit showing oxygen ingress above the validated threshold. One post-shipping simulation unit showed an elevated headspace oxygen reading; investigation traced it to a stopper seated slightly off-center during the simulated drop test rig loading, not a representative production defect, and the finding was documented with the deviation rationale rather than silently excluded.
The specimen shows the two things a reviewer checks hardest: the positive control actually demonstrating sensitivity at the stated limit, and an out-of-trend result investigated and explained rather than dropped from the dataset.
Common inspection findings this protocol prevents
- A probabilistic method (dye or microbial ingress) used by default with no documented rationale for why a deterministic method was not feasible.
- Positive controls sized well above the MALL, so the study cannot actually demonstrate the sensitivity it claims.
- A sample matrix that tests one container/condition combination and extrapolates to others with no bridging data.
- CCIT skipped at a stability timepoint with no documented justification.
- An out-of-trend result quietly excluded from the dataset instead of investigated.
How to adapt this protocol
- Set your document number, product, container system, and linked method selection risk assessment in the header.
- Derive your MALL in section 4 from an actual risk assessment, not an assumed round number.
- Set positive control defect sizes in section 5 at or below your MALL, and use defect types realistic for your closure system.
- Build the sample matrix in section 6 to cover every container system and condition combination you actually intend to claim integrity for.
- Confirm every USP chapter and guidance reference in section 9 against the current published version and status before issue.