How to use this document
Copy the template below into your quality system. Replace every <<FILL: ...>> placeholder with your company, system, and process specifics, then route it through your own document control, review, and approval. The filled specimen shows one worked example; adapt the numbers and scope to your operation and verify each cited regulation or standard against the current source before you rely on it.
This is a generic, originally worded starting point. It contains no confidential, proprietary, or employer material, it is drafted with AI assistance and reviewed, it is not legal or compliance advice, and adopting it does not by itself create or prove compliance. See the Disclaimer and Terms.
This is a ready-to-use log for bracketing every CCIT test session with a negative control and a positive control at or near the maximum allowable leakage limit (MALL), so a result on production, stability, or PPQ units is only trusted if the instrument demonstrably read both controls correctly on the same day. A full revalidation on a fixed calendar does not, by itself, catch a drift that starts between revalidations; this log is the evidence that it would be caught if it happened. Replace every <<FILL: ...>> placeholder with your own specifics. A worked filled specimen follows.
1. Purpose
This log confirms, at every session of CCIT testing, that the instrument and fixture in use still detect a certified defect at or near the validated MALL and correctly pass a known-integral unit, before any production, stability, or PPQ result generated in that session is relied upon.
2. Scope
3. Responsibilities
4. Field definitions
5. Log
6. Trend review
7. Escalation rule
A failed bracketing control at any point stops testing immediately. Every unit tested between the last passing bracketing point and the failure is suspect and is held pending investigation and, once the instrument is confirmed back in a qualified state, retesting; none are dispositioned on the strength of a session that failed its own suitability check. A positive control margin trending toward its acceptance edge over <<FILL: e.g. 3 consecutive sessions>>, even while individually passing, triggers a proactive instrument maintenance or recalibration review before an outright failure occurs.
8. References
USP General Chapter <1207>, Package Integrity Evaluation, General Considerations.
USP General Chapter <1207.1>, Package Integrity Testing in the Container-Closure System.
21 CFR 211.68, automatic, mechanical, and electronic equipment required to be routinely calibrated, inspected, or checked according to a written program, with records maintained.
See the paired article, building a container closure integrity program under USP <1207>, for the reasoning behind system suitability and how it differs from a full revalidation.
The paired CCIT result investigation and artifact decision plan for the decision sequence a failed or borderline bracketing result feeds into.
9. Revision history
Filled specimen
Extract for a vacuum decay CCIT instrument running routine stability and release testing on a lyophilized biologic vial. Company, product, and readings are illustrative.
Trend review: the positive control margin (the pressure-rise signal at the 5 micron defect relative to the acceptance threshold) had been narrowing across the three prior sessions before the 2026-09-09 failure, flagged at the preceding review as “drifting toward the acceptance edge” but still individually passing. The failure triggered an immediate stop; the chamber seal was found worn beyond its qualified tolerance on inspection. All units tested between 2026-09-02 session end and the 2026-09-09 failure were held and retested on a qualified instrument following seal replacement and a passing requalification bracket; none had been released commercially in the interim.
Common inspection findings this log prevents
- A CCIT method trusted on the strength of a calendar-based revalidation date alone, with no routine bracketing evidence that the instrument still performs between revalidations.
- A positive control set well above the MALL, so drift at the actual sensitivity boundary goes undetected while the control keeps passing.
- Units tested after a failed bracketing check dispositioned as passing because the production result itself looked fine, with no hold on units tested since the last passing check.
How to adapt this log
- Set the positive control defect size to a certified standard at or near the validated MALL, not an oversized hole chosen because it reads clean every time.
- Set the bracketing frequency in section 2 to match the session length and risk; a long in-line run needs more than a start-and-end check.
- Treat a failed bracketing control as an immediate stop, not a result to note and continue past.
- Review the trend in section 6 on a defined schedule, not only when a session fails outright.
