Naga MounikaDrug Product · Validation · CMC
Menu
Working document

CDMO GMO Containment and Biosafety Risk Assessment

A plug-and-play risk assessment for confirming a viral vector or other GMO-based CDMO's containment classification, institutional biosafety review, and segregation posture fit the specific process and scale, with a filled specimen.

Document typeRisk Assessment
Topic areaCDMO Governance
LevelAdvanced
UpdatedSeptember 2026
How to use this document

Copy the template below into your quality system. Replace every <<FILL: ...>> placeholder with your company, system, and process specifics, then route it through your own document control, review, and approval. The filled specimen shows one worked example; adapt the numbers and scope to your operation and verify each cited regulation or standard against the current source before you rely on it.

This is a generic, originally worded starting point. It contains no confidential, proprietary, or employer material, it is drafted with AI assistance and reviewed, it is not legal or compliance advice, and adopting it does not by itself create or prove compliance. See the Disclaimer and Terms.

This is a ready-to-use risk assessment for confirming that a CDMO’s biosafety classification, institutional review, and containment and segregation posture actually fit the specific vector platform and scale in scope, rather than the modality in general. Replace every <<FILL: ...>> placeholder with your own specifics and route it through your normal document control, review, and approval. A worked filled specimen follows. Verify each cited reference against the current source before you rely on it.

Document control header

FieldEntry
Document titleGMO Containment and Biosafety Risk Assessment for <<FILL: CDMO / site>>
Document number<<FILL: e.g. CDMO-BS-2026-01>>
Version<<FILL>>
Effective date<<FILL>>
Vector platform / construct<<FILL: e.g. replication-incompetent AAV, lentiviral vector>>
Document owner<<FILL: e.g. Technical Operations / Biosafety lead>>

1. Purpose

This assessment confirms that <<FILL: CDMO / site>> holds a biosafety classification, institutional review, and containment and segregation posture appropriate to <<FILL: vector platform>> at <<FILL: intended manufacturing scale>>, and documents any gap and its disposition before the technical assessment closes.

2. Scope

DimensionDecision
Vector platform / construct assessed<<FILL>>
Manufacturing scale<<FILL>>
Site(s) covered<<FILL>>
Out of scope<<FILL: e.g. non-GMO drug product operations at the same site, assessed separately>>

3. Responsibilities

RoleResponsibility
Technical operations / MSAT leadLeads the assessment, confirms the containment classification claimed matches the actual construct and scale.
Regulatory / CMCConfirms the site holds the applicable environmental or contained-use authorization where required.
Quality AssuranceApproves the assessment and any documented risk acceptance.
CDMO biosafety contactSupplies the institutional biosafety review record and containment procedures for the specific process.

4. Methodology

Score each factor below against direct, cited evidence, a copy of the institutional review record, the containment procedure, or the authorization certificate, not a verbal assurance. A factor with no evidence behind it is scored as a gap, not as passing.

5. Biosafety classification and institutional review

FactorCDMO’s stated positionEvidence reviewedGap?
Biosafety classification claimed for this specific vector platform (e.g. risk group, containment level)<<FILL>><<FILL>><<FILL: Yes/No>>
Institutional biosafety committee, or equivalent internal governance, has reviewed this specific process at this scale (not the modality in general)<<FILL>><<FILL>><<FILL>>
Reference framework used to justify containment level (e.g. site’s own risk assessment vs. a borrowed research-scale determination)<<FILL>><<FILL>><<FILL>>

6. Regulatory contained-use authorization (EU sites)

FactorCDMO’s stated positionEvidence reviewedGap?
Site holds the applicable environmental or contained-use authorization for this vector platform and scale<<FILL>><<FILL>><<FILL>>
Authorization scope matches the actual construct in use, not a related but different one<<FILL>><<FILL>><<FILL>>

7. Segregation and waste inactivation

FactorCDMO’s stated positionEvidence reviewedGap?
Segregation from non-GMO manufacturing on a shared, multi-product site<<FILL>><<FILL>><<FILL>>
Documented, process-specific waste-inactivation procedure (not a general statement that biosafety is handled)<<FILL>><<FILL>><<FILL>>

8. Findings and disposition

GapScope-critical?DispositionOwnerTarget date
<<FILL>><<FILL: Yes/No>><<FILL: remediate before first GMP batch / documented QA risk acceptance / rule site out>><<FILL>><<FILL>>

9. Residual risk statement

<<FILL: state plainly whether the residual risk after all dispositions above is acceptable to proceed, and what would change that conclusion (e.g. a scale change, a new construct)>>

10. References

NIH Guidelines for Research Involving Recombinant or Synthetic Nucleic Acid Molecules. EU contained-use directive framework for genetically modified micro-organisms. ICH Q9(R1), Quality Risk Management.

Confirm the current version of each reference before issue.

11. Revision history

VersionDateAuthorSummary of change
<<FILL: 1.0>><<FILL>><<FILL>>Initial issue.

12. Approvals

RoleNameSignatureDate
Author (Technical Operations / MSAT)<<FILL>>
Reviewer (Regulatory / CMC)<<FILL>>
Approver (QA)<<FILL>>

Filled specimen

Extract for an example lentiviral vector CDMO assessment. Company, site, and specifics are illustrative.

FactorCDMO’s stated positionEvidence reviewedGap?
Biosafety classificationClaims Biosafety Level 2 containment for the lentiviral suiteSite’s own written risk assessment for the specific construct and scale, dated within the last 12 monthsNo
Institutional biosafety reviewClaims review “at the modality level”No process-specific or scale-specific review record produced on requestYes
Contained-use authorization (site is in the EU)Claims authorization is “in progress”No certificate produced; authorization does not yet cover the intended commercial scaleYes
Segregation from non-GMO suitesDedicated suite, physically separated with its own air handlingFacility drawing and air-handling qualification record reviewedNo

Finding: institutional biosafety review and the EU contained-use authorization are both scoped to the modality generally, not to this construct at this scale. Disposition: require a process-specific and scale-specific biosafety committee review and a copy of the pending contained-use authorization before the first GMP batch; owner CDMO biosafety contact, target date set 60 days ahead of the planned engineering run. Residual risk: not acceptable to proceed to PPQ until both close; acceptable to proceed with early engineering activities under the site’s existing BSL-2 containment practice while remediation is tracked.

Common inspection findings this assessment prevents

  • A biosafety classification claimed at the modality level with no process-specific or scale-specific institutional review behind it.
  • A contained-use authorization assumed to cover a construct or scale it was never actually issued for.
  • Segregation described as “handled” with no documented, traceable waste-inactivation procedure.
  • A gap identified during diligence but never routed to a named owner with a target date.

How to adapt this assessment

  1. Set your document number, vector platform, and scale in the header.
  2. Populate sections 5 through 7 from direct evidence, a copy of the review record or authorization, not a verbal claim.
  3. Score every factor with no evidence as a gap, and route every gap through section 8 with a real owner and date.
  4. State the residual risk conclusion in section 9 in language a reviewer can evaluate independently, and set a trigger for reassessment if scale or construct changes.
Add this site to your home screen Full screen, works offline, one tap from your home screen.