How to use this document
Copy the template below into your quality system. Replace every <<FILL: ...>> placeholder with your company, system, and process specifics, then route it through your own document control, review, and approval. The filled specimen shows one worked example; adapt the numbers and scope to your operation and verify each cited regulation or standard against the current source before you rely on it.
This is a generic, originally worded starting point. It contains no confidential, proprietary, or employer material, it is drafted with AI assistance and reviewed, it is not legal or compliance advice, and adopting it does not by itself create or prove compliance. See the Disclaimer and Terms.
This is a ready-to-use risk assessment for justifying a process performance qualification (PPQ) batch count, particularly one below the traditional three-lot norm, so the rationale in the S.2.5 or P.3.5 narrative rests on a documented risk basis rather than an asserted conclusion. Replace every <<FILL: ...>> placeholder with your own specifics and route it through your normal document control, review, and approval. A worked filled specimen follows. Verify each cited reference against the current source before you rely on it.
1. Purpose
This assessment documents the risk basis for a PPQ campaign of <<FILL: number>> batches for <<FILL: product>>, so the batch-count rationale stated in the regulatory filing traces to a scored, evidenced risk register rather than convention or an unsupported assertion.
2. Scope
3. Responsibilities
4. Method and scoring scale
Score each identified process-understanding risk on severity (S), occurrence (O), and detectability (D), 1 to 5 each, and take the risk priority number (RPN = S x O x D). Severity reflects patient or product impact if an attribute behaves outside what the available batches demonstrated; occurrence reflects how likely that behavior is, given Stage 1 characterization data; detectability reflects how well the post-approval control strategy, including Stage 3 continued process verification, would catch it before it reached a patient. A risk scoring 4 or 5 on severity, or an RPN above <<FILL: threshold, e.g. 40>>, requires a named mitigation before the batch count is finalized.
5. Risk register: sources of unrepresented variability
Score every source of variability the available batch count does not directly demonstrate, not only the ones already flagged as concerns; an assumption that a source “probably doesn’t matter” is exactly where an unrepresented failure mode hides.
6. Basis for the proposed batch count
7. Mitigation actions
Every risk scoring above the threshold in section 4 gets a mitigation that raises detectability, most often through a strengthened Stage 3 monitoring commitment, since a lower batch count cannot itself be mitigated by more of the same limited data.
8. Residual risk acceptance
9. References
FDA guidance, “Process Validation: General Principles and Practices” (January 2011).
FDA guidance, “Chemistry, Manufacturing, and Controls Flexibilities for Developing Human Cellular and Gene Therapy Products for a Biologics License Application” (May 2026, docket FDA-2026-D-4692), where applicable to the product type.
ICH Q9(R1), Quality Risk Management.
Confirm the current version and applicability of each reference before issue; the 2026 flexibility guidance applies to human cellular and gene therapy BLAs specifically and should not be cited for a product type outside its stated scope.
10. Revision history
11. Approvals
Filled specimen
Extract for an example autologous cell therapy product with two available commercial-scale batches. Company and product are illustrative.
Basis for batch count: only two commercial-scale batches exist as of filing, reflecting the total apheresis-matched material processed at this scale to date; Stage 1 characterization across 8 development-scale runs showed viable cell dose and transduction efficiency within the same acceptance range across three different donor sources and two vector lots, supporting that donor and lot variability are represented in kind if not in full commercial-scale volume. The 2026 FDA CMC flexibility guidance for cellular and gene therapy BLAs was cited as applicable, since the product meets the guidance’s stated scope.
Mitigation: for the apheresis variability risk, owner Manufacturing Science, verified by an enhanced Stage 3 CPV sampling plan testing every commercial lot’s viable cell dose and transduction efficiency against tightened internal trending limits for the first 10 commercial lots, twice the routine post-validation frequency. Residual RPN after mitigation: 18, accepted by QA to support a two-batch PPQ campaign with the enhanced Stage 3 commitment written into the filing.
Common inspection findings this risk assessment prevents
- A batch count justified by asserting the guidance applies with no product-specific risk register behind it.
- Sources of variability not directly tested by the available batches left unscored, rather than scored and mitigated.
- A mitigation that repeats the same limited data rather than genuinely raising detectability, most often through strengthened post-approval monitoring.
- Residual risk accepted informally, with no named QA decision on record tied to the specific batch count.
How to adapt this risk assessment
- Set your document number, product, and the batch count actually under justification in the header.
- Confirm in section 2 whether an applicable flexibility guidance genuinely covers your product type before citing it; do not cite a cell and gene therapy guidance for a product outside that scope.
- Walk every plausible source of unrepresented variability in section 5, not only the ones already suspected.
- Tie every mitigation in section 7 to a Stage 3 commitment specific enough to write into the actual filing narrative.
- Confirm every reference in section 9 against the current published version and stated scope before issue.