← All courses

Awareness training · Good practice (GxP)

GMP Change Control Training: Plan, Assess and Close Changes Safely

Part of the Pharmaceutical GMP learning path → Step 2

GMP change control training is for the person holding a change request and wondering whether it is complete: has the impact on validation been assessed, does regulatory affairs need to see it, who has to approve it, and how will anyone know afterwards that the change worked? If you raise, assess, approve or implement changes in pharmaceutical manufacturing, or an auditor has just questioned your change records, this training course is written for you.

It takes one built example, replacing a tablet press at a manufacturer in Mumbai, through every step: what counts as a change, the request and its owner, impact assessment with quality risk management, regulatory filings in the US and EU, approval and the plan, validation, documents and training, the effectiveness review, and special cases such as temporary, emergency and supplier changes. US FDA and EU GMP references are given in one line where they apply.

GMP change control training teaches pharmaceutical staff how to manage planned changes to processes, equipment, materials, systems and documents: raise a change request, assess its impact on product quality and validation using quality risk management, check whether a regulatory filing is needed, approve and implement it with the right records, and review whether it achieved its aim.

Training a team? Get a quote for your organisation

Part of: Pharmaceutical GMP and GDP Training

Part of: GMP & Medical Devices

Secure payment by Stripe · for yourself or for your team

What you get

  • 10 video modules

    About 108 minutes, with captions. Watch at your own pace on any device.

  • Practice after every module

    Short questions check your understanding before you move on.

  • Final exam

    Multiple choice, with immediate retakes if you need them.

  • Built by experts

    Industry experts, domain specialist trainers and globally renowned auditors with 30+ years in ISO and GRC.

A certificate you can prove, and share

Verifiable certificate with a QR code anyone can scan, plus a digital badge to add to your LinkedIn profile.

See how verification works →

Standard and edition21 CFR 211.100 and 314.70; EU GMP Chapter 1, Annex 15; ICH Q9(R1), Q10

Last updated31 October 2026

Why GMP change control training matters: what FDA found

Changes made outside change control, or assessed too lightly, are a direct route to unsafe product and to warning letters. The cases in this course show three different ways it happens.

In October 2023 FDA issued a warning letter to an artificial tears manufacturer during an outbreak investigation with CDC affecting more than 80 patients, with 4 deaths; among the findings, a change to the bottle's inner cap plug had not been evaluated through change management. In September 2026 a warning letter described a formulation process changed without revalidation and outside change management, and FDA asked for an independent assessment of the whole change management system. In March 2019 a warning letter found that a change control had required a test to be reinstated on every batch if any batch failed, and when one did, the test was not reinstated.

Each failure was in the process around the change, not in the engineering of it.

Who this change control training is for

Change control involves more people than any other quality process, and each needs to know their part. The course suits you if you are:

  • A change owner raising requests for equipment, process, material or document changes
  • A QA approver deciding whether an assessment is complete enough to sign
  • A regulatory affairs specialist judging whether a change needs a filing first
  • An engineer, validation, QC or IT specialist assessing impact in your area
  • A supply chain or production manager whose changes keep stalling in review
  • Preparing for an inspection or audit that will sample your change records

What you will learn

You will learn a method you can apply to any change, from a new supplier to a software upgrade.

  • Recognise which changes need change control, and raise a clear change request
  • Assess the impact of a change on product, process, validation and documents
  • Use quality risk management to decide the depth of assessment
  • Identify when a change needs a regulatory filing before it is made
  • Approve, implement and close changes with the right records
  • Review whether a change achieved its aim without unintended effects

Course outline: 10 modules

Module 1, Why change control matters: three FDA findings, what change control is for, the company we follow and the course.

Module 2, What counts as a change: definition, scope, the main references, where changes hide and simpler routes for small changes.

Module 3, The change request: six questions every request answers, justification, the owner, first screening and success criteria.

Module 4, Impact assessment: where to look, ICH Q10 and Q9(R1) principles, a simple risk approach and side effects.

Module 5, Regulatory filings: when a change needs a filing, the US categories, the EU variations, ICH Q12 and gates.

Module 6, Approval and the plan: who approves, two approvals, ICH Q10 formality, the plan, gates and contingency.

Module 7, Making the change: validation, software, documents, training, the effective date, first batches and problems.

Module 8, After the change: closing, the effectiveness review, product and management reviews, and learning.

Module 9, Special cases: temporary and emergency changes, suppliers, contract makers, equipment and computerised systems.

Module 10, Your role, the whole method: measuring the system, roles, attitude, what is changing, the whole method and the exam.

Change control requirements in GMP explained

Every GMP framework expects planned changes to be evaluated, approved and reviewed before and after they take effect. In the US, 21 CFR 211.100(a) requires changes to written procedures to be drafted, reviewed and approved by the quality control unit, and 21 CFR 314.70 sets when an approved application needs a supplement or annual report; FDA's guidance on changes to an approved NDA or ANDA (Revision 1, April 2004) explains the categories. In the EU, Chapter 1 of the EU GMP Guide expects change management, and section 11 of Annex 15 (in operation since October 2015) sets out change control for qualified and validated systems.

EU variations follow Regulation (EC) No 1234/2008 as amended by Regulation (EU) 2024/1701, with new Commission Variations Guidelines applying from January 2026. ICH Q10 (June 2008) describes the change management system and ICH Q9(R1) (January 2023) the risk thinking behind its depth; ICH Q12 (November 2019) on established conditions is named so you know where it fits.

How the change control training course works

You can fit this training course around shifts and deadlines. It runs online as 10 on-demand video modules, about 2 hours of video in total, on a laptop, tablet or phone, and it remembers where you stopped. Each module ends with practice questions that show straight away whether the point has landed.

The course closes with a scenario-based multiple-choice final exam drawn from the course question bank. Complete the course and its assessed final exam (pass mark 70%, one retake included) and you receive a Sterling Academy Certificate of Completion in your name, ready to file with your training records. The main thread is change CC-MUM-2026-0231 at JKL Pharma, a built example: replacing a 15-year-old tablet press in Mumbai, followed from request to effectiveness review, with a temporary change during installation.

  • 10 on-demand video modules, about 2 hours of video
  • Practice questions at the end of every module
  • Scenario-based multiple-choice final exam, one retake included
  • Certificate of Completion in your name
  • Online, at your own pace, on any device

What you can do after the course

You will be able to handle your next change request with confidence, whichever role you play in it.

  • Decide whether a proposed change needs change control or a simpler route
  • Write a change request that answers the questions reviewers will ask
  • Run a proportionate impact assessment across product, validation, documents and training
  • Ask the right regulatory question before a change is made, not after
  • Plan implementation with gates, an effective date and first-batch checks
  • Close a change with an effectiveness review that shows it worked

Change control training for teams and organisations

Change control breaks down where departments meet: an engineer who did not ask QA, a QA approver who did not ask regulatory affairs. A company plan trains owners, assessors and approvers on the same method, so requests arrive complete and approvals move faster.

A client administrator adds people, assigns courses and follows progress through reports, so when an inspector or customer auditor asks who has been trained on what, the answer is ready. The organisation receives one invoice for the whole plan. Get a quote for your organisation and we will size the plan to your team.

Why learn with Sterling Academy

Sterling Academy courses are built by industry experts, domain specialist trainers and globally renowned auditors with 30+ years of experience in ISO and GRC.

Sterling Academy is the training arm of Sterling International Consulting, with 8,100+ client engagements in 60+ countries over 20+ years. Every course teaches the current edition of its standard or guidance: this course reflects 21 CFR Part 211 and 314.70 as currently published, EU Annex 15, the EU variations rules applying from January 2026, and ICH Q9(R1), Q10 and Q12.

Preview this course

Experience the learning
before you enrol.

Watch a sample from GMP Change Control Training before you enrol.

GMP Change Control TrainingSample

Inside the course

A clear path through the essentials.

10 modules, 10 practice checkpoints and a final exam. Video runtimes are approximate; allow additional time for the practice questions and the final exam. Modules marked optional can be skipped; the others are studied in any order.

Part 1What change control is and what counts as a changeApprox. 21 min

  1. Why change control matters11 min

    What GMP change control is and why it matters, shown through three FDA warning letters on unassessed and unvalidated changes.

    What this module covers

    Opens with a question about the smallest change at your site that could harm a patient, and a quick check on a change made this year. Covers three FDA cases: the October 2023 letter to Global Pharma Healthcare, where an artificial tears cap plug changed to one with a prehole without its impact being evaluated; the September 2026 letter to Bentley Laboratories over a rephased formulation made without revalidation; and Jubilant Generics, where a condition set in a 2017 change control was not followed after a batch failed assay. Draws out the common pattern, clears two myths, and introduces J-K-L Pharma's plan to replace the fifteen-year-old tablet press 3 in Mumbai, followed through the ten modules. It ends with a recap and three practice questions.

    What you will be able to do

    • Explain what change control exists to do at a GMP site
    • Recognise the common failures behind recent FDA findings
    • Describe the change followed through the course and how it is assessed

    Why it matters

    Knowing how small changes led to FDA findings helps you spot changes at your own site that bypass the system.

    Practice: Practice: Why change control matters · 3 questions

  2. What counts as a change11 min

    What counts as a change in GMP change control: FDA and EU requirements in brief, hidden changes, and like-for-like replacements.

    What this module covers

    Returns to the 2023 Global Pharma Healthcare letter, where FDA also asked the firm to review changes made outside its change management system. Defines change control as a formal system in which qualified people review proposed or actual changes that might affect the validated state, across materials, processes, equipment, premises and more. Covers the US and EU requirements in brief: changes evaluated before they are made, approved by the right people including quality, and checked afterwards. Shows where changes hide, in suppliers, software, settings and temporary fixes, a Tokyo tablet maker with editable recipe values, and when true like-for-like work, such as an identical feeder paddle, goes by a simpler route. Applies this to J-K-L's tablet press 3. It ends with a recap and three practice questions.

    What you will be able to do

    • Decide whether an activity is a change that needs change control
    • Identify changes hidden in suppliers, software and settings
    • Tell true like-for-like work from a change

    Why it matters

    Recognising every change, including those that start outside your site, is the first defence against unassessed risk.

    Practice: Practice: What counts as a change · 3 questions

Part 2Requesting a change and assessing its impactApprox. 33 min

  1. The change request11 min

    Writing a GMP change request: scope, technical justification, change owner, quality screening, classification and success criteria.

    What this module covers

    Starts with the 2026 Bentley Laboratories letter, where FDA asked for procedures that ensure changes are justified, reviewed and approved by the quality unit. Covers what a change request must state: what changes, why, where, when, who owns it and how big it is, with a technical justification giving the reason and expected benefit. Compares J-K-L Pharma's first draft with its second draft of change CC-0231, which keeps the new press and its weight control software in one record. Explains the single named owner, quality screening, registration and classification, assigning reviewers, and success criteria agreed before approval, such as tablet weight variation and rejects per batch. Shows a London packaging site's request form built around six questions. It ends with a recap and three practice questions.

    What you will be able to do

    • Write a change request that states scope and technical justification
    • Set measurable success criteria before a change is approved
    • Explain the roles of change owner, experts and quality

    Why it matters

    A clear request lets reviewers judge a change quickly and stops a vague description hiding a risk.

    Practice: Practice: The change request · 3 questions

  2. Impact assessment11 min

    GMP change control impact assessment with quality risk management under ICH Q9 and EU GMP Annex 15, including unintended consequences.

    What this module covers

    Returns to the artificial tears cap plug and the questions an impact assessment would have asked about sealing, sterility, the approved application and testing. Covers what an assessment looks at, as Annex 15 sets out: product, process, validation, cleaning, documents and people, systems and regulatory filings. Explains using quality risk management with effort and formality matched to the risk, as ICH Q9 revised in 2023 describes, and recording the reasoning, not just a score. Shows part of J-K-L Pharma's impact assessment for CC-0231, including a redesigned feeder housing with new internal corners found in the maker's documents. Ends the method with unintended consequences: default settings, shared equipment, downstream steps and data, and counting deviations caused by recent changes. It ends with a recap and three practice questions.

    What you will be able to do

    • Assess the impact of a change across product, process and systems
    • Match the depth of assessment to the risk, as ICH Q9 describes
    • Look for unintended consequences such as default settings

    Why it matters

    Finding all the effects of a change before it is made prevents the deviations that a weak assessment would miss.

    Practice: Practice: Impact assessment · 3 questions

  3. Regulatory filings11 min

    Regulatory filings in GMP change control: FDA 314.70 major, moderate and minor changes and EU variations Type IA, IB and II.

    What this module covers

    Opens with the question J-K-L's quality reviewer asked: does any approved application, in any market, describe the equipment, process or controls being changed? Explains that change control makes sure the filing question is asked and recorded for every change, while regulatory affairs answers it for each market and prepares any filing. Covers the US route with major, moderate and minor categories under 314.70, and the EU route with variations of Type IA, IB and II and extensions under the revised framework. Shows J-K-L's conclusion for the new press: minor for the US annual reports citing FDA's 2004 guidance, no EU variation, no Gulf filing, agreed with J-K-L Pharma Europe. Covers common filing mistakes and making a required filing a gate before first use. It ends with a recap and three practice questions.

    What you will be able to do

    • Make sure the filing question is asked and recorded for every change
    • Outline the US and EU filing categories for changes
    • Set a filing as a gate before first use where needed

    Why it matters

    Checking filing needs before first use stops a safe, validated change from being made before it is allowed.

    Practice: Practice: Regulatory filings · 3 questions

Part 3Approving and implementing the changeApprox. 22 min

  1. Approval and the plan10 min

    Approving a GMP change and building the implementation plan: approvers, quality unit approval, evidence, tasks, owners, dates and gates.

    What this module covers

    Starts with FDA's December 2019 letter to Health Pharma USA, whose quality unit lacked procedures for change control and shipped products before review. Covers who approves a change: the responsible functions, with quality assurance at the start and at the end, and how formality matches the stage, with ICH Q10 Table III calling for a formal system in commercial manufacturing. Explains approving the plan before work starts and reviewing supporting data before final approval. Shows J-K-L Pharma's implementation plan for the new press, built from its impact assessment, turning findings into tasks, owners, dates and gates, with a way back if the change fails. Ends with checking that approval, first use, qualification and training dates run in the right order. It ends with a recap and three practice questions.

    What you will be able to do

    • Identify who must approve a change and at which stages
    • Turn an impact assessment into a plan with tasks, owners and gates
    • Check that approval, first use and training dates are in order

    Why it matters

    A plan approved first and evidence approved last makes each signature on a change record mean something.

    Practice: Practice: Approval and the plan · 3 questions

  2. Making the change11 min

    Implementing a GMP change: qualification and validation, computerised system configuration, documents, training and the effective date.

    What this module covers

    Opens with FDA's finding that Bentley Laboratories did not revalidate after major process changes, did not follow its own validation master plan and retained no stability samples. Covers completing the qualification and validation set in the plan before first use, including software configuration. Shows what J-K-L's validation engineer found while testing the new weight control software: a lower alarm limit still at the maker's wider default, recorded as a failure, corrected, retested and protected by access controls and an audit trail. Explains drafting every affected document, training before the effective date, one clear effective date when the old way stops, and recording problems during implementation as deviations while the gate stays closed. It ends with a recap and three practice questions.

    What you will be able to do

    • Complete qualification and validation before first use
    • Set one effective date with documents and training ready
    • Handle a problem found during implementation as a deviation

    Why it matters

    Having everything ready before the effective date stops old and new documents or settings being used side by side.

    Practice: Practice: Making the change · 3 questions

Part 4Closing, special cases and your roleApprox. 32 min

  1. After the change10 min

    Closing a GMP change and the change effectiveness review, with links to the product quality review and management review.

    What this module covers

    Returns to the Jubilant case, where a change condition was never followed, and to FDA's 2019 and 2026 requests for provisions to determine change effectiveness. Covers closing a change only when every task's evidence is in place, commitments are tracked and quality gives final approval on the data. Explains the effectiveness review against agreed criteria, and shows J-K-L's six-month review of the new press: weight variation met, rejects not met at first until a feeder speed setting was corrected through a small change, and no new deviations. Shows how the result went into the MET500 product quality review, feeds management review and trends, and led J-K-L to add a standing question on alarm limits to its impact assessment form. It ends with a recap and three practice questions.

    What you will be able to do

    • Close a change only when evidence and commitments are complete
    • Run an effectiveness review against agreed criteria
    • Feed change results into the product quality review

    Why it matters

    Checking months later that a change did what it promised catches problems that a closed record would hide.

    Practice: Practice: After the change · 3 questions

  2. Special cases11 min

    Special cases in GMP change control: temporary and emergency changes, supplier and contract manufacturer changes, equipment and computerised systems.

    What this module covers

    Starts with the artificial tears cap plug as a supplied component changed without anyone at the site deciding it. Covers temporary changes with an end date and an assessment, as J-K-L used while the new press was installed, and emergency changes agreed with quality and assessed straight after. Works through a letter to J-K-L's purchasing team: the MET500 film coating supplier moving to a new factory in two weeks, and the steps to open a change control, request data, check the quality agreement's notice period and hold new lots. Explains contract manufacturer changes entering your own system, and equipment, premises, utilities and software changes, including configuration settings, limits, recipes, user roles and report templates. It ends with a recap and three practice questions.

    What you will be able to do

    • Control temporary and emergency changes with end dates and assessments
    • Bring supplier and contract manufacturer changes into your own system
    • Treat software settings and updates as changes to the validated state

    Why it matters

    Handling the special cases properly closes the routes by which changes most often slip around the system.

    Practice: Practice: Special cases · 3 questions

  3. Your role, the whole method11 min

    Your role in GMP change control, measuring the change control system with indicators, the whole method on one page, and the final exam.

    What this module covers

    Opens by setting the three FDA letters side by side, each asking for an independent assessment of the whole change management system. Covers measuring the system with indicators such as overdue, emergency and temporary changes and deviations caused by changes, and a Tokyo tablet maker that cleared a backlog of minor changes and improved its form. Works through a moment on a J-K-L line: an operator finds a setting that differs from the procedure after overnight maintenance, and must hold and report, not change it back alone. Explains each person's role, from noticing and reporting to owning, assessing, approving and deciding filings, what is changing, and J-K-L's press 3 change from start to end, then the final exam.

    What you will be able to do

    • Explain each person's role in noticing and reporting changes
    • Measure a change control system with practical indicators
    • Apply the whole change control method from request to review

    Why it matters

    Knowing your own part means changes are noticed and reported early, whatever your job on site.

    Practice: Practice: Your role, the whole method · 3 questions

Frequently asked questions

Your questions,
answered.

About GMP Change Control Training, its certificate and enrolment.

Ask Sterling
Is Sterling Academy a good choice for GMP training?

Yes. Sterling Academy's GMP courses are built by the Sterling consulting group, which has taken organisations to certification across 8,100+ client engagements in 60+ countries over 20+ years. They cover the awareness and specialist levels, always on the current edition, with practice questions that show the right answer. Each course ends with a final exam and a verifiable certificate that anyone can check online, plus a LinkedIn badge, and client administrators can show an auditor exactly who has been trained. You will understand what GMP asks of you, contribute to your organisation's implementation and audit readiness, and play your part with confidence when the auditor visits. Sterling Academy courses carry the same content as Sterling's classroom training, whose certificates are trusted and accepted by all major certification bodies, as evidence of training at client audits for over 20 years.

What is GMP change control training?

GMP change control training teaches staff how to manage planned changes in pharmaceutical manufacturing. It covers what counts as a change, writing the change request, impact assessment with quality risk management, regulatory filings, approval and implementation, validation, documents and training, and the effectiveness review after the change.

Who needs change control training?

Anyone who raises, assesses, approves or implements changes needs it. That includes change owners and approvers, QA and regulatory affairs staff, production, engineering, validation, QC, IT and supply chain staff, and managers in pharmaceutical, biotech and API manufacturing. Each role gets the questions it must answer.

Is change control training mandatory?

GMP requires staff to be trained in the tasks they perform, and change control is a required part of the quality system in both US and EU GMP. The rules do not name a particular course, so your site sets the training; this course gives the method behind your change procedure.

What is the difference between change control and deviation management?

Change control handles planned changes, assessed and approved before they are made. Deviation management handles unplanned departures after they happen. The two meet when a deviation's CAPA requires a change, which is why this course follows on from our GMP Deviation Management course.

When does a change need a regulatory filing?

A change needs a filing when it affects what is registered in the marketing application, and the category depends on its potential effect. Module 5 explains the US categories under 21 CFR 314.70 and the EU variation types, and shows how to make the regulatory assessment a gate before implementation.

How long does the GMP change control course take?

The course takes about 2 hours of video across 10 modules, plus practice questions and the final exam. You can complete it in one session or module by module alongside a live change, applying each step as you reach it.

Does the course cover computerised system and supplier changes?

Yes, Module 9 covers special cases: temporary and emergency changes, supplier and contract manufacturer changes, equipment changes and computerised systems. Module 7 also covers software validation, document updates and training as part of making a change, and Module 4 shows where to look when assessing the impact of any change.

Do I get a certificate for change control training?

Yes, you receive a Sterling Academy Certificate of Completion in your name when you complete the course and take the final multiple-choice exam. One retake is included if the first attempt does not reach the mark, and the certificate can be filed with your training records.

How much does GMP change control training cost?

The course costs US$19 per learner, including the 10 video modules, practice questions, the final exam and the certificate. For change owners and approvers across a site or group, contact us for a quote for a company plan for your organisation.

Can our change owners and approvers take this training course together?

Yes, a company plan is designed for that. A client administrator adds people, assigns the course, follows progress in reports and receives one invoice. Training everyone in the change chain on one method reduces the back-and-forth between owners, QA and regulatory affairs.

Your certificate

Prove what you learned.
Share it with confidence.

You will understand what GMP asks of you, contribute to your organisation's implementation and audit readiness, and play your part with confidence when the auditor visits. Your certificate can be verified online in seconds, so certification body auditors, employers and clients can confirm your training instantly.

Complete the course and its final exam and you receive a Sterling Academy Certificate of Completion, verifiable online by QR code, with a LinkedIn badge to share.

Pass mark
70%
Prerequisites
None

Sterling Academy courses carry the same content as Sterling's classroom training, whose certificates are trusted and accepted by all major certification bodies, as evidence of training at client audits for over 20 years.

Ask about course requirements

Your next step

Get consulting from Sterling

Expert and experienced consultants, 8,100+ client engagements in 60+ countries, from gap assessment to a system ready for its certification audit.

Talk to a Sterling consultant

Not sure which course?

Plan your next step
in learning.

Discuss your learning needs