How ICH E6(R3) Is Changing Risk-Based Quality Management in Clinical Trials

October 26, 2026

Clinical trials are becoming more complex.

More data sources. More technology. More decentralized and hybrid approaches. More stakeholders, vendors, and operational touchpoints.

At the same time, clinical trial teams are under increasing pressure to protect participants, maintain data integrity, and deliver reliable results without creating unnecessary operational burden.

This is where ICH E6(R3) Good Clinical Practice (GCP) marks an important shift.

Rather than treating quality as a set of activities performed primarily to demonstrate compliance, E6(R3) places greater emphasis on quality by design, critical-to-quality factors, risk proportionality, and proactive risk-based quality management.

For organizations already adopting Risk-Based Quality Management (RBQM), this represents more than a regulatory update. It reinforces a fundamental change in how clinical trial quality should be managed.

From Compliance-Focused Quality to Quality by Design

Traditional approaches to clinical trial quality have often relied heavily on predefined processes, extensive checks, monitoring activities, and corrective actions.

These activities remain important.

But E6(R3) encourages teams to think about quality much earlier.

Instead of asking:

“How do we detect and correct quality issues?”

the question increasingly becomes:

“How do we design the trial so that critical quality risks are identified and managed from the beginning?”

This is the essence of Quality by Design (QbD).

Quality is considered during trial planning and operational design—not added after problems emerge.

That means identifying the factors that are critical to protecting participants and ensuring reliable, interpretable trial results, and then designing processes and controls around those factors.

What Does E6(R3) Mean for RBQM?

ICH E6(R3) explicitly supports a proportionate and risk-based approach to quality management.

This is significant because not every risk has the same potential impact.

A minor operational issue should not necessarily receive the same level of attention as a risk that could affect participant safety, the reliability of critical data, or the interpretation of trial results.

RBQM provides the operational framework for putting this principle into practice.

Instead of applying identical oversight everywhere, teams can focus resources where they are most likely to have the greatest impact.

The approach can be viewed as:

Identify → Assess → Control → Monitor → Improve

This creates a continuous quality management lifecycle rather than a one-time quality assessment.

1. Identify Risks Earlier

The first step is understanding what could threaten critical-to-quality factors.

Potential risks can arise across:

  • Study design and protocol complexity
  • Patient recruitment and retention
  • Site performance
  • Data collection and data quality
  • Protocol deviations
  • Safety reporting
  • Vendor and service-provider activities
  • Investigational product management
  • Technology and data integrations

Modern clinical trials generate enormous amounts of operational and clinical data.

The challenge is no longer simply collecting information.

It is recognizing which signals matter.

KRIs, QTLs, data trends, monitoring findings, and cross-system analytics can help teams identify emerging risks before they become significant quality problems.

2. Assess Risk Based on Impact

Identifying a signal is only the beginning.

E6(R3) places emphasis on evaluating risks according to factors such as their likelihood, potential impact, detectability, and relevance to participant protection and the reliability of trial results.

This creates a more nuanced approach to quality management.

For example, a pattern of missing data at one site may deserve attention—but its significance depends on what data are missing, why they are missing, how frequently the issue occurs, and whether the missing information affects a critical endpoint or participant safety.

RBQM enables teams to move beyond simply counting issues.

The goal is to understand risk in context.

3. Control Risks Proportionately

Once a risk has been assessed, the next question is:

What action is appropriate?

E6(R3) emphasizes proportionality.

Higher-impact risks may require stronger mitigation, closer oversight, escalation, or corrective and preventive action.

Lower-impact risks may require monitoring without creating unnecessary intervention or burden.

This is an important departure from a one-size-fits-all approach.

Risk control can involve:

  • Targeted monitoring
  • Protocol or process adjustments
  • Site-level interventions
  • Additional training
  • Data review
  • CAPA
  • Vendor oversight
  • Escalation workflows
  • Updated risk thresholds

The objective is not to eliminate every possible deviation.

It is to focus quality efforts on the risks that matter most.

4. Monitor Continuously

Risk does not remain static throughout a clinical trial.

A site that appears low risk during study startup may develop enrollment, data-quality, or compliance issues later.

Similarly, a previously identified risk may decrease after an effective mitigation strategy is implemented.

This makes continuous monitoring critical.

RBQM allows teams to track KRIs, QTLs, trends, anomalies, and operational signals over time.

Instead of relying exclusively on periodic reviews, teams can develop a more dynamic understanding of study health.

The result is a shift from:

Periodic Quality Checks

to

Continuous Risk Visibility

5. Improve Based on What the Trial Teaches You

One of the most important characteristics of risk-based quality management is that it is iterative.

Every trial generates new information.

That information can reveal emerging risks, demonstrate that existing controls are ineffective, or show that certain controls are no longer necessary.

E6(R3) reinforces the importance of reviewing and adapting risk controls as new knowledge becomes available.

This creates a feedback loop:

Risk Signal → Assessment → Action → Monitoring → Learning → Improved Controls

Quality management therefore becomes an evolving process rather than a static plan.

Where Technology Fits In

A risk-based approach becomes increasingly difficult to execute manually as clinical trials become more complex.

Data may be distributed across EDC, CTMS, IWRS/RTSM, eTMF, ePRO/eCOA, safety systems, laboratories, imaging platforms, and other sources.

Without connected data, teams may struggle to see relationships between seemingly independent signals.

Technology can help bring these signals together.

AI-assisted analytics can help identify patterns and anomalies.

Dynamic risk scoring can help prioritize areas requiring attention.

Dashboards can provide centralized visibility.

Automated alerts and workflows can help route important signals to the right teams.

But technology should not replace clinical or operational judgment.

The goal is to give people better information so they can make better decisions.

What This Means for Sponsors and CROs

For sponsors and CROs, the practical implication of E6(R3) is not simply “implement RBQM.”

It is a broader shift in the quality mindset.

Teams need to consider:

Are our critical-to-quality factors clearly defined?

Are the most important risks identified early?

Are our controls proportionate to those risks?

Can we detect emerging signals quickly?

Can we demonstrate why particular oversight activities were prioritized?

Can we adapt our risk controls as the trial evolves?

These questions connect regulatory expectations with operational reality.

And they highlight why RBQM is becoming an increasingly important component of modern clinical trial management.

How Octalsoft Supports the E6(R3) Approach

Octalsoft RBQM is designed to support a more proactive, connected approach to clinical trial quality management.

By bringing together data and signals across the clinical trial ecosystem, Octalsoft helps teams gain greater visibility into emerging risks and prioritize the areas that require attention.

Key capabilities include:

  • KRI and QTL monitoring to track critical risk signals
  • AI-assisted analytics to identify trends, anomalies, and potential issues
  • Dynamic risk scoring to help prioritize risk areas
  • Centralized dashboards for study, site, and operational visibility
  • Automated alerts and workflows to support timely intervention
  • Risk-based oversight to focus resources where they matter most
  • Connected eClinical data across systems for a more complete view of study quality
  • Continuous monitoring and improvement throughout the trial lifecycle

The result is a shift from simply managing quality events to developing a more proactive understanding of where quality risks are emerging, how significant they are, and what action may be appropriate.

The Bigger Shift: From Monitoring Problems to Managing Risk

ICH E6(R3) does not make traditional quality practices irrelevant.

Monitoring, audits, quality control, documentation, CAPA, and compliance remain essential.

What is changing is how these activities are prioritized and connected.The future of clinical trial quality is not about doing more checks everywhere.

It is about understanding what matters most, identifying meaningful risks earlier, applying proportionate controls, and continuously learning from the data generated throughout the trial.

That is the core idea behind RBQM.

Identify the risk. Assess its significance. Control it proportionately. Monitor it continuously. Improve based on what you learn.

As clinical trials continue to evolve, this risk-based mindset can help organizations build quality into the trial from the start—while making oversight more focused, informed, and fit for purpose.

Ready to Take a More Proactive Approach to Clinical Trial Quality?

Discover how Octalsoft RBQM can help your teams identify emerging risks, prioritize critical signals, and strengthen quality oversight across the clinical trial lifecycle.

Pankti Verma

Pankti Verma

This piece was co-authored by Nishan Raj, Senior Content Writer at Octalsoft.

Pankti Verma

This piece was co-authored by Nishan Raj, Senior Content Writer at Octalsoft.
A well-known name in the ecosystem of eClinical software, especially EDC systems, Pankti Verma is Senior Technical Manager at Octalsoft. The perfect mixture of advanced technical skills and equally incredible managerial skills, Pankti is the blueprint when it comes to being the ideal hands-on tech leader. From designing the structure of hyper-modern modern EDCsystems to managing and implementing programs and then collaborating with development teams to ensure that the product being developed runs perfectly, Pankti leads Octalsoft’s EDC from the front.