つくり手から学ぶ。 Learn from inside the build.
AskDonaのチームメンバーが、いまつくっているもの・開発しているものについて語る社内セッションのアーカイブ。機能やプロダクトの中身を、つくり手の視点からわかりやすく解説します。 An archive of internal show & tell sessions from the AskDona team — each one a teammate walking through what they're working on or shipping right now, so you get a closer look at how features and products actually come together.
Browse guides and checklists 01 · ウィジェット 01 · Widget NEW! NEW!
AskDona 生成AIチャットボット AskDona's Gen AI Chatbot
1行の <script> タグで任意のサイトに導入。出典付き回答・多言語対応・3段階のレスポンス深度を、ブランドカラーで。 Drop the AskDona chat widget on any site in one <script> tag — sourced answers, multilingual, three response depths, in your brand color.
- Embedスクリプトの貼り付けとchatflowIdの設定 Drop in the embed script and set your chatflowId
- ブランド色 / 表示モード (floating / fullscreen) の指定 Configure brand color and display mode (floating / fullscreen)
- JP/EN UIと自動言語検出 / 出典の取り扱い JP/EN UI with auto language detection · citations
02 · ガイドツアー 02 · Guided Tour NEW! NEW!
AskDona ガイドツアー Tour of AskDona
AskDona の主要な機能と使い方を、インタラクティブなツアーで一気に体験。チャット、検索、フォルダ、一括処理までを画面で追いながら把握できます。 Experience AskDona's key features and how to use them in one interactive tour — follow chat, search, folders and bulk processing right on screen.
- チャットと出典付き回答の基本操作 Chat basics and sourced answers
- 検索・フォルダ・ナレッジの扱い方 Working with search, folders and knowledge
- 一括処理までの流れを画面で確認 Follow the flow through to bulk processing
Guides and checklists for regulated assessment
Medical Devices
Quality & Regulatory
Pharma & GMP
Risk & Security
AI & Automation
- QMSR Compliance Software: What Medical Device Makers Need After the FDA's 2026 Transition FDA's QMSR took effect Feb 2, 2026. Learn what changed, what inspectors now review, and the capabilities your QMSR compliance software needs.
- Design History File Software: How to Build an Inspection-Ready DHF Under QMSR QMSR dropped the term "DHF" but not the evidence. See what FDA inspectors check in design files in 2026 and what your DHF software must do.
- AI Vendor Risk Assessment: How to Review Third-Party Evidence at Scale in 2026 Third-party breaches reached 48% in Verizon's 2026 DBIR. Learn how AI vendor risk assessment reviews SOC 2 and ISO evidence, not just questionnaires.
- CAPA Management Software for Medical Devices: What Changed Under QMSR CAPA was FDA's top device 483 citation in FY2025. See how QMSR changed CAPA, what inspectors check in 2026, and what your CAPA software needs.
- AI Document Compliance Checker: How to Choose One You Can Defend to an Auditor GenAI use in professional firms nearly doubled to 40%. Learn how to pick an AI document compliance checker with cited evidence an auditor can verify.
- AI Batch Record Review: Faster Release Without Weaker Data Integrity 21 CFR 211.192 is still a top FDA citation. Learn how AI batch record review and review by exception speed release while meeting GMP expectations.
- Security Questionnaire Automation: How AI Answers Faster Without Overpromising Vendors face dozens of security questionnaires a month. Learn how AI questionnaire automation works, where it goes wrong, and how to keep answers accurate.
- How to Review a Vendor SOC 2 Report: A 10-Point Checklist for 2026 Over half of SOC reports in one benchmark had exceptions. Use this 10-point checklist to review vendor SOC 2 reports: opinion, scope, CUECs, carve-outs and more.
- FDA QMSR Checklist: An ISO 13485 Gap Analysis for U.S. Device Makers An ISO 13485 certificate won't exempt you from FDA inspection. Use this QMSR checklist to find the U.S.-specific gaps FDA inspects in 2026.
- EU MDR Technical Documentation Checklist: Annex II, Annex III and the GSPR Matrix Only 14 of 52 MDR notified bodies say most submissions are complete. Use this Annex II, Annex III and GSPR matrix checklist before you submit.
- ISO 14971 Risk Management Checklist: What FDA Inspectors Look for in 2026 Risk management is FDA's top QMSR inspection finding. Use this clause-by-clause ISO 14971 checklist to close the gaps inspectors cite.
- Design Verification vs Design Validation: Medical Device Checklists for 2026 Verification proves outputs meet inputs; validation proves the device meets user needs. See QMSR-era checklists and what changed in 2026.
- FDA 483 Response Checklist: How to Answer Observations in 15 Business Days Respond to an FDA 483 within 15 business days and FDA reviews it before deciding on a warning letter. Use this 2026 checklist and avoid common mistakes.
- GMP Data Integrity Checklist: ALCOA+, Audit Trails and 2026 Expectations 15% of 2025 FDA drug warning letters cited data integrity. Use this GMP data integrity checklist based on FDA, MHRA and the 2025 EU Annex 11 draft.
- 21 CFR Part 11 Audit Checklist: Electronic Records and Signatures in 2026 A clause-by-clause 21 CFR Part 11 audit checklist covering controls, audit trails and e-signatures, plus FDA's enforcement discretion and 2026 updates.
- Vendor Risk Assessment Checklist: A Third-Party Risk Template with Scoring Only 36% of third parties get assessed. Use this vendor risk assessment checklist, built on the interagency guidance and NIST CSF 2.0, with a scoring model.
- ISO 27001 Gap Analysis: Checklist and Software Guide for 2026 ISO 27001:2013 certificates expired Oct 31, 2025. Run an ISO 27001:2022 gap analysis with this clause and Annex A checklist and pick the right software.
- NIST CSF 2.0 Gap Assessment Template: Current vs Target Profiles Run a NIST CSF 2.0 gap assessment with Current and Target Profiles across all six functions, including Govern. Template, steps and 2026 updates.
- Medical Device Complaint Handling: FDA Requirements, MDR Reportability and a 2026 Checklist Complaint handling is a top-3 FDA finding under QMSR. Learn the § 820.35 record rules, MDR 30-day and 5-day timelines, and use this 2026 checklist.
- Medical Device Supplier Qualification and Audit Checklist Under QMSR Outsourcing and purchasing is FDA's #2 QMSR finding. Use this supplier qualification, audit and quality agreement checklist built for 2026 inspections.
- CAPA Effectiveness Check Template for Medical Device and GMP Teams CAPA was FDA's top device 483 citation in FY2025. Use this CAPA effectiveness check template to set criteria, measure results and close with evidence.
- GMP Deviation Investigation Checklist and Template for Pharma QA 21 CFR 211.192 was FDA's #2 drug citation in FY2025. Use this deviation investigation checklist and template to find real root causes, not "human error."
- Batch Release Checklist: Documentation Requirements in the US and EU What QA must confirm before releasing a batch under 21 CFR 211 and EU Annex 16. A practical batch release checklist plus 2026 trends in faster release.
- GMP Change Control Impact Assessment: A Practical Guide for Pharma Assess GMP changes for quality, validation and regulatory impact. Covers 21 CFR 211.100, 314.70 reporting categories, ICH Q10 and Q12, with a template.
- Medical Device Change Impact Assessment: When Do You Need a New 510(k)? Not evaluating changes is a possible OAI finding under QMSR. Learn how to assess device changes, decide on a new 510(k) and use PCCPs in 2026.
- ICH Q9(R1) Quality Risk Management Template: What Changed and How to Apply It ICH Q9(R1) tackles subjectivity, formality and drug shortages. Use this quality risk management template to apply the revision in 2026.
- Medical Device Post-Market Surveillance Checklist: FDA and EU MDR in 2026 One PMS checklist for FDA (Parts 803, 806, 822, 821) and EU MDR (Articles 83–86), with 2026 changes: AEMS, MDCG 2025-10 and the PSUR reform proposal.
- Design Traceability Matrix Template for Medical Devices (QMSR and Software) Build a design traceability matrix that links user needs, inputs, outputs, V&V and risk controls, aligned with QMSR and FDA's 2023 software guidance.
- Preventing Hallucinations in AI Compliance Assessments: Groundedness and RAG Evaluation Metrics Even RAG tools hallucinated in 17–34% of legal queries. Learn the groundedness and RAG metrics that keep AI compliance assessments trustworthy.
- Human-in-the-Loop Compliance AI: How Reliable Is LLM-as-a-Judge? LLM judges agree with humans about 80% of the time, but with known biases. Learn how to design human oversight for compliance AI in 2026.
- ISO 13485 Internal Audit Checklist: QMSR-Ready for 2026 FDA can now read your internal audit reports. Use this QMSR-ready ISO 13485 internal audit checklist, aligned with FDA's six inspection areas and ISO 19011:2026.
- Medical Device Manufacturing in 2026: Regulations, Tariffs and Automation QMSR is in force, tariffs are reshaping supply chains and automation is rising. What US medical device manufacturers need to know in 2026.
- Medical Device Compliance in 2026: An FDA and EU Regulatory Compliance Guide QMSR, new inspection rules, higher user fees and EU MDR reform: a practical 2026 guide to medical device regulatory compliance across the lifecycle.
- Medical Device Regulations Explained: FDA Classes, Pathways and 2026 Updates How US medical device regulations work in 2026: device classes, 510(k), De Novo and PMA, the key 21 CFR parts, FY2027 fees and EU MDR updates.
- Medical Device Automation: Validating Automated Manufacturing and QA Under QMSR Automating medical device production or QA? How QMSR and FDA's 2026 CSA guidance shape validation, plus a step-by-step automation roadmap.
- Medical Device Compliance Software: A 2026 Buyer's Guide to Quality Management Tools eQMS, RIM, PLM or AI document review? How to choose medical device compliance and quality management software that fits QMSR and FDA's CSA guidance.
- Medical Device Certification Explained: FDA Clearance, CE Marking and ISO 13485 FDA doesn't certify devices. Learn what FDA clearance, CE marking, ISO 13485 and MDSAP certification really mean, and which ones you need in 2026.
- Medical Device Regulatory Affairs in 2026: Role, Responsibilities and Trends What medical device regulatory affairs teams do, the skills they need, and the 2026 trends reshaping the role: eSTAR, FDA's AI tools, MDUFA VI and EUDAMED.
- Medical Device Audits in 2026: Internal, Supplier, Notified Body and MDSAP Internal, supplier, notified body and MDSAP audits explained, plus what QMSR and ISO 19011:2026 change for medical device audit programs.
- FDA Medical Device Inspections in 2026: What to Expect Under QMSR How FDA inspects device makers under QMSR and CP 7382.850: inspection types, the six QMS areas, 483s, remote assessments and a readiness checklist.
- Medical Device QMS: How to Build a Quality Management System for QMSR and ISO 13485 What a medical device QMS must contain under QMSR and ISO 13485, the FDA-specific additions, and a step-by-step plan to build or update yours in 2026.
- Medical Device Risk Management in 2026: Beyond the ISO 14971 File Risk management is the top QMSR inspection finding. How to connect ISO 14971, QMS, cybersecurity, AI and supplier risk across the device lifecycle.
- Medical Device AI in 2026: FDA Rules, the EU AI Act and What Comes Next FDA's AI device list, PCCPs, draft lifecycle guidance, LLM tagging and the EU AI Act's 2028 deadline: what medical device AI makers need to know now.
- Medical Device Quality Assurance: Roles, Processes and KPIs for 2026 What medical device quality assurance covers under QMSR, how it differs from QC, the processes QA owns and the KPIs that show your QA program works.
- Medical Device Quality System: From the QS Regulation to QMSR FDA's Quality System Regulation became the QMSR on Feb 2, 2026. What changed, what stayed, how DHF, DMR and DHR map to ISO 13485, and how to finish the switch.
- Medical Device Documentation and Documentation Review: A 2026 Guide What documentation FDA and the EU MDR require for medical devices in 2026, and a practical method and checklist for reviewing it before auditors do.
- Medical Device Regulatory Software: RIM, Submissions and Regulatory Intelligence Tools RIM, submission, regulatory intelligence and AI assessment tools for medical device RA teams: what they do, what changed in 2026 and how to choose.
- Medical Device Assessment: Conformity Assessment in the US and EU (2026) How medical devices are assessed in 2026: EU MDR conformity routes, FDA premarket review, ASCA testing, ISO 10993-1:2025 and how to get assessment-ready.
- ISO 13485 in 2026: Requirements, QMSR Alignment and Compliance Guide ISO 13485:2016 was reconfirmed in 2025 and is now part of FDA's QMSR. What the standard requires, how certification works and how to stay compliant.
- EU MDR in 2026: Deadlines, the Simplification Proposal and a Compliance Roadmap EU MDR status in 2026: transition deadlines, mandatory EUDAMED, the Commission's simplification proposal and a compliance roadmap for US device makers.
- FDA Form 483 Explained: What It Means, Top Observations and How to Respond What an FDA Form 483 means, the most-cited observations for drugs and devices in FY2025, early QMSR findings, and how to write a response within 15 business days.
- FDA Warning Letters in 2026: Trends, Triggers and How to Respond FDA warning letters surged in 2025 and 2026 brought the first AI and QMSR letters. What triggers a warning letter, how to respond and how to get a close-out.
- FDA QMSR Explained: What Changed, What Inspectors Are Finding and What to Do Now Eight months into FDA's QMSR: how it differs from the QS regulation, how inspections changed, the top early findings and first warning letters, and what to do now.
- Regulatory Compliance AI and Automation: What Works, What Regulators Expect and How to Start How AI and automation are used in regulatory compliance in 2026, what FDA and EU regulators now expect, the risks to manage and a practical framework to start.
- FDA Compliance in 2026: Regulatory Requirements, Enforcement Trends and Compliance Software What FDA compliance requires by product type, the 2025-2026 enforcement trends, how to build a compliance program, and what FDA compliance software should do.
- FDA Inspections in 2026: Types, What to Expect and an Inspection Readiness Plan FDA inspections are more frequent, more unannounced and more data-driven. Inspection types, what happens on site, outcomes and a practical readiness plan.
- CE Marking for Medical Devices: A Step-by-Step Guide for US Manufacturers (2026) How US manufacturers CE mark medical devices under the EU MDR in 2026: classification, conformity routes, notified bodies, technical documentation and EUDAMED.
- ISO 13485 Audit and Gap Analysis: Certification Audits, MDSAP and a Clause-by-Clause Checklist How ISO 13485 certification and MDSAP audits work, how to run a gap analysis now that FDA's QMSR cites ISO 13485, and a clause-by-clause checklist.
- EU MDR Technical Documentation: Annex II and III Explained, With Common Notified Body Findings What EU MDR technical documentation must contain under Annexes II and III, the GSPR checklist, and the issues notified bodies most often cite in 2026.
- Medical Device Regulatory Assessment: How to Determine Classification, Pathway and Readiness for the US and EU How to run a medical device regulatory assessment: FDA classification and 510(k), De Novo or PMA, EU MDR class and conformity route, and readiness for 2026 rules.
- What Is CAPA? Corrective and Preventive Action Explained for 2026 CAPA explained: what corrective and preventive action means, what FDA, ICH Q10, ISO 13485 and ISO 9001 require, why CAPA tops FDA citations, and how to run it.
- CAPA Management and CAPA Software: Automation, AI and What to Look For in 2026 How to manage CAPA well and what CAPA software should do in 2026: KPIs, automation, AI with human review, validation under FDA CSA, and a selection checklist.
- CAPA Root Cause Analysis and Investigations: Methods, Pitfalls and What FDA Expects How to run a CAPA investigation that finds the real root cause: methods like 5 Whys, fishbone and FMEA, the human error trap, and what FDA warning letters reveal.
- CAPA Audit and Effectiveness Checks: How to Prove Your CAPA System Works How auditors and FDA investigators evaluate a CAPA system, how to design effectiveness checks that prove actions worked, and a CAPA audit checklist.
- Post-Market Surveillance for Medical Devices: FDA and EU MDR Requirements in 2026 What post-market surveillance requires under FDA rules and the EU MDR in 2026: MDR reporting, 522 studies, recalls, PMS plans, PSURs, AEMS and EUDAMED.
- Complaint Management Systems and Software for Regulated Companies: Requirements, AI and Selection What complaint management requires in FDA-regulated industries, what complaint handling software should do, how AI can help triage, and a selection checklist.
- Adverse Event Reporting in the US: FDA Requirements for Drugs and Devices in 2026 FDA adverse event reporting explained: device MDR 30-day and 5-day reports, drug 15-day Alert reports, MedWatch forms, eMDR and the new AEMS system.
- Medical Device Vigilance Under the EU MDR: Serious Incidents, Trend Reports and FSCAs in 2026 EU MDR vigilance for device makers: 2, 10 and 15-day serious incident deadlines, trend reporting, FSCAs, the new MIR form and EUDAMED status in 2026.
- Medical Device Complaint Investigation, Assessment and Trending: A Practical Guide for 2026 How device makers should assess, investigate and trend complaints under the QMSR and ISO 13485, what FDA warning letters reveal, and a practical checklist.
- Design History File (DHF) Under the QMSR: What It Is, What Changed and How to Review It What a design history file is, what changed when the QMSR replaced it with ISO 13485's design and development file, and how to review and audit one.
- Requirements Traceability for Medical Devices: Building a Traceability Matrix Auditors Trust Build requirements traceability that FDA and auditors trust: what ISO 13485, FDA software guidance and IEC 62304 expect, matrix structure and AI checks.
- Design Verification for Medical Devices: Requirements, Methods and Common FDA Findings What design verification requires under the QMSR and ISO 13485, how to plan tests and justify sample sizes, and the verification gaps FDA cites.
- Medical Device Design Control in 2026: Requirements After the QMSR and How to Stay Compliant Design control after the QMSR: what ISO 13485 clause 7.3 requires, how FDA inspects design, risk links, agile development and a compliance checklist.
- Design Validation for Medical Devices: User Needs, Human Factors and Clinical Evidence Design validation under the QMSR and ISO 13485: FDA's May 2026 human factors guidance, clinical and software evidence, and common FDA findings.
- Design Control Software and DHF Automation: What to Automate and How to Validate It What design control software should automate under the QMSR, where AI helps, how to validate tools under FDA's CSA guidance, and a selection checklist.
- Medical Device Technical Documentation Review: How to Review a Technical File Before FDA or a Notified Body Does How to review medical device technical documentation before an FDA eSTAR or notified body review: what reviewers check, common gaps and a checklist.
- Design Control Audits and Design Documentation Review: A Practical Guide for Medical Device Teams How FDA, MDSAP and internal auditors audit design controls in 2026, how to run design documentation reviews, and a design control audit checklist.
- What Is GMP? Good Manufacturing Practice Explained for 2026 GMP explained: what current good manufacturing practice means, which rules apply, the citations FDA issues most, and what changed in 2025 and 2026.
- Pharmaceutical Manufacturing in 2026: Onshoring, Advanced Manufacturing and What FDA Expects Pharmaceutical manufacturing in 2026: Section 232 tariffs, FDA PreCheck, advanced manufacturing designations and the GMP work new US plants need.
- GxP Compliance: What GMP, GLP, GCP and GDP Require and How to Stay Compliant What GxP compliance means across GMP, GLP, GCP and GDP, the 2025-2026 updates (ICH E6(R3), EU Annex 11 and 22, DSCSA) and a compliance checklist.
- GMP Compliance and GMP Inspections: What FDA Investigators Look For in Drug Facilities How FDA inspects drug and API facilities for GMP compliance: the six-system model, full vs abbreviated inspections, top 2025 citations and a checklist.
- GMP and GxP Software: Validation, Data Integrity and Automation in 2026 What GMP and GxP software must do, how to validate it for FDA and the draft EU Annex 11, data integrity controls, and where automation and AI fit.
- GMP Audits: How to Plan and Run Internal, Supplier and Mock Inspection Audits How to plan and run GMP audits: self-inspections, supplier and CMO audits, and mock FDA inspections, with the six-system scope and a checklist.
- Pharmaceutical Regulatory Compliance in 2026: Obligations, Enforcement Trends and Compliance Software US pharma compliance obligations in 2026, from GMP and safety reporting to advertising and Open Payments, enforcement trends and compliance software.
- Pharmaceutical Quality Assurance: The Quality Unit's Role, Responsibilities and Common Failures What pharmaceutical quality assurance does, the quality unit's duties under 21 CFR 211.22, how QA differs from QC, and why FDA cites QA failures most.
- Pharmaceutical QMS: Building a Pharmaceutical Quality System on ICH Q10, and Choosing QMS Software How to build a pharmaceutical quality system on ICH Q10, what FDA's QMM program measures, and what to look for in pharma quality management software.
- GMP Documentation: Records, ALCOA+ and the Documentation Errors FDA Cites Most What GMP documentation drug makers must keep under 21 CFR 211, ALCOA+ data integrity, the 2025 EU Chapter 4 draft and the documentation errors FDA cites.
- AI in Pharmaceutical Quality: Use Cases, Regulator Expectations and Quality Assessment in 2026 How AI is used in pharmaceutical quality assessment, what FDA's credibility framework, FDA-EMA principles and EU Annex 22 expect, and where humans decide.
- Electronic Batch Records (EBR): What They Are, What Regulators Expect and How to Implement Them What an electronic batch record is, what 21 CFR 211 and Part 11 require, how EBR review works, and how to plan an EBR rollout that inspectors accept.
- Batch Manufacturing Records: Required Contents, Structure and Common Errors What a batch manufacturing record must contain under 21 CFR 211 and EU GMP Chapter 4, master vs executed records, and the errors inspectors cite most.
- Batch Release and Batch Disposition: The Process, Who Decides and What Can Go Wrong How batch release works under 21 CFR 211 and EU Annex 16: who decides, the evidence a batch quality assessment needs, disposition options and failures.
- Review by Exception: How Exception-Based Batch Record Review Works and When It Is Acceptable What review by exception means for batch records, the prerequisites regulators expect, how to justify it in validation, and mistakes that cause findings.
- Batch Record Review: A GMP Guide to Reviewing Batch Documentation for Compliance How to review batch records under 21 CFR 211.192, ICH Q7 and EU GMP: who reviews, what to check, deviations and audit trails, and the gaps FDA cites.
- Batch Release Software and Batch Record Review Automation: What to Automate and How to Validate It Buyer's guide to batch release and batch record review software: what to automate, Part 11 and Annex 11 controls, CSA validation and vendor questions.
- AI for Batch Record Review and Batch Release: What It Can Do and Where Humans Must Decide How AI can support batch record review and release, what draft EU Annex 22 and FDA expect, the April 2026 AI warning letter, and where humans must decide.
- Process Validation: The Three Stages, What FDA and EU Expect, and Common Gaps What process validation means under FDA's lifecycle guidance and EU Annex 15, what each stage requires, and the gaps FDA cited in 2026 warning letters.
- Change Control in GMP: Process, Requirements and How to Make It Work How GMP change control works: the steps, what 21 CFR 211, ICH Q10, EU Annex 15 and ISO 13485 require, reporting categories and mistakes inspectors cite.
- Change Impact Assessment: How to Assess a GMP Change Before You Approve It How to assess the impact of a GMP change: what to cover, how ICH Q9(R1) shapes the risk assessment, revalidation and filing decisions, with a template.
- Computer System Validation (CSV) in 2026: From GAMP 5 to FDA's Computer Software Assurance What computer system validation requires under 21 CFR 211.68, Part 11 and EU Annex 11, how GAMP 5 and FDA's 2025 CSA guidance change it, and FDA findings.
- Change Control Software: What It Must Do, How to Validate It and How to Choose What GMP change control software must do, the Part 11 and Annex 11 controls it needs, risk-based validation and the questions to ask vendors.
- Regulatory Affairs in Life Sciences: What the Function Does and How It Is Changing What regulatory affairs does in pharma and medical devices, its core lifecycle responsibilities, and how eCTD 4.0, eSTAR, EU reform and AI are changing it.
- Regulatory Compliance Management for Life Sciences: Building a System That Holds Up How life sciences companies manage regulatory compliance as a system: obligations registers, controls, monitoring, inspection readiness and evidence.
- Regulatory Change Management: How to Monitor and Act on Regulatory Changes How to monitor regulatory changes and act on them: sources, triage, impact assessment and tracking, with 2025-2026 examples from FDA, EMA and the EU.
- Regulatory Intelligence: Sources, Process, Software and the Role of AI What regulatory intelligence is, the three parts of a mature RI function, what to look for in RI software, and where AI helps and where it does not.
- RIM Software: Regulatory Information and Document Management Explained What regulatory information management (RIM) software does, how it differs from document management, why IDMP and eCTD 4.0 matter, and how to choose.
- Regulatory Submission Management and Automation: eCTD, Tools and What to Automate How regulatory submissions are planned, assembled and published: eCTD 4.0 and eSTAR timelines, submission software, what to automate and AI review.
- Regulatory Gap Analysis and Impact Assessment: A Practical Method for Life Sciences How to run a regulatory gap analysis in life sciences, with QMSR, EU reform and Annex 11 examples, how it differs from a government RIA, and a template.
- Supplier Performance Management: Metrics, Scorecards and Reviews for Regulated Manufacturers How pharma and device makers monitor supplier performance: what regulators require, which KPIs matter, how to build a scorecard and when to act.
- Supplier Risk Assessment: Methods, Criteria and Software for Life Sciences How to assess supplier risk in pharma and devices: risk factors, scoring, EU excipient guidelines, FDA's DEG/EG expectations and supplier risk software.
- Supplier Quality Management: Requirements, Process and Software The supplier quality management lifecycle in pharma and devices: 21 CFR 211, ICH Q10, EU GMP and ISO 13485 requirements, FDA citations and SQM software.
- Supplier Evaluation and Qualification: A Step-by-Step Guide for GMP and Medical Devices A step-by-step supplier evaluation and qualification process for pharma and device makers: criteria, evidence, approval, requalification and FDA findings.
- Supplier Audits: Planning, Conducting and Following Up, With Software Options How to plan and run supplier audits in pharma and devices: risk-based frequency, scope, reports, follow-up, the QMSR change on audit reports, and software.
- Supplier Compliance and Document Review: What to Check and How Often What supplier compliance means in pharma and devices, which supplier documents to review, how to verify certificates of analysis and keep files current.
- Supplier Corrective Action Requests (SCAR): How Supplier CAPA Should Work How to issue and manage supplier corrective action requests in pharma and devices: when to raise a SCAR, what a good response holds and how to verify it.
- Supplier Assessment Automation and AI: What Can Be Automated in Supplier Quality What can be automated in supplier quality, where AI helps review supplier documents and spot risk signals, and the controls expected under draft Annex 22.
- What Is GRC? Governance, Risk and Compliance Explained What GRC means, how governance, risk and compliance fit together, the frameworks behind it, the 2026 drivers and how to build an evidence-based program.
- GRC Software and Compliance Management Software: What It Does and How to Choose What GRC and compliance management software does, which modules matter, what GRC automation can and cannot do, and what to ask before you buy in 2026.
- Enterprise Risk Management: Frameworks, Process and Software What enterprise risk management is, how COSO ERM and ISO 31000 compare, the ERM process step by step, rising 2026 risks and what ERM software should do.
- Third-Party Risk Management (TPRM): Lifecycle, Regulations and Assessments What third-party risk management is, the TPRM lifecycle in US banking guidance, what DORA, the SEC and DOJ expect, and how to assess third parties.
- Vendor Risk Assessment: Questionnaires, Evidence and Scoring How to run a vendor risk assessment that holds up: tiering, CAIQ questionnaires, reviewing SOC 2 reports, verifying answers against evidence and scoring.
- Vendor and Third-Party Due Diligence: What to Collect and Verify What vendor and third-party due diligence covers, the 14 factors in US interagency guidance, sanctions screening and how to verify vendor documents.
- TPRM Software and Third-Party Risk Automation: What to Automate and How to Choose What TPRM software does, which parts of third-party risk can be automated, where AI helps review vendor documents and what to ask before buying.
- AI Risk Assessment and AI GRC: Frameworks, Laws and Controls for 2026 How to run an AI risk assessment with NIST AI RMF and ISO/IEC 42001, what the EU AI Act delay, Colorado's law and DOJ expect in 2026, and AI in GRC.
- Cybersecurity Risk Assessment: A Step-by-Step Guide for 2026 How to run a cybersecurity risk assessment with NIST SP 800-30 and CSF 2.0: scope, assets, threats, likelihood and impact, control evidence and 2026 data.
- AI Security Assessment: How to Assess the Security of AI and LLM Systems How to run an AI security assessment in 2026: scope, the OWASP Top 10 for LLMs, NIST's adversarial ML taxonomy and draft Cyber AI Profile, and testing.
- NIST Assessment Guide: NIST 800-171 Self-Assessment, CMMC and Security Control Assessments Which NIST assessment you need: SP 800-171 self-assessments and CMMC (Phase 2 from November 10, 2026), SP 800-53A control assessments and evidence.
- ISO 27001 vs SOC 2 Assessment: Choosing a Security Compliance Assessment How ISO 27001 certification and SOC 2 examinations differ, what each involves, where FedRAMP fits, and how to prepare evidence once for several frameworks.
- Vendor Security Assessment: Process, Evidence and Software How to run a vendor security assessment in 2026: what to ask, which evidence to verify (SOC 2, ISO 27001, CMMC), assessing AI vendors and what to automate.
No articles match these filters.