7. You have failed to establish appropriate procedures to assure that computerized processing control systems and data storage systems used in the production and quality systems at Ansell, Inc. are secured and managed to assure the integrity of processes and data that could effect the conformance of the condoms to established specifications. Examples of such failure include the following:
a. You have failed to establish management approval procedures for software installed on PLC’s which control major process functions throughout the plant including compounding, condom dipping, and electronic testing.
b. You have failed to assure the retention and security of captured processing data from the compounding PLC in that no backup power supply was provided for the desktop computer used to capture, store and process the data.
d. The master programs for each PLC are not clearly named or otherwise related to the pertinent PLC’s, either as stored on the engineering computer hard drive or by any other listing, to assure they can be properly retrieved to evaluate system problems or to prepare updates. Ansell, Inc. had no established procedure to control the secure retention of these master programs, or to identify and retain all versions as updates are written.
8. You have failed to establish procedures to assure that computerized documents which form part of the device master record and/or the quality system record are prepared and approved as required by document control provisions of the Quality System Regulation at 21 CFR 820.40. Examples of such failure are as follows
a. Primary engineering drawings for manufacturing equipment used in condom production, and for the devices themselves are stored in AutoCAD form in a desktop computer. These drawings are not stored in approved hard copy, or otherwise approved form. The storage device was not protected either mechanically or by password control from unauthorized access and modification of the drawings.