Independent and not affiliated with the FDA, MHRA, ISPE, PDA, or any agency. Get the appgoutham@madhadi.com
madhadi.comData Integrity & GxP Quality
Browse all topics -> Articles Templates & Procedures Learning paths GlossaryScenariosToolsRegulatory ReferencesLearning PathsTopics About Start here
Form Plug-and-play starting point CSV / CSA

Form: Per-System CSV/CSA Audit Worksheet

A plug-and-play worksheet for recording one system's self-audit findings during a CSV/CSA program review: identity, GAMP category, validation status, traceability sample result, supplier reliance, change control, and periodic review status, with a filled specimen.

Document type: Form

Read and copy the template below into your own quality system. It is a generic starting point for your own internal use, provided as is, with no warranty; see the Terms and License. Adopting it does not by itself create compliance.

This is a ready-to-use worksheet for recording the self-audit findings on one computerized system. Complete one worksheet per sampled system and attach it to the overall self-audit report. Replace every <<FILL: ...>> placeholder. A worked filled specimen follows.

Field definitions

FieldFormatRequiredWho enters
System name / IDTextYesAuditor
Criticality tierHigh / Medium / LowYesAuditor, from the inventory
GAMP 5 category1 / 3 / 4 / 5, per componentYesAuditor
Validation statusValidated / In validation / Gap identifiedYesAuditor
Traceability spot-check resultPass / Fail, with the requirement tracedYesAuditor
Supplier reliance conclusionWhat site testing is reduced, or “full site testing, no reliance”YesAuditor
Change control sample resultPass / Fail, with the change reviewedYesAuditor
Periodic review statusCurrent / Overdue, with last review dateYesAuditor
Findings raised (this system)List with priorityYesAuditor

Worksheet

System name / ID<<FILL>>
Criticality tier<<FILL>>
System owner<<FILL>>
GAMP 5 category (by component if mixed)<<FILL>>
Validation status<<FILL>>
Last validation / revalidation date<<FILL>>

Traceability spot-check

Requirement sampledTrace path (URS to evidence to result)Time takenResult
<<FILL>><<FILL>><<FILL>>Pass / Fail

Supplier reliance

Vendor / productAssessment on file?What site testing is reduced because of itConclusion defensible?
<<FILL>>Yes / No<<FILL>>Yes / No

Change control sample

Change reference sampledImpact assessment on file?Testing proportionate to change tier?Result
<<FILL>>Yes / NoYes / NoPass / Fail

Periodic review

Last review dateFrequency requiredCurrent or overdueDid the review sample the audit trail and reconcile the running version?
<<FILL>><<FILL>><<FILL>>Yes / No

Findings raised on this system

FindingPriorityRouted to
<<FILL>><<FILL>>Deviation / Tracked action / Recommendation

Instructions for use

  1. Complete one worksheet per system sampled in the audit cycle; do not combine multiple systems on a single worksheet.
  2. Perform the traceability spot-check live, at the system or in its documentation, not from memory of how it should work.
  3. For supplier reliance, insist on a stated conclusion (“full site testing, no reliance” is a legitimate answer); “documentation reviewed” alone is not a passing entry.
  4. Route every finding through the triage logic in the parent checklist: could this, found by an inspector today, support an objection.
  5. Attach completed worksheets to the overall self-audit report as the supporting evidence for its conclusions.

Acceptance criteria

  • Every sampled system in the audit scope has a completed worksheet.
  • The traceability spot-check was performed live and the time taken recorded.
  • Every finding on the worksheet is reflected in the overall self-audit report with a priority and a routing decision.

Retention

Retain completed worksheets for not less than <<FILL: retention period, aligned to the parent self-audit report>>, attached to or referenced from the self-audit report they support.


Filled specimen

System name / IDChromatography Data System, HPLC-07
Criticality tierHigh
System ownerQC Laboratory Manager
GAMP 5 category4 (configured); custom calculation macro rated 5
Validation statusValidated
Last validation / revalidation date2025-03-14, revalidated after CDS major version upgrade

Traceability spot-check

Requirement sampledTrace pathTime takenResult
URS-102, full audit trail on result changeURS-102 to TS-14 steps 1-6 to Pass result, RTM row confirmed6 minutesPass

Supplier reliance

Vendor / productAssessment on file?What site testing is reducedConclusion defensible?
CDS vendor, version 7.4 SR2YesVendor SDLC and unit-test evidence reviewed; site testing limited to configured calculations and site-specific reportsYes

Change control sample

Change reference sampledImpact assessment on file?Testing proportionate?Result
CC-2026-0088, custom calculation field added for a new assayYesYes, scripted test of the calculation plus regression on the affected reportPass

Periodic review

Last review dateFrequency requiredCurrent or overdueSampled audit trail and reconciled version?
2026-02-10AnnualCurrentYes, 20 entries sampled, version confirmed matching validated baseline

Findings raised on this system

FindingPriorityRouted to
NoneN/AN/A

This system passed every sampled area cleanly: a supplier reliance conclusion that actually states what is reduced, a change control record with proportionate testing, and a periodic review that did the substantive work rather than a paperwork pass. Worksheets like this one are what let the overall self-audit report state its conclusion with specific supporting evidence rather than a general impression.

Common inspection findings this worksheet surfaces

  • A traceability spot-check that cannot be completed quickly because no RTM ties the sampled requirement to evidence.
  • A supplier reliance line with no stated conclusion about what site testing is reduced.
  • A change control sample where the testing performed does not match the declared change tier.
  • A periodic review current on the calendar but with no audit trail sample or version reconciliation behind it.

How to adapt this worksheet

  1. Add fields specific to your technology (an AI/ML model version and performance-monitoring status, for example) where the system warrants it.
  2. Point the finding-routing column at your real deviation, tracked-action, and recommendation categories.
  3. Set your retention period to match your self-audit report retention.
Use madhadi.com as an app Full screen, works offline, one tap from your home screen.