This is a ready-to-use, criteria-scored risk assessment for two related decisions on a moist heat (steam) sterilization cycle: what periodic requalification interval is defensible, and whether a specific change to the sterilizer, load, container, or steam supply triggers revalidation outside that periodic cycle. It is specific to moist heat cycle behavior, F0 margin, cold-spot sensitivity to load change, steam-quality dependency, distinct from a generic equipment periodic-review schedule (see the equipment periodic review SOP for the general mechanics of scheduling and documenting any equipment’s periodic review) and from a dry-heat depyrogenation assessment (see the depyrogenation requalification triggers risk assessment for that different thermal process). Replace every <<FILL: ...>> placeholder with your own specifics, run the scoring with a cross-functional team, and route it through your normal document control, review, and approval. A worked filled specimen follows. Verify each cited reference against the current source before you rely on it. This content is educational reference, not regulatory advice.
Why this assessment exists
A moist heat PQ demonstrates, at a point in time, that a specific cycle delivers the required lethality to the slowest-heating location of a specific load. What keeps that demonstration meaningful over years of routine use is a documented, scored decision on two questions ISO 17665 expects the user to answer but does not itself fix a number for: how long the validated state can be trusted before re-challenge, and which changes are big enough to invalidate it before the next scheduled requalification. Left undocumented, both questions tend to default to “annually, because that is what we do for everything” and “like-for-like, because nobody wrote down what would make it not like-for-like.” This assessment gives both decisions a scored, reproducible basis specific to moist heat’s real failure modes: a denser load shifting the cold spot, a steam supply drifting in quality, a control system change touching the parameter that governs lethality.
Document control header
| Field | Entry |
|---|---|
| Assessment title | Moist Heat Requalification Interval and Revalidation Triggers, <<FILL: sterilizer / cycle name>> |
| Document number | <<FILL: RA-ID>> |
| Version / date | <<FILL>> |
| Feeds | <<FILL: sterilization cycle development and validation program SOP; cycle inventory; change control procedure>> |
| QRM method | Risk-factor scoring for interval-setting, paired with a change-trigger decision table |
| Team (cross-functional) | <<FILL: Sterility Assurance/Microbiology, Validation Engineering, Manufacturing, QA, Equipment/Facilities>> |
1. Scope
This assessment covers <<FILL: sterilizer asset ID and cycle name>>, qualified under PQ <<FILL: PQ report reference>> using the <<FILL: overkill / bioburden / hybrid>> approach. It sets the periodic requalification interval for that cycle and provides the scored decision logic for whether a specific future change requires revalidation before the next scheduled requalification. It does not repeat the PQ acceptance criteria themselves, which remain governed by the moist heat sterilization PQ protocol, and it does not replace a general computerized-system or facility change-control impact assessment where a change touches systems beyond the sterilization cycle itself.
2. Responsibilities
| Role | Responsibility |
|---|---|
| Sterility Assurance / Microbiology | Leads the assessment, scores biological and process-margin factors, confirms bioburden-linkage factors for bioburden/hybrid cycles |
| Validation / Equipment SME | Scores detectability and usage factors, proposes the interval and trigger thresholds |
| Manufacturing | Confirms routine load patterns, changeover frequency, and realistic usage between requalifications |
| Quality Assurance | Reviews scoring, approves the interval and trigger table, confirms it is inspection-ready |
3. Part A: Scoring scales for the periodic requalification interval
Score each factor 1 to 3, 3 being the highest risk (favoring a shorter interval). State the scales before scoring.
Patient severity (S), consequence if an undetected under-lethal cycle reached product:
| Score | Meaning |
|---|---|
| 1 | Overkill approach with a large log-reduction margin above the SAL target, or a bioburden cycle with a wide, well-characterized margin between the design F0 and the minimum required |
| 2 | Standard overkill margin, or a bioburden cycle with a moderate, monitored margin |
| 3 | Bioburden or hybrid cycle with a thin margin, a parenteral route with high dosing frequency, or a product where an under-sterilized unit carries elevated patient consequence (for example a directly implanted or intrathecal-route product) |
Detectability (D), how quickly routine controls would catch a drift before an under-lethal load reached disposition:
| Score | Meaning |
|---|---|
| 1 | Parametric release with continuous, validated physical monitoring of every parameter the F0 calculation depends on, plus routine BI monitoring retained as an independent check |
| 2 | Routine BI monitoring of every load is the primary release control, with physical parameters recorded but not independently gating release |
| 3 | Release relies on chamber-level physical parameters only, with BI monitoring only at periodic (not every-load) frequency, or a cold-spot proxy location rather than the true worst case |
Process margin (M), headroom between the validated minimum F0 and what routine cycles actually deliver at the cold spot:
| Score | Meaning |
|---|---|
| 1 | Routine trend data (physical F0 at the monitored cold-spot-proxy position, or periodic BI challenge results) shows a comfortable, consistent margin above the validated minimum, low run-to-run variability |
| 2 | Margin present but narrower, or some run-to-run variability observed in trending |
| 3 | Margin is thin, variability is notable, steam-quality trend data shows drift, or trend history is limited (new equipment or new load, limited operating history) |
Usage and stress factors (U), how hard the equipment and load pattern run between requalifications:
| Score | Meaning |
|---|---|
| 1 | Low duty cycle, stable load pattern and container/closure, infrequent changeover |
| 2 | Moderate duty cycle, occasional changeover between qualified load configurations within the validated envelope |
| 3 | High duty cycle, frequent changeover between load configurations, or a steam supply shared with other high-demand users that has shown quality variability |
4. Part A: Interval risk-scoring table (scoring the four factors above)
| Factor | Score (1-3) | Rationale | Evidence source |
|---|---|---|---|
| Patient severity (S) | <<FILL>> | <<FILL>> | <<FILL: approach and margin, route/dose data>> |
| Detectability (D) | <<FILL>> | <<FILL>> | <<FILL: release basis, monitoring configuration>> |
| Process margin (M) | <<FILL>> | <<FILL>> | <<FILL: routine F0/BI trend data, steam-quality trend>> |
| Usage and stress (U) | <<FILL>> | <<FILL>> | <<FILL: production schedule, changeover log, steam-supply sharing>> |
| Sum | <<FILL>> |
Interval decision rule (state before scoring): <<FILL: e.g. "sum of 4 to 6 supports a 24-month interval; 7 to 9 supports 12 months; 10 to 12 supports 6 months or a stronger case for continuous parametric monitoring in place of a fixed interval.">> Any single factor scoring 3 is reviewed individually before defaulting to the sum-driven interval; a thin bioburden margin, for example, can justify a shorter interval even where other factors are favorable.
5. Part B: Change-trigger decision table
For a specific proposed change, work through the table below. Any “Yes” in the trigger column defaults to revalidation unless a documented technical rationale in the last column supports otherwise, reviewed and approved by QA.
| Change type | Revalidation trigger? | Typical scope if triggered | Rationale if not triggered |
|---|---|---|---|
| New or denser load configuration, new pack/wrap arrangement, new nesting pattern | Yes | Loaded distribution and heat penetration re-mapping, plus BI challenge, at the new worst case | <<FILL: only if a documented equivalence assessment shows the new configuration is no denser and no farther from steam entry than the qualified worst case>> |
| New or changed container/closure geometry, fill volume, or wall thickness (liquid cycles) | Yes | Penetration re-mapping at the new cold spot (typically container center, largest fill), F0 confirmation | <<FILL: only if a documented thermal-mass equivalence assessment supports no meaningful change to heat-up behavior>> |
| Modification to the sterilizer control system/PLC logic, temperature or pressure controller, or recording instrumentation governing F0, temperature, or counter-pressure | Yes | OQ re-verification of affected control functions plus PQ re-challenge (distribution, penetration, BI) | <<FILL: only for a like-for-like part replacement with no functional or firmware change, per the equipment SME>> |
| Change to cycle set point, exposure time, ramp, or counter-pressure profile | Yes | PQ re-challenge at the new parameters, full F0 and BI reconciliation | Not applicable; any validated-range change is in scope |
| Steam generation or distribution change (new generator, new boiler feedwater treatment, distribution rerouting) affecting steam quality at the point of use | Yes, assessment required | Re-run the EN 285 steam-quality triad at the point of use; re-run penetration and BI challenge if quality shifts outside the qualified range | <<FILL: only if steam-quality retesting at the point of use confirms no change to dryness, superheat, or non-condensable gas results>> |
| New BI vendor, lot with a materially different certified D-value or population, or a new PCD/carrier | Yes, assessment required | Confirm resistance equivalence; re-run the BI challenge if resistance or carrier behavior differs from the qualified lot | <<FILL: only if the new lot is demonstrated equivalent in organism, carrier type, and certified resistance to the qualified lot>> |
| Bioburden or hybrid cycle: routine bioburden trend approaching the design maximum, or a new resistant isolate recovered | Assessment required | Re-derive the required F0 from the new bioburden data; requalify if the design margin no longer holds | <<FILL: only if the trend is explained by a transient, corrected condition with no repeat, confirmed by the bioburden control program>> |
| Relocation of the sterilizer, or a change to the room/utility layout feeding it | Yes | Full IQ/OQ/PQ re-verification appropriate to the extent of the move | <<FILL>> |
| Like-for-like part replacement (gasket, seal, non-control-logic component), no functional change | No (default) | Calibration/functional check per routine maintenance | Genuine like-for-like, confirmed by part number or documented equivalence |
6. Mitigations and actions
| Action ID | Factor or change addressed | Action | Owner | Due | Status |
|---|---|---|---|---|---|
<<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> |
<<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> | <<FILL>> |
7. Residual risk statement and acceptance
State the residual risk remaining after the interval and trigger decisions: what could still drift between requalifications despite the monitoring and interval set here, and why that residual risk is acceptable. <<FILL>>. Accepted by: <<FILL: risk authority / Quality Head>>.
8. Acceptance criteria
- Both the periodic interval and the change-trigger logic are scored against factors stated before scoring, not fitted to a predetermined interval.
- Patient severity and process margin reflect the cycle’s actual design philosophy (overkill, bioburden, or hybrid) and its real trend data, not a generic assumption carried across cycles.
- Detectability reflects the real release basis (parametric versus routine BI monitoring) for this specific cycle, not a general statement about the sterilizer class.
- The change-trigger table is consulted for every proposed change to this cycle, sterilizer, load, or feeding steam system, and the outcome is documented, including a “not triggered” decision.
- The assessment is approved by Quality Assurance and carries a defined review trigger (a significant excursion, a failed requalification, a bioburden trend breach, or an elapsed maximum review period).
9. References
ISO 17665:2024, Sterilization of health care products, Moist heat, Requirements for the development, validation and routine control of a sterilization process for medical devices. EN 285, Sterilization, Steam sterilizers, Large sterilizers (steam-quality triad limits). PDA Technical Report No. 1 (Revised 2007) and No. 48 (2010), moist heat sterilization process and equipment guidance. USP <1229>, <1229.1>, <1229.2>, <1229.5>; <1211> Sterility Assurance. EU GMP Annex 1, Manufacture of Sterile Medicinal Products (2022 revision); 21 CFR 211.113(b). ICH Q9(R1), Quality Risk Management.
Confirm the current version and clause numbers of each reference before issue. Describe copyrighted standards in your own words rather than pasting their text.
10. Revision history
| Version | Date | Author | Summary of change |
|---|---|---|---|
<<FILL: 1.0>> | <<FILL: date>> | <<FILL: author>> | Initial issue. |
11. Approval
| Role | Name | Signature | Date |
|---|---|---|---|
| Author (Sterility Assurance / Validation) | <<FILL>> | ||
| Manufacturing | <<FILL>> | ||
| Quality Assurance | <<FILL>> |
Filled specimen
Example for autoclave STZ-04, cycle C1, an overkill pre-vacuum porous-load cycle for terminally sterilized surgical component trays, qualified under PQ-STE-021.
Part A scoring:
| Factor | Score | Rationale |
|---|---|---|
| Patient severity (S) | 1 | Overkill approach, ≥ 12-log SLR margin, no bioburden dependency |
| Detectability (D) | 2 | Routine BI monitoring of every load is the primary release control; physical F0 recorded but not independently gating release for this cycle |
| Process margin (M) | 1 | 24 months of routine BI and periodic physical-F0 trend data shows consistent margin well above the 12-log target, low run-to-run variability |
| Usage and stress (U) | 2 | Moderate duty cycle, occasional changeover between two qualified tray configurations within the validated envelope |
| Sum | 6 |
Interval decision: Sum of 6 falls in the 4-to-6 band. Interval set at 24 months. No individual factor scored 3, so the sum-driven interval applies without override.
Part B example, a real change: The site proposes adding a third, denser tray configuration to the routine load mix to support a new component.
Per the change-trigger table, a new or denser load configuration is a default trigger. Scope: loaded distribution and heat penetration re-mapping at the new configuration’s worst-case position, with co-located BI challenge, per the moist heat sterilization PQ protocol. QA confirmed no equivalence rationale supported skipping the re-map, since the new tray’s packing density and wrap depth exceed the currently qualified worst case.
Residual risk: Low. The 24-month interval is supported by strong process margin and a stable load mix; routine BI monitoring of every load provides an independent, per-load check between requalifications, so a drift would be caught before accumulating across many loads. The new tray configuration is fully re-mapped before entering routine use, so no residual risk carries from that change. Accepted by the Head of Quality Assurance.
Common inspection findings this risk assessment prevents
- A fixed requalification interval applied to a sterilization cycle with no cycle-specific rationale tying it to the actual design philosophy, margin, and detectability.
- A denser load or new container added to the routine mix on the reasoning that it “still fits in the chamber,” with no re-mapping against the real worst case.
- A steam-supply change (new boiler, feedwater treatment change) not recognized as sterilization-relevant because it happened at the utility level, outside the sterilizer’s own change control.
- A control-system or instrumentation change on the sterilizer pushed through as “like-for-like” with no equivalence basis recorded, when it in fact touches the parameter that governs delivered F0.
- No review trigger on the assessment itself, so an interval set at initial qualification is never revisited after years of operating history or a bioburden program change.
How to adapt this assessment
- Set your document number, sterilizer, cycle, and the qualifying PQ reference in the header.
- Ground the patient-severity and process-margin scores in the cycle’s actual design philosophy (overkill, bioburden, or hybrid) and its real trend data, not a generic default.
- Score detectability from the cycle’s actual routine release basis (parametric versus BI monitoring), confirmed against the sterilization cycle development and validation program SOP.
- Fix the interval decision rule (section 3) before scoring, and keep it consistent across your moist heat cycles so intervals are comparable.
- Use the change-trigger table (section 5) at every change request against this cycle, sterilizer, or feeding steam system; file the completed decision with the change control record.
- Set a review trigger for the whole assessment (an excursion, a failed requalification, a bioburden trend breach, or an elapsed maximum period) so it does not become a permanent, unrevisited default.