Q&A: How to Maximize Your GxP Use of the Public Cloud

These questions were asked during the How to Maximize Your GxP Use of the Public Cloud webinar.

How do you handle multi-cloud environments?

A multi-cloud environment could be all private, all public, or a combination of both. Using a multi-cloud environment, you can distribute your cloud computing among different providers because they each have their own skillset, but you still reduce the risk of downtime.

USDM’s Unify Public Cloud (UPC) methodology is tech agnostic and starts with your intended use. We leverage this for your framework whether it’s a single cloud or a multi-cloud environment.

Is the Unify Public Cloud solution in the public cloud, a private cloud, or is it a hybrid?

UPC is focused on the public cloud, but it can be used across all options. If you have a multi-cloud solution that includes public, private, or hybrid, it’s tool agnostic.

How does USDM work with vendors and partners like Microsoft, Google, and AWS in terms of the services provided?

USDM works with top-quality cloud vendors. Unify Public Cloud was developed in a partnership with Microsoft, but the methodology applies across all clouds. Life sciences customers need continuous compliance; regardless of the vendor you choose, USDM keeps you compliant across your tech stack.

Do you apply this methodology to GxP validation? Have you deployed this methodology at a large enterprise company?

Yes, we apply this methodology to your cloud projects and validation activities. We look at your system holistically to ensure alignment between Quality and IT, and business owners and user groups, then we keep you continuously compliant.

Read this case study to learn how USDM deployed this methodology at a global pharmaceutical company.

How do we go about cleaning up our data and getting it in order before migrating it?

As the saying goes, “garbage in, garbage out,” so you want to make sure your data is cleaned up before you migrate it. You can’t do cool stuff with advanced analytics if you’re using bad data.

Can you apply this methodology to applications running on platforms in the cloud (for example, Salesforce)?

Yes. With Azure, AWS, and GCP, you can host multi-faceted platform applications on an infrastructure. But there are also native clouds, for example Salesforce runs on the Salesforce Cloud, but we can take this same approach. It starts with identifying your intended use and where you are in your cloud journey. We have detailed frameworks that are tailored to your needs.

Does Unify Public Cloud integrate with SDLC?

Yes. From the beginning of the process, we are evaluating your processes, including your software development lifecycle: Do you manage it, who are your vendors, and what are their SDLCs? We hit the key points to keep you continuously compliant so when releases come out, we know that testing was done and we can leverage vendor audits.

How do you operate where products and apps use an Agile methodology?

Our DevOps framework delivers continuous integration and continuous development of your process and enables the software delivery pipeline. USDM’s UPC solution ensures continuous validation and compliance.

The framework provides DevOps best practice configuration to fully manage your private code repository and automate workflows with verification and validation embedded in your process. The result is a GxP compliant software delivery pipeline with automated compliance and security, allowing you to increase the quality and frequency of your deployments to meet customer and business needs.

Please expand on the differences between RPA and AI.

RPA is an automation technology takes the repetitive, time consuming, and non-value added work you hate off your plate. AI can expand automation into new areas to automate complex processes and tasks, allowing AI robots to go beyond execution to “thinking” and enable automation of processes that include uncertainty, high variability, and unstructured data.

What is the cost to build a bot versus the value it generates for an organization?

Bot licensing can be expensive depending on the tools, but if you’re saving about 70% of an employee’s costs with improved efficiency, then it starts to become economically positive.

Is RPA more for business processes or for automated testing for validation?

RPA is typically for business process automation.

Do you have any experience with optical character recognition (OCR) automation in use cases for GxP systems?

Our first use was DocuSign e-Signature verification where you’ll see an image that has the user ID, date, and time of the signature attached to the document. For document validations, we use OCR to verify the sign-in, the time, and the date.

What is your position on the EMA notice to sponsors and being able to leverage validation documentation from SaaS vendors? How does this fit into your validation process for GxP system such as an EDC system?

EMA allows you to leverage the data from software vendors if you audited the vendor and understand their quality systems and qualification activities. You must see that they’ve done the work that they said they would do and you must have access to it. Several of our vendors are starting to provide this public facing content for their customers.

Additional Resources

UPC Use Cases
Robotics Process Automation (blog series)
Regulated GxP Workloads in the Public Cloud
Simplifying GxP Compliance in the Cloud