Hybrid System Controls
Hybrid System Controls. Where both electronic and paper records coexist for the same regulated process (a "hybrid system"), the organization shall implement controls to ensure the integrity and completeness of the complete record, which comprises both the electronic and paper components. Hybrid system controls shall include: (a) a documented procedure defining which elements of the record are maintained electronically and which are maintained on paper, and the rationale for this approach; (b) clear cross-referencing between electronic and paper components so that the complete record can be readily assembled and reviewed; (c) controls to prevent discrepancies between electronic and paper components, including procedures for reconciliation and verification; (d) the electronic components of the record shall meet all applicable requirements of 21 CFR Part 11, including audit trail, access control, and electronic signature requirements; (e) the paper components shall meet all applicable predicate rule requirements for handwritten signatures, contemporaneous recording, and records retention; (f) a procedure for managing situations where the electronic and paper components conflict, including which component shall be considered the authoritative source; (g) a risk assessment evaluating the vulnerabilities introduced by the hybrid approach, including the risk of incomplete records, transcription errors, and loss of data integrity; and (h) a documented strategy for transitioning from hybrid to fully electronic systems, where feasible, to reduce complexity and data integrity risks.