Annex 1 Sterile Manufacturing: Frequently Missed Compliance Requirements

The revised EU GMP Annex 1 on the manufacture of sterile medicinal products came into force in August 2023. At over 50 pages and more than 20 sections, it is the most substantial revision to sterile manufacturing guidance in the history of European pharmaceutical regulation. It replaced a 16-page document that had governed sterile manufacturing practice for decades and introduced not just updated technical requirements but a fundamentally different philosophy about how contamination risk should be understood, managed, and documented.

More than two years after the revised Annex 1 came into force, regulatory inspectors across MHRA, EMA-affiliated national authorities, and PIC/S member agencies are finding that a significant proportion of sterile manufacturers have not fully implemented what the revision requires. Gap assessments were conducted in 2023. Implementation plans were drafted. Some improvements were made. But the full operational depth of what the revised Annex 1 demands, particularly around the Contamination Control Strategy, barrier technology, environmental monitoring, and personnel behaviour, has not been reached at many sites.

This matters because inspectors are no longer treating Annex 1 implementation as a transition period activity. They are expecting compliance now and generating major and critical findings at sites where implementation is incomplete, superficial, or documented without being operationally embedded.

This guide identifies the requirements of the revised Annex 1 that are most frequently missed or inadequately implemented, explains what genuine compliance looks like in each area, and provides practical guidance for sterile manufacturing quality teams who need to close the remaining gaps before their next inspection.

The Contamination Control Strategy: The Most Misunderstood Requirement

The Contamination Control Strategy is the central new requirement introduced by the revised Annex 1 and it is also the requirement that is most frequently misunderstood and most inadequately implemented across the industry.

The revised Annex 1 requires every sterile manufacturer to have a holistic CCS that documents all contamination risks relevant to the sterile manufacturing operation and demonstrates how each risk is controlled, monitored, and reviewed. The CCS must cover microbiological contamination, particulate contamination, pyrogen and endotoxin contamination, and chemical contamination risks across the entire manufacturing operation from starting material receipt through to finished product release.

What many sites have produced in response to this requirement is a document. A CCS document exists, it covers the required topics, it has been approved by the quality function, and it can be shown to an inspector on request. This is not what the revised Annex 1 requires and inspectors with experience of the revised guidance are able to identify the difference very quickly.

A genuine CCS is not a document exercise. It is an operational framework that:

• Identifies every contamination risk in the sterile operation with a specific risk assessment for each, including the source of the risk, the pathway by which it could reach the product, and the severity of the potential impact on product sterility or quality
• Documents the specific control measure in place for each identified risk and provides evidence that the control is effective
• Connects the risk assessment to the environmental monitoring programme, the personnel behaviour requirements, the cleaning and disinfection programme, the equipment qualification programme, and every other operational control that contributes to contamination prevention
• Is reviewed and updated when any change occurs in the operation that could affect the contamination risk profile, including personnel changes, equipment changes, process changes, and facility modifications
• Is used actively in the investigation of environmental monitoring excursions and sterility failures to identify which element of the contamination control framework may have failed

The most common CCS failures that inspectors identify include:

• A CCS document that lists contamination risks and control measures at a generic level without site-specific risk assessment evidence supporting each entry
• A CCS that was produced as a standalone document without connecting it to the environmental monitoring programme, cleaning validation data, or personnel training records that constitute the actual evidence of control effectiveness
• A CCS that has not been updated to reflect changes in the operation that occurred after the document was first approved
• A CCS that does not address all contamination types required by the revised Annex 1, typically omitting pyrogen and endotoxin risk assessment or chemical contamination risks
• A CCS that exists at corporate level and has not been adapted to reflect the specific risk profile of individual manufacturing sites within a group

Barrier Technology: Raised Expectations That Many Sites Have Not Met

The revised Annex 1 significantly strengthened the expectations around barrier technology for Grade A operations, introducing a hierarchy of preferred contamination control technologies that places closed Restricted Access Barrier Systems and isolators above open RABS and conventional cleanrooms for aseptic processing activities.

The revised Annex 1 states explicitly that new facilities and facilities undergoing significant modification should use isolators or RABS for all aseptic processing activities. For existing facilities using conventional cleanrooms for Grade A operations, the revised Annex 1 does not mandate immediate replacement but requires a documented justification for why isolator or RABS technology has not been adopted and a roadmap for transition where this is feasible.

The barrier technology requirements that are most frequently inadequately addressed include:

• Justification for conventional cleanroom use: Sites continuing to use conventional open cleanrooms for Grade A aseptic processing without a documented justification and transition assessment. The revised Annex 1 does not require immediate replacement of existing facilities but it does require that the decision to continue using conventional technology is an active, documented, and regularly reviewed decision rather than a default position.
• RABS classification and management: Sites using open RABS that have not formally assessed and documented whether their RABS design and operational procedures meet the revised Annex 1 expectations for open RABS versus closed RABS and what additional controls the open RABS design requires to achieve the contamination control objectives.
• Isolator integrity testing: Sites using isolators that have not updated their isolator qualification and ongoing integrity testing programme to reflect the revised Annex 1 expectations, including leak testing frequency, glove integrity testing protocols, and transfer port management procedures.
• Glove integrity and change programme: The revised Annex 1 places specific emphasis on glove management in isolator operations, requiring a defined programme for glove integrity testing, glove change frequency, and the documentation of glove condition monitoring. Many sites have glove management procedures that do not meet the specificity and frequency requirements the revised Annex 1 implies.
• Transfer and material introduction controls: The revised Annex 1 strengthened expectations around the transfer of materials into Grade A environments, including the use of bio-decontamination transfer systems, the qualification of transfer processes, and the documentation of material introduction procedures. Sites using informal or insufficiently qualified transfer procedures for materials entering Grade A environments are carrying a compliance gap that inspectors are actively looking for.

Environmental Monitoring: Where Most Sites Have the Biggest Gaps

Environmental monitoring for sterile manufacturing facilities was already a highly regulated activity before the revised Annex 1. The revision raised expectations in several specific areas that have generated widespread compliance gaps because they require either new monitoring activities that many sites were not previously performing or a level of data analysis and trend management that existing programmes were not designed to deliver.

The environmental monitoring requirements most frequently missed or inadequately implemented include:

• Risk-stratified monitoring locations and frequencies: The revised Annex 1 requires that environmental monitoring locations and sampling frequencies are determined through a risk assessment that considers the contamination risk profile of each location rather than applying a uniform monitoring approach across all locations of the same grade. Many sites have environmental monitoring programmes where locations and frequencies were established historically and have never been formally validated against a current contamination risk assessment for the specific operations conducted in each location.
• Rapid microbiological methods: The revised Annex 1 encourages the use of rapid microbiological methods where these offer advantages over traditional methods in terms of detection speed, sensitivity, or specificity. Sites that have not assessed whether rapid methods are appropriate for their operation and documented their rationale for the methods currently in use may face questions from inspectors about whether their monitoring programme reflects current technology expectations.
• Viable and non-viable particle monitoring integration: The revised Annex 1 requires that viable and non-viable particle monitoring data are considered together in the assessment of environmental control. Many sites generate both types of data but review them in separate programmes without integrating the trends. An increase in non-viable particulate counts should trigger an assessment of viable monitoring data and vice versa, but this integrated review is frequently absent from environmental monitoring programmes.
• Alert and action limit setting and review: The revised Annex 1 requires that alert and action limits are based on trend data from the specific operation rather than defaulting to the grade limits specified in the Annex. Sites using the Annex 1 grade limits as their alert and action limits rather than establishing site-specific limits based on their own historical data are not meeting this expectation. The grade limits are the regulatory limits at which a batch disposition decision is required. Alert limits should be set below them to provide early warning of deteriorating environmental control.
• Trend analysis and escalation: The revised Annex 1 places significant emphasis on trend analysis as a proactive contamination control tool. Environmental monitoring data should be reviewed not just for individual excursions against alert and action limits but for trends that indicate gradual deterioration in environmental control before limits are breached. Many environmental monitoring programmes generate trend data but do not have a defined methodology for trend analysis, defined trend alert criteria, or a formal escalation process when trends indicate deteriorating control.
• Monitoring during simulated and actual aseptic processing: The revised Annex 1 strengthened expectations around environmental monitoring during media fills, requiring that the monitoring programme during a media fill reflects the monitoring conducted during routine production. Sites that apply more intensive monitoring during media fills than during routine production, or that apply routine production monitoring without verifying it is representative of actual production conditions, are not meeting this expectation.
• Personnel monitoring scope and frequency: The revised Annex 1 introduced more specific expectations around the scope and frequency of personnel monitoring in Grade A and B environments, including monitoring of all personnel who enter Grade A environments during an aseptic process, monitoring at the end of aseptic operations rather than only at the beginning, and documentation of personnel monitoring results that allows individual operator performance to be tracked over time.

Cleaning and Disinfection: A Programme That Must Be More Than Effective

Cleaning and disinfection of sterile manufacturing environments has always been a GMP requirement. The revised Annex 1 raised the expectations around how cleaning and disinfection effectiveness is demonstrated, how sporicidal agents are incorporated into disinfection programmes, and how the disinfection programme is reviewed and maintained over time.

The cleaning and disinfection requirements most frequently found to be inadequately addressed include:

• Sporicidal agent inclusion: The revised Annex 1 requires that the disinfection programme for Grade A and B environments includes a sporicidal agent used at defined intervals. Many sites had disinfection programmes using only non-sporicidal disinfectants before the revision and have not yet incorporated a validated sporicidal agent and programme into their routine disinfection schedule. This is one of the most common major findings in post-revision Annex 1 inspections.
• Disinfectant efficacy testing: The revised Annex 1 requires that disinfectants are tested for efficacy under conditions representative of their use in the facility, including in the presence of the soil load and surface materials encountered in the actual manufacturing environment. Generic efficacy data provided by disinfectant suppliers does not meet this requirement. Site-specific efficacy testing using representative surfaces and soil conditions is required.
• Disinfectant rotation: Sites using a single disinfectant or disinfectant type without a defined rotation programme may face questions about whether their programme adequately addresses the risk of microbial adaptation to repeatedly used disinfectants. The revised Annex 1 encourages rotation between disinfectants with different mechanisms of action.
• Cleaning validation for surfaces and equipment: The revised Annex 1 strengthened expectations around the validation of cleaning procedures for surfaces and equipment in Grade A and B environments, including the documentation of cleaning method parameters, contact times, concentrations, and the evidence demonstrating that the validated procedure achieves the required level of microbial reduction under worst-case conditions.
• Preparation and use controls for disinfectants: The revised Annex 1 requires that disinfectants and cleaning agents are prepared and used in a controlled manner with documented procedures for preparation, labelling, storage, and shelf-life management. Sites where disinfectants are prepared informally without documented procedures and expiry date controls are not meeting this requirement.

Personnel: The Human Factor in Sterile Manufacturing Compliance

The revised Annex 1 placed considerably more emphasis on the human factor in contamination control than its predecessor, recognising that people are the most significant source of contamination in aseptic manufacturing environments and that technical controls alone are insufficient without rigorously trained, monitored, and behaviorally consistent personnel.

The personnel requirements most frequently found to be inadequately addressed include:

• Initial and ongoing aseptic technique training: The revised Annex 1 requires that personnel working in or supporting aseptic manufacturing operations receive thorough training in aseptic technique and that this training is regularly refreshed and its effectiveness regularly assessed. Training records showing completion of a training course are not sufficient. Evidence that aseptic technique has been assessed and found competent, including observed practice assessments and media fill participation records, is required.
• Gowning qualification and requalification: The revised Annex 1 requires a formal gowning qualification programme for all personnel accessing Grade A and B environments, with requalification at defined intervals and following any period of extended absence from the aseptic manufacturing environment. Sites with gowning training programmes that do not include a formal qualification assessment and a defined requalification frequency are not meeting this expectation.
• Behaviour monitoring in Grade A environments: The revised Annex 1 introduced expectations around the monitoring and documentation of personnel behaviour during aseptic operations, including the number of personnel present during aseptic processing, the activities performed by each person, and any interventions made during the aseptic process. Sites where personnel behaviour during aseptic operations is not systematically documented and reviewed are carrying a compliance gap that inspectors have been finding at post-revision inspections.
• Health status monitoring: The revised Annex 1 requires health status monitoring for personnel working in sterile manufacturing environments, with defined criteria for exclusion from Grade A and B environments when health conditions that could increase contamination risk are present. Many sites have health status policies that are not specific enough about the conditions that require exclusion or the process for assessment and return to work.
• Number of personnel during aseptic processing: The revised Annex 1 is explicit that the number of personnel present during aseptic processing should be minimised and that the presence of additional personnel beyond those required for the process should be justified and documented. Sites where quality oversight personnel, validation teams, or visitors routinely observe aseptic processing without a documented justification for their presence are not meeting this requirement.

Media Fill Programme: Higher Expectations Than Many Sites Have Implemented

The process simulation or media fill programme is one of the most resource-intensive elements of sterile manufacturing qualification and it is an area where the revised Annex 1 introduced several specific changes that many sites have not fully implemented.

The media fill requirements most frequently found to be inadequately addressed include:

• The number of units filled during media fills, which the revised Annex 1 requires to be sufficient to provide a meaningful assessment of contamination risk, with specific guidance on minimum fill numbers for different types of aseptic processing operations
• The inclusion of all interventions that occur during routine production in the media fill, including both routine interventions that are planned elements of the process and corrective interventions that occur in response to equipment or process events during production
• The worst-case simulation requirement, which mandates that media fills are designed to challenge the aseptic process under the most demanding conditions encountered in routine production rather than under optimal conditions
• The monitoring programme during media fills, which as noted above must be representative of the monitoring conducted during routine production
• The investigation and disposition requirements when a media fill unit shows growth, which the revised Annex 1 addresses in more detail than the previous version, requiring a documented investigation regardless of whether the failed unit count is below the action threshold

What a Genuine Annex 1 Compliance Programme Looks Like in 2026

Given the breadth of requirements described above and the inspection findings being generated at sites with incomplete implementation, a genuine Annex 1 compliance programme in 2026 must go beyond document production and formal gap assessment.

The elements that distinguish genuinely compliant sterile manufacturing operations from those carrying inspection risk include:

• A CCS that is operationally embedded, actively used in daily quality decisions, and visibly connected to every element of the contamination control framework rather than existing as a standalone approval document
• An environmental monitoring programme that was designed around the current contamination risk profile of the operation, uses integrated viable and non-viable data review, has site-specific alert and action limits, and has a formal trend analysis methodology with defined escalation criteria
• A disinfection programme that includes a validated sporicidal agent, uses site-specific efficacy data, operates a defined rotation between agents with different mechanisms of action, and has controlled preparation and shelf-life management procedures
• A personnel programme that includes observed aseptic technique assessment, formal gowning qualification with requalification at defined intervals, behaviour monitoring during aseptic processing, and health status criteria specific enough to be consistently applied
• A media fill programme that simulates worst-case production conditions, includes all routine and corrective interventions, has a monitoring programme representative of routine production, and investigates all growth events regardless of their count relative to the action threshold
• A barrier technology assessment that either demonstrates how the site’s current technology meets the revised Annex 1 contamination control objectives or documents a justified transition plan toward isolator or RABS technology

How Quality and Vigilance Supports Annex 1 Compliance

At Quality and Vigilance we support sterile manufacturers with Annex 1 gap assessments, CCS development and review, environmental monitoring programme design, disinfection programme qualification, personnel training assessment, and mock inspection services designed to replicate the scrutiny of an MHRA, EMA, or PIC/S member authority inspection.

Our team brings direct experience of sterile manufacturing inspections and understands the difference between documentation that satisfies a checklist and operational implementation that satisfies an inspector. We work with manufacturers at every stage of their Annex 1 implementation journey, from initial gap assessment through to mock inspection readiness confirmation.

Contact Quality and Vigilance today to assess your Annex 1 compliance position and ensure your sterile manufacturing operation is ready for the level of scrutiny inspectors are applying in 2026.