How to Conduct Virtual Site Visits with a CAPA-Driven Approach

Introduction: Virtual Site Visits and Regulatory Expectations

The evolution of decentralized clinical trials and remote monitoring practices has brought virtual site visits to the forefront of regulatory oversight strategies. Both sponsors and clinical sites must now demonstrate compliance with Good Clinical Practice (GCP) while conducting remote visits that meet the expectations of authorities like the FDA, EMA, and ICH.

Unlike traditional on-site visits, virtual site visits introduce new challenges related to technology, security, documentation, and real-time communication. Consequently, implementing a Corrective and Preventive Action (CAPA) framework during these visits becomes essential to ensure issues are managed systematically and future risks are mitigated.

This tutorial outlines the key steps for conducting a virtual site visit using a structured CAPA framework and highlights regulatory expectations along with real-world examples.

Step-by-Step Process for Virtual Site Visits

Virtual site visits can be categorized into various types—site qualification, initiation, monitoring, and closeout. Regardless of visit type, a standardized process must be followed to ensure regulatory compliance and audit readiness. Below is a structured walkthrough of the process.

Step 1: Pre-Visit Planning and Risk Assessment

Pre-visit planning involves risk-based decision-making to identify which sites require virtual visits, the focus of the visit, and anticipated challenges. Sponsors typically develop a Virtual Site Visit Plan (VSVP) as a formal document.

Key Elements of the VSVP include:

• Purpose and scope of the visit
• Technology platforms to be used (e.g., Zoom, Microsoft Teams, Veeva)
• Roles and responsibilities
• Schedule of sessions with key personnel
• Data access permissions and audit trail enablement
• Confidentiality and security provisions

Use of remote monitoring platforms must comply with EU Clinical Trial Regulation 536/2014 and 21 CFR Part 11 standards for data integrity.

Step 2: Site Readiness and Pre-Qualification

Prior to the visit, the site must complete a Virtual Visit Readiness Checklist that includes:

• Hardware and internet speed checks
• Availability of staff and key personnel
• Testing of screen sharing and document access tools
• Confirmation of data de-identification (if applicable)
• Backup plan in case of connectivity failures

A dummy table of readiness status can be maintained:

Step 3: Conducting the Visit – Real-Time Execution

During the actual virtual site visit, the following activities must be documented:

• Review of regulatory documents (e.g., 1572, IRB approvals, CVs)
• Live review of electronic source documents (eSource)
• Verification of informed consent process
• Interviewing site staff regarding protocol adherence
• Observing drug storage areas via live video
• Monitoring AE/SAE documentation handling

The virtual visit should be recorded (if permitted), and notes must be entered into a Virtual Visit Log filed in the TMF.

Step 4: CAPA Identification During and After the Visit

Any deficiencies observed during the virtual site visit should be captured and evaluated through a CAPA process. CAPA identification must include:

• Clear description of issue (e.g., missing PI signature on lab report)
• Risk assessment (e.g., High – Subject Safety Impact)
• Root cause analysis (RCA) – using 5 Whys or Fishbone diagram
• Immediate correction (e.g., obtain signature, retrain staff)
• Preventive actions (e.g., system alerts, SOP revision)

Example CAPA record:

Step 5: Post-Visit Documentation and TMF Filing

All virtual visit documents must be archived appropriately in the TMF (Trial Master File). Key documents include:

• Virtual Site Visit Plan
• Readiness checklist and screenshots
• Virtual Site Visit Log
• CAPA tracking sheet
• Correspondence emails
• Audit trail exports

Filing should follow the DIA TMF Reference Model and be traceable for inspectors.

Best Practices and Common Pitfalls

Lessons learned from industry case studies reveal some best practices and pitfalls:

Best Practices:

• Conduct dry runs prior to scheduled visit
• Use dual monitors for simultaneous document review
• Assign a dedicated tech support liaison
• Log all time-stamped notes into the eTMF

Common Pitfalls:

• Relying on unsecured file-sharing platforms
• Failing to test video tools under firewall restrictions
• Skipping root cause analysis for minor issues
• Neglecting real-time documentation during the visit

Conclusion: Integrating CAPA into Virtual Oversight

Virtual site visits are no longer optional—they are a regulatory reality. However, their success hinges on a CAPA-driven framework that goes beyond operational execution. Sponsors must integrate proactive issue identification, structured correction, and long-term prevention into each virtual oversight activity.

By following the steps outlined in this guide, sponsors and CROs can improve both the effectiveness and defensibility of virtual site visits. More importantly, they can demonstrate to regulators that quality systems are evolving alongside technology.