or manage the risk

Risk Category	Risk Description	P	I	D	RPN
Subject Safety	Incorrect dosing due to complex titration schedule	3	5	2	30
Data Integrity	High volume of protocol deviations expected	4	4	3	48

Based on the RPN score, risks are categorized as:

• Low Risk: RPN ≤ 20
• Medium Risk: RPN 21–40
• High Risk: RPN ≥ 41

Free RACT templates are available on PharmaValidation.

Step-by-Step Guide to Completing a RACT Template

1. Review the Protocol: Understand endpoints, population, visit frequency, etc.
2. Brainstorm Risks: Collaborate with functions—Medical, QA, Biostatistics, Data Management
3. Score Each Risk: Use historical data and team consensus for scoring
4. Document Mitigation: Identify actions, owners, and due dates
5. Validate the RACT: QA should verify accuracy and alignment with monitoring plan

Real-World Example: Phase II Diabetes Trial

Context: Complex IP titration protocol with multiple dose levels and lab-based eligibility.

Identified Risks:

• Dosing errors due to misunderstanding of titration chart
• High screen failure due to lab-based inclusion criteria

Mitigation Measures:

• Developed dosing job aids and laminated tools
• Implemented a pre-screening lab review SOP
• Extra training session for site PIs and coordinators

Integrating RACT Outputs into the Risk-Based Monitoring Plan

The final RACT output should be cross-referenced with the RBM Plan, including:

• Centralized monitoring strategy
• Key Risk Indicators (KRIs)
• Site-level risk triggers
• Audit trail for protocol amendments and risk re-assessments

For example, a high RPN for IP mismanagement would lead to KRIs like “IP Temperature Excursion Count > 2” being tracked throughout the study.

Best Practices for Using RACT in Multi-Protocol Portfolios

Many sponsors and CROs run multiple studies in parallel. Here’s how to scale RACT across programs:

• Standardize the Template: Use Excel, SharePoint, or eTMF-based forms with dropdowns
• Create RACT Libraries: Maintain common risk items with pre-approved scoring ranges
• Train Risk Leads: Appoint protocol risk leads to drive assessment consistency
• Version Control: Each RACT update (e.g., post-amendment) should have audit trails

These measures streamline governance and reduce scoring bias across therapeutic areas or regional teams.

RACT vs. Other Risk Tools

Tool	Purpose	When Used
RACT	Initial risk profiling of study protocol	Study startup, protocol development
KRI	Ongoing monitoring thresholds for key risks	Study conduct
QTL	Quality tolerance limits set by sponsor	Protocol design, study management

While RACT identifies the “what”, KRIs and QTLs track the “how much” and “how often.”

Common Mistakes to Avoid

• Copy-paste from past studies: Every protocol has unique nuances
• Over- or under-scoring risk values: Use historical data, not guesses
• Neglecting detectability: Easily detected risks should receive lower RPNs
• Not updating post-amendment: Any protocol change must trigger a RACT revision

Regulatory and Documentation Requirements

RACT outputs must be documented and stored within the Trial Master File (TMF), ideally linked to:

• Monitoring Plan
• CAPA Logs
• Site Management Plans
• Data Management Plan (DMP)

During GCP inspections, regulators may request evidence of how identified risks were managed, making the RACT a critical audit artifact.

Conclusion

Using RACT templates enables data-driven, protocol-specific risk profiling that aligns with modern RBM strategies. When integrated into study startup workflows and updated throughout the trial, RACT improves monitoring efficiency, audit readiness, and subject safety.

Clinical research teams should embrace RACT not just as a compliance requirement, but as a vital planning and quality enhancement tool that evolves with the study lifecycle.

References

• ICH E6(R2): Risk-Based Monitoring Principles
• FDA: Oversight of Clinical Investigations — Risk-Based Approach
• PharmaSOP: Download RACT Templates and Risk Logs