From spreadsheets to Digital RACT | ICH E6(R3) compliance

Learn why spreadsheet-based RACT falls short of ICH E6(R3) and how Digital RACT in the MyRBQM Portal delivers traceable, inspection-ready risk governance.

From Spreadsheets to Digital RACT

Learn why spreadsheet-based RACT falls short of ICH E6(R3) and how Digital RACT in the MyRBQM Portal delivers traceable, inspection-ready risk governance.
Cyntegrity logo – Risk-Based Quality Management Solutions

Why legacy risk assessments fall short of ICH E6(R3)

Clinical trials are more complex, data-rich, and quality-sensitive than ever. However, many organizations still rely on spreadsheet-based RACT tools that were never designed to support modern Risk-Based Quality Management (RBQM) or the expectations of ICH E6(R3).

 

The result is familiar: fragmented workflows, inconsistent scoring, weak traceability, and risk assessments that are difficult to defend under inspection. In practice, this means that what was intended as a structured risk process often becomes a documentation exercise rather than a decision system.

Hidden operational and compliance costs

If your teams still manage RACT in Excel, you are likely carrying hidden operational and compliance costs that slow study start-up, increase decision-making variability, and introduce avoidable risk exposure. Our brief, The Cost of Spreadsheet-Based Risk Assessments, explains these challenges in detail.

Why spreadsheet-based RACT creates systemic risk

1
2
3
1

Fragmented inputs and version chaos

In many organizations, spreadsheets circulate endlessly through email threads:
RACT_v1 → RACT_v1_final → RACT_final_definitely_final → RACT_v1_final_FINAL.

 

This version drift is not a cosmetic issue; it directly affects governance. Contributors overwrite each other’s input, updates get lost, and decisions become difficult to reconstruct. Over time, this undermines:

  • Data quality

  • Consistency in risk scoring

  • Cross-functional alignment

  • Regulatory confidence in your oversight process

 

Consequently, what should be a transparent decision process becomes fragmented and reactive rather than structured and proactive.

2

Slow collaboration and fragile formatting

Spreadsheets were never designed for controlled, multi-user collaboration. Formulas break, reviewers apply different definitions, and manual consolidation consumes valuable time.

 

Moreover, formatting inconsistencies create additional friction when teams attempt to align risk assessments across studies or portfolios — exactly the opposite of what ICH E6(R3) expects from a repeatable, governed process.

3

No reliable audit trail

A central expectation under ICH E6(R3) is decision traceability: the ability to explain why a risk was prioritized, when it changed, and who acted on it.

 

Excel cannot reliably provide:

  • Controlled change logs

  • Time-stamped updates

  • Role-based accountability

  • System-level version control

 

As a result, inspections become more burdensome, time-consuming, and unpredictable, particularly when regulators ask how oversight decisions evolved over time.

Digital RACT: from artifact to operating model

By contrast, a Digital RACT, such as the one embedded in the MyRBQM® Portal, transforms risk assessment from a static document into a governed process that aligns with both Quality by Design (QbD) and RBQM principles.

 

This shift is consistent with how we frame QbD in clinical trials: risks are designed out early, not managed reactively later.

Organizations using Digital RACT through the MyRBQM Portal typically achieve:

  • 67% faster completion of risk assessments and study start-up

  • 88% fewer risk-assessment-related regulatory findings

  • 58% more complete identification of CtQ factors

These outcomes are not driven solely by automation. They reflect clearer governance, better alignment, and more consistent oversight decisions across trial teams.

Organizations using Digital RACT through the MyRBQM Portal typically achieve:

 

  • 67% faster completion of risk assessments and study start-up

  • 88% fewer risk-assessment-related regulatory findings

  • 58% more complete identification of CtQ factors

 

These outcomes are not driven solely by automation. They reflect clearer governance, better alignment, and more consistent oversight decisions across trial teams.

Removing structural barriers

A Digital RACT approach typically delivers:

  • Standardized, AI-assisted risk identification
    AI supports structured identification of CtQ factors while keeping humans in control of decisions, aligned with your Responsible AI in RBQM positioning.

  • Built-in version control and full audit trail
    Every update is time-stamped, attributable, and preserved, eliminating version confusion.

  • True cross-functional collaboration
    Teams work in one shared environment instead of passing files back and forth.

  • Consistent scoring and controlled inputs
    Probability, impact, and detectability are guided by standardized definitions, reducing variability.

  • Integrated mitigation tracking
    Risks connect directly to owners, timelines, and follow-up actions, supporting continuous oversight.

  • One-click inspection-ready documentation
    Outputs align with ICH E6(R3) expectations without manual reformatting or post-hoc justification.

 

In this model, Digital RACT does not replace expertise; it removes structural barriers between data, insight, and decision-making.

What this means for RBQM in practice

When RACT remains spreadsheet-based, RBQM often becomes a reporting exercise rather than an operating model. In contrast, Digital RACT embeds risk thinking into daily trial governance, which strengthens:

  • Defensibility under inspection

  • Consistency across studies

  • Portfolio-level oversight

  • Cross-functional accountability

 

This is why we position Digital RACT as a core enabler of risk-based quality management under ICH E6(R3), not simply a better tool.

Download the brief

If you want to understand the hidden operational and compliance costs of spreadsheet-based RACT — and how Digital RACT changes the equation — download:

 

👉 The Cost of Spreadsheet-Based Risk Assessments

 

This resource is particularly relevant for:

  • RBQM leaders

  • Clinical operations teams

  • QA and compliance functions

  • CRO partners

  • Anyone modernizing risk assessment processes

Ready to modernize your RACT process?

If your goal is to standardize, simplify, and accelerate risk assessment while strengthening ICH E6(R3) compliance, the MyRBQM Portal offers a governed, digital, and inspection-ready approach to RACT and RBQM.

Guest Speaker

Brian Barnes

BioNTech

Presented By

Dr. Johann Proeve

Cyntegrity

Presented By

Keith Doricott, MBB

Dorricott Metrics

Let's get AI doing the work in RBQM

Unlock AI-powered RBQM, understand its impact, and put it to work in your processes today.

Date

11 March 2026