By: ABRS- Clinical Insights Team
Abstract
Risk-proportionate clinical trial management is moving from a regulatory concept toward a more explicit operating expectation. ICH E6(R3), adopted at Step 4 in 2025, places quality by design, critical-to-quality factors, and proportionate risk management at the center of trial planning and conduct. FDA incorporated E6(R3) into final U.S. guidance in September 2025, while updated UK guidance effective in April 2026 further translates these principles into expectations for dynamic risk assessment, cross-functional involvement, and demonstrable sponsor oversight. ICH Database
The operational challenge is not simply to create additional risk-management documentation. It is to determine which aspects of a trial have the greatest potential impact on participant protection and the reliability of results, then connect those priorities to study design, functional responsibilities, monitoring, escalation, and service-provider oversight. This article examines how sponsors can interpret risk proportionality as an operating model rather than an isolated quality activity, while recognizing that implementation must remain aligned with applicable regulatory requirements and the characteristics of each study.
Introduction
More oversight does not necessarily mean better oversight. A clinical trial can accumulate monitoring reports, metrics, meetings, procedures, and documentation while still struggling to distinguish the issues that deserve immediate attention from those that represent routine operational variation.
That distinction sits at the center of the current evolution in Good Clinical Practice. International Council for Harmonisation [ICH] (2025) frames clinical trial quality around fitness for purpose and calls for factors that are critical to trial quality to be identified prospectively. It also directs sponsors toward proportionate, risk-based quality management that concentrates attention on factors with meaningful implications for participant rights, safety, well-being, and the reliability of trial results. ICH Database
This direction is now reflected in jurisdiction-specific guidance. In the United States, the Food and Drug Administration (FDA, 2025) describes E6(R3) as incorporating flexible, risk-based approaches while maintaining a focus on quality by design, participant protection, and reliable results. In the United Kingdom, the Medicines and Healthcare products Regulatory Agency (MHRA, 2026) has gone further in translating these concepts into operational expectations, including dynamic risk review and cross-functional involvement. U.S. Food and Drug Administration
For sponsors and clinical operations teams, the question is therefore not whether risk should be managed. The more difficult question is how to make risk proportionality visible in everyday execution. That requires connecting protocol design with quality priorities, aligning functions around shared risks, and maintaining sufficient visibility when activities are distributed across investigators, functional teams, and external service providers.
Risk Proportionality Changes the Focus, Not the Standard
Risk proportionality can be misunderstood as a rationale for doing less. The regulatory direction is more precise: effort should be aligned with the importance of the risk.
ICH (2025) states that oversight measures should be fit for purpose and tailored to trial complexity and risk. Its quality-management framework similarly asks sponsors to identify risks that may meaningfully affect critical-to-quality factors before study initiation and throughout trial conduct. The underlying standards of participant protection and reliable results remain unchanged; what changes is how resources and controls are prioritized. ICH Database
This distinction has important operational consequences. Applying identical controls to every activity may create an appearance of consistency without necessarily improving control of the most consequential risks. A proportionate model instead requires teams to understand which processes, endpoints, decisions, data flows, and participant-facing activities are most significant for a particular study.
The MHRA (2026) provides a particularly practical interpretation. Its guidance describes risk-based quality management as a process that links identified critical-to-quality factors with risk identification, prioritization, mitigation, monitoring, and continuing review. It also emphasizes that risks may change as experience accumulates during study conduct, meaning that an assessment performed during study start-up cannot be assumed to remain sufficient throughout the trial. GOV.UK
Operational readiness therefore depends partly on an organization’s ability to change its focus when the evidence changes. A recruitment trend, protocol amendment, safety signal, data pattern, or operational deviation may alter the significance of a previously identified risk or reveal a new one. Risk proportionality becomes meaningful when teams can recognize that change and adjust controls, monitoring, or escalation accordingly.
This interpretation also helps distinguish proportionate oversight from reduced accountability. The objective is not to remove controls indiscriminately. It is to avoid treating low-impact and high-impact activities as if they require identical attention.
Quality Needs to Be Designed Before It Can Be Monitored
Monitoring can identify problems during trial execution, but some quality issues are better addressed before the study begins.
ICH (2025) explicitly places quality within scientific and operational trial design. Critical-to-quality factors should be identified prospectively because they represent attributes that are fundamental to participant protection, reliable and interpretable results, and the decisions that will ultimately be based on those results. ICH Database
This shifts part of the quality conversation upstream. Instead of asking only how a process will be monitored after implementation, teams can first ask whether the protocol and operating model introduce avoidable complexity. ICH also states that trial processes should be operationally feasible and should avoid unnecessary complexity, procedures, and data collection. ICH Database
That point has practical relevance beyond regulatory language. In an oncology-focused analysis published by the European Society for Medical Oncology, Perez-Gracia et al. (2023) reported findings from a survey of 940 investigators in which respondents perceived excessive administrative burden and believed that some procedures could be reduced without compromising patient rights, safety, or data quality. Because the work focused on oncology investigators, its findings should not be generalized to every clinical research setting. However, it illustrates a broader operational concern: additional process does not automatically translate into additional quality. PubMed
Quality by design provides a framework for separating necessary controls from accumulated operational habits. For example, identifying the reliability of a primary endpoint as a critical-to-quality factor can help teams determine which data-handling, monitoring, training, and escalation activities deserve particular attention. A different activity with limited potential impact may justify a lighter control structure.
From a clinical operations perspective, this requires early dialogue among the functions that will execute the study. Protocol development, data management, safety, statistics, monitoring, medical oversight, technology, and site operations may each see different vulnerabilities in the same design. Bringing those perspectives together before execution allows quality planning to reflect how the trial will actually operate, rather than relying exclusively on controls introduced after difficulties emerge.
Operational Readiness Depends on Cross-Functional Integration
Risk-based quality management is difficult to operationalize when risk is treated as the responsibility of a single department.
The MHRA (2026) specifically emphasizes cross-functional involvement in identifying and reviewing critical-to-quality factors. Its guidance notes that a factor considered critical to quality will rarely affect only one functional area and calls for a common understanding across the functions involved in a trial. GOV.UK
This is where the difference between a risk register and a functioning risk-management model becomes visible. A documented risk may sit within a quality system, but the information needed to understand that risk may originate elsewhere: clinical operations may observe site-performance patterns, data management may identify inconsistencies, safety teams may recognize an emerging signal, and monitoring may detect deviations that change the risk profile.
The operational requirement is therefore connectivity. Teams need to know what information matters, where it will originate, who is expected to evaluate it, and which thresholds should lead to further review or escalation.
Industry research suggests that this integration cannot be assumed simply because organizations have adopted risk-based terminology. Dirks et al. (2024) surveyed 206 respondents representing pharmaceutical, biotechnology, CRO, medical device, diagnostic, and vendor organizations and evaluated 32 RBQM practices. Respondents represented an estimated 125 companies and provided adoption estimates covering more than 12,000 trials. Across the sample, organizations reported using the assessed RBQM components in an average of 57% of their trials, with adoption varying by organizational size and trial stage. The authors also identified limited organizational knowledge, mixed perceptions of RBQM’s value, and weaknesses in change-management planning among barriers to broader adoption. PubMed Central (PMC)
These findings describe the surveyed organizations and should not be treated as a universal measure of industry maturity. They do, however, reinforce an important implementation lesson: establishing tools, indicators, or procedures is only one part of readiness. People across functions also need a shared understanding of how risk-based decisions should be made.
For clinical operations leaders, this can mean connecting risk review to existing operational forums rather than creating a parallel quality process that functions independently of study management. The objective is to ensure that risk information informs decisions while there is still an opportunity to act.
Oversight Across Service Providers Requires Visibility and Clear Decision Pathways
Modern clinical trials frequently distribute activities across multiple organizations and specialized functions. Risk-proportionate oversight must therefore work across organizational boundaries as well as internal ones.
ICH (2025) makes an important distinction between transferring activities and transferring responsibility. Sponsor trial-related activities may be transferred to service providers when appropriately documented, but the guideline states that ultimate responsibility for sponsor trial-related activities remains with the sponsor. It also expects sponsors to have access to relevant information for selecting and overseeing service providers and to maintain appropriate oversight of important transferred activities, including activities that may be further subcontracted. ICH Database
This has direct implications for governance. Oversight cannot depend solely on whether work was completed according to schedule. Sponsors may also need visibility into information that indicates whether critical-to-quality factors remain adequately controlled.
The appropriate level of visibility will differ by activity and risk. A function closely connected to participant safety or a primary endpoint may require a different oversight structure from an activity with limited influence on critical trial outcomes. Metrics, governance meetings, escalation pathways, monitoring outputs, and performance reviews are therefore most useful when they are linked to decisions rather than collected simply because they are available.
The same principle applies when sponsors use Functional Service Provider models. FSP should not be reduced to the availability of additional headcount. From a risk-proportionate perspective, the relevant questions include whether professionals have the functional capability required for the assigned activities, whether they understand the sponsor’s processes and decision pathways, whether responsibilities are clear, and whether relevant information can move efficiently between embedded resources and sponsor leadership.
An FSP model is not inherently more or less effective than another outsourcing structure. Its suitability depends on the sponsor’s needs, the activities being supported, and the governance established around them. Where functional teams are integrated into sponsor processes, operational readiness depends on connecting capability with accountability and visibility.
ICH (2025) also states that sponsors should ensure timely escalation and follow-up of issues so appropriate action can occur. This reinforces the idea that oversight is not simply observation. Information becomes meaningful when a defined decision pathway connects an emerging issue with assessment, ownership, action, and follow-through.
Conclusion
Risk-proportionate clinical trials are not defined by fewer procedures, fewer controls, or fewer oversight activities. They are defined by greater discrimination about where those activities create value.
ICH E6(R3), FDA’s final U.S. guidance, and the MHRA’s 2026 framework all reinforce a direction in which quality is considered during trial design, risks to critical-to-quality factors are managed throughout the lifecycle, and oversight is aligned with trial complexity and significance rather than applied uniformly. ICH Database
For clinical operations, translating those principles into practice requires more than a risk-management document. Teams need a common understanding of what matters most to the study, clear ownership of the information needed to evaluate those priorities, mechanisms for revisiting risk as conditions change, and defined pathways for decisions and escalation.
The same expectations remain relevant when work is distributed across functional teams and service providers. Delegation can change who performs an activity, but it does not eliminate the need for appropriate sponsor oversight. In this context, operational readiness is less about creating another layer of process and more about ensuring that capability, information, accountability, and decision-making remain connected.
As organizations continue adapting to E6(R3), the opportunity is to make quality management more deliberate rather than simply more extensive. A risk-proportionate operating model can focus attention on the aspects of a trial that matter most while allowing study teams to design controls around the actual risks, complexity, and objectives of each study.
References
Dirks, A., Florez, M., Torche, F., Young, S., Slizgi, B., & Getz, K. (2024). Comprehensive assessment of risk-based quality management adoption in clinical trials. Therapeutic Innovation & Regulatory Science, 58(3), 520–527. https://doi.org/10.1007/s43441-024-00618-5. Open-access article Springer
Food and Drug Administration. (2025). E6(R3) good clinical practice: Guidance for industry. U.S. Department of Health and Human Services. FDA final guidance U.S. Food and Drug Administration
International Council for Harmonisation of Technical Requirements for Pharmaceuticals for Human Use. (2025). ICH harmonised guideline: Guideline for good clinical practice E6(R3). ICH E6(R3) guideline ICH Database
Medicines and Healthcare products Regulatory Agency. (2026). Clinical trials for medicines: Guidance on quality and risk proportionality. GOV.UK. MHRA guidance GOV.UK
Perez-Gracia, J. L., Penel, N., Calvo, E., Awada, A., Arkenau, H. T., Amaral, T., Grünwald, V., Sanmamed, M. F., Castelo-Branco, L., Bodoky, G., Lolkema, M. P., Di Nicola, M., Casali, P., Giuliani, R., & Pentheroudakis, G. (2023). Streamlining clinical research: An ESMO awareness call to improve sponsoring and monitoring of clinical trials. Annals of Oncology, 34(1), 70–77. https://doi.org/10.1016/j.annonc.2022.09.162. PubMed record
