Systems must be assessed in different ways to estimate how critical they are to the organization and the processes and to provide prioritization of the different systems, because everything cannot be done at once. The VMP should describe the different assessment methods that an organization uses to evaluate risk related to systems and to prioritize those systems. The most important of these assessment methods commonly used in industry include:
1.GXP (Good Manufacturing Practice, Good Clinical Practice, Good Laboratory
2.Practice) risk assessment
3.21 Code of Federal Regulations (CFR) Part 11 assessment
4.GAMP SW/HW Category
5.Business criticality
6.Vendor assessment
7.Gap analysis for existing systems