---
title: "Annex 1 contamination control strategy in practice | QLogixCMC"
description: "What the revised EU GMP Annex 1 asks of sterile manufacturers, where inspections find gaps, and an interactive EM trend that catches a contamination shift early."
url: https://qlogixcmc.com/blog/annex-1-contamination-control-strategy
markdown: https://qlogixcmc.com/blog/annex-1-contamination-control-strategy.md
updated: 2026-10-06
publisher: "QLogixCMC (QLogixCMC LLC)"
language: en-US
---

Sterile manufacturing 6 October 2026 3 min readBy QLogixCMC

# Annex 1 three years on: the contamination control strategy inspectors now read first
A contamination control strategy (CCS) is the document, required by the revised EU GMP Annex 1 since August 2023, that sets out how a sterile manufacturing site keeps microbial, pyrogen and particulate contamination out of its products: every control, from facility design and gowning to sterilization, aseptic process simulation and environmental monitoring, with the reasoning that connects them and the data that shows they work. Three years on, inspectors ask for it first, and the gap they find most is not a missing control but a missing connection between the controls and the data.

## What the revised annex changed
- A documented contamination control strategy for the site, maintained and reviewed, that links the controls to the risks they address
- Quality risk management as the basis for the design of the facility, the process and the monitoring, with the assessments on file
- Environmental and personnel monitoring with alert and action levels, trended, and reviewed as part of the CCS rather than as a stand-alone log
- Aseptic process simulation, sterilization and barrier technology expectations written out in more detail, and the same expectations applied to advanced therapies made aseptically
- Explicit attention to the people in the cleanroom: qualification, gowning, behaviour and the frequency of their monitoring

## Where inspections find the gaps
- A CCS that lists procedures without saying which contamination risk each one controls, or what evidence shows it works
- Environmental monitoring reviewed sample by sample against action levels, with no trend that would show a slow drift
- Alert and action levels copied from the annex's tables rather than set from the site's own data
- Interventions in the aseptic process that are performed but not represented in the process simulation
- A CCS written once for the inspection and not updated after changes, deviations or monitoring excursions

## Trending is the part that pays
Action levels catch a bad day. A contamination recovery rate, the share of samples showing growth in a period, trended against a limit set from the site's own baseline, catches a bad month: a gowning change that did not take, a disinfectant rotation that stopped, an air handling unit losing capacity. The annex asks for both, and the second is where a site learns something before a batch is at risk.

Interactive
Catching a contamination shift: action levels or the trend?
Samples per week40 Baseline recovery rate3 % Shift starts in week20 Recovery rate after the shift7 % Trend window6 weeks
6weeks earlier from the trend
The trend crosses its limit in week 23; the first action-level excursion comes in week 29. Every batch in between was made in an area already drifting.

- Weekly recovery rate
- 6-week trend
- Trend limit from baseline
- First action-level excursion

Illustrative counts. Action levels are set per sample and catch a bad day; the contamination recovery rate, trended against a limit set from the site's own baseline, catches a worse month. Annex 1 asks for both, with the trend reviewed as part of the contamination control strategy. A tighter window reacts faster and alarms more often; the site picks the window from its baseline data.

## How QLogixCMC helps
QLogixCMC writes or remediates the contamination control strategy from the site's risk assessments and data, sets alert and action levels and trend limits from the baseline, designs the environmental monitoring program and its review, prepares the aseptic process simulation protocol, and runs mock inspections that read the CCS the way an inspector does. The site's qualified people own the strategy and sign every limit.

## Related services
- [Quality systems and QMS](https://qlogixcmc.com/services/quality-systems)
- [Validation and computer software assurance](https://qlogixcmc.com/services/validation-and-csa)
- [Inspection readiness and compliance remediation](https://qlogixcmc.com/services/inspection-readiness)

## Facing this at your site?
Bring the numbers from the figure above. We will say what we would assess first and what we would leave alone.
[Request a meeting](https://qlogixcmc.com/contact)

## Questions this post answers

### What has to be in a contamination control strategy?

The controls the site relies on to keep microbial, pyrogen and particulate contamination out of its products, the risks each control addresses, the monitoring that shows the controls work, and the process for reviewing and updating the strategy. Annex 1 lists the elements it expects to see covered, from facility design and utilities to personnel, process, sterilization and monitoring.

### How are alert and action levels set?

From the site's own monitoring data, reviewed periodically, within the maximum limits the annex sets per grade. A level copied from the annex's table is a ceiling, not a site's alert level; a level set from the baseline is what makes a trend meaningful.

### Does Annex 1 apply to US sites?

Directly only to products made for the EU market and to sites inspected by EU authorities. In practice its expectations, in particular the contamination control strategy, are read alongside FDA's aseptic processing guidance, and FDA inspectors ask similar questions of the same controls.

## More from the blog
- [Technology transfer · 20 October 2026Onshoring drug manufacturing: the tech transfer and validation path to a US site](https://qlogixcmc.com/blog/onshoring-drug-manufacturing-tech-transfer)
- [AI and digital quality · 13 October 2026AI in the GMP quality system: what Annex 22 and your next inspector will ask](https://qlogixcmc.com/blog/ai-in-gmp-quality-system-annex-22)
- [Validation · 29 September 2026Computer software assurance: how much testing does your system actually need?](https://qlogixcmc.com/blog/computer-software-assurance-how-much-testing)

## Talk it through with someone who has run a plant
Bring your backlog, your submission timeline or the Form 483. We will tell you plainly what we would do first, what it would take, and what we would leave alone.
[Request a meeting](https://qlogixcmc.com/contact)[Email us](mailto:contact@qlogixcmc.com)

In the first meeting we cover
- What is on your mind: a backlog, a submission, a validation program, an inspection date or a system that is not working
- What we would assess first, and what we would leave alone
- Whether an engineer on your site, a fixed-scope assessment or a defined deliverable is the right way to start

## More from QLogixCMC

- [Onshoring drug manufacturing: the tech transfer and validation path to a US site](https://qlogixcmc.com/blog/onshoring-drug-manufacturing-tech-transfer.md): Bringing a product to a new US site: gap analysis, qualification, method transfer, engineering and PPQ batches and PAI readiness, with an interactive timeline.
- [AI in the GMP quality system: what Annex 22 and your next inspector will ask](https://qlogixcmc.com/blog/ai-in-gmp-quality-system-annex-22.md): EU GMP Annex 22: what the draft asks of AI in GMP, the questions inspectors already ask, and an interactive look at AI-drafted deviation investigations.
- [Computer software assurance: how much testing does your system actually need?](https://qlogixcmc.com/blog/computer-software-assurance-how-much-testing.md): FDA's CSA approach scales validation testing to the risk of each function. What changed from CSV, how to apply it, and an interactive estimate of the effort saved.
- [Comparability for cell, gene and mRNA therapies: proving a process change left the product unchanged](https://qlogixcmc.com/blog/cell-gene-mrna-therapy-comparability.md): Why advanced therapies change process so often, what ICH Q5E and FDA's CGT guidance expect, and an interactive study showing why lot count decides the result.
- [Why 21 CFR 211.192 stays the most-cited observation, and how a backlog really comes down](https://qlogixcmc.com/blog/211-192-investigations-backlog.md): What 211.192 requires, the three ways investigations fail, and an interactive burn-down showing when a deviation backlog clears and which records go first.
- [QLogixCMC home](https://qlogixcmc.com/index.md): CMC consulting for biotech, pharma and CDMOs: Module 3 from IND to BLA, control strategy, GMP quality systems, validation, CAPA and FDA inspection readiness.
- [Services](https://qlogixcmc.com/services.md): QLogixCMC services, on site or remote: CMC and regulatory, quality systems, validation and CSA, investigations and CAPA, inspection readiness, GxP systems and AI.
- [Request a meeting](https://qlogixcmc.com/contact.md): Talk to QLogixCMC about a CMC submission, your quality system, validation, an investigation backlog or an FDA inspection. We reply to set up a time.
- [llms.txt: a summary of the site for AI assistants](https://qlogixcmc.com/llms.txt)
- [Site map](https://qlogixcmc.com/sitemap.md)

---
Source: https://qlogixcmc.com/blog/annex-1-contamination-control-strategy
Cite this page as https://qlogixcmc.com/blog/annex-1-contamination-control-strategy
QLogixCMC · contact@qlogixcmc.com · +17146639012