Mylan.
Product: pharmaceutical manufacturing facility
Date: 8/6/2015

Your firm failed to exercise appropriate controls over computer or related systems to assure that only authorized personnel can change master production and control records, or other records (21 CFR 211.68(b)).

Your Siemens computer-based BMS and NVPMS do not require passwords to access the network and servers. Your contractors? access is uncontrolled. Responsibilities for system administrators are undefined.

This violation is recurrent. On September 9, 2013, we cited your firm in Warning Letter 320-13-26 for failure to exercise appropriate controls over computer or related systems

FDA District Office: CDRH

Schedule Discussion with John F. Murray, Jr.

John is currently providing telephone and face-to-face meetings to discuss:  Cybersecurity, Part 11, 483 Response, design controls expectations for software documentation, and other topics.

Leave a message and we will contact you to schedule:

Corporate Office

+1-781-721-2921
Partners located in the US (CA, FL, MA, MN, TN) and Italy.