How to Validate a New
Field Instrument
After Installation

Why Adding an Instrument Is a Change Control Event

Once a pharma automation system is validated, its state is defined by a set of controlled documents — the Hardware Design Specification, the Engineering Lists, the Traceability Matrix, the Validation Summary Report, and the IQ/OQ/PQ protocols that closed out the original qualification. Every instrument that is part of the validated system is listed in these documents. An instrument that is not in these documents does not exist as far as the validated system is concerned.

When you add a new instrument — even a simple thermocouple that takes a single I/O point — you are adding something to the validated system that was not validated. The instrument register is now inaccurate. The IQ record does not include a calibration certificate for the new instrument. If the instrument feeds any alarm, interlock, or GMP record, that function is operating based on an unvalidated measurement. You have broken the validated state.

The mechanism for adding a new component to a validated system is change control — not because regulators are bureaucratic, but because change control ensures the addition is reviewed, the documents are updated, the new instrument is properly qualified, and the validated state is formally restored. See the article on change control for validated systems for the full change control process.

The Complete Sequence — Eight Steps

The process for validating a new field instrument on an already-validated pharma system follows this sequence. Each step produces specific documented evidence that collectively restores the validated state for the new addition.

Step 1 — Raise the Change Control Request

The process starts with a Change Control Request (CCR) raised in the site change management system. The CCR captures what is being added, why it is being added, the GMP risk classification of the new instrument, what design documents need to be updated, and what qualification activities are required before the instrument can enter GMP service.

The impact assessment in the CCR must address:

• Does the new instrument add a new I/O point, or is it replacing an existing one?
• Does the new instrument feed a new SCADA tag, or is it substituting an existing measurement?
• Does the addition require any PLC logic changes (new alarm blocks, new interlock inputs)?
• Does the addition affect any existing validated functions — for example, does adding a second conductivity sensor change how the conductivity alarm logic works?
• What qualification activities are required — partial IQ only, or partial IQ and partial OQ?

The CCR must be approved by QA before any physical work begins. Installing first and raising change control afterward is a data integrity violation that invalidates the qualification evidence — the IQ walk-down must happen after the installation and after the design documents have been updated to reflect the as-designed state of the new addition.

Step 2 — Update the Design Documents

Before the instrument can be installed, the design documents must be updated to reflect the planned addition. This is the "design" phase of the mini-V-model for the change. The documents that typically require update for a new field instrument are:

• Hardware Design Specification (HDS): add the instrument to the field instrumentation section (equivalent to HDS Section 4), with manufacturer, model, measurement range, calibration interval, and GMP classification. If the instrument requires a new process connection, update the installation drawings reference.
• Engineering Lists (EL): add a new row to the Instrument List tab with all instrument data. If a new I/O point is required, add it to the I/O List tab with the PLC address and signal type. If the instrument is GMP-critical and historian-tagged, add it to the Historian Tag List.
• P&ID drawings: add the instrument symbol to the relevant P&ID sheet and assign the tag number. Issue the P&ID at a new revision — "Revised for addition of [tag]."
• Traceability Matrix (TM): if the instrument satisfies or contributes to a URS requirement not previously addressed, add the traceability link. If the instrument is adding a new measurement function not in the original URS, assess whether the URS needs supplementing.

All updated documents must go through their normal review and approval process before IQ can be executed against them. A partial IQ that verifies the instrument against a draft (unapproved) HDS is not valid evidence.

Step 3 — Obtain the Calibration Certificate

Before installation, obtain the calibration certificate for the specific instrument (identified by serial number) that will be installed. Verify the certificate meets the GMP requirements for traceability and currency as described in the calibration management article. File the certificate — it will be the primary evidence for the partial IQ calibration verification step.

If the instrument has not yet been calibrated (some manufacturers ship instruments uncalibrated and expect the customer to perform the initial calibration), arrange calibration by an accredited laboratory before installation. Do not assume factory accuracy is sufficient — the GMP requirement is a traceable calibration certificate, not just an accuracy specification.

Step 4 — Install and Configure

Install the instrument in accordance with the updated HDS and the manufacturer's installation guidelines. Pay particular attention to the installation requirements that affect measurement accuracy — straight pipe run for flow meters, mounting position for level transmitters, orientation for pressure transmitters. These are IQ verification items; they must be correct before IQ begins.

Configure the instrument (transmitter scaling, output range, HART address if applicable) to match the HDS specification. Configure the PLC I/O channel with the correct engineering unit scaling. Add the SCADA tag and historian tag if required. Verify that the SCADA displays the correct engineering units and that the tag name matches the naming convention defined in the original SDS.

Step 5 — Execute a Partial IQ

The partial IQ is a targeted qualification document covering only the new instrument. It follows the same structure as the original IQ protocol — it just has a much narrower scope. The partial IQ must cover:

• Nameplate verification: tag number, manufacturer, model, serial number verified against updated HDS
• Installation inspection: physical location, process connection, orientation, cable entry, labelling — verified against HDS installation requirements and P&ID
• Calibration certificate verification: certificate reference, calibration date, next due date, traceability statement — all verified and recorded
• I/O channel continuity: cable traced from instrument to panel terminal to PLC I/O module; I/O address verified against updated Engineering Lists I/O List
• Loop accuracy check (optional at IQ, required at OQ): some teams include a basic live signal check at IQ — applying a known physical stimulus and verifying the SCADA display responds correctly. This is technically an OQ activity, but including it at the IQ stage for new instruments on live systems is pragmatic.

The partial IQ must reference the CCR number, the updated HDS revision, and the calibration certificate. It is approved by the validation lead and QA before the instrument can be considered qualified at the IQ level.

Step 6 — Execute a Partial OQ (If Required)

Whether a partial OQ is required depends on the GMP role of the new instrument. For an instrument that feeds a new alarm function not previously in the validated system, a partial OQ is required to verify that the alarm triggers at the correct threshold. For an instrument that is purely an additional measurement with no new alarm, interlock, or automatic control function, the partial IQ may be sufficient for GMP purposes — document this assessment in the CCR impact assessment and get QA agreement.

The partial OQ test cases cover only the new functions introduced by the new instrument:

• Signal accuracy test: inject a known reference signal (or apply a known physical stimulus) and verify the SCADA displayed value is within the specified tolerance
• Alarm test: if the instrument feeds an alarm, verify the alarm triggers at the correct threshold and is recorded in the audit trail with the correct tag, value, and timestamp
• Historian recording test: verify the tag is recording at the correct scan rate and deadband, and that the historian retains the data with the correct retention policy
• Interlock test: if the instrument feeds a safety interlock, verify the interlock triggers at the correct threshold and cannot be bypassed without a valid supervisor electronic signature

Step 7 — Update the Traceability Matrix and Validation Register

Once the partial IQ and OQ are signed off, the Traceability Matrix must be updated to include the new test cases and their links to any URS requirements they address. The Engineering Lists Calibration Register tab must be updated with the new instrument's certificate reference and next due date. If the site maintains a validation register or equipment register, add the new instrument with its qualification status and calibration schedule.

The Validation Summary Report does not need to be reissued for minor additions — instead, the CCR and its attached partial IQ/OQ records serve as the addendum to the original VSR. However, the site's change management procedure may require a VSR addendum or a periodic review finding to formally acknowledge the addition. Follow the site's procedure.

Step 8 — Close the Change Control Record

The CCR is closed once all actions are complete: design documents updated and approved, partial IQ signed off, partial OQ signed off (if required), Engineering Lists calibration register updated, Traceability Matrix updated. QA reviews the complete package and closes the CCR. Only at this point is the instrument considered part of the validated system and eligible for use in GMP records and decisions.