You can use this system for a lot of important functions: tracking every stage of the drug discovery and development process, preparing electronic submissions, tracking your business and making decisions based on real-time information, and ensuring that you're in compliance with FDA's 21 CFR Part 11 guidelines and the requirements of Sarbanes-Oxley, to name just a few.
If you lose what's in your ECM, you're in big trouble.The great rule of computing, of course, is to back everything up, so that when a glitch takes place you can recover your information. There are a variety of systems for doing this sort of backup and recovery, so if you go to your IT team and ask whether your ECM system is fully protected, they'll probably tell you yes.
Unfortunately, it's often not quite that simple. In fact, many pharma companies today needlessly expose themselves to data losses that could result in clinical studies being placed on hold, withdrawn approval of initial new drug applications, and in extreme cases, criminal prosecution. The culprit: backup and recovery strategy.
Understanding Information Loss
It's important to understand that there are two different types of data loss, and two different kinds of information you can lose.
There are two types of data loss.
Partial information loss, the lesser known but more sinister form of loss, is quite another matter. A partial loss affects one, several, or thousands of pieces of information in an ECM system, rather than the entire system. It is caused by common, everyday incidents such as accidental user deletions, programmatic errors, malfeasance, corruptions, and viruses.
According to AIIM International and Strategic Research, events of this sort account for more than 80 percent of all ECM system information loss. And the results can be devastating, creating a crisis for both the IT and business sides of the company.
Take the case of a Fortune 200 pharmaceutical manufacturer's experience, when an IT administrator accidentally overwrote a folder that was linked to 15,000 other files containing more than 100,000 links to other content and metadata. Many of the files were documents necessary to support the company's current good manufacturing process guidelines, and their loss caused compliance risk with these and other FDA regulations. Manufacturing was shut down as the company scrambled to recover the documents, halting the production of drugs worth millions of dollars in revenue.
The company could have taken the ECM system offline and recovered the information using a traditional "cold" backup. But that wasn't a viable option; additions and changes made to the
The company lost more than $100,000 in productivity, spending over 1,100 hours recovering content from backup tapes and re-creating employee work—but no original metadata could be recovered.
The loss of metadata is particularly damaging. If the relationships between content (documents) and their associated metadata are broken, the ability to quickly respond to business demands, audits, and e-discovery requirements (as well as complying with 21 CFR Part 11) becomes severely impaired or even impossible. Worse, on the drug development side, if you break the link between content and metadata, you've broken the chain of custody of your data. This can delay drug submissions or halt manufacturing, which can cost millions of dollars in lost revenue, brand exposure and market share.
In the case of this particular company, subsequent reviews of help desk incidents indicated that there had been 46 partial data loss incidents over a three-year period—more than one a month. All incidents had resulted in the permanent loss of metadata, and when recovery of content was attempted, the effort either took several days or was abandoned completely.