Features

From Paper to Practice: Annex 1 Has Reset Expectations

What customers and inspectors want to see in 2026—and where contract manufacturers are still falling short.

Author Image

By: Niamh Bisset

Director of Transformation, West Pharmaceutical Services

Photo courtesy of West Pharmaceutical Services

For a regulation that has been discussed for years, the revised EU GMP Annex 1 has a distinctly immediate feel. It is no longer a future state to plan toward; it is the working baseline against which regulators and inspectors assess sterile manufacturing. For contract development and manufacturing organizations (CDMOs), that shift is showing up in bid requests, due diligence questions, and the tone of facility walkthroughs. The market signal is simple: being able to talk about contamination control strategies (CCS) is not enough; customers and regulators want to see how its principles are embedded in day-to-day decisions, behaviors, and investments.

This commentary takes a practical look at why Annex 1 matters right now, where contract manufacturers are winning—or slipping—and how to maintain momentum without burning resources on performative compliance. Rather than restating every requirement, it weighs what is shaping customer expectations and inspection focus in 2026 and what resulting actions provide the highest return for the next planning cycle.

From document to operating model 

Annex 1 reframes the Contamination Control Strategy from a static document into an operating model embedded within the Pharmaceutical Quality System (PQS). In practice, this means the CCS functions as a closed loop system rather than a onetime deliverable: risks are systematically identified and assessed, controls are deliberately designed and implemented, performance is monitored through meaningful data, and outcomes are reviewed to drive action and adjustment. This Plan–Do–Check–Adjust discipline is what distinguishes intent from execution.

Contract manufacturers that can demonstrate this cycle—risk assessment informing controls, controls generating data, and data driving timely decisions—are increasingly favored by customers. Not because they are simply compliant with Annex 1, but because a mature CCS reduces uncertainty. It provides visibility, predictability, and confidence that contamination risks are being actively managed rather than retrospectively explained. In an environment where oversight burden, inspection readiness, and supply continuity matter as much as compliance itself, a CCS that operates as part of the PQS has become a differentiator, not a checkbox.

Why now: pharmaceutical companies are standardizing upward 

Pharmaceutical drug developers and manufacturers running global programs are increasingly standardizing their quality expectations to the most stringent interpretation of contamination control standards, rather than managing different standards across regions. This “harmonization upward” is a deliberate risk management choice. Maintaining multiple quality systems increases complexity, inspection risk, and oversight burden, particularly when products move between regions or manufacturing partners. As a result, manufacturers are setting a single, high watermark expectation and they require contract manufacturing organizations to operate to that same level.

This shift is clearly reflected in requests for proposals, due diligence audits, and technical discussions, where questions now focus less on whether Annex 1 requirements are met and more on how contamination risks are actively controlled. Pharmaceutical manufacturers are asking how barrier strategies reduce human intervention, how environmental and process monitoring data are trended and used in batch release decisions, and how supplier and component controls support sterility assurance upstream of the fill line. For CDMOs, aligning to the highest common denominator is no longer an aspirational goal—it has become a prerequisite for participation in global development and commercial supply programs. 

Barrier strategy: reducing risk by design

Annex 1 is explicit about the role of barrier technologies, but the competitive advantage does not come from owning an isolator; it comes from using barrier design to redesign people’s work. Facilities that pair isolators with practical measures—reduced glove port touches, thoughtful transfer strategies, and qualification plans that map directly to quality risk management—see fewer interventions and smoother media fills. For CDMOs upgrading legacy lines, the question is not simply Restricted Access Barrier Systems (RABS) versus isolator; it is which configuration measurably lowers human borne risk while preserving flexibility for varied products and client timelines.

Monitoring that matters

Annex 1 hardened expectations for continuous monitoring in Grade A environments, but the differentiator is how data is used. High performing sites convert monitoring into an early warning system: setting meaningful alert and action levels, trending excursions across lots and shifts, and linking patterns back to training or maintenance. When pharmaceutical companies ask for evidence of control, they are often satisfied less by the sheer volume of data than by the clarity of the story the data tells. That is where a well-structured CCS delivers value; it creates a clear line of sight between risk assessments, implemented controls, and the data that shows the effectiveness of those controls. 

Human factors and culture change

Annex 1 connects operator behavior to sterility assurance more explicitly than prior versions. The upshot for CDMOs is that training must move beyond procedural recall toward situational awareness—how people move, hand off, and escalate when conditions change. The strongest programs make cleanroom behaviors observable and coachable. Brief, focused refreshers before shift entry, visual cues that reinforce gowning discipline, and immediate debriefs after atypical events anchor the culture in everyday practice. None of this requires expensive technology; it does require leadership attention and consistency.

Primary packaging moves upstream

Another visible shift is the treatment of primary packaging as part of the CCS, not a downstream procurement detail. Pharmaceutical companies increasingly expect to see risk-based component selection, supplier qualification depth, and validated cleaning or sterilization pathways whether performed in house or by partners. CDMOs that can articulate how component controls tie into aseptic process simulations, line clearance, and environmental monitoring demonstrate system thinking that resonates with both their customers and inspectors.

Knowledge management—the multiplier

The most underutilized Annex 1 capability is knowledge management. The spirit of the revision favors organizations that capture what works, standardize it, and share it across sites. In practical terms, that means building lightweight mechanisms that push lessons learned from deviations, media fills, and client tech transfers into global procedures and training content. Contract manufacturers that demonstrate this adaptive learning loop reduce repeat deviations and present a consistent face to sponsors, even across geographically dispersed networks.

What inspectors are probing

In Annex 1 inspections, the emphasis has shifted from the presence of documented procedures to evidence of effective control. Inspectors increasingly focus on how contamination risks are identified, managed, and reduced in practice, and whether the CCS is actively applied rather than passively maintained. This includes how barrier strategies are justified through quality risk management, how human interventions are minimized and assessed, and how environmental and process monitoring data are trended and used to inform decisions.

Rather than reviewing isolated data points, inspectors assess whether sites can demonstrate understanding of their risks, consistency in their controls, and responsiveness when performance drifts. The strength of the inspection outcome is therefore less about the volume of documentation available and more about the coherence between risk assessment, operational controls, monitoring results, and the actions taken when signals emerge.

Supplier partnerships as risk controls

Annex 1’s emphasis on end-to-end control elevates the role of suppliers—from component manufacturers to sterilization and testing partners. For CDMOs, two practices stand out. One is making supplier process understanding visible: mapping the supplier’s critical controls to your CCS and showing how their data integrates into your batch release decisions. The other is joint readiness: conducting pre-inspection drills that include key suppliers so that answers about component sterility assurance or transport conditions are consistent and fast. In a world where regulators and sponsors expect supply chains to act as extensions of the manufacturer, these habits are differentiators.

Market pulse: where budgets are shifting

In sourcing conversations this year, two themes dominate: evidence and speed. Pharmaceutical companies want proof that controls work under routine stress—not just in qualification—and faster time from tech transfer to steady state. Selection is leaning toward partners who show recent media fill performance, ready to run playbooks for common modalities, and a quantified cycle time impact from barrier upgrades or harmonized procedures.

Cost of change versus cost of failure 

As Annex 1 expectations harden, many organizations are reassessing the economics of when—and how—to act. Planned changes, such as upgrading barrier technologies, tightening controls, or improving monitoring systems, require upfront investment and operational effort. However, the alternative is often far more disruptive. Unplanned deviations, adverse inspection outcomes, delayed batch release, or loss of customer confidence carry significantly higher financial, operational, and reputational consequences.

Viewed through this lens, the question is no longer whether change is costly, but whether postponing it increases exposure to avoidable risk. Organizations that act early can spread investment over time and maintain control of the transition. Those that wait are more likely to absorb the cost under pressure, when options are limited and the impact to supply and trust is greatest.

What good looks like in 2026 

By end of 2026, a strong CCS will no longer be defined by the completeness of a document, but by how effectively it evolves with the operation. Mature CCS implementations will function as living systems within the PQS, being continuously updated as processes, technologies, and risk profiles change. They will be built on structured risk assessment, translated into clear and proportionate controls, and supported by monitoring that provides meaningful insight rather than data volume alone.

In practice, CCS maturity will be evident when organizations can demonstrate how risks are reassessed over time, how controls are adjusted in response to performance trends, and how lessons learned are embedded into procedures, training, and design decisions. These CCS programs show continuity across people, processes, and suppliers, with clear ownership and governance rather than reliance on periodic reviews. For inspectors and customers alike, “good” now means a CCS that adapts, learns, and improves—one that shows ongoing control of contamination risks rather than retrospective justification after issues arise.

A final thought: defense over perfection

While the revision was intended to reduce ambiguity, it did not render expectations static or fully defined. Instead, expectations continue to evolve as Annex 1 is applied in practice.

The practical goal for contract manufacturers is not spotless dashboards; it is defendable control—control you can explain and show, under pressure, with data and behaviors that match. If your CCS helps people do that in real time, you are already ahead. If it does not, the best time to simplify and refocus it is now.

Why now? Because pharmaceutical companies are calibrating their networks today, and inspections are testing not just knowledge of Annex 1 but maturity against it. In that environment, the advantage belongs to organizations that turn the language of the regulation into the daily logic of how work gets done.


Niamh Bissett is a seasoned pharmaceutical operations leader and experienced speaker with more than 20 years of experience in quality, program management, and cross-functional transformation within highly regulated environments. Since joining West Pharmaceutical Services in 2005, she has built a career at the intersection of operational excellence, regulatory compliance, and strategic program delivery across global networks. In her current role as Director of Business Transformation, Niamh provides strategy, vision, direction, and support for the Business Transformation Organization and leads global initiatives across the Elastomer Organizations within West Pharmaceutical Services, in the focus areas of Intermix, Contamination Control & Risk Management.

Keep Up With Our Content. Subscribe To Contract Pharma Newsletters