Study guide
28.1 Safety Reconciliation and Dataset Finalisation
ACRP CCRA Certified Clinical Research Associate Study Guide 2026 Exam
Track your progress as you read
Finished sections get a check mark.
1 Chapter 1: Exam Format, Eligibility and Registration
1.1 Exam Format, Eligibility and Current References 1.2 Registration, Fees and Candidate Decisions
2 Chapter 2: CRA Responsibilities and Study Planning
2.1 The CRA Role, Data Integrity and Product Oversight 2.2 Official Blueprint and Study Strategy
3 Chapter 3: Protocols, Endpoints and Trial Design
3.1 Protocol Elements and Endpoint Hierarchy 3.2 Endpoint Interpretation and Eligibility Rationale 3.3 Eligibility Verification and Trial Designs
4 Chapter 4: Bias Control, Blinding and Product Information
4.1 Bias, Randomisation and Comparator Controls 4.2 Unblinding and Investigator Brochure Content 4.3 Reference Safety Information and IB Updates
5 Chapter 5: Estimands and Device Instructions
5.1 Estimands and Intercurrent Events 5.2 Device Instructions, Configuration and Training
6 Chapter 6: Ethical Foundations and Independent Oversight
6.1 Ethical Foundations and the 2024 Declaration of Helsinki 6.2 Vulnerability, Voluntariness and Compensation 6.3 IRB/IEC Composition and Independent Review
7 Chapter 7: Ethics Communication and Informed Consent
7.1 Ethics Reporting, Approval Status and Version Control 7.2 Informed Consent Information and Meaningful Choice 7.3 Consent Documentation, Special Circumstances and Updates
8 Chapter 8: Recruitment, Retention and Confidentiality
8.1 Ethical Eligibility, Recruitment and Retention 8.2 Privacy, Confidentiality and Appropriate Access
9 Chapter 9: Safety Definitions and Classification
9.1 Adverse Event Definitions and Actual Life-Threatening Risk 9.2 Seriousness, Severity and Medical Importance 9.3 Causality, Expectedness and Reference Safety Information
10 Chapter 10: Safety Detection, Reporting and Oversight
10.1 Detecting Events, AESIs and Collection Windows 10.2 Expedited Reporting and the Sponsor Awareness Clock 10.3 Immediate Site Reporting and Independent Safety Oversight
11 Chapter 11: Follow-Up, Adherence and Conflicts
11.1 Safety Communications, Reconciliation and Follow-Up 11.2 Adherence, Discontinuation and Participant Choice 11.3 Conflicts of Interest and Prorated Payments
12 Chapter 12: Development Stages and Product Management
12.1 Nonclinical Background and Human Pharmacology 12.2 Exploratory, Confirmatory and Therapeutic-Use Studies 12.3 Product Storage, Labelling and Excursion Response
13 Chapter 13: Accountability, Integrity and Regulatory Status
13.1 Product Accountability and Adherence Calculations 13.2 Potential Fraud, Misconduct and Evidence Preservation 13.3 Submissions, Authorisation Status and Trial Reporting
14 Chapter 14: Current GCP Principles and Delegation
14.1 The Eleven Current GCP Principles 14.2 Proportionality and Investigator Oversight 14.3 Delegation, Qualifications and Task Authority
15 Chapter 15: Oversight, Protocol Control and Amendments
15.1 Clinical Oversight and Immediate-Hazard Changes 15.2 Deviation Classification and Resolution
16 Chapter 16: Implementation and Trial Responsibilities
16.1 Amendment Implementation and Communication 16.2 Sponsor, Investigator and Service-Provider Roles
17 Chapter 17: Quality Planning, Root Causes and CAPA
17.1 Quality Planning and Risk Management 17.2 Root Cause Analysis and CAPA Design 17.3 CAPA Implementation and Effectiveness Verification
18 Chapter 18: Risk Assessment and Monitoring Methods
18.1 Risk Assessment and Centralised Surveillance 18.2 Monitoring Methods and Source Review
19 Chapter 19: Quality Metrics, Plans and Communication
19.1 KRIs, Acceptable Ranges and Trial-Level Quality 19.2 Monitoring Plans, Co-Monitoring and Communication
20 Chapter 20: Site Qualification and Readiness
20.1 Site Qualification and Investigator Capacity 20.2 Recruitment Feasibility and Evidence-Based Site Selection 20.3 Site Readiness and Activity-Specific Release
21 Chapter 21: Initiation, Equipment and Supplies
21.1 Initiation Training and Readiness Walkthroughs 21.2 Equipment, Maintenance and Study Supplies
22 Chapter 22: Samples, Diagnostics and Financial Feasibility
22.1 Specimens, Diagnostic Results and Rater Quality 22.2 Contracts, Budgets and Operational Feasibility
23 Chapter 23: Interim Monitoring and Reporting
23.1 Interim Visit Preparation and Consent Review 23.2 Monitoring Eligibility, Safety and Products 23.3 Investigator Debrief and Monitoring Reports
24 Chapter 24: Essential Records, Audits and Findings
24.1 Essential Records and Site/Sponsor Reconciliation 24.2 Version History, Resolution Evidence and Noncompliance 24.3 Audits, Inspections and Closure Planning
25 Chapter 25: Close-Out, Retention and Destruction
25.1 Close-Out, Archiving and Continuing Obligations 25.2 Retention, Destruction and Long-Term Access
26 Chapter 26: Source Records and Good Documentation
26.1 Source Records and Foundational ALCOA Principles 26.2 Good Documentation, Completeness and Corrections 26.3 Source Access, Certified Copies and Context
27 Chapter 27: Electronic Systems, Metadata and Queries
27.1 EDC Design and Fit-for-Purpose Systems 27.2 Audit Trails, Electronic Outcomes and Device Choice 27.3 Queries, Coding and Supported Clinical Meaning
28 Chapter 28: Dataset Finalisation and Critical Data
28.1 Safety Reconciliation and Dataset Finalisation 28.2 Critical Data, Acquisition Tools and Interim Findings
28.1 Safety Reconciliation and Dataset Finalisation
Key Takeaways Explain This Topic AI
Datasets should reach sufficient quality for their prespecified analysis purpose.
Genuinely missing information and justified differences need evaluation, not fabricated completion.
Post-lock corrections require controlled justification, traceability and reassessment.
Last updated: October 2026
Safety Reconciliation and Dataset Finalisation
Regulatory inspectors verify that the following five parameters demonstrate agreement on shared concepts or documented justified differences between the EDC adverse event panel and the safety database case record:
Subject Identification: Subject study ID, site number, age, sex, and randomized treatment cohort.
Adverse Event Terminology: Verbatim diagnostic phrase and matched MedDRA Preferred Term (PT).
Event Chronology: Exact date of event onset and exact date of event resolution (or notation of ongoing status).
Seriousness Criteria: Identical classification of why the event is serious (Death, Life-Threatening, Inpatient Hospitalization / Prolongation, Persistent Disability, Congenital Anomaly, or Medically Significant).
Causality & Outcome: Investigator-assessed relationship to investigational product (Related vs. Not Related), action taken with study drug, and final clinical outcome (Recovered, Recovered with Sequelae, Fatal, Unknown).
The CRA's Operational Role in Reconciliation
When reconciliation identifies a discrepancy (e.g., the safety database records an SAE onset date of October 12, but the EDC eCRF records October 14), the CRA is called upon to perform immediate source record auditing. The CRA reviews the hospital admission face-sheet, nursing notes, and discharge summary to determine the true clinical onset date, guides the site coordinator in amending the erroneous system, and ensures documented rationale accompanies the change.
Blinded review, populations and intercurrent events
Before planned unblinding and analysis, review data quality, deviations and analysis-set decisions under the prespecified statistical plan. Maintain appropriate blinding and document the decisions. A named Blinded Data Review Meeting is one organisational method, not a universal required meeting or attendee list.
The intention-to-treat principle concerns all randomised participants analysed according to assigned treatment. A full analysis set aims to be as close as possible to that ideal, with any justified exclusions limited and prespecified. It is not universally identical to a safety set of participants who received a dose. A per-protocol set uses prespecified criteria for sufficient adherence and relevant deviations. Its selection can introduce bias; it does not automatically reveal a pure biological effect.
E9(R1) links the clinical question to an estimand : treatment, population, variable, handling of intercurrent events and population-level summary. Stopping treatment, rescue medication or death may affect interpretation. Missing data and an intercurrent event are related but different concepts. A participant who stops medication may still contribute planned follow-up measurements if they agree and the protocol permits. Collect the information required by the estimand rather than deleting the person from the database.
Database Lock (DBL) Procedures & Unlocking Governance
Database Lock (DBL) is the definitive milestone in the data management lifecycle. It marks the formal cessation of data editing, rendering the trial database read-only and immutable.
Finalisation based on the analysis purpose
E6(R3) requires prespecified, documented activities that produce data of sufficient quality for planned interim or final analyses. These can include reconciliation, correction of meaningful errors and omissions where possible, medical coding, evaluation of noncompliance and determination of analysis sets. Investigator review/endorsement should occur at agreed important milestones.
A finalisation checklist should identify the intended data cut, required reviews, known missing information, unresolved issues and their assessed impact. Do not invent values to obtain 100% filled fields. Some data may remain genuinely missing or an issue may be documented rather than numerically corrected. The responsible functions assess whether the dataset is suitable for its planned purpose.
A final global lock differs from a planned interim cut or a site close-out. Not every participant must finish long-term follow-up before every interim analysis. Apply the protocol, analysis plan and data-management procedures, including who authorises release and how the version is identified.
Soft Lock vs. Hard Lock
Soft Lock (Interim / Dry-Run Lock): All site editing privileges are temporarily removed, placing the database in read-only status. The biostatistics team runs exploratory statistical scripts, validates analysis datasets (SDTM / ADaM), or conducts planned interim analyses for Data Safety Monitoring Boards (DSMBs). If critical minor data errors are discovered, controlled, documented edits may still be performed under strict change control procedures.
Hard Lock (Final Database Freeze): The final, definitive lock executed after all quality gates pass. Routine editing is restricted under the documented lock procedure. The final dataset is extracted and transferred to Biostatistics. Release of treatment codes follows the protocol and prespecified analysis process, including appropriate interim arrangements.
Controlled post-finalisation corrections
If an important error is found after lock or data release, preserve the prior dataset and assess its impact. Follow documented authorisation, justification, audit trail, change review and re-finalisation procedures. The required approvers are defined by the organisation/trial, not a universal five-executive ICH list. Document what changed, who changed it, why it was justified and which analyses need reassessment.
An audit trail must remain interpretable. Unblinded knowledge creates particular risk of biased changes, so maintain appropriate independent review and safeguards. A locked database is an operational control, not proof that no error can ever exist or that a legitimate correction is prohibited.
Official sources
Checked October 18, 2026: ICH E6(R3), Principles and Annex 1 , ICH E9(R1) .