Study guide

15.2 Deviation Classification and Resolution

ACRP CCRA Certified Clinical Research Associate Study Guide 2026 Exam

Track your progress as you read

Finished sections get a check mark.

1 Chapter 1: Exam Format, Eligibility and Registration

1.1 Exam Format, Eligibility and Current References 1.2 Registration, Fees and Candidate Decisions

2 Chapter 2: CRA Responsibilities and Study Planning

2.1 The CRA Role, Data Integrity and Product Oversight 2.2 Official Blueprint and Study Strategy

3 Chapter 3: Protocols, Endpoints and Trial Design

3.1 Protocol Elements and Endpoint Hierarchy 3.2 Endpoint Interpretation and Eligibility Rationale 3.3 Eligibility Verification and Trial Designs

4 Chapter 4: Bias Control, Blinding and Product Information

4.1 Bias, Randomisation and Comparator Controls 4.2 Unblinding and Investigator Brochure Content 4.3 Reference Safety Information and IB Updates

5 Chapter 5: Estimands and Device Instructions

5.1 Estimands and Intercurrent Events 5.2 Device Instructions, Configuration and Training

6 Chapter 6: Ethical Foundations and Independent Oversight

6.1 Ethical Foundations and the 2024 Declaration of Helsinki 6.2 Vulnerability, Voluntariness and Compensation 6.3 IRB/IEC Composition and Independent Review

7 Chapter 7: Ethics Communication and Informed Consent

7.1 Ethics Reporting, Approval Status and Version Control 7.2 Informed Consent Information and Meaningful Choice 7.3 Consent Documentation, Special Circumstances and Updates

8 Chapter 8: Recruitment, Retention and Confidentiality

8.1 Ethical Eligibility, Recruitment and Retention 8.2 Privacy, Confidentiality and Appropriate Access

9 Chapter 9: Safety Definitions and Classification

9.1 Adverse Event Definitions and Actual Life-Threatening Risk 9.2 Seriousness, Severity and Medical Importance 9.3 Causality, Expectedness and Reference Safety Information

10 Chapter 10: Safety Detection, Reporting and Oversight

10.1 Detecting Events, AESIs and Collection Windows 10.2 Expedited Reporting and the Sponsor Awareness Clock 10.3 Immediate Site Reporting and Independent Safety Oversight

11 Chapter 11: Follow-Up, Adherence and Conflicts

11.1 Safety Communications, Reconciliation and Follow-Up 11.2 Adherence, Discontinuation and Participant Choice 11.3 Conflicts of Interest and Prorated Payments

12 Chapter 12: Development Stages and Product Management

12.1 Nonclinical Background and Human Pharmacology 12.2 Exploratory, Confirmatory and Therapeutic-Use Studies 12.3 Product Storage, Labelling and Excursion Response

13 Chapter 13: Accountability, Integrity and Regulatory Status

13.1 Product Accountability and Adherence Calculations 13.2 Potential Fraud, Misconduct and Evidence Preservation 13.3 Submissions, Authorisation Status and Trial Reporting

14 Chapter 14: Current GCP Principles and Delegation

14.1 The Eleven Current GCP Principles 14.2 Proportionality and Investigator Oversight 14.3 Delegation, Qualifications and Task Authority

15 Chapter 15: Oversight, Protocol Control and Amendments

15.1 Clinical Oversight and Immediate-Hazard Changes 15.2 Deviation Classification and Resolution

16 Chapter 16: Implementation and Trial Responsibilities

16.1 Amendment Implementation and Communication 16.2 Sponsor, Investigator and Service-Provider Roles

17 Chapter 17: Quality Planning, Root Causes and CAPA

17.1 Quality Planning and Risk Management 17.2 Root Cause Analysis and CAPA Design 17.3 CAPA Implementation and Effectiveness Verification

18 Chapter 18: Risk Assessment and Monitoring Methods

18.1 Risk Assessment and Centralised Surveillance 18.2 Monitoring Methods and Source Review

19 Chapter 19: Quality Metrics, Plans and Communication

19.1 KRIs, Acceptable Ranges and Trial-Level Quality 19.2 Monitoring Plans, Co-Monitoring and Communication

20 Chapter 20: Site Qualification and Readiness

20.1 Site Qualification and Investigator Capacity 20.2 Recruitment Feasibility and Evidence-Based Site Selection 20.3 Site Readiness and Activity-Specific Release

21 Chapter 21: Initiation, Equipment and Supplies

21.1 Initiation Training and Readiness Walkthroughs 21.2 Equipment, Maintenance and Study Supplies

22 Chapter 22: Samples, Diagnostics and Financial Feasibility

22.1 Specimens, Diagnostic Results and Rater Quality 22.2 Contracts, Budgets and Operational Feasibility

23 Chapter 23: Interim Monitoring and Reporting

23.1 Interim Visit Preparation and Consent Review 23.2 Monitoring Eligibility, Safety and Products 23.3 Investigator Debrief and Monitoring Reports

24 Chapter 24: Essential Records, Audits and Findings

24.1 Essential Records and Site/Sponsor Reconciliation 24.2 Version History, Resolution Evidence and Noncompliance 24.3 Audits, Inspections and Closure Planning

25 Chapter 25: Close-Out, Retention and Destruction

25.1 Close-Out, Archiving and Continuing Obligations 25.2 Retention, Destruction and Long-Term Access

26 Chapter 26: Source Records and Good Documentation

26.1 Source Records and Foundational ALCOA Principles 26.2 Good Documentation, Completeness and Corrections 26.3 Source Access, Certified Copies and Context

27 Chapter 27: Electronic Systems, Metadata and Queries

27.1 EDC Design and Fit-for-Purpose Systems 27.2 Audit Trails, Electronic Outcomes and Device Choice 27.3 Queries, Coding and Supported Clinical Meaning

28 Chapter 28: Dataset Finalisation and Critical Data

28.1 Safety Reconciliation and Dataset Finalisation 28.2 Critical Data, Acquisition Tools and Interim Findings

15.2 Deviation Classification and Resolution

Key Takeaways Explain This Topic AI

Deviation terminology and impact classifications vary across trials and frameworks.

A short delay can be important when it affects a critical timed assessment.

A corrected tracker status needs supporting evidence and appropriate follow-up.

Last updated: October 2026

Deviation Classification and Resolution

A departure from protocol instructions that does not significantly affect the subject's rights, safety, or well-being, nor compromise the completeness, evaluability, or scientific integrity of primary study endpoints.

Common Examples: A low-impact timing deviation after evaluating the particular protocol requirement; an isolated low-impact omission, after evaluation against the protocol; a diary omission must remain honestly recorded.

Management: Documented on the site's Protocol Deviation Tracking Log; evaluated for recurring patterns during routine monitoring.

Major Protocol Deviation (Protocol Violation)

A significant departure from the protocol that compromises subject safety, infringes upon subject rights, or compromises the scientific integrity and evaluability of critical trial endpoints.

Common Examples: Enrolling a subject who violated core inclusion/exclusion criteria (e.g., exclusionary baseline QT prolongation or abnormal hepatic enzymes); administering the wrong investigational product dosage or expired drug; performing protocol assessments using an outdated or unapproved informed consent version; failing to obtain re-consent following an IRB-approved amendment containing vital safety updates; missing mandatory safety monitoring (e.g., cardiac telemetry in a high-risk trial).

Management: Immediate notification to the PI and sponsor medical monitor; documented on the tracking log; formal root cause analysis; execution of an enforceable CAPA plan; reporting to the IRB/IEC in accordance with institutional reporting policies.

Important deviations and serious noncompliance

Terms such as minor, major, violation and serious breach are not a single universal hierarchy across all sponsors and jurisdictions. Apply the trial's classification method and evaluate actual or potential impact on rights, safety and result reliability. A one-day delay could be important for a critical timed endpoint and low impact for another assessment. Repeated low-impact deviations can reveal a significant system failure.

E6(R3) calls for appropriate action, root-cause evaluation and remediation when noncompliance significantly affects or could significantly affect participants or reliability. Notify relevant parties under applicable requirements. Specific national serious-breach reporting deadlines are outside ACRP's examination reference scope; do not import a universal seven-day rule.

The CRA's Deviation Lifecycle: Identification, Logging & Escalation

During every on-site and remote monitoring encounter, the CRA executes a systematic review to identify undocumented deviations:

Cross-System Triangulation: Comparing electronic health records (EHR), EDC data entries, pharmacy temperature logs, central laboratory requisition slips, and appointment books to detect unrecorded visit delays, missed procedures, or unapproved concomitant medications.

Logging Standards: Document deviations through the applicable process with specific data attributes: Subject ID, Protocol Version, Specific Protocol Section Violated, Date of Occurrence, Date of Site Detection, Date of CRA Verification, Deviation Classification (Minor vs Major), Description of Event, Root Cause Category, and CAPA Tracking Number.

Escalation Pathways: Major deviations must be escalated to the sponsor's Clinical Project Manager (CPM) and Medical Monitor within timelines stipulated in the trial's Monitoring Plan under the plan, with urgent risk communicated promptly.

Documenting a deviation from discovery to resolution

Record the required assessment, actual activity and timing, affected participants, evidence, impact assessment and responsible follow-up. Distinguish occurrence, detection, site awareness and monitor discovery dates. Each answers a different question. If an eligibility result is missing, establish whether the test was performed, whether the result was available before enrolment, and whether a qualified investigator reviewed it. Do not replace an unknown fact with a reassuring guess.

The monitor should communicate urgent risks promptly rather than waiting for a routine report. Work with the investigator and sponsor to evaluate participant care, reportability and data consequences. The CRA should not decide a participant's treatment independently or erase inconvenient data. A retrospective note can document what is known but cannot make an unperformed assessment occur in the past.

Track the action to objective evidence of completion and evaluate recurrence. Refer a systemic issue for root-cause analysis and CAPA; retain the original finding, the site's response and the sponsor's review. Updating a tracking status to closed is the end of the record only when the agreed action and effectiveness requirements are supported.

A revised document must reach controlled practice

A protocol amendment changes the authorised plan for a clinical trial. It can affect objectives, procedures, eligibility, product use, safety monitoring, data collection or participant burden. For a CRA, successful change control means more than collecting an approval letter: the right people must use the right version at the right time, with appropriate consent and operational support.

Identify the amendment, rationale and affected activities. Determine required sponsor agreement, IRB/IEC review and authority action under applicable requirements. ACRP's exam emphasises the international process rather than a country-specific portal or waiting period. Do not assume that calling a change administrative makes it low risk; assess its content and apply the actual framework.

Official sources

Checked October 18, 2026: ICH E6(R3), Principles and Annex 1 , ACRP CCRA Exam Content Outline .