Study guide
26.3 Source Access, Certified Copies and Context
ACRP CCRA Certified Clinical Research Associate Study Guide 2026 Exam
Track your progress as you read
Finished sections get a check mark.
1 Chapter 1: Exam Format, Eligibility and Registration
1.1 Exam Format, Eligibility and Current References 1.2 Registration, Fees and Candidate Decisions
2 Chapter 2: CRA Responsibilities and Study Planning
2.1 The CRA Role, Data Integrity and Product Oversight 2.2 Official Blueprint and Study Strategy
3 Chapter 3: Protocols, Endpoints and Trial Design
3.1 Protocol Elements and Endpoint Hierarchy 3.2 Endpoint Interpretation and Eligibility Rationale 3.3 Eligibility Verification and Trial Designs
4 Chapter 4: Bias Control, Blinding and Product Information
4.1 Bias, Randomisation and Comparator Controls 4.2 Unblinding and Investigator Brochure Content 4.3 Reference Safety Information and IB Updates
5 Chapter 5: Estimands and Device Instructions
5.1 Estimands and Intercurrent Events 5.2 Device Instructions, Configuration and Training
6 Chapter 6: Ethical Foundations and Independent Oversight
6.1 Ethical Foundations and the 2024 Declaration of Helsinki 6.2 Vulnerability, Voluntariness and Compensation 6.3 IRB/IEC Composition and Independent Review
7 Chapter 7: Ethics Communication and Informed Consent
7.1 Ethics Reporting, Approval Status and Version Control 7.2 Informed Consent Information and Meaningful Choice 7.3 Consent Documentation, Special Circumstances and Updates
8 Chapter 8: Recruitment, Retention and Confidentiality
8.1 Ethical Eligibility, Recruitment and Retention 8.2 Privacy, Confidentiality and Appropriate Access
9 Chapter 9: Safety Definitions and Classification
9.1 Adverse Event Definitions and Actual Life-Threatening Risk 9.2 Seriousness, Severity and Medical Importance 9.3 Causality, Expectedness and Reference Safety Information
10 Chapter 10: Safety Detection, Reporting and Oversight
10.1 Detecting Events, AESIs and Collection Windows 10.2 Expedited Reporting and the Sponsor Awareness Clock 10.3 Immediate Site Reporting and Independent Safety Oversight
11 Chapter 11: Follow-Up, Adherence and Conflicts
11.1 Safety Communications, Reconciliation and Follow-Up 11.2 Adherence, Discontinuation and Participant Choice 11.3 Conflicts of Interest and Prorated Payments
12 Chapter 12: Development Stages and Product Management
12.1 Nonclinical Background and Human Pharmacology 12.2 Exploratory, Confirmatory and Therapeutic-Use Studies 12.3 Product Storage, Labelling and Excursion Response
13 Chapter 13: Accountability, Integrity and Regulatory Status
13.1 Product Accountability and Adherence Calculations 13.2 Potential Fraud, Misconduct and Evidence Preservation 13.3 Submissions, Authorisation Status and Trial Reporting
14 Chapter 14: Current GCP Principles and Delegation
14.1 The Eleven Current GCP Principles 14.2 Proportionality and Investigator Oversight 14.3 Delegation, Qualifications and Task Authority
15 Chapter 15: Oversight, Protocol Control and Amendments
15.1 Clinical Oversight and Immediate-Hazard Changes 15.2 Deviation Classification and Resolution
16 Chapter 16: Implementation and Trial Responsibilities
16.1 Amendment Implementation and Communication 16.2 Sponsor, Investigator and Service-Provider Roles
17 Chapter 17: Quality Planning, Root Causes and CAPA
17.1 Quality Planning and Risk Management 17.2 Root Cause Analysis and CAPA Design 17.3 CAPA Implementation and Effectiveness Verification
18 Chapter 18: Risk Assessment and Monitoring Methods
18.1 Risk Assessment and Centralised Surveillance 18.2 Monitoring Methods and Source Review
19 Chapter 19: Quality Metrics, Plans and Communication
19.1 KRIs, Acceptable Ranges and Trial-Level Quality 19.2 Monitoring Plans, Co-Monitoring and Communication
20 Chapter 20: Site Qualification and Readiness
20.1 Site Qualification and Investigator Capacity 20.2 Recruitment Feasibility and Evidence-Based Site Selection 20.3 Site Readiness and Activity-Specific Release
21 Chapter 21: Initiation, Equipment and Supplies
21.1 Initiation Training and Readiness Walkthroughs 21.2 Equipment, Maintenance and Study Supplies
22 Chapter 22: Samples, Diagnostics and Financial Feasibility
22.1 Specimens, Diagnostic Results and Rater Quality 22.2 Contracts, Budgets and Operational Feasibility
23 Chapter 23: Interim Monitoring and Reporting
23.1 Interim Visit Preparation and Consent Review 23.2 Monitoring Eligibility, Safety and Products 23.3 Investigator Debrief and Monitoring Reports
24 Chapter 24: Essential Records, Audits and Findings
24.1 Essential Records and Site/Sponsor Reconciliation 24.2 Version History, Resolution Evidence and Noncompliance 24.3 Audits, Inspections and Closure Planning
25 Chapter 25: Close-Out, Retention and Destruction
25.1 Close-Out, Archiving and Continuing Obligations 25.2 Retention, Destruction and Long-Term Access
26 Chapter 26: Source Records and Good Documentation
26.1 Source Records and Foundational ALCOA Principles 26.2 Good Documentation, Completeness and Corrections 26.3 Source Access, Certified Copies and Context
27 Chapter 27: Electronic Systems, Metadata and Queries
27.1 EDC Design and Fit-for-Purpose Systems 27.2 Audit Trails, Electronic Outcomes and Device Choice 27.3 Queries, Coding and Supported Clinical Meaning
28 Chapter 28: Dataset Finalisation and Critical Data
28.1 Safety Reconciliation and Dataset Finalisation 28.2 Critical Data, Acquisition Tools and Interim Findings
26.3 Source Access, Certified Copies and Context
Key Takeaways Explain This Topic AI
Appropriate originals or certified copies can support source verification.
Live EHR access is not an absolute requirement in every trial setting.
Fit-for-purpose system assessment considers the trial’s data importance and relevant controls.
Last updated: October 2026
Source Access, Certified Copies and Context
The following matrix summarizes the practical operational expectations, common site-level monitoring deficiencies, and critical CRA red flags across all nine ALCOA+ elements:
ALCOA+ Element Practical Site Expectation Common Monitoring Deficiency CRA Red Flag / Inspection Hazard
Attributable Every entry, signature, and date is executed personally by authorized staff listed on the DOA log. Study coordinator signs the Principal Investigator's name on physical lab reviews or regulatory forms. Identical handwriting across entries attributed to different investigators; shared computer logins.
Legible Clear handwriting; corrections executed via a single strike-through, dated, initialed, with reason. Use of correction fluid ("white-out"), correction tape, or heavy black ink obliterating original values. Overwritten numerical values (e.g., turning a '3' into an '8' to satisfy an inclusion lab threshold).
Contemporaneous Clinical data recorded at the physical moment the assessment, vital sign, or exam occurs. Writing clinical progress notes days or weeks after the subject visit from memory or brief scratch sheets. Retrospective entries without "Late Entry" notation; identical timestamps across multiple concurrent tests.
Original First recording medium preserved; certified copies created when digitization or copying is required. Data entered onto sticky notes or informal scrap paper, transcribed into official binders, then discarded. Informal scrap notes found clipped inside charts; uncertified, cropped photocopies missing margins.
Accurate Factual, precise data without transcription errors; mathematically and medically plausible. Transcribing systolic/diastolic blood pressure numbers inversely or misplacing decimal points in lab data. Perfect, identical physiological values across months of visits (e.g., pulse exactly 72 bpm at every visit).
Complete Every protocol-required evaluation documented; blank fields explained with explicit rationale. Unanswered questionnaire sections; missed pharmacokinetic blood draws left completely blank in charts. Incomplete diagnostic reports; omitted pages from multi-page informed consent documentation.
Consistent Data concordance across all parallel medical records, nursing logs, pharmacy, and central lab files. Physician note records "no adverse events," while concurrent nursing triage chart notes severe rash. Adverse event onset dates that contradict concomitant medication start dates or emergency room visits.
Enduring Records stored on durable, archival-grade physical media or certified, backed-up digital storage. Fading thermal paper ECG tracings left in binders without protective measures or certified copies. Completely blank or illegible thermal slips where critical baseline ECG intervals have vanished.
Available Records organized and readily retrievable during on-site and remote monitoring visits and audits. Subject binders locked in off-site archive facility requiring two weeks notice for CRA retrieval. Missing charts during a regulatory audit; deactivated EMR vendor accounts preventing source review.
Electronic source records and appropriate access
Identify source records, methods of capture and locations before trial start, updating them when needed. Source can include an EHR, laboratory system, direct eCRF entry, participant diary or a certified copy. Direct capture does not require creating an unnecessary duplicate paper chart. The investigator and sponsor should agree how records remain accessible and how data are verified.
A binder of selective, uncertified EHR printouts may omit relevant context, later corrections or missing events. Determine whether the material is original, a certified copy or an uncontrolled convenience copy. Secure direct EHR access can support review, but ICH does not require a monitor to access every site's live EHR in all circumstances. Suitable certified copies or another justified access method can be appropriate. Escalate inadequate access rather than using another person's credentials.
For electronic access verify individual authorisation, appropriate permissions, participant scope, confidentiality and the institution's process. Access rights should permit the agreed review while protecting other patients' information. Remote review adds questions about privacy, downloads, screenshots, location and retention of copies. Participant consent does not remove all privacy duties.
Clinical-practice systems need a documented fit-for-purpose assessment in the trial context. Do not claim ONC certification proves trial-system validation or that every EHR must be newly validated like a bespoke EDC platform. Consider importance of the data, security, user management, audit trails, backups and known limitations, with proportionate mitigation. The sponsor and investigator retain their respective responsibilities even when an IT vendor hosts the system.
CRA Best Practices for Source Record Auditing
When conducting on-site or remote monitoring, high-performing CRAs utilize proven auditing heuristics:
Triangular Verification: Use relevant corroborating records when needed to assess reliability. Cross-reference the physician's narrative note against: (a) nursing bedside flowsheet entries, (b) pharmacy dispensing records, and (c) central/local laboratory timestamps.
Look for Uniformity Anomalies: In paper source records, unusual uniformity across records can warrant review, but does not by itself prove fabrication rather than recorded contemporaneously.
3. Audit the Margins and Dates: Inspect every diagnostic printout (ECGs, spirometry, Holter tapes) for automated header/footer timestamps. Compare the instrument's internal machine clock against the handwritten visit date recorded on the CRF.
4.
Escalate Unexplained Discrepancies: If a source document shows signs of intentional alteration, erasure, or fabricated signatures, the CRA must immediately log the finding, preserve the evidentiary trail, and escalate the event to the Clinical Trial Manager (CTM) and sponsor Quality Assurance (QA) following corporate standard operating procedures.
Official sources
Checked October 18, 2026: ICH E6(R3), Principles and Annex 1 , ICH E9(R1) .