Risk-Based Quality Management (RBQM) is no longer a future-state concept. Under ICH E6(R3), it is a clear regulatory expectation.
Yet many mid-market sponsors still struggle to move from understanding RBQM to operationalizing it. The hesitation isn’t usually philosophical, it’s practical. Long-standing assumptions make RBQM feel complex, disruptive, or unrealistic for lean, CRO-dependent teams.
The problem is that many of those assumptions are based on myths, not on what regulators actually expect today.
Below are five of the most common RBQM myths mid-market teams encounter, and what ICH E6(R3) really requires instead.
Myth #1: “RBQM Is Really Only for Large Pharma”
Why this myth persists
RBQM is often associated with large sponsors that have centralized analytics teams, portfolio-level governance, and mature internal infrastructure. For mid-market organizations, it can feel like RBQM is something to “graduate into later.”
What ICH E6(R3) actually says
ICH E6(R3) applies to all sponsors, regardless of size. What changes is not the expectation, but the degree of proportionality.
Regulators are not asking smaller organizations to copy large pharma operating models. They are asking sponsors to:
- Identify what is critical to quality
- Focus oversight where risk is highest
- Demonstrate clear reasoning behind decisions
RBQM is not about scale, it’s about fit-for-purpose oversight.
Myth #2: “Our CRO Is Responsible for RBQM”
Why this myth persists
In CRO-heavy operating models, much of trial execution is outsourced. It’s easy to assume that RBQM responsibility follows execution.
What ICH E6(R3) actually says
CROs may perform RBQM activities, but accountability remains with the sponsor.
Regulators expect sponsors to:
- Maintain independent oversight
- Understand how risks are identified and managed
- Demonstrate consistency across CRO partners
This does not mean duplicating CRO work. It means having transparent, sponsor-level visibility into risk, decisions, and actions, especially when multiple CROs or systems are involved.
Myth #3: “RBQM Requires Advanced Analytics Teams”
Why this myth persists
RBQM is often described using terms like “advanced analytics,” “statistical monitoring,” or “AI,” which can sound intimidating for lean teams without dedicated data science resources.
What ICH E6(R3) actually says
Regulators are not evaluating how sophisticated your analytics are. They are evaluating whether:
- Risks are identified early enough to matter
- Signals are prioritized appropriately
- Decisions and actions are explainable and documented
RBQM is not about analytics for analytics’ sake. It’s about early signal detection and defensible decision-making. The sophistication of the tool matters far less than the clarity of the oversight it enables.
Myth #4: “RBQM Will Add More Work for Already Lean Teams”
Why this myth persists
RBQM is sometimes introduced as an additional layer, more KRIs, more dashboards, more meetings, rather than as a replacement for low-value activity.
What ICH E6(R3) actually says
When implemented correctly, RBQM should reduce unnecessary work, not increase it.
Effective RBQM:
- Focuses monitoring effort on what truly matters
- Reduces manual, retrospective review
- Helps teams stop spending time on low-risk noise
The goal is not to do more oversight, but to do smarter, more targeted oversight that aligns effort with risk.
Myth #5: “We Need to Be Fully ‘RBQM Ready’ Before We Start”
Why this myth persists
Many teams believe RBQM requires a fully defined framework, governance model, and toolset before the first step can be taken.
What ICH E6(R3) actually says
ICH E6(R3) encourages continuous learning and improvement.
Many successful RBQM programs begin with:
- One to three priority studies
- Clear CtQ factors
- Simple, repeatable oversight processes
RBQM maturity is built over time. Regulators are far more interested in evidence of thoughtful, proportionate oversight than in perfection on day one.
What These Myths Have in Common
Each of these myths assumes RBQM must look complex, centralized, or resource-intensive to be compliant.
In reality, ICH E6(R3) emphasizes:
- Proportionality
- Critical thinking
- Transparency
- Continuous review
RBQM does not need to mirror large pharma to be defensible. It needs to be clear, explainable, and aligned to what matters most.
From Misconceptions to Practical Oversight
For mid-market sponsors, the most successful RBQM approaches:
- Start small and scale
- Align to existing CRO workflows
- Focus on early detection and prioritization
- Create a clear, inspection-ready narrative of decisions and actions
When these elements are in place, RBQM stops feeling like a regulatory burden, and starts functioning as a practical quality advantage.
Addressing these myths is often the difference between stalled RBQM initiatives and programs that move forward with confidence.
