Sunday, July 5, 2026
🇺🇸 FDA

QA/QC Tools · FMEA · ICH Q9

RPN Calculator — Risk Priority Number

Calculate Failure Mode and Effects Analysis (FMEA) risk scores using Severity × Occurrence × Detection. Built for pharmaceutical QA/QC teams prioritizing process failures and CAPA actions under ICH Q9 quality risk management.

Quick Answer

Risk Priority Number (RPN) equals Severity × Occurrence × Detection on 1–10 scales, yielding 1–1,000. Pharmaceutical quality teams use FMEA under ICH Q9(R1) quality risk management to prioritize process failures before they affect product quality or patient safety. RPN ranks failure modes within a single study; CAPA thresholds are defined in site SOPs—not universal regulatory limits. The AIAG-VDA 2019 handbook also recommends Action Priority as a severity-weighted alternative to raw RPN alone.

Single failure mode RPN

Rate severity, occurrence, and detection on the 1–10 scales. RPN = S × O × D updates as you adjust the sliders.

FMEA ratings

Significant — degraded performance, moderate harm possible

Unlikely (1 in 1,000)

Moderate — manual inspection with verification

Risk Priority Number
125
Medium Risk

Review controls; consider process improvements

⚠️ CAPA Required: Document corrective and preventive actions in your deviation/quality system.

Rating Scale Reference

Severity (S)

ScoreDescription
1No effect
2Very minor — no patient impact
3Minor — minor disruption, no patient harm
4Moderate — temporary problem, some dissatisfaction
5Significant — degraded performance, moderate harm possible
6Major — non-compliance, potential for patient harm
7Serious — major system failure, patient injury possible
8Extreme — serious patient injury or death possible
9Critical — regulatory action, product recall possible
10Catastrophic — multiple patient deaths, facility shutdown

Occurrence (O)

ScoreFrequency
1Virtually impossible (<1 in 1 million)
2Remote (1 in 500,000)
3Very rare (1 in 100,000)
4Rare (1 in 10,000)
5Unlikely (1 in 1,000)
6Occasional (1 in 500)
7Moderate (1 in 100)
8Frequent (1 in 50)
9Very frequent (1 in 20)
10Almost certain (>1 in 10)

Detection (D)

ScoreDetectability
1Almost certain to detect before reaching patient
2Very high — multiple detection controls
3High — reliable automated detection
4Moderately high — some automated detection
5Moderate — manual inspection with verification
6Low — visual inspection only
7Very low — difficult to detect
8Remote — no reliable detection method
9Almost impossible to detect
10No detection possible

Multi-mode FMEA table

Add failure modes and compare RPN scores side by side to prioritize CAPA actions.

Failure modes
Failure Mode S (1–10) O (1–10) D (1–10) RPN Risk Level

Formula

RPN = S × O × D

S = Severity (1–10): Impact of the failure on the patient/product/process
O = Occurrence (1–10): Frequency of the failure mode
D = Detection (1–10): Ability to detect before reaching patient (10 = no detection)
RPN range: 1 (lowest risk) → 1,000 (highest risk)

How to Use This Calculator

1
Identify the failure mode — a specific way a process step, component, or system could fail (e.g., "incorrect label applied", "wrong fill volume")
2
Rate Severity (S 1–10) — how serious would the impact be if this failure occurred and reached the patient?
3
Rate Occurrence (O 1–10) — based on historical data or process knowledge, how often does this failure happen?
4
Rate Detection (D 1–10) — with current controls in place, how likely is it that this failure would NOT be caught?
5
Review the RPN — if RPN exceeds your site SOP threshold (commonly > 200), document CAPA actions. Use the multi-mode table to compare multiple failure modes and prioritize by RPN and Severity.

Worked Example

Pharmaceutical labeling failure mode

Failure mode: Mislabeled drug container reaching patient
Severity: 9 (patient injury possible if wrong drug administered)
Occurrence: 3 (rare — labeling controls in place)
Detection: 6 (visual inspection only — no automated barcode check)
RPN = 9 × 3 × 6 = 162 → Medium Risk: Review and strengthen detection controls (barcode verification).

Risk Threshold Reference

RPN 1–100Low RiskMonitor; no immediate action required
RPN 101–200Medium RiskReview controls; consider improvements
RPN 201–400High RiskCAPA required; prioritize corrective actions
RPN 401–1000Critical RiskImmediate action; consider process stop

Pharma / GMP Context for QA Professionals

FMEA and RPN scoring support quality risk management under ICH Q9(R1) across pharmaceutical development, tech transfer, and commercial GMP manufacturing. Process FMEA (PFMEA) is commonly applied to dispensing, blending, filling, packaging, and labeling lines where failure modes can affect critical quality attributes, data integrity, or patient safety. Design FMEA (DFMEA) complements formulation and container-closure decisions before scale-up.

RPN prioritization should connect to your control strategy—not operate in isolation. High-risk process steps identified through FMEA may warrant tighter process capability targets; use our Process Capability Cpk Calculator to quantify variation against specification limits during validation. Cross-contamination and shared-equipment risks link to Cleaning Validation Limit Calculator MACO/PDE calculations. Prepare for inspections with the GMP Checklist Generator and Audit Readiness Checklist.

CAPA triggers, rating scale definitions, and re-scoring after corrective actions must be documented in approved quality SOPs per ICH Q10. This calculator provides educational RPN arithmetic and default risk bands—it does not replace qualified QRM review, validation evidence, or regulatory submission of your FMEA record.

Evidence and Sources

Frequently Asked Questions

RPN (Risk Priority Number) = Severity (S) × Occurrence (O) × Detection (D). Each factor is rated 1–10 using calibrated team scales. Severity reflects impact on the patient, product, or process; Occurrence reflects how often the failure cause is expected; Detection reflects how likely current controls fail to catch the failure before release. The product ranges from 1 (lowest risk) to 1,000 (highest risk). RPN is a relative ranking tool within one FMEA session—not an absolute regulatory pass/fail score.
ICH Q9(R1) Quality Risk Management provides principles for identifying, assessing, controlling, and reviewing risks to product quality across the pharmaceutical lifecycle. FMEA is listed among recommended QRM tools alongside HACCP, fault tree analysis, and hazard operability studies. ICH Q9 does not mandate RPN thresholds or specific rating scales; it expects scientifically sound, documented risk decisions proportionate to the level of risk. Site quality systems should align FMEA methodology with ICH Q10 pharmaceutical quality system and applicable GMP expectations.
There is no universal FDA or EMA regulatory RPN threshold for mandatory CAPA. Common internal practice sets action levels at RPN > 100 or RPN > 200, but each manufacturer must define thresholds in approved quality SOPs based on product risk, process criticality, and prior inspection history. This calculator uses RPN > 200 as a conservative default CAPA trigger for education only. High Severity (9–10) failure modes may require action even when total RPN is moderate—review S, O, and D individually per your risk procedure.
Traditional RPN multiplies S × O × D, which can mask high-severity failures when Occurrence and Detection are low—for example, S=10, O=1, D=1 yields RPN=10 despite catastrophic potential. The AIAG-VDA FMEA Handbook (2019) introduced Action Priority (AP)—a lookup table that weights Severity first so high-severity modes are flagged regardless of RPN. Automotive and aerospace suppliers increasingly use AP; pharmaceutical sites may still use RPN but should document when AP or hybrid rules apply. Neither RPN nor AP replaces qualified risk review under ICH Q9.
Design FMEA (DFMEA) analyzes failure modes in product design—formulation, container closure, device mechanisms, and shelf-life risks before manufacturing scale-up. Process FMEA (PFMEA) analyzes manufacturing and packaging steps—dispensing, blending, filling, lyophilization, labeling, and sterilization—where process variation can create quality defects. Finished-dose and API sites typically emphasize PFMEA for commercial GMP operations; DFMEA supports pharmaceutical development, tech transfer, and change control. Both should link to control strategy, validation, and periodic QRM review per ICH Q9.
Detection = 10 means no effective detection control exists—the failure would reach the patient or market without being caught by current in-process checks, release testing, or visual inspection. In pharmaceutical GMP, this signals an urgent need for poka-yoke, automated verification, increased sampling, or additional analytical controls. Even low Occurrence with D=10 can produce a high RPN and should trigger risk reduction before batch release.
No. RPN values are meaningful only within a single FMEA study where the same team applied consistent rating criteria at the same time. Comparing absolute RPN numbers across different products, sites, equipment trains, or years is methodologically invalid because Severity, Occurrence, and Detection scales are subjective and may differ between sessions. Benchmark RPN trends only within the same documented FMEA record after re-scoring post-CAPA.
Examples include: wrong label applied to a potent injectable (high Severity, moderate Occurrence, weak Detection); incorrect active ingredient dispensed during batch manufacturing (catastrophic Severity); failure to detect endotoxin exceedance before sterile product release (high Severity with poor Detection); and mix-up of similar API containers on shared equipment (moderate Occurrence, high Severity if undetected). Use the multi-mode table to rank modes within your study and prioritize CAPA for the highest RPN and highest Severity items first.
FMEA is a bottom-up analysis starting from individual failure modes, effects, and causes—useful for equipment, processes, and systems. HACCP (Hazard Analysis and Critical Control Points) is a top-down approach identifying critical control points where hazards must be prevented, eliminated, or reduced to acceptable levels—common in contamination control and sterile manufacturing strategies. Both are recognized ICH Q9 QRM tools; many sites use HACCP for product-specific hazard control and PFMEA for broader process risk ranking.
Yes. ICH Q9(R1) reaffirms FMEA as a QRM tool and does not prohibit RPN-based prioritization. The revision emphasizes formality commensurate with risk, knowledge management, and proactive hazard identification—including supply chain and technology risks. Regulators expect documented rationale for risk rankings, not blind reliance on numeric thresholds. Teams should address known RPN limitations (Severity masking, ordinal scale multiplication) through team calibration, Severity review, and optionally Action Priority tables.
Severity should reflect the worst credible effect on the patient if the failure reaches the market—considering dose, route, potency, therapeutic index, and detectability before administration. A labeling error for a narrow therapeutic index drug warrants higher Severity than a cosmetic packaging defect. Align Severity definitions with ICH Q9 risk evaluation principles, product quality attributes, and pharmacovigilance knowledge. Document calibration examples in the FMEA procedure so cross-functional teams score consistently.
RPN treats ordinal 1–10 ratings as multiplicative numbers, can hide high-severity/low-occurrence risks, depends on subjective team scoring, does not model failure interactions or cascading effects, and becomes outdated if not maintained under change control. It cannot replace validation evidence, cleaning validation limits, process capability analysis, deviation investigation, or regulatory submission of control strategy. Use RPN to prioritize discussion and CAPA candidates—not as the sole basis for batch release or design sign-off.

Related Tools

Cpk Process Capability Cpk MACO Cleaning Validation Limit GMP GMP Checklist Generator Audit Audit Readiness Checklist CAPA CAPA Template

Drug approvals, clinical trials, M&A, event intelligence, and company updates — weekly.

Customize topics & region
Topics
Region

No spam. Unsubscribe anytime. See our privacy policy.