Key topics for Life Science companies considering SaaS solutions

Key topics for Life Science companies considering SaaS solutions

Even in highly-regulated industries like Life Sciences, accessing key systems via the cloud, on a software-as-a-service (SaaS) basis, is rapidly becoming the default as consumer-based habits around everyday application use extend to the workplace. But what are the key considerations, and how do you choose a provider? Here are 5 common topics to focus on.

Businesses used to view cloud-based software and data hosting, along with subscription-based delivery (e.g., Software-as-a-Service, or SaaS, delivery models) with considerable caution. Concerns about risk to business continuity in the case of network or data center downtime; fears of supplier lock-in or security breaches; and questions about long-term cost of ownership seemed to undermine the promise of simplified IT management; improved speed of deployment; and more flexible access to systems and data beyond the office.
Today, cloud and SaaS-based system delivery is not only proven; it is fast becoming the norm. And this extends to strictly-regulated industries too, including Life Sciences.

The technology has matured considerably; networks/connections and backup provision are altogether more robust; service provider offerings have become incredibly sophisticated to appeal to corporate buyers; and the pace of technology advancement has accelerated to the point that the alternative – buying software and running and managing it on premise – no longer makes business sense in the majority of use cases.

As digital-native generations enter the workforce, and as employees generally become familiar and comfortable with using the cloud to store photos and documents in their personal lives via their smartphones and other devices, the appetite for cloud-based application access is growing too. The perception of risk associated with externally-hosted applications has greatly decreased, especially as built-in cloud security becomes increasingly sophisticated.

Despite users’ increasing comfort level when it comes to relying on hosted solutions in their day-to-day lives, there are some important considerations when deciding to move a business process to a cloud/SaaS platform.

Below are some of the considerations for business functions when making decisions related to cloud-based SaaS deployment:

1. Integration options

Although there is a general belief that cloud-based software makes it easier to connect and exchange data between applications, this isn’t a given. While it is possible to connect platforms through application programming interface (API) calls (a message sent to a server asking for information), those applications may not have an intensive library of calls, depending on the level of development investment the supplier is willing to make. Additionally, there can be barriers to implementing integrations like sharing security protocols or opening firewall ports where multiple suppliers are required to coordinate/cooperate with each other to enable the requested functionality.

2. Validation

In regulated industries like Life Sciences, software must be shown to be reliable in delivering what’s expected and to support patient safety, product quality, and data integrity. That means conducting risk-based testing and compiling as well as maintaining documentation proving that the software functions as designed and required.

In a cloud-deployed SaaS context, many software providers will include access to their validation package, even if there is a modest associated fee to access the associated scripts and documentation. In this context, the challenge of cloud-SaaS is the software functionality is subject to regular updates throughout the year, with customers largely at their mercy. Each update will require an impact assessment to identify any changes that will need to be made to existing configurations, as well as understanding new configurations that the business may wish to implement. Along with these changes, some level of validation will be needed, which requires involvement from internal teams.

The advice here is to:

  • Refrain from too much customization. Stay close to the out-of-the-box functionality, wherever possible. Choosing the best fit initially will help considerably here.
  • Check out the validation provisions ahead of time to avoid resourcing issues later.

It’s worth looking into associated documentation and training, too, as this can help users get up and running quickly and confidently using the new software. Best-case scenarios can be within a couple of months compared to 12-18 months for an on-premise deployment.

3. The risk appetite of the relevant business function

With so much security and trust built into cloud/SaaS services now, decisions about whether to embrace externally-hosted/subscription-based software access comes down largely to the risk appetite of the given business function. Often, the advantages substantially outweigh any negatives–reduced reliance on internal IT help and support, and faster access to the latest technology features are among the bigger pluses of choosing the cloud/SaaS route. Again, it is vital to perform an assessment of the preferred SaaS provider. It’s also a good idea to check whether your peers are among their customers, as this will provide useful clues to the supplier’s credentials in your sector.

4. Licensing/pricing and scalability models

One of the great appeals of accessing software through a SaaS model is the ability to spread costs, and to scale capacity with the needs of the business. But it’s important to examine the overall cost of ownership over time. Be sure to check the terms and conditions around price increases and clauses related to scaled demand. Many SaaS models offer tiered pricing depending on the role, where a read-only account has a different cost compared to an account that can create and edit content. So be sure to plan for the number of users you will need as well as the specific roles each user would require.

5. Ongoing support

This is something we’ll cover in a separate blog, but it’s important to at least mention here the importance of assessing what is provided for in the way of post ‘go-live’ support. Also, what that might look like in reality if you actually have to use it (something you can’t know in advance).
Direct vendor support might be fairly rudimentary, but there may be a certified partner that can bridge any gaps and provide a more tailored service that fulfils the business’s requirements.

Learn more

To find out about fme’s comprehensive SaaS consulting, implementation and support services, including our platform-assist offering, please contact us and and we’ll schedule a time to discuss your specific requirements.

A Strategic Documentum Upgrade to Increase Efficiency and Stability

A Strategic Documentum Upgrade to Increase Efficiency and Stability

As a regional power company, it’s important to deliver electricity reliably, economically, and as environmentally responsible as possible. Having an up-to-date technology platform is a critical component to deliver on those goals.

In early 2022, our client was experiencing challenges that were causing reliability and stability issues in their system, and making it difficult to fulfill their mission.

  • They had multiple OpenTextTM solutions that were out of date and were no longer supported.
  • Their internal resource with knowledge of the Documentum systems had left the company, leaving them without in-depth historical knowledge of the system.
  • Lack of system experience created challenges maintaining the system and preparing for an upgrade.

They also did not have a development environment to work with, making any servicing or changes even more challenging. It was impossible to test if newer solutions would be able to interface with their older products.

It had come time to address these challenges that were hindering their business initiatives and impacting their company mission.

Working together for the solution

The first step for the fme and our client’s IT team was to collaborate in a series of comprehensive interviews with users and managers to understand and clearly define the challenges of the current system. It was vital to have a detailed understanding of the current state as well as current issues and future requirements in order to create a project plan.

From there, fme was able to work with our client’s team to upgrade their systems, and build a new environment that delivered immediate improvements across multiple solutions including:

  • Documentum Content Server
  • Documentum xPlore
  • Documentum Webtop
  • Documentum Administrator
  • Microsoft SQL Server
  • OpenAnnotate/OpenContent
  • OpenMigrate

fme also provided a complete development system that allows testing of new customizations as well as a basic System Administration training course tailored to specific company support topics.

Download the full case study

Throughout the project, fme worked with the client’s internal IT team to provide practical experience working with the updated system. To learn all the details, including the unique challenges and solutions implemented, download the full case study now.

In each project we take on, fme strives to provide the most effective process and technology solutions to solve our client’s critical business challenges. Our mission is to be your partner for digital transformation to help you stay competitive, and our vision is for fme to be the company you love to work with. Contact us to discuss your current needs.

Challenges of managing and maintaining on-premise and cloud business applications

Challenges of managing and maintaining on-premise and cloud business applications

In today’s fast-paced digital world, businesses need to stay on top of their technology game. However, managing business applications can be a challenging task, especially for small and medium-sized businesses (SMBs) that have limited resources to maintain an in-house IT team for specialized business platforms. Below are some of the challenges, and how fme PlatformAssist™ provides the solution.

Challenge 1: Aligning business needs with vendor releases

With the introduction of cloud-native or SaaS applications, companies struggle to stay on top of vendor releases and effectively manage application updates that are pushed automatically. If you are “lucky” you have some flexibility to schedule based on your internal timelines, but that’s not always the case. However, it happens, someone needs to assess the impact of the updates to the business functionality and process, and someone needs to complete the validation. Unfortunately, it is not uncommon for team availability, experience, and knowledge to not be in sync with vendor schedules. Teams facing a large amount of other “Priority 1” items risk overlooking important considerations for the rollout of the new release or are unable to realize its full potential as they juggle and prioritize critical deadlines. We’ve seen many over-burdened businesses miss out on important improvements.

This is where external support like fme’s PlatformAssist™ can help. Our team is experienced in reviewing and assessing releases for impact, and are able to scale up to implement the update as the releases are published. We identify the musts and maybes (in Veeva lingo – auto-on and auto-off) and hold them side-by-side to business functionalities to clarify impact to current process and functionalities. We then highlight valuable improvements that can provide clear benefits. Next, we help with any resulting configuration and (validation) documentation updates and make sure the release update process runs smoothly and turns into a “non-event”.

Challenge 2: Keeping pace with your evolving business

While being buried in day-to-day business and vendor release management it is easy to forget about evolving business needs. As a business uses their business applications every day, it is expected that they will find areas for improvement and enhancement. Whether there are flows and pages that can be streamlined to the actual use, or additional documents and processes that should be included, your team will make improvement requests which will need to be properly captured and followed up on. When we’ve started working with many clients, we could see the capturing process working, but a majority of improvement requests get eternally deprioritized or forgotten over time. This leads to frustrations between IT and the business team.

fme’s PlatformAssist™ addresses this gap and the management of the backlog of requests. We can assess each request, identify the technical impact and necessary implementation steps and efforts, prioritize them based on business input, and align them to releases on the business roadmap. This can all then be coordinated with upcoming vendor releases and other platform maintenance activities. From technical solution design, to implementation, rollout and (validation) documentation, we make sure that each business application release is treated as a mini project and gets proper attention. With this organized approach, the business benefits from the continuous improvement of the application, and the team is able to work more effectively and efficiently.

Challenge 3: Day-to-day business issues

Besides planned release and application updates happening multiple times per year, every company has unplanned IT application issues and needs every day. Some are caused by the system, and a few may or may not be caused by the users. Either way, they still need to be corrected so the team can get back to doing their jobs to make the company successful. In most SMB firms, the IT team supports a wide range of technology across multiple integration points. The team has to juggle conflicting priorities as their focus shifts from business applications to other important tasks on their plate. In a perfect world, everyone would be trained on every solution and understand how they all work together. The reality is somewhat different. We frequently work with very talented teams where:

  • Older solutions on legacy platforms are maintained by long-time staff who carry the major knowledge of the application. Newer staff aren’t as familiar with the details or unique configurations.
  • Newer solutions have been added that the entire team is not sufficiently familiar with yet. Many companies opt for ‘train-the-trainer’ onboarding programs, but then struggle to make time to disseminate the knowledge to the full team.
  • Integration points between applications require additional knowledge to ensure they work together, and not all workflows, configurations and integrations are documented in line with ‘the way things actually work.’
  • Important team members have left the organization, leaving a substantial gap in institutional knowledge.

Neither SMB nor enterprise firms have the IT budget they need to have enough experts on-staff to eliminate all of these challenges. These issues inevitably combine to create frustrating situations where resolutions are delayed because immediate challenges fall outside the “sweet spot” of the available support team members.

In a growing business with modern solutions, these types of delays happen more frequently than they need to. An essential question to ask is “Is the quality of your support services provided by your internal team living up to yours and the business’ expectations?” It should not be asked critically, but with the goal of ensuring that the business needs of the company are being met effectively and economically. You should be able to leverage your technology to help achieve your business goals, not be crippled by it as you struggle to maintain and increase the ROI of your investment.

With many of our clients, fme helps fill the knowledge gap with our PlatformAssist™ services. We provide an experienced team of experts to address their day-to-day business challenges in an efficient process that scales as needs require. Many of our clients take advantage of this service after new solutions go live and they are still in the onboarding cycle. This allows the team to complete their training in the new platform while having solution support available to solve more complex challenges.

From our experience, bringing in flexible, external specialist support allows for better control of costs and support outcomes, and allows internal teams to refocus on critical tasks beyond the standard support issues, direct business questions, and required daily administrative tasks. Our global team is trained across a wide-variety of business application platforms, and can support your business 24×7 with existing Documentum and Sparta Trackwise applications, as well as with Cloud-native applications such as Generis CARA, Veeva Vault and Sparta TWD.

fme PlatformAssist™ is scalable and agile

Every company goes through the above challenges, and must face them in a way that aligns with their business goals and limitations. Tailoring our services to our clients’ needs is our top priority. Our offerings are modular, and components such as release and demand management can be added or removed as needed. We understand that needs might vary between platforms and clients, but also might fluctuate within the course of a year depending on vendor releases or critical business activities. Together with our clients we keep a close eye on current versus upcoming needs, and scale our team size up and down as needed to accommodate the specific skillsets and resource needs expected for upcoming activities. Clients appreciate our agility and flexibility, our long-term client relationships are proof of that.

Learn more about fme PlatformAssist™

Do you have full control over the post-implementation activities for your business applications? Is the business happy and satisfied with the support that they are receiving? Not just for immediate issues, but also for processing releases and backlog items? fme’s PlatformAssist™ can help. Our team will be happy to review your current processes, platforms and challenges with you and identify potential areas where we can help you work more effectively, efficiently and economically.

Contact us today to learn more about fme’s PlatformAssist™. It’s a cost-effective solution to manage modern IT challenges with the business factor in mind.

Veeva 23R1 Update: New and improved for Spring ‘23

Veeva 23R1 Update: New and improved for Spring ‘23

Veeva’s 23R1 release is slated for April 21st release to all Vaults. As always, there are many new features and enhancements available in the new release, some of which require configuration efforts to enable in your Vault. fme is your partner in keeping your Vault up to date on all the latest improvements and functionalities. Let’s review some key new features which require configuration effort and their potential benefits included in this release for the Vault platform, Veeva Vault QMS, and Veeva Vault RIM.

Vault Platform features

Multi-Record Workflow

With the last release in 2022, Veeva introduced the ability to route multiple records (i.e. Change Control, Quality Events, Audit records, etc.) on the same workflow at the same time. This is similar to how multiple documents can be routed for review or approval on the same workflow via the Cart

In 23R1 the ability has been added to remove records from a multi-record workflow based on defined conditions. For example, if some records have incomplete fields, they can be removed from the workflow based on the defined criteria to ensure that only complete records are routed in the workflow. This action will be reflected in the audit trail.

Additional workflow configuration refinements are available in 23R1 to limit the roles allowed to participate when a workflow initiator selects the users for a participant group. This ensures the person initiating the workflow can only select users to participate in the workflow who have the correct user role(s).

Interface enhancements

A few of the new features in 23R1 provide interface enhancements for the system users. Tab Collections can now be created based on the user’s system permissions. This option can enhance a user’s experience in the system by providing an additional organization level for how information is displayed and accessed.

Another great enhancement that can head off frustration in users is that multi-select fields can easily be ordered alphabetically. Previously this required that a ticket be submitted to Veeva Support to configure.

Veeva QMS

In Veeva Vault QMS, several new features provide additional functionality to users if configured in the Vault.

The ability to perform and document a 5 Whys Analysis can assist in root cause analysis (RCA) of Quality Events or Complaints. Using the 5 Whys Analysis methodology, a Root Cause is identified by identifying a problem statement and iteratively asking ‘why’ the issue occurred up to five times. This is known to be a very effective RCA tool, and in 23R1 functionality has been added for this process to be completed and documented within Vault. Once the Root Cause Analysis reaches the Complete state, Root Cause records are automatically created by Vault.

Improvements are also available to the Risk Management functionality, which will allow users to enter data quickly and easily for risk events via the new Risk Builder Tool when performing PFMEA assessments. This feature makes it easy to enter multiple risks for a single risk assessment and allows for these risk items to be evaluated simultaneously.

There also are new features to automate tasks in the Vault. Configuration can be added for Vault to automatically create the associated Proposed Audit records based on the Planned Start Date and Planned End Date of the Audit Program. Vault QMS also now supports the ability for automated intake of supplier change notifications received via email within Vault. This facilitates triaging the change notification and assessing for impact while bypassing the need for manual input of the change notification details. In addition to the Vault configuration activities, some additional configuration on your email server will be required from your internal IT team.

Finally, the Recurrence Check capability in QMS can be used for custom Quality Event object types, not just the standard out-of-the-box Quality Event types. This enhancement will, once configured, allow your business to identify recurring events for all Quality Event object types.

Vault RIM

In RIM Registrations the Registration Verification workflow can now be reconfigured as a multi-record workflow as well so that multiple records can be routed on the same workflow in parallel, similar to the multi-record workflow described for Vault Platform.

In RIM Submissions, several improvements to Content Plan functionality have been made available.

  • A feature can be enabled to allow users to create a Report Level Content Plan by copying from an existing Report Level Content Plan. The action copies the Content Plan, Content Plan Items, and the matched documents.
  • A new field can be added on Submission, Event, and Constraint objects to allow for more granularity for excluding and creating Content Plan and Content Plan Item records as inactive based on the selected criteria.
  • Also, a new Update Content Plan Study Section action is available for configuration. This action moves valid study sections related to the Submission Clinical Study or Submission Nonclinical Study within the Submission Content Plan to a new location when Clinical Study Type or Nonclinical Study Type fields are updated.

In RIM Submissions Archive a new useful feature that can be configured is the ability for Vault to display a special styling when sections are empty in the new Submissions Archive Viewer that was launched with 22R3. This will provide a visual cue to the user that Submission sections do not contain content. The functionality is also available for users to select and view inactive Applications and Submissions in the new Submissions Archive Viewer.

Learn more about Veeva from fme

These are some of the interesting new features available in the Veeva 23R1 release. Contact fme for details on additional changes that could impact your environment, and for assistance in configuring, validating, and promoting these changes to production.

About the author

Amanda Hancock is a Principal Consultant with the Life Sciences business unit at fme US. She has over 20 years of experience in the Life Science industry, working in the clinical research and diagnostics sectors. Amanda started her career in 2000 as Research Assistant at The Ohio State university and later worked in the roles of QC Analyst, Quality Assurance Manager, and Quality Assurance Director before joining fme in 2022. In addition to being a Certified Quality Auditor (ASQ), Amanda is a Veeva Vault trained professional holding Associate Administrator certifications in Veeva Vault Platform, Veeva Vault QualityDocs, Veeva Vault QMS, Veeva Vault Submissions, and Veeva Vault Submissions Archive.

OpenText Extended ECM: Put your content into business context

OpenText Extended ECM: Put your content into business context

OpenText Extended ECM (Enterprise Content Management) is a software solution that enables organizations to effectively manage their enterprise content across various channels and platforms. It allows businesses to streamline content creation, collaboration, and distribution to drive efficiency and productivity while mitigating compliance risks at the same time. Read on to learn more about the value of OpenText Extended ECM and how it can benefit your organization.

Improved Content Collaboration

Do your users struggle when they work on shared documents across different teams and different enterprise applications? Is it a challenge to make sure that everyone is looking at the latest version and making their editions in the right place? One of the most significant benefits of OpenText Extended ECM is that it improves content collaboration across teams and departments and most of all across different enterprise applications. No matter where users are located or what their primary document application is, they can contribute their part within their business context and collaborate seamlessly with other involved parties. Extended ECM offers robust version control and audit trail capabilities, ensuring that all changes to content are tracked, and nothing is lost or forgotten, mitigating compliance risks caused by incorrect content usage.

Seamless Integration

Wherever users are primarily working within an ERP such as SAP, a CRM such as Microsoft Dynamics, or an HR system such as SuccessFactors, and regardless of their role within the overall business process, OpenText Extended ECM is designed to integrate seamlessly across all their enterprise applications. Users can take full advantage of OpenText’s content management capabilities within the UI that they are used to. All integration happens in the background without the user having to take action or be aware that it is happening. OpenText Extended ECM also integrates with additional third-party systems like the Office365 platform, making it an ideal choice for businesses with diverse content management needs.

Enhanced Efficiencies, Compliance and Security

Without central content management there is a high risk of:

  • Duplicated content across multiple enterprise applications
  • Incorrect document versions being used
  • Inefficiencies caused by recreating content that already exists in another place
  • Access violations by sharing content outside the intended audience

All of these can quickly become critical issues, and will always impact your quality, compliance, timelines and budget.

By keeping all content stored at one central location, while at the same time allowing the content to be accessible within enterprise applications, OpenText Extended ECM mitigates the above risks and increases overall efficiency and productivity. Users can more easily find the information they need, and granular access control will make sure that content stays safe and secure at the same time. Users will be able to access the right content at the right time at the right place – within their business context.

Conclusion

There are many ways to apply the power and control that OpenText Extended ECM provides. It is a powerful solution that aligns your content with your business goals to leverage improved collaboration, seamless integration, centralized content management, and enhanced compliance and security capabilities. Our team of experienced OpenText consultants can help you identify the most effective path to enable OpenText Extended ECM to help your business supercharge your efficiency and productivity across the business processes that drive your unique enterprise.

Contact us to schedule a demo of what OpenText Extended ECM can do for you.

About the Author

Graduating in 2003 from Braunschweig, Germany with a Master’s Degree in „Computer Science in Economics“, Manuela directly joined fme AG as an Associate Consultant. She primarily worked with Java and Documentum development projects. Over the years she developed to the role of a Senior Consultant for Documentum and Deputy Business Manager for the Munich department. In 2010 Manuela moved to Connecticut USA to join the newly formed fme US as Senior Consultant providing Documentum and migration services primarily for the Life Sciences industry. Currently she is the Business Unit Director Technical Services and Deputy of Operations overlooking the Delivery team servicing the customer projects.

Evaluating and optimizing security and permissions in Veeva Vault

Evaluating and optimizing security and permissions in Veeva Vault

One key benefit of the Veeva suite of solutions is that security and permissions are pre-configured to support the solution and highly configurable. This is great for your company from a compliance standpoint, but it can also introduce complexity that can be difficult to manage if not planned effectively from the beginning. You need to ensure that your users can access the correct data at the appropriate stage in the process, but you also need to protect and control that data to ensure that only authorized users have that access.

User access is a critical area to understand thoroughly as it impacts every area of your compliant, validated solution.  So how do you manage it? Is there an internal team who has the skill, time, and knowledge to understand each layer of the access approach? Or are you using the approach of “well, the vendor validated this, so it is probably fine…”? Over many projects, fme has developed and refined a controlled and systematic method for assessing, planning, executing, and testing your user’s data access permissions to ensure you are in control of the access to your data, and get the most of the Veeva solutions.

Let’s take a look.

Assessment: Understand your permission set requirements

The first step is to get a detailed understanding of the permissions you will need. Your administration team and process owners should evaluate your existing structure to determine if the current licensing model and security configurations are working efficiently for your company. Review the following areas to identify opportunities:

  • Security Roles define the specific access allowed in the system for each user
  • Permissions Sets allow granular access to data and content
  • User Roles dictate the roles automatically assigned to user depending on scope (for example: Approver role for a specific department)
  • Lifecyle permissions determine which User Roles have access or can perform specific functions at different points in the document/record lifecycle
  • Possible integrations to automate the user profile creation and management process

As you know there is a lot to consider here! You are looking for any gaps, overlaps, or conflicts between these areas.

Planning: Define required permission sets

With a clear understanding of the existing permissions settings and requirements, you can start to build a comprehensive permission matrix detailing who needs what level of access in each area. It is important to consider which user roles require holistic data access and which users’ roles require lifecycle-state-specific access. Access should be managed to allow completion of work responsibilities while also ensuring necessary oversight of sensitive materials.

In fme’s projects, once we identify existing improvement opportunities and develop a full permission matrix, we test the configuration changes to verify the defined requirements are met. We then review the recommendations and key benefits with the team leadership to determine the path forward. We work within your change management requirements to ensure control of the overall impact to users, training materials, in-progress workflows, and existing content. We document all this information in our Implementation Plan.

At the end of your planning process, you will have a robust, methodical Implementation Plan that your company can leverage within your change control and validation processes. This plan should also have provisions in place for future change. No system is static forever, so be sure to build in a controlled revision process for additions, edits, and deletions as you continue to grow and evolve.

Implementation Phase

After the plan above is agreed upon and ready for execution, it is essential to configure and fully test the updates in the validation environment. Review your permissions matrix and ensure that every point is tested for both what is allowed and for what should not be allowed . Do approved users and roles have access, and are all others blocked? Use your documentation to plan your testing to make sure your business needs are met. If you discover any issues or required adjustments, be sure to correct the issue, retest, and add the changes to the plan in a trackable process.
We’ve seen many first-pass configurations work perfectly until ‘white-hat’ testing exposes unexpected access allowed in critical areas. In fme’s methodology, we start with clearly defined documentation of what will be maintained, updated, or eliminated based on the approved plan. We then execute rigorous testing to verify that the changes provide the desired results. The test results are then summarized, documented and approved by our client team. With these changes tested and approved in the validation environment, we then plan and execute the same process for the production Vault.

Post Implementation Phase

Other elements that are often given minimal attention include training, post-implementation monitoring, and verification. Take the time to confirm the change is adopted smoothly by the end users, and all members of the admin team understand the changes and the reasons for them. Provide written procedures to ensure that optimized settings and profile assignments continue to be utilized as planned. Any additional changes should always be documented, reviewed, and approved.

With any change within complex systems, there are always unexpected combinations of variables that provide unplanned results. Don’t assume everything will go perfectly and plan some time for real-time fire drills and critical adjustments. If you do everything perfectly and don’t need that time, super! But if you do, you’ll be thankful you have the room for it.

When we work with our customers, we agree upon a specific period of post-implementation support to address any challenges encountered with the changes in production. We also train both users and admin teams, providing detailed documentation that can be referenced at any time. Beyond the end of the current project, we maintain a consistent communication cadence, so we are available for further updates or planned changes down the road. We also recommend periodic reviews to verify that established configurations match your evolving needs, and there are no outstanding changes waiting to be made. Our customers appreciate that we document and leverage the system and process knowledge gained during our engagements to help streamline future projects .

Conclusion

Permissions and access control are basic components of any system and should always be given appropriate attention. Ensure your team has the experience to consider all situations so you don’t leave security concerns and questions unanswered. These challenges will multiply over time if not addressed. With a complete permission structure defined that meets your specific business needs, you will ensure that your users have access to the data and workflows they need to do their jobs.

If you have any questions or concerns, please reach out to fme’s team of Veeva certified configuration experts to help you with your security management. Our proven step-by-step approach will show that it’s possible to leverage the robust configurability of the Veeva solution to serve your user and compliance needs with a consistent framework that is replicable for future business scenarios.

About the author

Amanda Hancock is a Principal Consultant with the Life Sciences business unit at fme US. She has over 20 years of experience in the Life Science industry, working in the clinical research and diagnostics sectors. Amanda started her career in 2000 as Research Assistant at The Ohio State university and later worked in the roles of QC Analyst, Quality Assurance Manager, and Quality Assurance Director before joining fme in 2022. In addition to being a Certified Quality Auditor (ASQ), Amanda is a Veeva Vault trained professional holding Associate Administrator certifications in Veeva Vault Platform, Veeva Vault QualityDocs, Veeva Vault QMS, Veeva Vault Submissions, and Veeva Vault Submissions Archive.