What is risk-based monitoring (RBM)?
Risk-based monitoring is an approach to trial oversight that focuses monitoring activity on the data and processes most critical to participant safety and the reliability of results, instead of checking everything equally.
- RBM in plain language
- How it works in practice
- Related terms
Free sandbox · No credit card · 21 CFR Part 11 aligned
Green
6
Amber
2
Red
1
In short
- RBM starts with a risk assessment that identifies critical data and processes (critical-to-quality factors).
- It combines centralised monitoring of data across sites, key risk indicators that flag problem sites, quality tolerance limits at study level, and targeted on-site or remote monitoring.
- FDA published guidance on a risk-based approach to monitoring in 2013; ICH E6(R2) introduced risk-based quality management in 2016, and E6(R3) builds on it.
- The goal is better quality for the same or less effort, not simply fewer site visits.
Explained
The components of risk-based monitoring
A risk-based monitoring plan begins before the first site opens. The team asks which data and processes, if they went wrong, would harm participants or undermine the result: consent, eligibility, dosing, the primary endpoint, serious adverse events. These critical-to-quality factors determine where monitoring effort goes.
During the trial, centralised monitoring reviews data from all sites together to find patterns no single site visit would reveal: a site with unusually few adverse events, implausibly consistent vital signs, or a growing query backlog. Key risk indicators turn those patterns into site-level signals, and quality tolerance limits set study-level thresholds (for example, the proportion of participants with a major protocol deviation) that trigger action if exceeded. On-site and remote monitoring then target the sites and data that need it, with source data verification focused on critical fields.
In Capture
Risk signals and targeted SDV in the same system as the data
The site risk monitor rates each site red, amber or green and says why, such as SAEs pending review. Critical-to-quality factors and quality tolerance limits are defined for the study, out-of-window visits are flagged, and SDV is set per field so monitors focus on the critical set.
- Site risk ratings with reasons.
- QTLs and CtQ factors per study.
- Targeted SDV by field.
What does RBM stand for?
Risk-based monitoring.
Is risk-based monitoring required?
ICH E6 expects sponsors to take a risk-based approach to quality management, including monitoring, proportionate to the trial's risks.
What is a quality tolerance limit?
A study-level threshold for a critical parameter, such as the rate of major protocol deviations, that triggers evaluation and action if exceeded.
Does RBM mean no site visits?
No. It means targeting visits and verification where risk is highest, combined with centralised review.
Keep exploring
Related pages
Monitor by risk from day one
Site risk, QTLs and targeted SDV in a free sandbox.