Editor's Choice


How exactly does IT support ­manufacturing compliance?

March 2016 Editor's Choice IT in Manufacturing

Manufacturing companies are increasingly subject to new compliance frameworks which need to be understood, incorporated and adhered to in order to stay in business. Manufacturing compliance is increasingly a concern as a result of new regulations, and globally connected supply chains where products are made and consumed across multiple jurisdictions.

In an age of total transparency, the entire reputation of a business can rest on a single system error or the misguided action of single employee. Compliance violations can lead to intervention by the authorities with loss of reputation, financial damage and criminal liability.

IT is an enabler

Manufacturing IT, owing to its role in the underlying business processes, is a key enabler of compliance. Yet poorly managed IT systems can also pose a significant compliance risk to the businesses. Badly designed software or legacy systems that have not been maintained can continually be in violation of several regulations and standards, without the business owners even being aware of this.

Compliance is not something that can be bolted-on; it needs to be intrinsic to the design and selection of each process supported by the IT system. Proper control systems should be in place to ensure that these systems are then maintained in accordance with the necessary standards.

Manufacturing compliance is subject to several regulations and standards, as well as industry and technical requirements throughout the value chain. Areas such as product safety, data control and privacy, export controls, traceability, manufacturing records, environment, health and safety, product safety, employment and financial reporting, are all compliance areas subject to various regulations and standards.

Examples of applicable standards in regulated industries include the FDA standards on Good Manufacturing Practice (GMP) and the Code of Federal Regulations (CFR). Other industries that do not fall within the scope of the FDA might be regulated by several standards such as ISO, and IEC etc. Corporate reporting and access to funding might be regulated by Sarbanes-Oxley, Basel, the Equator principles, and so on.

Bridging the disconnect

There is typically a large disconnect in com­pliance awareness at the different levels of the business (A.T. Kearney study, 2013). In general compliance tends to be much more of a concern of top management, while lower levels in an organisation often view it as an unnecessary administrative burden or obstacle to doing ‘real work’.

The role of properly designed and implemented IT systems in ensuring compliance is significant. There are several ways in which IT can support compliance such as:

• Business processes that are designed to enforce the necessary disciplines and controls.

• Proper handling and storage of electronic records.

• Compliance related information dissemination and transparency.

• Information security.

Well-designed business processes can enforce adherence to compliance processes and standards. But, the average user might complain about the “unfriendly” ERP system without realising that these systems are embedding multiple compliance objectives. It is therefore important constantly to sell the importance of these compliance objectives to these users.

Compliance in IT needs to be viewed holistically because it applies to all levels of the manufacturing system, from plant level sensor, process control, manufacturing execution, business process management, systems of record, analytics and reporting. When companies are organised in silos, this holistic view of overall system compliance is broken down. In response, some companies will set up a separ­ate compliance function reporting directly to the board that operates across all functions.

As with all IT systems, the technology itself is less important than the way the system is implemented and managed. Various internal frameworks exist to manage compliance include CoBIT, ITSM, COSO etc. Implementation of these frameworks can often be fragmented and sporadic owing to their complexity and sheer weight. To add to this, fast-moving technological trends, such as mobile computing and cloud-based services, can run ahead of existing IT governance processes. In practice, employees and middle management then simply bypass IT controls to do their work. A balance therefore needs to be found between heavy governance frameworks and the need to support new agile processes needed by the business.

Manufacturing IT professionals at all levels must be familiar with the applicable compliance standards in their industry and ensure that all areas of IT, systems development and implementation take these into account.

Regulated environments pose additional problems

In regulated environments, IT systems will need to be validated. Validation ensures that the system meets the required standard and that it will remain compliant. Key elements of validation include audit trails, secure access, secure electronic transactions etc. Validation also requires examination of the system functionality against requirements, examination of the way systems are specified, designed, developed, tested and maintained and the associated change control processes. Organisational elements in terms of resources, skills and awareness also need to be tested on an ongoing basis.

It is important to design validation into the ongoing manufacturing business processes and not just regard it as a single event. A management control system should be implemented around those processes with the highest risk of non-compliance. The system should record deviations from the standard, assesses the associated risk and compliance aspects, and follow through with corrective actions and feedback.

In conclusion, manufacturing system compliance is a critical competency of any manufacturing company. IT can play a vital role in ensuring that compliance is designed into the processes and managed on an ongoing basis, but this does require a level of maturity and awareness in the business as to the importance of being compliant in order to stay in business.

Gavin Halse is a chemical process engineer who has been involved in the manufacturing sector since mid-1980. He founded a software business in 1999 which grew to develop specialised applications for mining, energy and process manufacturing in several countries. Gavin is most interested in the effective use of IT in industrial environments and now ­consults part time to manufacturing and software companies around the effective use of IT to achieve business results.

For more information contact Gavin Halse, Absolute Perspectives, +27 (0)83 274 7180, [email protected], www.absoluteperspectives.com





Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

Harnessing industrial AI agents for reliable automation
Editor's Choice IT in Manufacturing
The excitement around generative AI (GenAI) has been undeniable, promising wide-ranging changes across industries. However, for those of us in the world of industrial control and automation, the realities of implementing these powerful technologies are a little more nuanced.

Read more...
Futureproof your industrial network security with OT-centric cyber security
RJ Connect Editor's Choice
To achieve digital transformation, industrial operators must first address the daunting task of merging their information technology (IT) and operational technology (OT) infrastructure. In this article, we focus on the importance of strong OT network security and provide some tips on how to strengthen cybersecurity for industrial operations.

Read more...
The symbiotic relationship between OEMs and SIs
Schneider Electric South Africa Editor's Choice System Integration & Control Systems Design
While businesses tend to turn directly to original equipment manufacturers OEMs or vendors when embarking on IT projects, the role of the SI as a key facilitator and partner cannot be overstated.

Read more...
Case History 196: Unstable condensate level control.
Michael Brown Control Engineering Editor's Choice Level Measurement & Control
The operators in a petrochemical refinery were having great trouble in trying to stabilise the condensate level in a vessel, and this was adversely affecting other loops downstream. Several unsuccessful attempts had been made to retune the controller.

Read more...
Big themes for 2025
Editor's Choice News
2024 was a year of unprecedented innovation and global upheaval. As we look ahead, Amy Webb, CEO of the Future Today Institute asks which technologies will reshape our world in 2025?

Read more...
Loop signature: Tuning part 4 processes
Michael Brown Control Engineering Editor's Choice Fieldbus & Industrial Networking
The purpose of this particular article is to try and give those unfortunate enough to have to use SWAG (scientific wild ass guess) tuning a bit of an idea of how to go about it, and even more importantly some understanding of a couple of basic principles.

Read more...
EtherCAT and PC-based control elevate next-generation laser cutting machine
Beckhoff Automation Editor's Choice
Cincinnati Incorporated has been building sheet metal processing equipment for 125 years. Since the switch to PC-based control, the only limits to development have been physical.

Read more...
Ensure seamless integration and reliable performance with CANbus solutions
RJ Connect Editor's Choice Fieldbus & Industrial Networking
Modern industrial applications require robust and effective communication. The CANbus product range guarantees smooth integration and data transfers throughout systems.

Read more...
Connecting every transport node
RJ Connect Editor's Choice Data Acquisition & Telemetry
Stockholm's bus system strategically links urban mainline, suburban mainline, non-mainline routes, community service buses and night buses. To acquire and process data from multiple sources and analyse onboard information on their moving buses, Transdev sought a dependable and powerful onboard computer. It teamed up with CatAB, Moxa’s local representative, known for delivering top-notch industrial data communication boards and equipment since 1988.

Read more...
Local range of planetary units
SEW-EURODRIVE Editor's Choice Motion Control & Drives
As SEW-EURODRIVE South Africa actively extends its offerings to customers, the SEW PPK and SEW P2.e industrial gearbox ranges are good examples of solutions that are well suited to the local business environment.

Read more...