RSC Topic: Document Control & Version Governance

Change control, approvals, and access rights across workflows.

  • Master batch record

    A master batch record is the approved, controlled template that defines how a specific product and batch size must be manufactured, tested, packaged, and documented. It describes the intended process before execution and serves as the reference against which individual batch manufacturing records are created and executed.

    What a master batch record includes

    In regulated manufacturing environments, such as pharmaceuticals or medical devices, a master batch record commonly includes:

    • Product identification and strength or variant
    • Defined batch size and allowable yield ranges
    • Bill of materials and component specifications
    • Detailed manufacturing instructions and operating parameters
    • Required equipment and line setup instructions
    • In-process controls and sampling plans
    • Quality control tests and acceptance criteria
    • Labeling, packaging, and storage instructions
    • Spaces or structures for recording critical data at execution time

    The master batch record is typically maintained under document control, with version history, approval signatures, and linkage to change control, validation, and quality risk assessments.

    Operational role

    Operationally, the master batch record:

    • Serves as the source document from which batch manufacturing records (BMRs) or batch production records (BPRs) are generated
    • Provides standardized, repeatable instructions across shifts, sites, or contract manufacturers
    • Acts as a reference for training, investigations, deviations, and audits
    • Can be implemented as paper forms, controlled PDFs, or electronic records in MES/EBR systems

    In electronic systems, the master batch record may be represented as an electronic recipe or workflow definition, including parameters, checks, and system-enforced sequences.

    What it is not

    A master batch record is not the executed record of a specific batch. It does not itself prove that a batch was manufactured according to instructions; that evidence is captured in the executed batch record derived from the master.

    Common confusion

    • Master batch record vs. batch manufacturing record (BMR) / batch production record (BPR): The master batch record is the template and specification. The BMR/BPR is the completed, batch-specific record showing what actually happened, who performed each step, and when.
    • Master batch record vs. standard operating procedure (SOP): An SOP describes how to perform a type of activity in general. A master batch record integrates product-specific instructions, quantities, parameters, and recording requirements for a particular product and batch size.

    Link to the source context

    In the context of pharma, where the term BMR is often used, the batch manufacturing record is the executed evidence for a specific batch. That BMR is generated from the master batch record, which defines the approved method and controls that every batch must follow.

  • edition

    An edition is a specific formally published version of a standard, specification, or controlled document. Each edition has its own publication date and often an edition number, and it represents the complete, authoritative text at that point in time.

    What an edition includes

    In industrial and regulated environments, an edition commonly refers to:

    • A full, consolidated version of a standard (for example, IEC, ISO, or industry consortium documents).
    • All approved content up to that publication date, including any previously incorporated amendments or corrigenda.
    • A stable reference that can be cited in contracts, procedures, validation documents, and design records.

    An edition is typically identified by a combination of:

    • Edition number (for example, Edition 1.0, Edition 2.0).
    • Publication year.
    • Part number or section of a multi-part standard (for example, IEC 62443-3-3 Edition 1.0).

    How an edition differs from revisions and amendments

    Although usage can vary, in standards and document control contexts:

    • Edition usually means a complete, formally republished document.
    • Amendment means a targeted set of changes that update or add to a specific edition without replacing the whole document.
    • Revision is a generic term for changes and may result in a new edition when the standard is republished in full.

    For internal company procedures, some organizations use “edition” as a high-level version label and use separate minor version or revision identifiers for smaller updates. Others reserve the term primarily for external consensus standards.

    Operational use in manufacturing and compliance

    Tracking editions is important where design, validation, and cybersecurity requirements rely on specific external standards or controlled specifications. Typical uses include:

    • Document control systems storing the applicable edition of a standard that a process, equipment design, or validation protocol is based on.
    • Change control workflows that evaluate the impact of moving from one edition of a standard to a later one.
    • Supplier and customer agreements that refer to a particular edition to avoid ambiguity about technical or security requirements.
    • Regulated or long-lifecycle plants documenting which edition of cybersecurity or safety standards their systems were designed or assessed against.

    Common confusion

    • Edition vs version: “Version” is a broad term used for almost any change level in software, specifications, or work instructions. “Edition” usually refers to a formal, published, and named state of a standard or controlled document.
    • Edition vs release: “Release” often describes the act of making a document, product, or software version available. The item that is released may be a particular edition of a standard or a particular version of a document.

    Connection to external standards

    For multi-part industrial standards such as IEC 62443, each part is published in numbered editions. Organizations typically reference the exact part and edition when defining cybersecurity requirements, performing risk assessments, or documenting compliance-related activities, and they may evaluate new editions through formal change control before adopting them.

  • RACI matrix

    A RACI matrix is a responsibility assignment chart used to clarify roles and decision rights for tasks, deliverables, or processes. The acronym RACI stands for Responsible, Accountable, Consulted, and Informed. It is commonly used in industrial operations, OT/IT projects, and quality or compliance initiatives to reduce ambiguity about who does what and who must be involved.

    Core elements of a RACI matrix

    A RACI matrix typically appears as a grid, with activities listed on one axis (such as process steps, project tasks, or documents) and roles or functions on the other (such as quality manager, production supervisor, ERP owner, or MES engineer). Each intersection is assigned one or more of the following:

    • Responsible (R): The role that performs the work to complete the task or produce the deliverable. There can be multiple responsible roles, but many organizations limit it to reduce confusion.
    • Accountable (A): The role that ultimately owns the outcome and ensures the task is completed correctly. Typically exactly one role is accountable for each task or deliverable.
    • Consulted (C): Roles that must be consulted before work is done or decisions are made. This is usually a two-way communication, for example between quality, engineering, and production.
    • Informed (I): Roles that must be kept informed after decisions are made or work is completed. This is usually one-way communication, such as sending status updates or final reports.

    Use in manufacturing and regulated environments

    In industrial and regulated settings, a RACI matrix is often used to document and communicate responsibilities for:

    • Quality processes such as nonconformance handling, CAPA workflows, FAI reviews, or inspection plans.
    • MES, ERP, or PLM projects, including configuration changes, data governance, and system integrations.
    • Change control for work instructions, routing changes, or document management.
    • Audit preparation and evidence collection across departments.
    • Maintenance, OT cybersecurity, and safety-related procedures where clear accountability is essential.

    Operationally, the RACI matrix is often referenced in procedure documents, project charters, and governance frameworks, and may be attached to controlled quality system documents as supporting evidence of role clarity.

    What a RACI matrix is not

    • It is not an organizational chart. It does not show reporting lines, only responsibilities for defined activities.
    • It is not a full project plan or schedule. It complements plans by clarifying who is involved, but does not replace timelines or resource plans.
    • It is not a detailed procedure. It sits alongside SOPs and work instructions, which describe how tasks are performed.

    Common confusion

    • RACI vs. responsibility matrix: In many organizations, the term “responsibility matrix” informally refers to a RACI matrix. Strictly speaking, RACI is one specific structured format for a responsibility matrix.
    • RACI vs. RASCI / RACI-VS and other variants: Variants such as RASCI (adding “Support”), RACIQ (adding “Quality” or “Query”), or RACI-VS (adding “Verify” and “Sign-off”) extend the model but follow the same principle of mapping roles to activities.
    • RACI vs. job descriptions: Job descriptions define broad role expectations. A RACI matrix is more granular and tied to specific processes, systems, or projects.

    Context in OT/IT and quality systems

    In OT/IT integration and quality systems, a RACI matrix helps clarify responsibilities across operations, engineering, IT, and quality for activities such as master data changes, system access controls, electronic record review, and audit response. This can support consistent execution of processes and clearer evidence of defined responsibilities during internal or external reviews.

  • Governance artifacts

    Governance artifacts commonly refers to the documented items used to define, authorize, monitor, and evidence how a process, system, or organization is controlled. In industrial and regulated environments, these artifacts often include policies, procedures, standards, work instructions, approval records, risk assessments, change records, access reviews, training records, and audit evidence.

    The term includes both the content that sets expectations and the records that show those expectations were reviewed, approved, communicated, or followed. It does not usually refer to the operational transaction itself, such as a production order or machine event, unless that record is being used as formal control evidence.

    How the term is used in operations

    In practice, governance artifacts appear across quality systems, IT and OT change control, document management, training administration, supplier oversight, and system validation activities. They are the materials people use to answer questions such as:

    • What rule or requirement applies?
    • Who approved it and when?
    • What version was in effect?
    • What evidence shows the control was executed?

    For example, a controlled SOP, its revision history, the approval workflow, and the training acknowledgement tied to that SOP can all be considered governance artifacts.

    What governance artifacts typically include

    • Policies and standards
    • Procedures and work instructions
    • Templates and controlled forms
    • Approval and review records
    • Risk assessments and mitigation records
    • Change requests and change impact assessments
    • Role definitions, access matrices, and segregation of duties records
    • Training completion records
    • Audit logs, exception records, and investigation documentation

    Common confusion

    Governance artifacts are often confused with general documentation. Not all documentation is a governance artifact. A casual note, draft analysis, or informal email may support work, but it is not usually treated as a governance artifact unless it is part of a defined control process.

    The term is also sometimes confused with master data or transactional data. Master data defines business objects such as parts, suppliers, or equipment. Transactional data records events such as production, inspection, or shipment. Governance artifacts instead focus on the rules, approvals, and evidence used to control those activities.

    Why the distinction matters

    In manufacturing systems, governance artifacts help maintain document control, version governance, traceability of decisions, and evidence trails across MES, ERP, QMS, and related platforms. They support controlled operations, but they are not the same as the control mechanism itself.

  • Governance artifact

    A governance artifact is a documented item used to establish, communicate, approve, or demonstrate how an organization governs a process, system, data set, or decision. In industrial and regulated environments, it commonly refers to formal records such as policies, procedures, approval records, decision logs, standards, control matrices, review minutes, or role assignments that show how oversight is defined and carried out.

    The term includes both documents that set rules and records that show those rules were reviewed, approved, or followed. It does not usually mean the operational transaction itself, such as a production order, sensor reading, or machine event, unless that record is specifically part of governance evidence.

    How it is used

    In practice, a governance artifact helps answer questions such as who approved a change, what rule applies, which version is current, what responsibilities were assigned, and what evidence exists that a review occurred. These artifacts often appear in document control, quality management, change control, data governance, cybersecurity governance, and ERP or MES integration programs.

    • A policy defines expectations at a high level.

    • A procedure describes how a controlled activity is performed.

    • An approval record shows that a required review or authorization took place.

    • A decision log captures governance decisions and their rationale.

    • A RACI matrix or role assignment document identifies accountability and responsibility.

    What it includes and excludes

    A governance artifact commonly includes controlled documents and evidence records tied to oversight, accountability, and decision-making. It may exist in a QMS, document management system, ticketing workflow, ERP, MES, or collaboration platform, depending on how the organization manages records.

    It generally excludes informal notes, undocumented verbal approvals, and routine operational data unless those items are formally captured and retained as part of governance or audit evidence.

    Common confusion

    Governance artifact is often confused with a general document or record. Not every document is a governance artifact. The term usually implies that the item has a governance role, such as defining control, assigning responsibility, recording approval, or preserving evidence of oversight.

    It is also different from a system artifact in software or engineering, which may refer to any output produced by a tool or process. In governance contexts, the focus is on control, accountability, and evidence rather than technical output alone.

  • PLM (Product Lifecycle Management)

    Product Lifecycle Management (PLM) commonly refers to the coordinated governance of product-related data, processes, and decisions across the entire lifecycle of a product, from initial concept and design through manufacturing, service, and retirement.

    What PLM includes

    In industrial and regulated manufacturing environments, PLM typically includes:

    • Central product data: Management of CAD models, drawings, specifications, BOMs (Bills of Material), part numbers, and configuration definitions.
    • Change control: Formal engineering change management (ECR/ECO/ECN), revision control, and impact analysis across design, manufacturing, and supply chain.
    • Configuration management: Rules and structures to control product variants, effectivity dates, and as-designed vs as-built records.
    • Process and document management: Workflows and approvals for design reviews, technical documentation, and sometimes manufacturing process definitions.
    • Cross-functional collaboration: A shared system of record for engineering, manufacturing engineering, quality, supply chain, and sometimes service teams.

    PLM is usually implemented through specialized PLM software platforms that integrate with CAD, ERP, MES, and quality systems, but the term also covers the underlying processes and governance, not just the software.

    What PLM does not include

    PLM is related to, but distinct from:

    • ERP: ERP focuses on planning, finance, inventory, and execution of orders; PLM focuses on product definition and controlled changes to that definition.
    • MES: MES manages production execution and data collection on the shop floor; PLM provides the approved product and process definitions that MES consumes.
    • QMS: Quality Management Systems govern quality policies, CAPA, and audits; PLM may reference these processes but is not a full QMS.

    Operational role in manufacturing

    Operationally, PLM acts as the upstream source of truth for:

    • Released designs and BOMs that are transferred or synchronized to ERP and MES for planning and execution.
    • Engineering changes that trigger updates to routings, work instructions, inspection plans, and supplier documentation.
    • Regulated documentation such as controlled drawings, specifications, and configuration baselines referenced in audits or customer requirements.
    • Traceability links between design revisions and downstream records like FAI packages, nonconformances, and field returns.

    Common confusion

    • PLM vs PDM: Product Data Management (PDM) typically focuses on CAD file and drawing control within engineering; PLM is broader and adds lifecycle governance, change processes, and cross-functional integration.
    • PLM vs ALM: Application Lifecycle Management (ALM) manages software product lifecycles. In mechatronic products, PLM and ALM may integrate but are not the same system.

    Use in regulated and high-compliance environments

    In regulated sectors such as aerospace, defense, and medical devices, PLM is commonly used to maintain controlled product definitions, demonstrate configuration control, and provide documented links from requirements and design decisions to manufacturing and inspection records. It often underpins interoperability with MES, ERP, and QMS to support traceability and audit readiness.

  • quality agreement

    A quality agreement is a formal written contract between two or more organizations that defines how quality, compliance, and related responsibilities are shared for a product or service. In industrial and regulated manufacturing environments, it commonly governs relationships between a manufacturer and its suppliers, contract manufacturers, logistics providers, or software/service vendors whose systems affect product quality or regulatory records.

    What a quality agreement typically covers

    While exact content varies, a quality agreement commonly specifies:

    • Scope of products and services that are covered, including systems, components, and processes.
    • Roles and responsibilities for each party across quality planning, production, testing, release, and ongoing monitoring.
    • Standards and specifications to be followed, such as internal procedures, referenced regulations, and industry standards.
    • Documentation and record-keeping requirements, including data retention, access to records, and change history.
    • Deviation, incident, and complaint handling, including notification timelines, investigation ownership, and communication paths.
    • Change control expectations for process, equipment, software, materials, or organizational changes that may affect quality or compliance.
    • Audits and assessments, including the right to audit, frequency, scope, and handling of observations.
    • Release and acceptance criteria, including test methods, sampling plans, and disposition decisions.
    • Supplier qualification and ongoing monitoring, including performance metrics and review mechanisms.
    • Data integrity and electronic systems expectations, especially where OT, MES, ERP, LIMS, or supplier-hosted systems are involved.

    Operational meaning in manufacturing and regulated environments

    In practice, a quality agreement shapes how organizations work together day to day across the product lifecycle. It often interacts with internal procedures for:

    • Supplier management, including qualification, rating, and periodic review.
    • Incident, deviation, and CAPA processes, by defining joint investigation, root cause analysis, and corrective action responsibilities.
    • Change control, by requiring advance notification and approval for supplier changes that could affect validated states, product quality, or data integrity.
    • System validation and IT/OT controls, where supplier systems (for example cloud platforms, MES modules, or data interfaces) hold or process GxP-relevant or regulated data.
    • Regulatory inspections and audits, by clarifying how each party supports inspections, document requests, and responses to findings.

    Quality agreements are usually separate from commercial contracts such as supply or service agreements. Commercial terms like price, payment, or volume commitments are typically handled in other documents, while the quality agreement focuses on technical, quality, and compliance expectations.

    Common confusion

    • Quality agreement vs. supply agreement: A supply agreement covers business terms (pricing, delivery, liability). A quality agreement focuses on quality and compliance responsibilities. The two documents are often referenced together but have different purposes.
    • Quality agreement vs. service-level agreement (SLA): An SLA usually defines performance metrics such as uptime or response time. A quality agreement focuses more broadly on quality systems, documentation, regulatory expectations, and shared responsibilities, and may reference SLAs where relevant.
    • Quality agreement vs. quality manual or SOP: A quality manual or SOP describes one organization’s internal system and procedures. A quality agreement is a cross-organizational contract defining how multiple parties interact.

    Link to incidents involving supplier systems

    When incidents involve supplier-controlled systems, such as outsourced manufacturing execution, cloud-hosted quality tools, or other integrated OT/IT platforms, the quality agreement is often the primary document that:

    • Defines who must be notified, and within what timeframe, when an incident occurs.
    • Specifies how joint investigations are run and how information is shared.
    • Clarifies responsibilities for containment, corrective actions, and documentation.
    • Outlines expectations for evidence, records, and support during audits or regulatory inspections related to the incident.

    This makes the quality agreement a central reference during planning, response, and documentation of supplier-related quality events.

  • Scope tag

    A scope tag commonly refers to a label or metadata field used to indicate the intended boundary, coverage, or applicability of an item. In industrial and manufacturing systems, it is typically used to show what a record, document, alert, requirement, workflow, or data element applies to, such as a site, line, product family, process area, supplier, or program.

    A scope tag is not the same as the item’s full content or formal approval status. It helps classify where something is relevant, but it does not by itself define ownership, change control, or compliance status unless those functions are built into the surrounding system.

    How it is used in operations and systems

    Scope tags often appear in MES, QMS, document control, analytics, and integration workflows as a way to filter, route, organize, or limit visibility of information. For example, a work instruction might carry a scope tag for a specific production cell, or a quality event might be tagged to a product line and supplier category.

    • Documents: identify which process, site, or equipment a document applies to
    • Data and dashboards: separate metrics by line, plant, program, or product family
    • Quality records: indicate the affected process, material, or organizational area
    • Alerts and notifications: limit who receives a signal based on relevance
    • Integrations: help map records between systems using shared applicability labels

    What a scope tag includes and excludes

    A scope tag usually includes a concise indicator of applicability, such as location, function, asset class, product group, or business unit. It may be a controlled value from a predefined list or a free-text label, depending on the system.

    It generally excludes detailed business rules, full record context, and the logic used to calculate a metric or trigger an event. Those may be related, but they are separate from the tag itself.

    Common confusion

    Scope tag is often confused with a category, topic tag, asset tag, or permission label.

    • A category groups content by subject area, while a scope tag identifies where or to what it applies.
    • An asset tag usually identifies a specific physical item, such as a machine or instrument, rather than a broader applicability boundary.
    • A permission label controls access, while a scope tag mainly describes relevance or coverage.
    • A status field shows lifecycle state, such as draft or approved, which is different from scope.

    Manufacturing example

    If a deviation workflow is relevant only to one assembly line and one product family, the system may assign scope tags for that line and product family so records, reviews, and reporting stay aligned to the affected area.

  • metadata

    Metadata is structured information that describes other data so that it can be understood, searched, governed, and used consistently across systems. In industrial and manufacturing environments, metadata commonly documents what a data item means, where it comes from, how it is calculated, how it should be used, and under what conditions.

    What metadata typically includes

    In operations and regulated manufacturing systems, metadata commonly covers:

    • Business meaning: clear definitions of fields, metrics, and codes (for example, what a specific KPI, status code, or material attribute represents).
    • Technical details: data types, units of measure, value ranges, and data models or schema relationships.
    • Provenance and lineage: data source systems, interfaces, transformation logic, and calculation formulas.
    • Governance information: ownership, version history, approval status, effective dates, and change-control references.
    • Access and usage rules: security classification, role-based visibility, and any regulatory or record-retention constraints.

    Metadata can be stored in many places, such as data catalogs, MES or ERP configuration tables, master data systems, data warehouses, and reporting tools. In dashboards and reports, it often surfaces as tooltips, field descriptions, or help text tied to specific metrics or columns.

    Operational role in manufacturing and KPIs

    For manufacturing KPIs and regulated operations, metadata provides the controlled definitions and context that help different plants, lines, and systems interpret data the same way. Examples include:

    • A standardized OEE definition with its calculation formula, included and excluded loss categories, and data sources for each component.
    • Controlled naming and descriptions for quality attributes, defect codes, and nonconformance types used across MES, LIMS, and QMS.
    • Versioned descriptions of inspection plans, sampling schemes, and test limits referenced by digital records.

    When dashboards or reports display metadata directly at the point of use (for example, via governed tooltips), users can see the current, approved definition of a KPI or field without leaving the application.

    Metadata and governance

    In regulated environments, metadata is often subject to document control and change management. This can include:

    • Versioning definitions and calculation rules, with effective dates and approvals.
    • Tracking which systems, reports, and interfaces consume a given piece of metadata.
    • Maintaining audit trails when definitions or mappings are updated.

    Consistent metadata helps support traceability, audit readiness, and alignment across OT and IT systems by making data meaning and usage explicit rather than implicit or tribal knowledge.

    Common confusion

    • Metadata vs. master data: Master data represents core business entities (such as materials, equipment, or customers). Metadata describes data elements themselves (for example, the meaning and structure of a “material grade” field), not the individual records.
    • Metadata vs. documentation: General documentation can be unstructured text. Metadata is structured, machine-readable information attached to specific data elements, fields, or objects, which systems can query and enforce.
  • technical publications

    Technical publications are structured, controlled documents that describe how to design, build, operate, inspect, maintain, or repair complex systems, equipment, and processes. In regulated manufacturing and aerospace environments, they commonly refer to official manuals and data sets that define the authoritative way work must be performed.

    Typical technical publications include:

    • Maintenance and overhaul manuals (for aircraft, engines, tooling, and facilities)
    • Illustrated parts catalogs and bills of material
    • Component maintenance manuals and repair manuals
    • Service bulletins, service letters, and engineering change notices
    • Installation instructions and retrofit or modification instructions
    • Operating manuals, process specifications, and standard practice documents
    • Digital and interactive content such as 3D models, visual or AR work instructions, and linked data sets used by MES, MRO, and PLM systems

    Role in industrial and aerospace operations

    In industrial and aerospace contexts, technical publications provide the reference information that production, maintenance, and quality teams rely on to perform work consistently and in line with engineering intent and regulatory expectations. They are typically authored and maintained by specialized technical publications or technical data teams, often working from engineering, design, and service engineering source data.

    Operationally, technical publications are closely linked to:

    • Work instructions and travelers, which may embed or reference content from the technical publications set
    • MRO workflows, where maintenance instructions, inspection criteria, and test procedures must trace back to OEM or approved publications
    • Quality and compliance systems, which rely on controlled, revision-managed documents for audits, investigations, and nonconformance analysis
    • Configuration management, where specific aircraft, asset, or product configurations determine which publications and revisions apply
    • Export-controlled and sensitive technical data handling, when publications contain controlled drawings, models, or maintenance instructions

    Governance and lifecycle

    Technical publications are usually subject to formal document control and may follow a lifecycle that includes authoring, technical review, approval, release, revision, and retirement. In many organizations they are managed in PLM, technical data management systems, or document control modules integrated with MES, MRO, or ERP.

    Common governance aspects include:

    • Revision and effectivity control, including which units, serial numbers, or models a publication applies to
    • Traceability back to source engineering and certification data
    • Controlled distribution and access, especially for export-controlled or customer-proprietary content
    • Change management when engineering or regulatory requirements change

    Common confusion

    Technical publications vs. work instructions: Technical publications are the authoritative technical and maintenance data set (for example, an OEM maintenance manual), while work instructions are often plant- or site-specific task breakdowns, travelers, or job instructions that may reference or derive from those publications.

    Technical publications vs. engineering drawings or CAD models: Drawings and models are primary design artifacts. Technical publications frequently use content derived from them (figures, illustrations, exploded views, 3D visualizations) but package this information into procedures and narratives intended for operators, technicians, and inspectors.

    Link to augmented and visual instructions

    When technical publications are digitized and structured, their content can be delivered through visual or augmented reality (AR) work instructions. In aerospace maintenance, for example, step-by-step procedures, torque values, inspection callouts, and part identification from the technical publications set can be overlaid onto the physical aircraft or component. In such cases, the AR experience is a delivery layer, while the technical publication remains the controlled source record.