Risk management should be applied throughout the lifecycle of the computerised systemtaking into account patient safety, data integrity and product quality. As part of a riskmanagement system, decisions on the extent of validation and data integrity controls shouldbe based on a justified and documented risk assessment of the computerised system