There are basically two non-excluding methods for carrying out risk analysis Ten years after its publication, the ISPE GAMP®Guide: A Risk-Based Approach to Compliant GxP Computerized Systems is regarded as the definitive industry guidance on GxP computerized system compliance