Most sponsors now say they run risk-based monitoring. Far fewer can show an inspector the link between the risk assessment, the key risk indicators, the thresholds, the actions taken and the outcome. Without that chain, "risk-based" reads as "less monitoring".
Start with critical data and processes
Pick the handful of data points and processes that determine participant safety and the primary endpoint: eligibility, consent, dosing, primary efficacy assessments, serious adverse event reporting. These get the closest attention; everything else is proportionate.
Make the KRIs specific
Useful key risk indicators have a definition, a data source, a threshold and a named action. "Query rate" is not a KRI; "open queries older than 30 days per 100 CRF pages, reviewed fortnightly, with a targeted visit triggered above 8" is.
Central monitoring earns its keep
Centralised review of aggregate data finds patterns on-site visits cannot: a site whose blood pressure readings never vary, visit dates clustered on one weekday, adverse event rates far below the study mean. These signals should feed the visit plan.
Document the decisions
Every change in monitoring intensity should leave a record: what was observed, what was decided, who decided it. This is the evidence an inspector wants, and it is what turns a cheaper plan into a defensible one.
Vakula Tech provides trial monitoring and trial management services and can review an existing monitoring plan before an audit.