📚 Part of the OBX-319 Regulatory Dossier — Reader's Guide. This article shows the live document; edits to the source appear here automatically.

---

Program Risk Register (OBX-319)

Document ID: PM-004
Version: 1.0
Change History: 1.0 — Initial issue.
Standard(s): Program management

Program Risk Register — OBX-319

Tracks the key development risks for the OBX-319 programme (clinical, nonclinical, CMC, regulatory, and operational), each with likelihood, impact, mitigation, and owner. CMC risks reflect the bispecific antibody manufacturing route; nonclinical risks reflect the cynomolgus monkey as the sole pharmacologically relevant species (no rodent cross-reactivity) programme. OBX-319 (Virtual Biopharma Inc.) is a humanized IgG1 anti-CD19 × anti-CD20 bispecific monoclonal antibody produced by Chinese hamster ovary (CHO) cell culture and administered subcutaneously for moderate-to-severe active Systemic Lupus Erythematosus (SLE); the register is therefore weighted toward the risks characteristic of a profoundly B-cell-depleting biologic seeking marketing authorisation via a Biologics License Application (BLA) under 21 CFR 601. It is a living document, maintained by the Program Management Office and reviewed by programme governance, and it is the controlled source from which risk-based decisions, mitigation commitments, and escalation are traced.

Purpose and Scope

This register consolidates, scores, and assigns ownership for the material risks that could affect the objectives, timelines, cost, quality, or regulatory success of the OBX-319 development programme, with the confirmatory study OBX319-301 as its centre of gravity. It spans the full development value chain — clinical safety and efficacy, nonclinical translation, chemistry/manufacturing/controls, regulatory strategy and interactions, and programme operations (enrolment, vendor oversight, data integrity, cost, and schedule). Product-quality risks internal to a single manufacturing lot are managed through the pharmaceutical quality system and the control strategy; patient-level safety risks are additionally managed through the Risk Management Plan / REMS assessment and pharmacovigilance system. This register does not replace those instruments; it provides the programme-level line of sight across them, records the residual risk after mitigation, and drives escalation where residual risk exceeds tolerance. Risks are captured whether or not they have yet materialised, and each is retained until formally closed with a documented rationale.

Risk Assessment Methodology

Each risk is scored on a 5 × 5 matrix as the product of Likelihood and Impact, yielding an inherent (pre-mitigation) rating and, after documented mitigations, a residual rating. Ratings drive review cadence and escalation: High risks are reviewed at every governance meeting with a named accountable owner and a time-bound mitigation plan; Medium risks are reviewed at least quarterly; Low risks are monitored and re-scored on trigger events (new data, protocol amendment, process change, or regulatory feedback).

Likelihood	Descriptor	Working definition
1	Rare	Not expected during the programme absent a specific trigger.
2	Unlikely	Could occur but not anticipated on current evidence.
3	Possible	Realistic prospect during the programme; plan around it.
4	Likely	Expected to occur at least once without active mitigation.
5	Almost certain	Effectively assured on the current mechanism or plan.

Impact	Descriptor	Working definition
1	Negligible	Absorbed within plan; no schedule, cost, or filing effect.
2	Minor	Local rework; recoverable within existing contingency.
3	Moderate	Meaningful schedule/cost effect or a manageable regulatory question.
4	Major	Threatens a programme milestone, a submission component, or the label.
5	Critical	Threatens programme viability, patient safety at scale, or approvability.

Rating bands: Low = 1–5, Medium = 6–12, High = 15–25. Residual ratings shown in the register below reflect the stated mitigations being in place and effective.

Consolidated Risk Register

ID	Category	Risk	L	I	Rating	Key mitigation	Owner
R-01	Clinical/Safety	Serious and opportunistic infection secondary to profound B-cell depletion (including latent reactivation, e.g. hepatitis B, tuberculosis)	4	4	16 (High)	Pre-treatment screening for tuberculosis and viral hepatitis; contraindication in active serious infection; deferral of dosing during active infection; on-treatment infection monitoring; labeling (Warnings and Precautions) and targeted pharmacovigilance	Head of Pharmacovigilance
R-02	Clinical/Safety	Hypogammaglobulinaemia on repeated B-cell-depleting dosing, compounding infection risk	3	3	9 (Med)	Serum immunoglobulin measurement before and periodically during treatment; interruption/management criteria in labeling	Head of Pharmacovigilance
R-03	Clinical/Safety	Injection-site and systemic hypersensitivity/administration reactions (subcutaneous IgG1)	4	2	8 (Med)	Contraindication in known serious hypersensitivity; administration guidance; reaction monitoring and management; excipient control	Head of Clinical Development
R-04	Clinical/Safety	Immunogenicity (binding/neutralising ADA) altering exposure via TMDD-modulated clearance or potentiating reactions	3	3	9 (Med)	Validated tiered ADA/nAb assay strategy; exposure–immunogenicity–response analysis; humanized sequence to limit immunogenic burden	Head of Clinical Pharmacology
R-05	Clinical/Safety	Loss of response durability / disease relapse on B-cell repopulation	3	3	9 (Med)	PD-anchored dosing (CD19+ depletion, anti-dsDNA, C3/C4); maintenance-dosing characterisation; long-term follow-up	Head of Clinical Development
R-06	Clinical/Safety	Long-term malignancy or progressive multifocal leukoencephalopathy (PML) potential of sustained immunomodulation	1	5	5 (Low)	No signal over the controlled period; routine and targeted pharmacovigilance; cumulative benefit–risk review	Head of Pharmacovigilance
R-07	Nonclinical	Single pharmacologically relevant tox species (cynomolgus monkey); no rodent cross-reactivity limits hazard characterisation	3	3	9 (Med)	Justification under ICH S6(R1); confirmed tissue cross-reactivity/target-distribution data; in vitro human pharmacology; conservative human dose selection	Head of Nonclinical
R-08	Nonclinical	Regulatory challenge to omission of genotoxicity, carcinogenicity, hERG, and thorough-QT studies	2	3	6 (Med)	Modality-based scientific justification per ICH S6(R1)/S7-S9 principles; pre-submission alignment; documented rationale in the nonclinical overview	Head of Nonclinical
R-09	Nonclinical	Cytokine-release / first-dose reaction potential informing starting-dose and titration strategy	2	4	8 (Med)	MABEL-based first-in-human dose; stepwise titration; monitoring provisions carried into confirmatory design	Head of Nonclinical
R-10	CMC	Bispecific heterodimer pairing fidelity; chain-mispairing and related product variants	3	4	12 (Med)	Assembly-optimised construct and process; orthogonal purity/identity analytics; dual-binding potency and variant control under ICH Q6B	Head of CMC
R-11	CMC	Aggregation / high-molecular-weight species with potential immunogenicity linkage	3	3	9 (Med)	Formulation and process control; size-variant release and stability specifications; forced-degradation characterisation	Head of CMC
R-12	CMC	Comparability across scale-up, site, or process changes	3	3	9 (Med)	Structured comparability protocols (ICH Q5E principles); bridging analytics and stability; pre-change regulatory engagement	Head of CMC
R-13	CMC	Viral safety of a CHO-derived biologic	2	5	10 (Med)	Adventitious-agent testing and validated viral clearance under ICH Q5A(R2); raw-material control; barrier/segregation design	Head of CMC
R-14	CMC	Potency assay adequately reflecting the dual anti-CD19/anti-CD20 mechanism	2	3	6 (Med)	Mechanism-relevant, validated potency method(s); stability-indicating design; method lifecycle management	Head of Analytical Development
R-15	CMC	Subcutaneous combination-product / device, container-closure, and viscosity performance	2	3	6 (Med)	Device design controls and human-factors work; container-closure integrity; delivered-dose/injectability verification	Head of CMC
R-16	CMC	Supply continuity / single-source dependency for drug substance or device	2	4	8 (Med)	Safety stock; qualified second sources where feasible; supply-continuity planning and demand forecasting	Head of Supply Chain
R-17	Regulatory	Sufficiency of evidence resting substantially on a single pivotal study (OBX319-301)	3	4	12 (Med)	Robust, internally consistent totality of evidence; pre-BLA/pre-NDA and scientific-advice alignment; supportive earlier-phase and PD data	Head of Regulatory Affairs
R-18	Regulatory	Agency alignment on endpoint and analysis (SRI-4 / SLEDAI-2K low disease activity) and background standard of care	2	4	8 (Med)	End-of-Phase-2 endpoint agreement; SAP pre-specification; consistent responder and LS-mean analyses	Head of Regulatory Affairs
R-19	Regulatory	Divergence across FDA, EMA, and MFDS requirements (RMP vs REMS, dossier expectations)	3	2	6 (Med)	Harmonised CTD core with regional modules; parallel scientific advice; region-specific risk-management documents	Head of Regulatory Affairs
R-20	Regulatory	Paediatric plan obligations (PSP/PIP) and timing	2	2	4 (Low)	Early PSP/PIP strategy and agency agreement; deferral/waiver rationale as appropriate	Head of Regulatory Affairs
R-21	Operational	Enrolment and retention in a heterogeneous, competitively recruited SLE population	3	3	9 (Med)	Broad, activated site network; eligibility and enrolment monitoring; retention and patient-support measures	Head of Clinical Operations
R-22	Operational	Variability in background standard of care and concomitant medication (including corticosteroid tapering)	3	2	6 (Med)	Protocol-defined background-therapy and taper rules; concomitant-medication monitoring; stratification	Head of Clinical Development
R-23	Operational	CRO / specialty-vendor oversight and performance	2	3	6 (Med)	Qualification, oversight plan, and performance metrics under ICH E6(R3); retained sponsor oversight	Program Director
R-24	Operational	Maintenance of blinding and clinical data integrity	2	4	8 (Med)	Blinding controls; central and risk-based monitoring; data-management and QA review; audit trail integrity	Head of Quality Assurance
R-25	Operational	Programme schedule and budget adherence	3	2	6 (Med)	Integrated plan with critical-path tracking; contingency reserve; governance-level financial oversight	Program Director

Clinical and Safety Risks

The dominant identified risks derive directly from the intended pharmacology rather than from off-target chemical toxicity: OBX-319 produces near-complete depletion of circulating B lymphocytes (CD19+ counts falling from approximately 210 to approximately 7 cells/µL on both active arms, with no change on placebo), accompanied by falling anti-dsDNA titres and normalisation of complement C3/C4 in responders. The same mechanism that delivers the observed benefit — a Week-52 low-disease-activity response (SLEDAI-2K ≤ 4) of 52.4% (76/145) on the High dose and 33.8% (49/145) on the Low dose versus 6.0% (9/150) on placebo, with LS-mean SLEDAI-2K change of −6.37 (High) and −5.62 (Low) versus −3.46 (Placebo), differences of −2.91 and −2.17 — attenuates humoral immunity and drives the infection-related risk profile.

Serious and opportunistic infection (R-01) is the principal identified risk of the class and the register's single High-rated clinical item. Profound, sustained B-cell depletion is foreseeably associated with serious bacterial, viral, and opportunistic infection and with reactivation of latent infection (e.g. hepatitis B, tuberculosis). It is managed through pre-treatment screening for tuberculosis and viral hepatitis, contraindication in active serious infection, deferral of dosing during active infection, on-treatment monitoring, clear labeling, and targeted pharmacovigilance — measures executable within routine rheumatology/nephrology practice. Hypogammaglobulinaemia (R-02) may compound this risk with repeated dosing and is mitigated by baseline and periodic immunoglobulin monitoring with defined interruption/management criteria. Administration reactions (R-03) are expected for a subcutaneous therapeutic antibody and are managed by hypersensitivity contraindication, administration guidance, and monitoring. Immunogenicity (R-04) is an anticipated feature of any therapeutic antibody; anti-drug antibodies may alter exposure through target-mediated drug disposition (TMDD)-modulated clearance or, less commonly, potentiate reactions, and are characterised with a validated tiered binding/neutralising assay strategy linked to exposure–response analysis. Durability (R-05) and the long-term theoretical risks of malignancy/PML (R-06) are followed through PD-anchored maintenance-dosing characterisation, long-term follow-up, and cumulative benefit–risk review; no such signal emerged over the controlled 52-week period.

Nonclinical Risks

The nonclinical package is shaped by the biology of the molecule and by ICH S6(R1). The cynomolgus monkey is the sole pharmacologically relevant toxicology species (R-07): OBX-319 does not cross-react with rodent CD19/CD20, so conventional two-species rodent-plus-non-rodent testing is neither informative nor scientifically justified. Reliance on a single relevant species is addressed through documented target-distribution and tissue cross-reactivity data, in vitro human pharmacology, and conservative, exposure-based human dose selection, consistent with the accepted framework for a species-restricted biologic. The corresponding regulatory-acceptance risk (R-08) — that a reviewer questions the deliberate omission of genotoxicity, carcinogenicity, hERG, and thorough-QT studies — is mitigated by a modality-based scientific justification: these studies are not warranted for a monoclonal antibody, which is not expected to interact directly with DNA or with cardiac ion channels, and this rationale is pre-aligned with agencies and carried explicitly into the nonclinical overview. Early-development cytokine-release and first-dose considerations (R-09) informed a MABEL-based starting dose and stepwise titration, with monitoring provisions carried into the confirmatory design.

Chemistry, Manufacturing, and Controls (CMC) Risks

CMC risk is driven by the bispecific format and the CHO expression platform, and is governed by ICH Q5A(R2), Q5C, Q6B, and S6(R1). The format-specific item is heterodimer pairing fidelity (R-10): correct pairing of the two distinct binding arms must be assured, and chain-mispairing or related product variants controlled, through an assembly-optimised construct and process, orthogonal identity/purity analytics, and a dual-binding potency method with defined variant limits. Aggregation and high-molecular-weight species (R-11), with their potential immunogenicity linkage, are controlled by formulation and process design and by size-variant release and stability specifications. Comparability across scale-up, site, or process change (R-12) is managed with structured comparability protocols (ICH Q5E principles), bridging analytics and stability, and pre-change regulatory engagement. Viral safety (R-13) of the CHO-derived substance is assured by adventitious-agent testing and validated viral clearance under ICH Q5A(R2). A mechanism-relevant, validated potency assay (R-14) must reflect both anti-CD19 and anti-CD20 engagement and remain stability-indicating over the product lifecycle. The subcutaneous presentation (R-15) introduces combination-product, container-closure-integrity, injectability, and human-factors considerations addressed through device design controls and verification testing. Supply continuity (R-16) for drug substance and device is protected by safety stock, qualified alternate sources where feasible, and demand forecasting.

Regulatory Risks

The register's principal regulatory item is the sufficiency of an evidence base resting substantially on a single pivotal study, OBX319-301 (R-17). This is mitigated by ensuring the totality of evidence is internally consistent and mechanistically coherent — the dose-ordered efficacy (52.4% vs 33.8% vs 6.0%), the concordant LS-mean SLEDAI-2K changes (−6.37 / −5.62 / −3.46), and the supporting pharmacodynamics (CD19+ depletion to approximately 7 cells/µL with serologic normalisation) together constituting persuasive confirmatory evidence — and by early alignment through end-of-Phase-2, scientific-advice, and pre-BLA interactions. Endpoint and analysis alignment (R-18) on SRI-4 / SLEDAI-2K low disease activity and on the definition of background standard of care is secured by pre-specification and prior agency agreement. Multi-region divergence (R-19) across FDA (BLA under 21 CFR 601), EMA, and MFDS — including differing risk-management expectations (RMP versus REMS assessment) — is managed with a harmonised CTD core, region-specific modules, and parallel advice. Paediatric obligations (R-20) are handled through an early PSP/PIP strategy with agreed deferrals or waivers.

Operational and Program Risks

Operational risk centres on delivering OBX319-301 to plan with data of submission quality. Enrolment and retention (R-21) in a heterogeneous, competitively recruited SLE population are supported by a broad activated site network and retention measures; background-therapy variability (R-22), including corticosteroid tapering, is constrained by protocol-defined rules and stratification. CRO and specialty-vendor oversight (R-23) is maintained under a qualification and oversight framework with retained sponsor responsibility under ICH E6(R3). Blinding and data integrity (R-24) are protected by blinding controls, central and risk-based monitoring, and QA review with audit-trail integrity. Schedule and budget adherence (R-25) is tracked against the critical path with a contingency reserve and governance-level financial oversight.

Risk Governance, Review, and Escalation

Risks are owned by the named accountable function and reviewed by programme governance on a cadence set by residual rating: High risks at every governance meeting, Medium risks at least quarterly, and Low risks on trigger events. Each entry records inherent and residual ratings, the mitigation and its status, and the trigger conditions that would prompt re-scoring or escalation. A material adverse change — a new safety signal, a failed comparability exercise, an unexpected immunogenicity finding, or regulatory feedback that challenges the evidentiary or nonclinical strategy — is escalated to the governance body with a time-bound response plan; escalation of a patient-safety item additionally engages the safety-management and pharmacovigilance governance and, where warranted, the Risk Management Plan / REMS assessment. New risks may be raised by any function at any time and are triaged into this register. Closure requires a documented rationale and governance acknowledgement, and closed risks remain visible for audit and lessons-learned.

Key Assumptions and Dependencies

The residual ratings above assume that the stated mitigations remain in place and effective; that the confirmatory study, its endpoints, and its analyses remain as pre-specified and agreed with agencies; that the manufacturing process, its scale, and its comparability are maintained under the pharmaceutical quality system; and that the nonclinical justification for a species-restricted biologic without genotoxicity, carcinogenicity, hERG, or thorough-QT testing is accepted. The register depends on timely inputs from clinical, nonclinical, CMC, regulatory, pharmacovigilance, quality, and operations functions, and on the vendor-oversight and quality systems that assure data integrity. Where an assumption is invalidated, the affected risks are re-scored and escalated through the governance process described above.