Our approaches to assessing and controlling quality risks have largely been empirical. This is often fine but in more complex or hazardous situations, the pharmaceutical industry could benefit from a number of very helpful tools and techniques.