The way it was done in my previous job was to use a quality by design matrix. Critical quality attributes (CQAs) were determined based on the design input and then critical development parameters were selected. A risk ranking was then assigned to each parameter based on the theoretical knowledge of how the parameter could affect each of the CQAs. Based on these risks, a development plan was designed to investigate and mitigate the risks.