 Research article
 Open Access
 Published:
Twostage Bayesian hierarchical modeling for blinded and unblinded safety monitoring in randomized clinical trials
BMC Medical Research Methodology volume 20, Article number: 211 (2020)
Abstract
Background
Monitoring and reporting of drug safety during a clinical trial is essential to its success. More recent attention to drug safety has encouraged statistical methods development for monitoring and detecting potential safety signals. This paper investigates the potential impact of the process of the blinded investigator identifying a potential safety signal, which should be further investigated by the Data and Safety Monitoring Board with an unblinded safety data analysis.
Methods
In this paper, twostage Bayesian hierarchical models are proposed for safety signal detection following a prespecified set of interim analyses that are applied to efficacy. At stage 1, a hierarchical blinded model uses blinded safety data to detect a potential safety signal and at stage 2, a hierarchical logistic model is applied to confirm the signal with unblinded safety data.
Results
Any interim safety monitoring analysis is usually scheduled via negotiation between the trial sponsor and the Data and Safety Monitoring Board. The proposed safety monitoring process starts once 53 subjects have been enrolled into an eightarm phase II clinical trial for the first interim analysis. Operating characteristics describing the performance of this proposed workflow are investigated using simulations based on the different scenarios.
Conclusions
The twostage Bayesian safety procedure in this paper provides a statistical view to monitor safety during the clinical trials. The proposed twostage monitoring model has an excellent accuracy of detecting and flagging a potential safety signal at stage 1, and with the most important feature that further action at stage 2 could confirm the safety issue.
Background
Interest in monitoring and reporting drug safety during the execution of a clinical trial and careful monitoring throughout the development of a drug from preclinical to postmarketing stages, has grown at a remarkable rate in the past decade. This attentiveness to drug safety has inspired statistical methods development for monitoring and detecting potential safety signals during trial execution. Proposed methods include Bayesian and frequentist models for blinded and unblinded safety monitoring for randomized clinical trials [1, 2].
Blinding is the process of concealing treatmentrelated information from the people involved in a clinical trial, such as the sponsors, participants, and researchers. Blinding preserves the integrity of the study by minimizing the impact on study findings of conscious or unconscious biases that might result from knowledge of treatment [3, 4]. The disclosure of treatment group assignment during the trial is called unblinding. For medical or safety reasons, unblinding a trial is sometimes necessary to protect study participants. The unblinding process is generally prespecified and detailed in the study protocol [3,4,5].
Data and Safety Monitoring Boards (DSMBs) are independent committees responsible for regular monitoring and reporting of clinical trial safety data [6,7,8]. The Food and Drug Administration (FDA) requires the formation of a DSMB in all trials that assess new interventions [9, 10]. Furthermore, the FDA guidance of safety assessment for the Investigational New Drug (IND) safety reporting recommends that unblinding is allowed and needed to identify the important safety information for serious adverse events during an ongoing clinical trial [11]. “Flagging” is the notification process that identifies a potential safety concern in the novel treatment being tested in a clinical trial [3, 4]. DSMBs play a critical role in safety flagging; monitoring and reporting both the interests of trial participants, and the scientific integrity of clinical trials [5]. DSMBs regularly review blinded reports and listings of safety data to make determinations on whether the observed risk profile of the drug is different than expected. However, the investigator needs to be blinded to safety analyses throughout the conduction of the clinical trial. This paper investigates the potential impact of the process of the blinded investigator identifying a potential safety signal that the DSMB should further investigate with an unblinded safety data analysis.
The periodic safety reports reviewed by the investigator include a full listing of all adverse events (AE), as well as any serious adverse events (SAE) [12]. The report summarizes a trial’s clinical safety endpoints and AEs in terms of frequency of each event, the number of subjects having the event, severity of the event, and relatedness of the event to the study treatment. Because drugrelated safety issues might occur at any time during the execution of a clinical trial, interim analyses of blinded safety data could help prevent such safety problems from escalating to significant concerns. Although blinded data analysis is less informative and does not provide a definitive treatment effect estimate, blinded safety data monitoring could identify potential safety issues ahead of scheduled DSMB meetings and prompt decisions regarding an unblinded analysis. For the purpose of accelerating the process of identifying important safety information, one feasible approach is to combine the blinded periodic safety monitoring with the intended unblinded data analysis. Additionally, the monitoring and evaluating of unblinded safety data will be performed based on the safety information from a blinded safety monitoring. Therefore, a twostage monitoring method could be implemented to confirm and identify a safety signal for unblinded safety data at stage 2 once the potential AE(s) is flagged at stage 1.
Bayesian hierarchical approaches can be used for both blinded and unblinded data analysis by incorporating a prior safety profile of the control group or background rate of events and updating outcomes using accumulating data from the ongoing trial [13,14,15]. Prior assumptions on the safety profile must be made utilizing historical information or epidemiologic data. In this paper, a potential safety signal is identified by calculating the proportion of AEs from the pooled blinded safety data at stage 1. A blinded Bayesian hierarchical model based on Ball’s method of identifying possible safety signals is applied to the pooled blinded safety data [15]. Because of the Bayesian paradigm and its associated hierarchical models allow for automated adjustment for multiplicity and could reduce the familywise error rate (FWER) in both stages, [16] a Bayesian hierarchical model that simultaneously models all AEs is considered [17,18,19]. A randomized clinical trial commonly refers to a control group and one or multiple active treatment groups with different dose levels. Therefore, at stage 2, a Bayesian hierarchical logistic model applied to unblinded data is used to simultaneously confirm whether the flagged safety signals are indeed safety issues [14, 15].
Throughout the trial, periodic blinded monitoring of events is conducted using Bayesian methods [16, 20]. Typically, investigators review blinded interim safety monitoring reports consisting of the proportion of subjects experiencing each AE with twosided 95% credible intervals. If a possible safety signal is detected during blinded monitoring, a modelbased estimate of the doseresponse relationship on the relative risk will be provided to the DSMB [15].
This paper was originally motivated by the work of Ball and Wen who developed Bayesian objective early stopping rules for screening and monitoring safety in a randomized clinical trial using blinded treatment information [16, 20]. However, it is difficult for trial leadership to make decisions about stopping a trial only using blinded data. Therefore, this work proposes contributions to this area which include: 1) a potential Bayesian framework with a twostage process for safety signal detection that facilitates decisionmaking using blinded data and then confirms it with the unblinded data; 2) and calculations of operating characteristics for this workflow. Most trials focus on power and sample size calculations (operating characteristics) for the primary efficacy analysis. This work extends this focus to safety by providing false positive and false negative rates for the proposed safety signal identification framework.
Methods: twostage Bayesian hierarchical models
Stage 1: Bayesian blinded safety monitoring
The stage 1 Bayesian blinded statistical monitoring method assumes a randomized twoarm or multiarm clinical trial. Subjects are continuously enrolled into the trial, and the first interim analysis occurs after a total N subjects have been enrolled into I + 1 arms, with n_{0} subjects enrolled into the control arm, and n_{1}, n_{2}, …, n_{I} subjects enrolled into the treatment arms.
Betabinomial model
According to Wen and Ball’s BetaBinomial model, [16, 20] the occurrence of the j^{th} AE among a total J types of AEs is denoted by Y_{ij} for the i^{th} dosage arm. In stage 1, Y_{j} is denoted as the total number of subjects experiencing the j^{th} AE reported in the pooled data, with the observed pooled incidence rate equal to \( {\hat{\pi}}_j=\frac{Y_j\ }{N} \). Let \( {\pi}_{M_j} \) represent the prespecified expected pooled incidence rate across all dose levels of the j^{th} AE. The aggregated total across all arms (Y_{j}) is assumed to have a Binomial distribution with occurrence probability π_{j} and N_{j} ≡ N. That is, \( {Y}_j={\sum}_i{Y}_{ij} \) for j = 1, 2, …, J and i = 0, 1, 2, …, I, and the distribution of the j^{th} AE is given by,
The occurrence probability π_{j} has a Beta prior distribution to facilitate a conjugate analysis. For example, assuming a Beta(1, 1) prior distribution for π_{j} results in a Beta posterior distribution,
The j^{th} AE may have a statistically significant safety signal if the posterior probability of its incidence rate being higher than the prespecified expected pooled incidence rate exceeds a prespecified critical value:
Bayesian hierarchical blinded model
Considering the various types of AEs recorded in a clinical trial, multiplicity is a likely issue. Berry and Berry developed a Bayesian hierarchical model to handle multiple AEs simultaneously [17]. For the hierarchical model, it allows for the possible correlation between the AEs through the specified hyperparameters. Additionally, this approach allows for normal hierarchical models on the real line as opposed to the (0, 1) constraint, compared to the BetaBinomial model. Therefore, the BetaBinomial model and the Bayesian hierarchical model are combined to form the proposed Bayesian hierarchical blinded model.
For the hierarchical model, define π_{j} as a combination of control and treatment incidence rates, given by
where Q_{c} is the proportionate sample size of the control arm, \( {Q}_c=\frac{n_0}{N}, \) and \( {Q}_T=1{Q}_c=\frac{\sum {n}_I}{N} \) is the proportionate sample size of the treatment arm(s); \( {\pi}_{Ct{r}_j},{\pi}_{Tr{t}_j} \) are the incidence rates for the j^{th} AE in the control and treatment arms, respectively. Note that the \( {\pi}_{Tr{t}_j} \) does not assume to be the same across treatment arms, it is a pooled incidence rate for j^{th} AE, and Q_{c} is usually fixed across different trial designs including designs that use response adaptive randomization. Assume that the incidence rate for the j^{th} AE in the control arm is equal to the expected pooled incidence rate, \( {\pi}_{Ct{r}_j}\equiv {\pi}_{M_j} \). Then, the \( {\pi}_{Tr{t}_j} \) across the treatment arms could be expressed by the difference between the pooled incidence rate π_{j} and expected pooled incidence rate \( {\pi}_{M_j} \). Therefore, the logistic transformation is applied, yielding
where d_{j} is the logodds ratio of the probability of a safety event in the treatment relative to control for the j^{th} AE. The incidence rate of an AE is the same for control and treatment arms when d_{j} = 0. Priors are assigned to d_{j} using the following distribution:
The hyperparameters for the normal prior distribution of d_{j} have fixed distributions:
\( {\mu}_d\sim N\left({\mu}_{d0},{\sigma}_{d0}^2\right) \) and σ_{d}~Unif(U_{a}, U_{b}),
where the hyperparameters \( {\mu}_{d0},{\sigma}_{d0}^2,{U}_a,{U}_b \) are fixed constants. In general, due to the limited data, the prior information on d_{j} is typically lacking. However, the d_{j} is still identifiable for two reasons. The first is because the randomization allocation to the control arm is known and fixed as proportionate sample size (Q_{c}, Q_{T}) throughout the trial. The second is that the control arms rates priors are fixed at the expected incidence pooled rate. Therefore, in order to have a weakly informative impact on the prior distributions, and to carefully avoid overfitting or underfitting of the model, the weakly informative prior would be commonly recommended [21]. The specification of these hyperparameters depends on the application and is further discussed in the application section [22, 23].
Using the Bayesian hierarchical blinded model, posterior samples can be generated via Markov chain Monte Carlo (MCMC) methods, and the posterior probability P_{jS1} of a safety signal at stage 1 is given by \( {P_j}_{S1}=P\left({\pi_{Trt}}_j>{\pi}_{M_j} Blinded\ Data\right) \). After a specified number of subjects have been enrolled into the trial, during the interim safety analysis, the following decision rule can be applied for each AE to flag potential safety signals:
assuming some prespecified critical value \( {P}_{cri{t}_1} \). If the posterior probability exceeds the prespecified critical value, an analysis of unblinded data can be performed to confirm the safety issue.
Stage 2: Bayesian Unblinded safety monitoring
If at any point during stage 1 the blinded monitoring flags a safety signal, the unblinded doseresponse effect for each AE will be modeled in stage 2 using a Bayesian hierarchical logistic model. It should be noted that only the AE(s) flagged at stage 1 will be unblinded and be subject to stage 2 monitoring. Under the scenario of various dose levels, assume the occurrence Y_{ij} of the j^{th} AE at the i^{th} dosage has a Binomial distribution with occurrence probability π_{ij}. Assuming the number of subjects for the i^{th} dosage arm is represented by n_{i},
The logit function of π_{ij} is modeled with a linear predictor consisting of a fixed covariate effect of dose strength (X_{i}):
logit(π_{ij}) = β_{0j} + β_{1j}X_{i}, for i = 0, 1, 2, …, I and j = 1, 2, …, J.
In this model, the regression parameters β_{0j} and β_{1j} represent the control group parameters (intercept) and the regression parameters for the incremental effect of dose, respectively. Note that the logistic model could also be applied to a twoarm study. The hierarchical priors for β_{0j} and β_{1j} are given by
where the parameter \( {\mu}_{\beta_0}= logit\left({\pi}_{M_j}\right) \) allows for varying baseline incidence rates among the different types of AEs, and.
\( {\mu}_{\beta_1}\sim N\left({\mu}_1,{\sigma}_1^2\right) \) and \( , {\sigma}_{\beta_0}\sim Unif\left({U}_1,{U}_2\right);{\sigma}_{\beta_1}\sim Unif\left({U}_3,{U}_4\right) \).
The hyperparameters \( {\mu}_1,{\sigma}_1^2 \) and U_{1}, U_{2}, U_{3}, U_{4} are fixed constants and are discussed in the application section.
The Bayesian hierarchical logistic model provides the posterior probability that the slope coefficient for dose is greater than 0; that is β_{1j} > 0. Slopes larger than 0 indicate a significantly increased occurrence probability of the j^{th} AE associated with the dose. The posterior probability P_{jS2} of a safety signal at stage 2 is given by
Therefore, P_{jS2} is compared to a prespecified stage 2 critical value \( {P}_{cri{t}_2} \), and a safety signal is confirmed when \( {P_j}_{S2}\ge {P}_{cri{t}_2} \).
Conduct of the trial
Given the models described in the previous section, we propose that a clinical trial be conducted via the sequential steps presented in Fig. 1.
Details are shown in the following steps:

1)
Enrolled subjects are randomly assigned to each arm (either a simple twoarm trial or a multiarm trial).

2)
Interim safety analysis occurs after N subjects have been enrolled into I + 1 arms, with n_{0} subjects enrolled into the control arm and n_{1}, n_{2}, …, n_{I} subjects enrolled into treatment arms.

3)
During stage 1, Y_{j} subjects report experiencing AE j at an interim point; that is, the observed pooled incidence rate for AE j is equal to \( {\hat{\pi}}_j=\frac{Y_j\ }{N} \), and \( {\pi}_{M_j} \) is the prespecified expected pooled incidence rate of this AE.

4)
Based on the Bayesian hierarchical blinded model, the posterior probability P_{jS1} of a safety signal at stage 1 is given by \( {P_j}_{S1}=P\left({\pi_{Trt}}_j>{\pi}_{M_j} Blinded\ Data\right) \). P_{jS1} is compared to the prespecified critical value \( {P}_{cri{t}_1} \). Once the model identifies a potential safety signal, \( {P_j}_{S1}\ge {P}_{crit_1} \), the safety data for the j^{th} AE is unblinded and moved to stage 2.

5)
During stage 2, only those AE(s) that have been flagged at stage 1 are examined. The Bayesian hierarchical logistic model provides the posterior probability of a safety signal P_{jS2} = P(β_{1j} > 0 Unblinded Data), which is compared to the prespecified stage 2 critical value \( {P}_{cri{t}_2} \). A safety issue is confirmed when \( {P_j}_{S2}\ge {P}_{cri{t}_2} \).

6)
Repeat at each interim point, updating \( {\hat{\pi}}_j \) for stage 1. At any point a safety signal is detected, follow the decision rules above to confirm the potential safety issue.
Case study
Consider a multiarm case study of the Hyperbaric Oxygen Brain Injury Treatment (HOBIT) trial [24, 25]. HOBIT is a phase II clinical trial adaptive design for selecting the optimal dose regimen of hyperbaric oxygen (HBO) treatment, defined as the regimen (hyperbaric oxygen with or without normobaric oxygen at different pressure levels) which produces the greatest improvement in the rate of good neurological outcome versus standard care for subjects with severe traumatic brain injury.
For the HOBIT trial, the randomization occurs via the studyspecific passwordprotected website accessed by an authorized research coordinator or investigator at the clinical site. Subjects are considered to be enrolled at the time of randomization, regardless of whether or not they start or complete study treatment. The trial uses the intenttotreat randomized sample, where subjects are classified by the Oxygen Toxicity Units dose in which they are randomized, regardless of the dose received. The data for interim analysis (for efficacy) are collected from the subjects who have been randomized for more than 4 weeks from the time of the data freeze. In addition, the interim analysis of safety monitoring occurs after N = 53 subjects have enrolled into the trial. In this paper, the hypothetical scenarios of interim safety analysis occur after 53 subjects have enrolled into the trial, with 11 subjects enrolled into the control arm and 6 subjects enrolled for each treatment arm. However, this number changed to 56 with sample size modified to 9 for the “2.5 ATA + NBH” treatment arm, in the HOBIT trial. The comparison of AEs is between the control arm with seven treatment arms, where the sample size and dosage for eight arms are given in Table 1.
Adverse event of special interest
The review of safety data focuses on the following AEs potentially associated with hyperbaric oxygen treatment or in the transfer of subjects to getting their treatments. This subject population presents with significant morbidity with respect to all the below AEs; as such, it is important to evaluate the presence of events concerning temporal relationship to treatment (i.e., novel onset or worsening) as well as its relationship across doses. Therefore, the major individual AEs with clinical relevance and expected event rate are listed in Table 2. Additionally, the clinical information of each AE in Table 2 provides the simulation patterns from a modeling perspective.
All the AEs of special interest are summarized by preferred term and associated systemorgan class according to the Medical Dictionary for Regulatory Activities (MedDRA) adverse reaction dictionary and by treatment group in terms of frequency of the event, number of subjects having the event, time relative to randomization, severity, and relatedness to the treatment. Cumulative incidences of the specific AE related to hyperbaric oxygen are compared across arms.
Simulation study
In the simulation study, an example is provided by following the HOBIT trial design to demonstrate the twostage safety monitoring process and decision criterion. As considered and discussed by Berry et al. and Gajewski et al. about the strategy to select the specification of the hyperparameters, the selection is determined by outcome type and expectation of the doseresponse for the particular application [21, 24]. Therefore, in our application of the HOBIT trial, with the aim to minimize the informative impact on the prior distribution, and to avoid overfitting or overfitting for the model, [24] the hyperparameters described in Section 2 are assumed follow the fixed values: \( {\mu}_{d0}=0,{\sigma}_{d0}^2={2}^2,{U}_a=0,{U}_b=3 \) for the blinded model, and \( {\mu}_1=0,{\sigma}_1^2={2}^2 \) and U_{1} = 0, U_{2} = 3, U_{3} = 0, U_{4} = 3 for the unblinded model. Additionally, the π_{j} are defined as a combination of control incidence rate plus the alltreatment incidence rate, π_{j} = Q_{c} ∙ π_{Ctr} + Q_{T} ∙ π_{Trt}, where Q_{c} = 0.2, Q_{T} = 0.8 were given by protocol information.
In order to understand the operating characteristics, several patterns of AEs are simulated. The simulation calculations for the twostage Bayesian monitoring models were applied by MCMC methods, with the code presented in the Additional file 1. The results are based on 10,000 iterations of the study, each generated using 10,000 posterior samples after 1000 observations of burnin.
Twostage Bayesian hierarchical safety monitoring models
Two approaches—a BetaBinomial independent model and the hierarchical model—are applied to compare the familywise error rate for blinded stage 1 safety data [26]. Table 3 provides the model comparisons for hypothetical observed event rates with the probability of flagged trials for the AE of special interest. Here, the π_{0} is the true incidence rate for the specific AE and does not assume to be the same for all noncontrol arms. For the case study at blinded stage, the simulated incidence rate were generated unequally under various scenarios. The choice of critical value should be prespecified and depend on the severity of the AE and should be decided upon by investigators based on their experience. For the first interim analysis, a sample size N = 53 and a stage 1 critical value of 0.9 are assumed. For each specific AE, we assume the observed incidence rate varies under different scenarios, from the expected rate (safe rate) to a higher rate (unsafe rate). Based on the true incidence rate and the expected event rate, the proportion of flagged trials are given in Table 3.
Table 3 shows that as the observed incidence rate increases, the proportion of flagged trials increases. For example, based on historical data the expected event rate of “Signs of Pulmonary Dysfunction” is 0.25 and the critical value at stage 1 is 0.9. Therefore, the BetaBinomial independent model decision rule is
The Bayesian blinded hierarchical model decision rule is given by
In this case, a safety signal would be flagged if the posterior distribution provides evidence that the overall incidence rate likely exceeds 0.25. Additionally, under the scenario of no signal pattern, familywise error rates are calculated across all seven AEs. The Bayesian hierarchical model is recommended for safety signal detection, since it accounts for multiplicities and it reduces the FWER because of the shrinkage at each AE type that is induced by the hyperparameters. The hierarchical model shows a smaller FWER compared to the BetaBinomial independent model, as well as the smaller proportion of flagged trials.
Stage 2 includes all AEs that were flagged in stage 1. After unblinding the safety data, the doseresponse effect of the AEs is modeled using Bayesian hierarchical logistic regression. The logit function of incidence rate for each arm was modeled using a linear predictor consisting of a fixed covariate effect of dose strength (X_{i}) for each patient, where X_{i} is summarized as oxygen toxicity units/100 [24, 25].
The HOBIT trial is an eightarm trial, and nondecreasing incidence rates are assumed for each dose as dosage increases. Five different scenarios are considered and shown in Figs. 2, 3, 4, 5 and 6, where the average signal corresponds to the blinded scenarios. These figures show the simulation study patterns of various nondecreasing incidence rates as dosage increases for eight arms. In addition, the proposed twostage models could be tested on the performance of detecting and confirming those safety issues under different AEs with varied expected incidence rates. For each scenario, the xaxis represents the dosage for each arm, and the yaxis indicates the observed incidence rate π_{j}. A scenario of no effect across all AEs is considered (Fig. 2), and a scenario that assumes the same effect for all the AEs but with a safety issue (Fig. 3) is also considered. The same effect scenario was chosen to investigate the situation where the hierarchical model does very well. This assumption is relaxed in the next scenario. In another scenario, only the first three AEs (Pneumothorax Induced by HBO therapy, Signs of Pulmonary Dysfunction, and Pneumonia) have a safety issue (Fig. 4). Under this case, the proposed model is tested on a situation that only 3 AEs have a safety issue with no issue for the rest. In the HOBIT trial, as described in the Table 2, some AEs (Critical decreased CPP, Critical hypotension, and Hypercarbia during transportation) should be analyzed as active vs. control because they could potentially have a flat effect (e.g., in the logistic regression), thus these are modeled separately at stage 2 in scenario IV (Fig. 5). Additionally, a flat effect is considered where both the control and treatment rates are the same but higher compared to the expected incidence rate (Fig. 6). Under this case, assume the control group has a higher incidence rate than the expected, which is a safety issue. Then the proposed model is applied to test the detection and confirmation performance for this scenario.
Results
The proposed safety monitoring process starts once 53 subjects have been enrolled into the trial for the first interim analysis. The Bayesian hierarchical blinded model is applied for detecting the potential safety signals at stage 1 and moves to stage 2 once the model detects a safety signal. In stage 2, the confirmation of safety is monitored using a Bayesian hierarchical logistic model. The critical value for stage 1 is set to 0.9 following the protocol and varied critical values for stage 2 from liberal to conservative. Three critical values situations are as follows: 1) Liberal: (0.9, 0.7), Medium: (0.9, 0.8), Conservative: (0.9, 0.9). Operating characteristics and FWER results are given in Table 4 for (A) no effect scenario I, Table 5 for the (B) same effect for all the AEs with safety issue scenario II, and Table 6 for the (C) same effect for three AEs with safety issue (No effect for the rest) scenario III, Table 7 for the (D) three AEs with flat effect relationships and same effect for the rest with safety issues scenario IV, and Table 8 for the (E) flat effect where both the control and treatment arms are the same but higher than the expected incidence rate scenario V.
The summarized information of simulation scenarios and results comparison is given in Table 9. The scenario I can be treated as baseline proportions of no effect for all the AEs, then compared to scenario II, the proportions increase a lot as all the AEs have safety issues in scenario II. In scenario III, the first three AEs show higher proportions and the rest keep smaller proportions, since the first three AEs have safety issue in the scenario III. The difference between scenario II and scenario IV is that AE4, AE5, and AE7, these three AEs could be analyzing with active vs. control pattern, then we change their incidence rate as flat effect relationship. By comparing scenarios II and IV, the proportions of those flat effect relationship AEs decrease, and the rest AEs proportions are much similar. Based on the scenario II, scenario V is considered where all the AEs have a flat effect where both the control and novel therapies treatment are the same but higher compared to the expected incidence rate. The proportions indicate the safety issue, and one interesting finding is that the model flags potential signals at the blinded stage but not at the unblinded stage with fewer proportions comparing to other scenarios.
At stage 1, by setting the prespecific critical value to 0.9, the proportion of flagged trials is very similar within each AE; and at stage 2, as the critical value varies from 0.7 (liberal) to 0.9 (conservative), the proportion of flagged trials decreases. Therefore, the overall proportion is calculated by multiplying the proportions of both stage 1 and stage 2, and the overall proportion decreases as the critical value changes.
For the safety analysis, the critical values needs to balance the false flagged rate and false nonflagged rate. For example, scenarios I and II have proportions of flagged trials that are respectively equal to 0.05 and 0.75, under the prespecific critical value of 0.9 for twostage blinded and unblinded analyses. Similarly, scenarios III, IV and V have the proportions equal to 0.34, 0.66, 0.33 of flagged trials respectively with the same twostage prespecific critical values. In some instances, these operating characteristics may not change. However, in other instances, the proposed approach may change with the monitoring of efficacy. For example, if the treatment truly has no impact on efficacy (e.g. under the null hypothesis) there would be little impact on the first interim analysis. However, suppose scenario II is true but the drug has a true alternative hypothesis that has a probability of 0.3 of reaching the final success criteria. This would be the case where the DSMB would be hardpressed to stop a promising treatment because of safety. In fact, the probability of both a safety signal and efficacy signal is 0.75 multiply by 0.3, which equals 0.225, clearly not a negligible amount. The good news is in the scenario I for safety the identification of a false flagged trial is 0.05 and under the null hypothesis for efficacy has a probability of 0.01 of reaching the final success criteria. The probability of both a safety signal and efficacy signal is 0.0005.
The results show that the Twostage Bayesian safety monitoring model can detect and flag a potential safety signal, and with the most important feature that further action at stage 2 could confirm the safety issue. In addition, the familywise error rate is also applied to the scenario I for no effect across all arms, [26] as shown in Table 4. The FWER is around 0.18 at the blinded stage 1 and decreases from 0.57 to 0.25 as the critical value increases at the unblinded stage 2, which the FWERs are acceptable under the current sample size scenario. The overall FWER across all seven AEs is relatively small, with only 5% incorrectly flagged for both critical values set to 0.9. That is, the twostage model has an excellent accuracy of safety signal detection and confirmation.
Discussion
Both sponsors and the DSMB often desire interim safety monitoring for clinical trials. In this paper, a twostage Bayesian monitoring method is proposed to evaluate whether the posterior probability of a safety signal exceeds a prespecified critical value. The proposed twostage monitoring method not only combines the safety monitoring for blinded and unblinded data, but it also offers a comprehensive approach for detecting a potential safety issue of blinded data during stage 1 and performing an analysis of unblinded data at stage 2 to confirm the safety issue.
The BetaBinomial model was originally proposed by Ball, and further development of the Binomial model was introduced in his recent safety monitoring paper as well [27]. Although, other available statistical methods have been developed and established for blinded safety monitoring [28, 29]. We adhere to the Binomial blinded safety monitoring model in this paper, since the followup period was fixed and the AEs were counted once during the study as indicated in the statistical analysis plan of the HOBIT trial. However, other developed methods, [28, 29] for example, the Poisson model account for exposure time is also feasible and practical for the twostage Bayesian monitoring framework.
Direction for future development include the Poisson model framework, because of exposuretime is as critical as a number of events for drug safety monitoring. In recent research studies, the Poisson likelihood model was often used in blinded safety analysis, while considering the exposure time of AEs [28, 29]. Furthermore, it would easily allow combining multiple studies with different starting times during safety monitoring. Under the assumption that the AE for a given patient occurs independently and with a constant rate, a Poisson model could be applied to monitor safety signal. In addition, another development move from specifying a fixed expected pooled incidence rate \( {\pi}_{M_j} \) for adverse events to using an informative prior instead. This allows a fully Bayesian treatment for twostage safety monitoring. Moreover, regarding the criteria for the safety signal confirmation at stage 2, the incremental effect of dose for the current model, which is the slope, larger than 0 is the only indicator for detecting a significantly increased occurrence probability of the AE associated with the dose. One limitation that the toxicity probability at the highest dose, which is a sufficient indicator of safety signal confirmation criteria, but not considered in current model. Therefore, the toxicity probability of the highest dose could be included for the future development.
With respect to the generalizability of the proposed twostage monitoring model, it could also provide support to cancer studies which have relatively small incidence rates for some AEs. Future work could add the evaluation of unblinded safety data conducted adjusting for relative baseline covariates, such as age at baseline or sex. The severity of an AE could also be built into the model. Finally, because the performance of such models depends on prior knowledge and researchers’ experience about AE incidence rates, the model could consider the selection of critical values and expected incidence rates for decision criterion as well. In the current study, the critical values for both stage 1 and stage 2 were set to 0.9 following the example study protocol, but future studies could relax this value. Another interesting extension in stage 2 is to modify the structure of the model, for example, either as random intercept/slope, or some other models, such as nonlinear dose level model, Bayesian normal dynamic linear model (NDLM) and EMAX models [24].
Conclusion
The BetaBinomial model and Bayesian hierarchical blinded model are considered and compared in stage 1, and the Bayesian hierarchical model shows a lower familywise error rate than the BetaBinomial model, thus illustrating how failing to properly account for multiplicities can result in unreliable inference, while approximately preserving the probability of correctly detecting AE types with a safety signal. In the simulation study assuming no safety signals, the FWER—the probability of at least one safety signal among all AEs—was tightly controlled. Furthermore, in the presence of a safety signal for some or all AEs, the twostage monitoring model successfully detected and confirmed those safety signals.
In the event of a significant safety signal, the blinded executive team can request to be unblinded to safety data only. If there is a significant trend but some arms appear to be safe, the DSMB and study team can discuss which arms to terminate. The interim monitoring and analysis of safety data could help prevent safety problems from turning to significant concerns in an ongoing clinical trial.
In summary, the decision to terminate a trial due to safety concerns is not a purely statistical one. This is one reason the DSMB is not comprised entirely of statisticians. The twostage safety procedure in this paper provides a statistical view to monitor safety during the clinical trials, but never represents the medical and clinical decisions. More evaluation research and collaboration with clinicians and safety team are needed, in order to advance the safety detection and monitoring.
Availability of data and materials
The datasets during and/or analyzed during the current study available from the corresponding author on reasonable request.
Change history
11 September 2020
An amendment to this paper has been published and can be accessed via the original article.
Abbreviations
 DSMB:

Data and Safety Monitoring Board
 FDA:

Food and Drug Administration
 IND:

Investigational New Drug
 AE:

Adverse Event
 SAE:

Serious Adverse Event
 FWER:

Familywise Error Rate
 MCMC:

Markov chain Monte Carlo
 HOBIT trial:

Hyperbaric Oxygen Brain Injury Treatment trial
 HBO:

Hyperbaric Oxygen
 MedDRA:

Medical Dictionary for Regulatory Activities
 NDLM:

Normal Dynamic Linear Model
References
 1.
Gould AL, Wang WB. Monitoring potential adverse event rate differences using data from blinded trials: the canary in the coal mine. Stat Med. 2017;36(1):92–104.
 2.
Wang W, Whalen E, Munsaka M, Li J, Fries M, Kracht K, SanchezKam M, Singh K, Zhou K. On quantitative methods for clinical safety monitoring in drug development. Stat Biopharm Res. 2018;10(2):85–97.
 3.
Meinert CL. ClinicalTrials: design, conduct and analysis (Vol. 39). New York: OUP USA; 2012.
 4.
Meinert CL. Clinical trials dictionary: terminology and usage recommendations. Hoboken: Wiley; 2012.
 5.
Fleming TR, Ellenberg S, DeMets DL. Monitoring clinical trials: issues and controversies regarding confidentiality. Stat Med. 2002;21(19):2843–51.
 6.
Ellenberg SS, Fleming TR, DeMets DL. Data monitoring committees in clinical trials: A practical perspective. Stat Med. 2004;23(10):1661–2.
 7.
Herson J. Data and safety monitoring committees in clinical trials. Boca Raton: CRC Press; 2016.
 8.
European Medicines Agency. Reflection paper on risk based quality management in clinical trials. Compliance Insp. 2013;44:1–15.
 9.
US Department of Health and Human Services. FDA Guidance for Industry and Investigators Safety Reporting Requirements for INDs and BA/BE Studies; 2017. p. 2010.
 10.
O'Neill RT. Regulatory perspectives on data monitoring. Stat Med. 2002;21(19):2831–42.
 11.
US Food and Drug Administration. Safety assessment for IND safety reporting: guidance for industry. Silver Spring: FDA; 2015.
 12.
Gould AL. Statistical methods for evaluating safety in medical product development. Hoboken: Wiley; 2015.
 13.
Chen W, Zhao N, Qin G, Chen J. A Bayesian group sequential approach to safety signal detection. J Biopharm Stat. 2013;23(1):213–30.
 14.
DuMouchel W. Multivariate Bayesian logistic regression for analysis of clinical study safety issues. Stat Sci. 2012;27(3):319–39.
 15.
Ball G. Continuous safety monitoring for randomized controlled clinical trials with blinded treatment information: part 4: one method. Contemp Clin Trials. 2011;32:S11–7.
 16.
Gelman A, Hill J, Yajima M. Why we (usually) don't have to worry about multiple comparisons. J Res Educ Effectiveness. 2012;5(2):189–211.
 17.
Berry SM, Berry DA. Accounting for multiplicities in assessing drug safety: a threelevel hierarchical mixture model. Biometrics. 2004;60(2):418–26.
 18.
Amy Xia H, Ma H, Carlin BP. Bayesian hierarchical modeling for detecting safety signals in clinical trials. J Biopharm Stat. 2011;21(5):1006–29.
 19.
Gelman A, Pardoe I. Bayesian measures of explained variance and pooling in multilevel (hierarchical) models. Technometrics. 2006;48(2):241–51.
 20.
Wen S, Ball G, Dey J. Bayesian monitoring of safety signals in blinded clinical trial data. Ann Public Health Res. 2015;2(2):1019–22.
 21.
Berry SM, Carlin BP, Lee JJ, Muller P. Bayesian adaptive methods for clinical trials. Boca Raton: CRC press; 2010.
 22.
Gelman A, Carlin JB, Stern HS, Dunson DB, Vehtari A, Rubin DB. Bayesian data analysis. Boca Raton: CRC press; 2013.
 23.
Gelman A. Prior distributions for variance parameters in hierarchical models (comment on article by Browne and Draper). Bayesian Anal. 2006;1(3):515–34.
 24.
Gajewski BJ, Meinzer C, Berry SM, Rockswold GL, Barsan WG, Korley FK, Martin RH. Bayesian hierarchical EMAX model for doseresponse in early phase efficacy clinical trials. Stat Med. 2019;38(17):3123–38.
 25.
Gajewski BJ, Berry SM, Barsan WG, Silbergleit R, Meurer WJ, Martin R, Rockswold GL. Hyperbaric oxygen brain injury treatment (HOBIT) trial: a multifactor design with response adaptive randomization and longitudinal modeling. Pharm Stat. 2016;15(5):396–404.
 26.
Mehrotra DV, Heyse JF. Use of the false discovery rate for evaluating clinical safety data. Stat Methods Med Res. 2004;13(3):227–38.
 27.
Lin LA, Zhan Y, Li H, Yuan SS, Ball G, Wang W. Bridging blinded and unblinded analysis for ongoing safety monitoring and evaluation. Contemp Clin Trials. 2019;83:81–7.
 28.
Schnell PM, Ball G. A bayesian exposuretime method for clinical trial safety monitoring with blinded data. Ther Innov Regul Sci. 2016;50(6):833–8.
 29.
Mukhopadhyay S, Waterhouse B, Hartford A. Bayesian detection of potential risk using inference on blinded safety data. Pharm Stat. 2018;17(6):823–34.
Acknowledgements
Much appreciated for everyone’s contributions on this manuscript. We are also grateful to all the reviewers for their critical review and valuable comments, which for sure greatly improved the quality and clarity of this manuscript.
Funding
This work was funded and supported by the National Institute of Neurological Disorders and Stroke (NINDS) through the National Institutes of Health (NIH) under Award Number U01NS095926. The content is solely the responsibility of the authors and does not necessarily represent the official views of the National Institutes of Health.
Author information
Affiliations
Contributions
BG conceived and designed of the presented idea. JL, JW and BG contributed to the design and implementation of the research, to the analysis of the results. RHM, CM, and DR aided in interpreting the results and worked on the manuscript. JL, JW and BG wrote the paper with input from all authors. All authors read and approved the final manuscript.
Corresponding author
Ethics declarations
Ethics approval and consent to participate
Not applicable.
Consent for publication
Not applicable.
Competing interests
The authors declare that they have no competing interests.
Additional information
Publisher’s Note
Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.
Supplementary information
Rights and permissions
Open Access This article is licensed under a Creative Commons Attribution 4.0 International License, which permits use, sharing, adaptation, distribution and reproduction in any medium or format, as long as you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons licence, and indicate if changes were made. The images or other third party material in this article are included in the article's Creative Commons licence, unless indicated otherwise in a credit line to the material. If material is not included in the article's Creative Commons licence and your intended use is not permitted by statutory regulation or exceeds the permitted use, you will need to obtain permission directly from the copyright holder. To view a copy of this licence, visit http://creativecommons.org/licenses/by/4.0/. The Creative Commons Public Domain Dedication waiver (http://creativecommons.org/publicdomain/zero/1.0/) applies to the data made available in this article, unless otherwise stated in a credit line to the data.
About this article
Cite this article
Liu, J., Wick, J., Martin, R.H. et al. Twostage Bayesian hierarchical modeling for blinded and unblinded safety monitoring in randomized clinical trials. BMC Med Res Methodol 20, 211 (2020). https://doi.org/10.1186/s12874020010976
Received:
Accepted:
Published:
Keywords
 Twostage monitoring
 Bayesian hierarchical method
 Blinded and Unblinded safety data