Use this GMP audit preparation checklist to review QMS, SOPs, training, facilities, equipment, data integrity, CAPA, warehousing, and records before inspection.

Definition

A GMP audit preparation checklist is a structured tool used by pharmaceutical manufacturers to verify that quality systems, documentation, personnel, facilities, equipment, laboratory controls, materials, computerized systems, and manufacturing records comply with Good Manufacturing Practice requirements before an internal, customer, or regulatory inspection.

---

Introduction

A pharmaceutical GMP audit rarely fails because of one dramatic problem. More often, inspectors identify a pattern of smaller weaknesses: an overdue CAPA, an incomplete batch record, unexplained audit-trail activity, a calibration label that does not match the equipment file, an outdated SOP, or an employee who cannot explain the procedure they perform every day.

That is why effective GMP audit preparation must go far beyond cleaning the facility before inspectors arrive.

A strong audit-readiness program should demonstrate that the pharmaceutical quality system works continuously—not only during inspection week.

For manufacturers supplying regulated markets, audit preparation should take into account applicable requirements such as FDA 21 CFR Parts 210 and 211, EU GMP Volume 4, ICH Q7 for APIs, relevant annexes, data-integrity expectations, and PIC/S GMP guidance.

FDA states that drug CGMP regulations establish minimum requirements for the methods, facilities, and controls used in pharmaceutical manufacturing, processing, packing, and holding. FDA inspection observations may be documented on Form FDA 483 when investigators observe potentially objectionable conditions or practices. audit preparation checklist provides a practical framework for QA managers, production teams, QC laboratories, warehouse personnel, engineers, validation professionals, and senior management preparing for:

• FDA inspections
• EU/EMA-related GMP inspections
• PIC/S inspections
• Customer or contract-giver audits
• Supplier audits
• Internal GMP self-inspections
• Pre-approval inspections
• Routine regulatory inspections

---

GMP Audit Preparation Checklist at a Glance

GMP Area	Critical Items to Verify	Typical Evidence
Pharmaceutical Quality System	CAPA, deviations, change control, PQR/APR, management review	Approved records and trending
Documentation	Current SOPs, controlled forms, records	Document master list
Personnel	Training, qualification, hygiene	Training matrix and assessments
Facilities	Cleanliness, flow, segregation	Layouts, cleaning records
Equipment	Qualification, calibration, maintenance	IQ/OQ/PQ and calibration records
Manufacturing	BMR/BPR accuracy, IPCs, reconciliation	Completed batch records
Laboratory	Specifications, methods, OOS, instruments	Raw data and analytical records
Data Integrity	ALCOA+, access controls, audit trails	System logs and audit-trail reviews
Materials	Receipt, sampling, quarantine, release	GRNs, sampling and release records
Warehouse	Temperature, humidity, segregation	Mapping and monitoring records
Validation	Process, cleaning, method, CSV	Protocols and reports
Suppliers	Qualification and monitoring	Audits, questionnaires, agreements
Complaints/Recall	Investigations and traceability	Complaint and recall records
Self-Inspection	Audit schedule and follow-up	Internal audit reports and CAPAs

Why GMP Audit Preparation Matters

A GMP inspection evaluates more than whether procedures exist.

Inspectors want evidence that procedures are:

1. Scientifically justified.
2. Approved by appropriate personnel.
3. Current and controlled.
4. Properly implemented.
5. Consistently followed.
6. Supported by reliable data.
7. Effective in controlling product-quality risks.

An elegant SOP has little value if employees do not follow it.

Likewise, closing a CAPA in the electronic system does not demonstrate effectiveness unless the organization can show that the underlying problem has actually been prevented from recurring.

FDA’s quality-system approach emphasizes that quality should be built into pharmaceutical operations and cannot depend solely on finished-product testing. tep 1: Define the GMP Audit Scope

Start by identifying exactly what the audit or inspection may cover.

Consider:

• Manufacturing authorization
• Product types
• Dosage forms
• Markets supplied
• API manufacturing
• Finished-product manufacturing
• Packaging
• Warehousing
• QC laboratories
• Microbiology laboratories
• Utilities
• Computerized systems
• Contract manufacturing
• Contract testing
• Sterile operations
• Validation activities

Create an audit-scope document listing:

Why GMP Audit Preparation Matters

A GMP inspection evaluates more than whether procedures exist.

Inspectors want evidence that procedures are:

1. Scientifically justified.
2. Approved by appropriate personnel.
3. Current and controlled.
4. Properly implemented.
5. Consistently followed.
6. Supported by reliable data.
7. Effective in controlling product-quality risks.

An elegant SOP has little value if employees do not follow it.

Likewise, closing a CAPA in the electronic system does not demonstrate effectiveness unless the organization can show that the underlying problem has actually been prevented from recurring.

FDA’s quality-system approach emphasizes that quality should be built into pharmaceutical operations and cannot depend solely on finished-product testing. tep 1: Define the GMP Audit Scope

Start by identifying exactly what the audit or inspection may cover.

Consider:

• Manufacturing authorization
• Product types
• Dosage forms
• Markets supplied
• API manufacturing
• Finished-product manufacturing
• Packaging
• Warehousing
• QC laboratories
• Microbiology laboratories
• Utilities
• Computerized systems
• Contract manufacturing
• Contract testing
• Sterile operations
• Validation activities

Create an audit-scope document listing:

Item	Example
Facility	Solid oral dosage manufacturing plant
Products	Tablets and capsules
Markets	United States and European Union
Regulatory framework	21 CFR 210/211, EU GMP
Departments	QA, Production, QC, Engineering, Warehouse
High-risk systems	HPLC CDS, HVAC, purified water
Audit period	Previous 12–24 months

This prevents teams from spending disproportionate time reviewing low-risk areas while significant compliance risks remain unresolved.

---

Step 2: Review the Pharmaceutical Quality System

The Pharmaceutical Quality System, or PQS, is one of the first areas auditors may assess because deficiencies here can affect almost every other GMP activity.

EU GMP Volume 4 places the Pharmaceutical Quality System in Chapter 1, while FDA’s quality-system guidance similarly promotes integrated quality management and risk-based approaches. ty System Audit Checklist

Verify:

• Quality manual is current.
• Organizational responsibilities are clearly defined.
• QA has appropriate independence and authority.
• Quality metrics are reviewed.
• Management reviews are documented.
• Product Quality Reviews/Annual Product Reviews are current.
• Deviations are investigated promptly.
• CAPAs are based on root-cause analysis.
• CAPA effectiveness checks are completed.
• Change controls are scientifically evaluated.
• Quality-risk assessments are documented.
• OOS and OOT investigations are complete.
• Complaints are adequately investigated.
• Recalls can be executed effectively.
• Supplier qualification is current.
• Quality agreements are controlled.

Practical Example

Suppose a tablet compression deviation occurred because tablet hardness repeatedly fell below the internal target.

A weak investigation states:

“Operator error. Operator retrained.”

A stronger investigation would evaluate:

• Compression-force settings
• Granule properties
• Machine setup
• Tooling condition
• Blend moisture
• Operator actions
• Similar historical deviations
• Batch-to-batch trends

The resulting CAPA should address the verified root cause rather than automatically assigning retraining.

---

Step 3: Audit SOPs and Document Control

Documentation remains one of the most inspection-sensitive elements of GMP.

EU GMP includes a dedicated Chapter 4 on documentation, while FDA requirements under Part 211 address production records, laboratory records, record review, and related documentation controls. hecklist

Confirm that:

• Every GMP activity has an appropriate SOP.
• SOPs have unique document numbers.
• Revision numbers are correct.
• Effective dates are documented.
• SOPs have authorized approval.
• Obsolete copies have been removed.
• Current versions are available at points of use.
• Forms referenced by SOPs are current.
• Employees were trained before revised SOPs became effective.
• Periodic SOP reviews are completed.
• Electronic documents have appropriate access controls.

Check for SOP-Practice Mismatch

During your facility walk-through, compare actual employee practices with written procedures.

For example:

SOP requirement: Balance must be verified before daily use.

Observed practice: Operator performs verification only at the beginning of the week.

Even if the balance remains accurate, this creates a compliance gap because the approved procedure is not being followed.

---

Step 4: Review Batch Manufacturing and Packaging Records

Batch documentation demonstrates exactly how a pharmaceutical product was manufactured, tested, reviewed, and released.

Batch Record Checklist

Verify:

• Correct master record version was used.
• Product name and strength are correct.
• Batch number is traceable.
• Raw-material lot numbers are documented.
• Actual quantities are recorded.
• Equipment IDs are recorded.
• Manufacturing dates and times are documented.
• Critical process parameters are recorded.
• In-process test results are complete.
• Yield calculations are accurate.
• Reconciliation is complete.
• Deviations are cross-referenced.
• Corrections follow GDP requirements.
• Operators signed/initialed required activities.
• Independent verification is documented where required.
• QA batch review is complete.
• Final disposition is authorized.

FDA regulations specifically address master production and control records, batch production and control records, production-record review, and laboratory records under Part 211. tep 5: Check Deviations, Investigations, and CAPA

Inspectors frequently use deviations to determine whether the company’s quality system can identify problems, understand root causes, and prevent recurrence.

Review:

• Open deviations.
• Overdue investigations.
• Repeated deviations.
• Root-cause methodology.
• Product-impact assessments.
• Batch-impact assessments.
• CAPA assignments.
• CAPA due dates.
• Extensions.
• Effectiveness checks.
• Recurrence trending.

Red Flag

Five similar deviations classified as unrelated events may indicate ineffective trending.

Auditors often evaluate individual events horizontally across departments or time periods.

For example, if recurring documentation errors occur in Production, QC, Warehouse, and Engineering, the real issue may be a site-wide documentation or training weakness rather than four independent employee mistakes.

---

Step 6: Review Change Control

Changes affecting GMP systems should be assessed before implementation.

Change-Control Audit Checklist

Check:

• Change is clearly described.
• Justification is documented.
• Quality impact is evaluated.
• Regulatory impact is evaluated.
• Validation requirements are assessed.
• Stability impact is assessed.
• Training requirements are identified.
• Documents requiring revision are identified.
• Implementation is authorized.
• Post-implementation verification is completed.
• Change is formally closed.

Examples include changes to:

• Equipment
• Manufacturing processes
• Analytical methods
• Raw-material suppliers
• Packaging materials
• Computerized systems
• Facility layouts
• Cleaning procedures
• Specifications
• Batch sizes

---

Step 7: Check Personnel Training and Qualification

Training records are commonly requested during GMP audits.

Personnel Checklist

Verify:

• Job descriptions are current.
• Training matrix is current.
• GMP induction training is complete.
• Annual refresher training is complete.
• SOP-specific training is documented.
• Training effectiveness is evaluated.
• Equipment operators are qualified.
• Analysts are qualified for assigned methods.
• Contractors receive appropriate GMP training.
• Gowning qualification is current where applicable.
• Hygiene requirements are followed.
• Health-reporting requirements are defined.

Auditor Question Example

An inspector may ask:

“Show me how you know this analyst is qualified to perform this HPLC assay.”

Your evidence should be more than attendance at a training session.

Where appropriate, qualification may include:

• SOP training
• Method familiarization
• Practical demonstration
• Successful supervised analysis
• Competency evaluation
• Authorization to work independently

---

Step 8: Inspect Personnel Hygiene and Gowning Controls

Verify:

• Handwashing requirements are followed.
• Gowning sequence is documented.
• Gowning areas are appropriately designed.
• Protective garments are suitable for operations.
• Jewelry restrictions are enforced.
• Eating and drinking restrictions are observed.
• Illness-reporting requirements are understood.
• Personnel movement minimizes contamination risks.

For sterile facilities, personnel behavior becomes even more critical and should be aligned with the facility’s contamination-control strategy and applicable Annex 1 requirements.

The revised EU/PIC/S Annex 1 for sterile medicinal products came into operation on August 25, 2023, with paragraph 8.123 becoming applicable on August 25, 2024. tep 9: Perform a Facility Walk-Through

The facility should be inspected as if you were the regulator.

Do not restrict audit preparation to conference-room document reviews.

Premises Checklist

Check:

• Walls and ceilings are intact.
• Floors are clean and undamaged.
• Pipework is appropriately identified.
• Drains are controlled.
• Lighting is adequate.
• Doors close appropriately.
• Material and personnel flows are controlled.
• Cross-contamination risks are minimized.
• Waste routes are appropriate.
• Cleaning records are complete.
• Pest-control devices are appropriate.
• Pest-control reports are reviewed.
• External facility conditions are acceptable.
• Status labels are accurate.

Look Up, Down, and Behind

Internal audit teams often examine only obvious production surfaces.

Inspectors may notice:

• Dust on overhead utilities
• Damaged wall-floor junctions
• Unidentified pipes
• Corrosion
• Standing water
• Unused equipment
• Temporary repairs
• Exposed wiring
• Uncontrolled cleaning tools
• Material stored against walls

A robust inspection should therefore include less visible areas.

---

Step 10: Verify Equipment Qualification, Calibration, and Maintenance

Equipment must be suitable for its intended use and maintained in a controlled state.

Equipment Audit Checklist

Verify:

• Equipment has a unique ID.
• Equipment status is identified.
• Qualification status is current.
• IQ documentation is available.
• OQ documentation is available.
• PQ documentation is available where applicable.
• Calibration is current.
• Preventive maintenance is current.
• Breakdown history is reviewed.
• Equipment logs are complete.
• Cleaning records are complete.
• Operating SOPs are available.
• Computerized controls are validated where required.
• Critical spare parts are appropriately controlled.

Important 2026 Regulatory Watchpoint

EU and PIC/S regulators have been working on revision of GMP Annex 15: Qualification and Validation, including consideration of newer technologies, computerized systems, expanded applicability, and principles associated with ICH Q9(R1).

Until revisions are formally adopted, companies should continue following currently applicable requirements rather than treating consultation documents as binding GMP requirements.

---

Step 11: Review Calibration Status

Check instruments including:

• Balances
• Thermometers
• Pressure gauges
• HPLC systems
• GC systems
• pH meters
• Dissolution testers
• Temperature probes
• Data loggers
• Differential-pressure sensors

Verify:

Audit Point	Requirement
Calibration status	Within due date
Standard used	Traceable where required
Calibration range	Covers operating range
Failed calibration	Impact assessment performed
Labels	Match electronic/paper records
Records	Reviewed and approved

Critical Example

If a balance fails calibration, simply recalibrating it is insufficient.

The company should determine whether products weighed since the previous acceptable calibration may have been affected.

That impact assessment is often more important than the calibration failure itself.

---

Step 12: Review Validation Programs

The Validation Master Plan should reflect current site activities.

Review:

• Process validation.
• Cleaning validation.
• Analytical-method validation.
• Computerized-system validation.
• Utility qualification.
• Facility qualification.
• Equipment qualification.
• Hold-time studies.
• Transport validation.
• Continued process verification where applicable.
• Revalidation requirements.

Look for protocols that were approved after execution began—an obvious audit concern unless properly justified and investigated.

---

Step 13: Review Data Integrity and ALCOA+

Data integrity continues to be a major inspection concern.

FDA’s data-integrity guidance emphasizes that CGMP data should be reliable and accurate and that manufacturers should implement meaningful, risk-based strategies to prevent and detect integrity issues. + Principles

GMP records should be:

Principle	Meaning
Attributable	Who performed the activity?
Legible	Can the record be read?
Contemporaneous	Was it recorded when performed?
Original	Is the original record preserved?
Accurate	Does it correctly represent the activity?
Complete	Are all relevant data retained?
Consistent	Is the sequence logical and traceable?
Enduring	Is the record securely maintained?
Available	Can it be retrieved throughout retention?

Data Integrity Audit Checklist

Verify:

• Unique user accounts are used.
• Shared passwords are prohibited.
• Administrator access is restricted.
• Audit trails are enabled.
• Audit trails are periodically reviewed.
• Deleted or modified data are investigated where appropriate.
• Electronic raw data are retained.
• Backup procedures are validated.
• Time/date settings are controlled.
• System access is periodically reviewed.
• Metadata are retained where required.
• Spreadsheet controls are appropriate.
• Electronic signatures are controlled.
• System clocks are synchronized where necessary.

Practical HPLC Example

During an audit, an inspector may compare:

• Final reported chromatogram
• Sequence table
• Original injections
• Reintegrations
• Deleted injections
• Audit trail
• User access
• Processing method
• Acquisition method

A printed chromatogram alone may not adequately represent all underlying electronic GMP data. FDA has specifically addressed the relationship between electronic laboratory records and printed records in its CGMP Q&A materials. tep 14: Audit Laboratory Controls

QC laboratories deserve special preparation because inspectors can trace test results back to original raw data.

QC Checklist

Verify:

• Current specifications are available.
• Approved analytical methods are used.
• Analysts are qualified.
• Instruments are calibrated.
• System suitability criteria are met.
• Reagents are properly labeled.
• Reference standards are controlled.
• Working standards are qualified.
• Solutions have justified expiry periods.
• Raw data are complete.
• Calculations are verified.
• OOS results are investigated.
• OOT results are appropriately evaluated.
• Chromatographic audit trails are reviewed.
• Sample retention is compliant.
• Stability chambers are controlled.

---

Step 15: Prepare for OOS and OOT Review

An auditor may select an OOS result and trace the investigation from beginning to end.

Prepare evidence showing:

1. Initial laboratory assessment.
2. Investigation of analytical errors.
3. Manufacturing investigation where required.
4. Evaluation of other potentially affected batches.
5. Root-cause determination.
6. CAPA.
7. Final batch decision.
8. Appropriate QA approval.

Avoid scientifically unsupported practices such as repeated retesting until a passing result appears.

---

Step 16: Audit Raw Materials and Supplier Controls

Material quality directly affects finished-product quality.

Incoming-Material Checklist

Verify:

• Approved suppliers are used.
• Supplier status is current.
• Purchase specifications are approved.
• Materials are checked on receipt.
• Containers are inspected.
• Sampling is controlled.
• Identity testing is performed as required.
• COAs are reviewed.
• Materials remain quarantined before release.
• Released materials are properly identified.
• Rejected materials are segregated.
• Retest/expiry dates are controlled.
• FEFO/FIFO principles are implemented as applicable.

FDA CGMP guidance specifically addresses testing and approval or rejection of components, containers, and closures. tep 17: Inspect Warehouse and Storage Conditions

Warehouse inspection should include physical conditions and electronic inventory controls.

Warehouse GMP Checklist

Check:

• Quarantine areas.
• Approved-material areas.
• Rejected-material areas.
• Returned-product areas.
• Recalled-product areas.
• Printed packaging material security.
• Temperature monitoring.
• Humidity monitoring where required.
• Alarm systems.
• Excursion investigations.
• Temperature mapping.
• Cold-room qualification.
• Cleaning records.
• Pest control.
• Stock rotation.
• ERP inventory status controls.

Practical Example

A cold room operates at 2–8°C.

The auditor may request:

• Initial qualification
• Temperature-mapping study
• Current temperature chart
• Alarm records
• Sensor calibration
• Door-opening assessment
• Temperature-excursion investigations
• Backup power arrangements

Having a temperature display reading 5°C at the time of inspection does not demonstrate historical control.

---

Step 18: Review Environmental and Utility Controls

Depending on the operation, review:

• HVAC qualification
• Pressure differentials
• HEPA integrity testing
• Airflow visualization
• Temperature
• Humidity
• Particle monitoring
• Microbiological monitoring
• Purified water
• Water for injection
• Compressed air
• Clean steam
• Nitrogen
• Other process gases

Trend data rather than reviewing individual results only.

Trends can identify deterioration before specifications are exceeded.

---

Step 19: Evaluate Cleaning and Cross-Contamination Controls

Review:

• Approved cleaning SOPs.
• Cleaning validation.
• Dirty and clean equipment hold times.
• Cleaning-agent preparation.
• Cleaning-agent expiry.
• Equipment status labeling.
• Dedicated equipment requirements.
• Health-based exposure limits where applicable.
• Cleaning verification/swab testing.
• Cross-contamination risk assessments.

Manufacturing areas should provide appropriate personnel and material flows to minimize contamination and mix-up risks.

---

Step 20: Check Pest-Control Program

Pest control may appear minor, but poor control can indicate weak facility management.

Verify:

• Approved pest-control provider.
• Current site map.
• Trap/device numbering.
• Service reports.
• Trending.
• Investigation of increased activity.
• Building perimeter inspection.
• Doors and openings are sealed.
• No evidence of infestation.
• Corrective actions are documented.

---

Step 21: Audit Product Quality Reviews

Annual Product Reviews/Product Quality Reviews should provide meaningful analysis—not simply compile data.

Evaluate:

• Deviations
• OOS/OOT results
• Critical process parameters
• Critical quality attributes
• Stability trends
• Complaints
• Returns
• Recalls
• Changes
• CAPA
• Yield trends
• Process capability
• Supplier performance
• Validation status

Any trend identified should lead to documented evaluation and action where appropriate.

---

Step 22: Review Complaints, Returns, and Recalls

Auditors may trace a market complaint backwards through the entire manufacturing system.

Complaint Checklist

Verify:

• Complaints are logged.
• Seriousness is assessed.
• Investigation is timely.
• Retain samples are examined when appropriate.
• Batch records are reviewed.
• Related batches are evaluated.
• Trends are analyzed.
• CAPA is initiated when needed.
• Regulatory reporting requirements are assessed.

Recall Readiness

A mock recall should demonstrate the company’s ability to rapidly determine:

• Quantity manufactured
• Quantity released
• Customers supplied
• Stock remaining
• Distribution locations
• Returned quantity

---

Step 23: Review Supplier and Contract Activities

For outsourced manufacturing or laboratory work, verify:

• Supplier qualification
• Technical agreements
• Quality agreements
• Audit schedules
• CAPA from supplier audits
• Supplier performance monitoring
• Change-notification requirements
• Deviation communication
• OOS communication
• Data-integrity expectations
• Responsibilities for batch release

Outsourcing an activity does not eliminate the pharmaceutical company’s responsibility for quality oversight.

---

Step 24: Conduct a Computerized-System Audit

Modern GMP audits increasingly involve computerized systems.

Review critical systems such as:

• LIMS
• Chromatography data systems
• ERP
• Electronic batch records
• Environmental monitoring software
• Stability management systems
• Building management systems
• Laboratory instruments
• Electronic QMS

Verify:

• User Requirement Specification.
• Risk assessment.
• Validation.
• User-access controls.
• Periodic access review.
• Audit trails.
• Backup.
• Disaster recovery.
• Change control.
• Incident management.
• Periodic review.
• Decommissioning controls.

---

Step 25: Conduct an Internal GMP Mock Audit

A mock inspection is one of the most effective ways to identify weaknesses before an external auditor does.

Select auditors who are sufficiently independent from the areas being examined.

Mock Audit Approach

Day 1

Review:

• Site Master File
• Organization chart
• Quality system
• Product list
• Previous regulatory observations

Day 2

Inspect:

• Manufacturing
• Warehouse
• Engineering
• Utilities

Day 3

Review:

• QC laboratory
• Data integrity
• OOS/OOT
• Stability

Day 4

Review:

• CAPA
• Deviations
• Change controls
• Validation
• Supplier controls

Day 5

Conduct:

• Follow-up interviews
• Observation classification
• Management presentation
• CAPA planning

---

Step 26: Test Employee Audit Readiness

Employees should answer questions truthfully and directly.

Teach employees to:

• Listen carefully.
• Answer only what was asked.
• Never guess.
• Explain their actual procedure.
• Refer to the SOP when appropriate.
• Immediately disclose if they do not know an answer.
• Never alter records during an inspection.
• Remain professional.

Example

Auditor: “How do you clean this machine?”

A strong response would explain the actual approved procedure or refer to the controlling SOP.

A poor response would attempt to remember an unofficial cleaning process that differs from the SOP.

---

Step 27: Prepare the Inspection Room

A controlled inspection room or audit room improves document management.

Consider assigning:

• Audit coordinator
• Subject-matter experts
• Document runner
• QA reviewer
• Scribe
• Senior management contact

Maintain a request log containing:

Request No.	Document	Requested	Provided	Reviewer
001	Deviation SOP	09:10	09:18	QA
002	Batch 26A001 record	09:20	09:32	Production QA
003	HPLC calibration	09:45	09:53	QC

Documents should be reviewed for completeness before being presented whenever the inspection process permits.

Never create, backdate, or modify GMP records to prepare them for an inspector.

---

Step 28: Review Previous Audit Findings

Before any external inspection, examine:

• Previous FDA 483 observations
• Warning letters, if applicable
• EU/PIC/S observations
• Customer audit findings
• Internal audit findings
• Supplier audit issues
• Repeat deviations

Verify that corrective actions remain effective.

Repeat findings often receive more attention because they can indicate that the quality system failed to achieve sustainable remediation.

---

Step 29: Prioritize Audit Risks

Use a risk-based approach.

Risk Level	Example	Action
Critical	Data falsification, sterility risk	Immediate escalation
High	Repeated OOS investigation weakness	Correct before audit
Medium	Several overdue SOP reviews	Prioritized remediation
Low	Minor formatting inconsistency	Controlled correction

Never downgrade a serious compliance problem merely because an inspection is approaching.

---

Step 30: Prepare for the Closing Meeting

During an inspection closing meeting:

1. Listen carefully.
2. Record each observation.
3. Ask for clarification when genuinely necessary.
4. Avoid argumentative responses.
5. Provide factual corrections when supported by evidence.
6. Do not make commitments that cannot be achieved.
7. Immediately begin evaluating potential corrective actions.

For FDA inspections, Form FDA 483 may be issued when investigators observe conditions or practices they consider potentially objectionable. FDA explains that a 483 itself is not the agency’s final determination of whether a violation has occurred. Companies generally have 15 business days to provide FDA with a voluntary response for timely consideration. aster GMP Audit Preparation Checklist

Quality Management

• Quality manual reviewed
• Organization chart current
• QA responsibilities defined
• Management review current
• Quality metrics reviewed
• APR/PQR completed
• Deviations current
• CAPAs current
• Change controls current
• Risk assessments current
• Complaints reviewed
• Recall system verified
• Self-inspection program current

Documentation

• SOP master list current
• Obsolete SOPs removed
• Forms controlled
• Batch records complete
• Laboratory records complete
• Logbooks reviewed
• GDP requirements followed
• Record retention verified

Personnel

• Training matrix current
• GMP training complete
• Job training complete
• Qualification records available
• Hygiene practices compliant
• Gowning qualification current

Premises

• Facility clean
• No damaged surfaces
• Material flow controlled
• Personnel flow controlled
• Pest control current
• Waste handling controlled
• Cross-contamination controls effective

Equipment

• Qualification current
• Calibration current
• Maintenance current
• Cleaning records complete
• Equipment logs complete
• Equipment status correct

Manufacturing

• Master formula current
• Batch records complete
• IPC results complete
• Yields verified
• Reconciliation complete
• Deviations linked
• Line clearance documented

Laboratory

• Specifications current
• Methods approved
• Analysts qualified
• Instruments calibrated
• Standards controlled
• Reagents controlled
• OOS investigations complete
• OOT trending complete
• Audit trails reviewed

Data Integrity

• Unique accounts
• No unauthorized shared logins
• Audit trails active
• Administrator roles controlled
• Electronic records retained
• Backups verified
• Data changes traceable

Materials

• Suppliers approved
• Receipt records complete
• Sampling controlled
• Identity testing complete
• Status labeling accurate
• Quarantine effective
• Reject segregation effective

Warehouse

• Temperature monitored
• Humidity monitored
• Mapping current
• Alarms functional
• Excursions investigated
• Stock rotation controlled

Validation

• VMP current
• Equipment qualification current
• Process validation current
• Cleaning validation current
• Method validation current
• Computer-system validation current
• Utilities qualified

---

Common GMP Audit Findings to Prevent

Frequent weaknesses include:

1. Inadequate investigations.
2. Weak CAPA effectiveness.
3. Incomplete documentation.
4. Poor data-integrity controls.
5. Inadequate laboratory controls.
6. Failure to follow approved procedures.
7. Overdue equipment calibration.
8. Weak cleaning controls.
9. Unqualified suppliers.
10. Inadequate training.
11. Incomplete audit-trail review.
12. Weak change control.
13. Repeat deviations.
14. Inadequate validation.
15. Failure to investigate adverse trends.

FDA publishes annual inspection-observation datasets showing regulatory areas cited on system-generated Form FDA 483 observations, making historical FDA inspection data useful when developing an internal audit-readiness program. MP Audit Preparation: 30-Day Action Plan

Timeline	Main Activity
Day 30	Define scope and audit team
Day 27	Review previous findings
Day 25	Review QMS
Day 22	Review CAPA and deviations
Day 20	Review change controls
Day 18	Batch-record review
Day 16	QC/data-integrity review
Day 14	Equipment/validation review
Day 12	Warehouse inspection
Day 10	Facility walk-through
Day 8	Training review
Day 7	Mock audit
Day 5	Close critical gaps
Day 3	Employee preparation
Day 2	Document-room preparation
Day 1	Final readiness verification

The objective is not to cosmetically “fix” a facility before inspection. Any finding requiring investigation, change control, validation, or CAPA should follow the normal pharmaceutical quality system.

---

GMP Regulatory Insights for 2026

FDA

For finished pharmaceutical products, FDA CGMP requirements continue to be principally established under 21 CFR Parts 210 and 211.

Inspection preparation should particularly address:

• Quality-unit oversight
• Facilities and equipment
• Components
• Production controls
• Laboratory controls
• Documentation
• Investigation of discrepancies
• Batch-record review
• Data integrity

FDA continues to emphasize that manufacturers are responsible for maintaining reliable and accurate GMP data.

---

European Union

EU GMP Volume 4 Part I covers:

• Chapter 1 – Pharmaceutical Quality System
• Chapter 2 – Personnel
• Chapter 3 – Premises and Equipment
• Chapter 4 – Documentation
• Chapter 5 – Production
• Chapter 6 – Quality Control
• Chapter 7 – Outsourced Activities
• Chapter 8 – Complaints and Product Recall
• Chapter 9 – Self Inspection

Companies should monitor regulatory revisions rather than assuming consultation drafts are already enforceable requirements.

---

PIC/S

The PIC/S GMP Guide PE 009-17 remains an important harmonized GMP reference used across many participating authorities.

PIC/S also continues to work with European regulators on modernization of GMP guidance, including areas involving qualification, validation, computerized systems, documentation, and emerging technologies.

---

Sterile Manufacturing

Sterile-product manufacturers should place additional attention on:

• Contamination Control Strategy
• Cleanroom qualification
• Environmental monitoring
• Personnel qualification
• Aseptic process simulation
• Barrier technologies
• Cleaning and disinfection
• Material transfer
• Sterilization
• Container closure integrity
• Utilities

These controls should be integrated into the site’s broader pharmaceutical quality system.

Regulatory note: GMP requirements vary by product, manufacturing activity, country, and marketing authorization. Always verify applicable requirements with the relevant regulatory authority and current official guidance.

---

Frequently Asked Questions

1. What is a GMP audit preparation checklist?

A GMP audit preparation checklist is a structured list used to verify that pharmaceutical quality systems, documentation, personnel, facilities, equipment, production, laboratories, warehousing, validation, and data controls comply with applicable Good Manufacturing Practice requirements before an audit or inspection.

2. What documents are commonly checked during a GMP audit?

Auditors frequently review SOPs, batch records, laboratory records, deviations, CAPAs, change controls, training records, qualification documents, calibration records, validation reports, OOS investigations, supplier qualification files, complaints, stability records, and product quality reviews.

3. What are the most important areas to check before an FDA inspection?

Priority areas include the quality system, batch records, laboratory controls, investigations, CAPA, data integrity, equipment, production controls, materials, validation, training, and compliance with approved procedures.

4. How should a pharmaceutical company prepare for a GMP audit?

Define the audit scope, review previous findings, conduct a documentation review, inspect the facility, verify training and qualification records, review high-risk quality systems, perform a data-integrity assessment, conduct a mock inspection, and remediate identified deficiencies through the established PQS.

5. What are common GMP audit findings?

Common findings include inadequate investigations, incomplete batch records, ineffective CAPA, poor data-integrity controls, overdue calibration, inadequate validation, failure to follow SOPs, weak laboratory controls, insufficient training, and inadequate supplier oversight.

6. How often should internal GMP audits be conducted?

Audit frequency should be defined through the company’s self-inspection program and should consider regulatory requirements, operational complexity, previous findings, product risks, process changes, and quality performance. High-risk systems may require more frequent review.

7. What is the role of data integrity during a GMP audit?

Data integrity demonstrates that GMP information is complete, consistent, accurate, attributable, and reliable throughout its lifecycle. Auditors may review raw electronic data, metadata, audit trails, user access, deleted results, backups, and electronic record controls.

8. What is the difference between a GMP audit and an FDA inspection?

A GMP audit may be conducted internally, by customers, suppliers, or other organizations to evaluate compliance. An FDA inspection is an official regulatory activity conducted by FDA investigators under applicable U.S. law and regulations.

9. What should employees do during a GMP inspection?

Employees should answer questions truthfully, clearly describe the activities they perform, follow approved procedures, avoid guessing, and seek assistance from an appropriate subject-matter expert when they do not know an answer.

10. How can companies avoid repeat GMP observations?

Companies should perform robust root-cause investigations, implement CAPAs that address systemic causes, verify effectiveness, trend recurring events, involve management, and periodically reassess previously remediated systems through internal audits.

---

Conclusion

Successful GMP audit preparation is not a last-minute documentation exercise.

The strongest pharmaceutical sites maintain a state of continuous inspection readiness through:

• Effective pharmaceutical quality systems
• Accurate documentation
• Qualified personnel
• Controlled facilities
• Validated processes
• Reliable laboratory systems
• Strong CAPA
• Effective change control
• Supplier oversight
• Data integrity
• Risk-based self-inspection

Use this GMP audit preparation checklist as a structured starting point, then adapt it according to your products, facility, manufacturing processes, regulatory markets, and identified quality risks.

A company that can clearly demonstrate what it does, why it does it, how it records it, and how it responds when something goes wrong is far better positioned for a successful GMP inspection.