FDA Inspection Readiness: What Inspectors Are Currently Looking For

The Shift in FDA Inspection Priorities

FDA inspection activity has evolved considerably over the past five years. While foundational GMP requirements, documentation control, deviation management, equipment qualification, remain central to every inspection, the areas attracting the greatest scrutiny have shifted. Organisations that prepare for inspections by focusing exclusively on traditional GMP system reviews risk being caught unprepared in areas where FDA is currently most active.

Data integrity has moved from a specialist concern to a primary inspection focus. Contamination control strategy, given regulatory attention following high-profile product recalls and the publication of EU GMP Annex 1 (2022), is an area FDA inspectors now examine in structured, methodology-driven ways rather than opportunistically. Supply chain oversight, particularly following COVID-era disruptions that exposed significant vulnerabilities in pharmaceutical supply chains, has become a core element of most PAI and surveillance inspections.

Data Integrity: The Continuing Priority

Data integrity findings remain the most common cause of FDA Warning Letters to pharmaceutical manufacturers. FDA inspectors are no longer satisfied with paper-based data integrity policies. They examine the full data lifecycle, from raw data creation through processing, review, approval and archive, and specifically assess whether systems and practices prevent and detect data manipulation.

Key areas FDA inspectors currently focus on:

- Audit trail review practices: are audit trails reviewed as part of routine batch record review, or only when a problem is flagged? - Access controls and shared login credentials: individual accountability for all data entries - Backup and recovery verification: can the organisation demonstrate data is actually retrievable from backup? - Paper-hybrid systems: where electronic and paper records coexist, do controls prevent data being selectively transcribed? - Laboratory Out of Specification investigation data: is original raw data retained alongside retest data, and are investigations based on complete data sets?

Organisations should conduct a gap assessment against MHRA Data Integrity Guidance (2018) and FDA Data Integrity guidance (2018) before inspection. The assessment should cover both computerised and manual data systems.

Contamination Control Strategy

The publication of the revised EU GMP Annex 1 in August 2022, with its Contamination Control Strategy (CCS) requirement, has influenced FDA inspection approaches even for non-EU-focused organisations. FDA inspectors increasingly expect manufacturers to be able to articulate a coherent, site-specific contamination control strategy rather than relying on individual procedural controls operating in isolation.

A CCS is a documented, site-specific programme that identifies contamination risks (microbial, particulate, pyrogenic, chemical and cross-contamination), describes the controls in place to address each risk, and demonstrates how the controls are monitored and verified as effective. FDA inspectors ask to see evidence that the organisation understands its contamination risk profile holistically, not just that it has individual monitoring programmes.

Organisations manufacturing sterile products should prioritise CCS development. Manufacturers of non-sterile products are increasingly expected to demonstrate equivalent thinking around cross-contamination and particulate risk.

Supply Chain Oversight

FDA increasingly treats supply chain oversight, particularly API supplier oversight, as a core GMP obligation rather than a quality assurance add-on. Inspectors examine whether organisations have genuine knowledge of their supplier quality systems, not just paper-based supplier approval records.

Common deficiencies identified in FDA supply chain inspections:

- Supplier qualification audits that have not been performed, are overdue or were conducted without genuine assessment of GMP compliance - Quality agreements that lack specificity on change notification, testing requirements and audit access rights - Over-reliance on Certificate of Analysis (CoA) without identity testing or periodic confirmatory testing - Inadequate processes for receiving and evaluating supplier change notifications - No process for reassessing supplier risk when regulatory intelligence (warning letters, import alerts) indicates compliance concerns

Organisations should maintain an up-to-date supplier qualification status matrix and be prepared to demonstrate to inspectors which suppliers have been audited, when, by whom, what was found and how findings were resolved.

Process Validation and Continued Process Verification

FDA's 2011 Process Validation Guidance established a three-stage lifecycle model: process design, process qualification and continued process verification (CPV). Inspectors now routinely assess whether organisations have implemented Stage 3, CPV, as an ongoing programme, not just as a concept acknowledged in policy.

CPV deficiencies FDA inspectors commonly identify:

- CPV programmes that collect data but do not have defined statistical methods for trend detection - Control charts or trending systems with no defined action limits or escalation procedures - CPV data that is collected but not reviewed at defined frequencies - No mechanism for CPV findings to feed back into process design decisions

FDA also continues to examine legacy processes, those validated under pre-2011 approaches, to determine whether organisations have a credible plan for bringing them into line with current expectations.

Preparing for Inspection: A Practical Approach

Inspection readiness is not a pre-inspection sprint. It is a continuous state of compliance that is verified before an inspection through systematic gap assessment. Organisations that achieve the best inspection outcomes are those whose quality systems are inspection-ready at all times, not those who mobilise a team six weeks before an anticipated FDA visit.

Practical steps:

1. Conduct a structured gap assessment against current FDA expectations in each of the areas above, using published guidance documents and recent Warning Letter content as the benchmark 2. Address gaps through properly documented CAPAs with realistic timelines, not superficial procedural updates 3. Conduct internal mock inspections using personnel not involved in the areas being assessed, simulating the interview style and document request process of an actual inspection 4. Prepare personnel: quality systems personnel should be able to explain how systems work in practice, not just describe what procedures say 5. Ensure audit programme is current: all critical suppliers audited, no overdue periodic audits, findings resolved and closed

Organisations that engage an independent third party to conduct mock inspections before critical FDA interactions, PAI, surveillance, for-cause, consistently report more confident inspection outcomes.