How We Work
Our Audit Methodology
A structured, repeatable methodology that ensures consistent, thorough and regulatory-quality audit findings across every engagement, regardless of scope, geography or site type.
Planning & Scoping
Every audit begins with a structured planning phase. We define the scope of the audit in collaboration with you, the regulatory framework, the systems and processes to be assessed, the depth of review and the timeline. We confirm the audit objectives, review relevant background information (previous inspection findings, quality agreements, regulatory filing history) and issue a formal audit plan that both parties agree before assessment begins.
Outputs
- Audit Plan
- Document Request List
- Confirmed Audit Agenda
Risk Assessment
Before undertaking the detailed audit work, we conduct a structured risk assessment to identify the areas of highest regulatory significance and quality risk within the audit scope. This focuses our assessment effort on the activities and systems most likely to affect product quality, patient safety and regulatory compliance, ensuring that audit time is invested where it matters most. Risk assessment also informs the depth and intensity of review in individual audit areas.
Outputs
- Audit Risk Assessment
- Prioritised Assessment Areas
- Audit Focus Matrix
Document Review
Prior to onsite assessment, we conduct a detailed review of quality documentation relevant to the audit scope. This includes SOPs, batch records, validation reports, training records, deviation and CAPA logs, quality agreements and previous audit reports. Document review identifies areas for focused investigation during the onsite assessment and enables us to arrive on site with a detailed understanding of the documented quality system, allowing us to focus onsite time on verification rather than orientation.
Outputs
- Document Review Summary
- Preliminary Observation List
- Onsite Investigation Priorities
Interviews & Process Walkthroughs
A significant component of effective auditing is personnel interview. We conduct structured interviews with key personnel across quality assurance, operations, quality control and management functions to understand how quality systems function in practice, not just as documented. Process walkthroughs confirm that operational practices match documented procedures and identify discrepancies that represent compliance gaps. Interview techniques are designed to support honest, open responses rather than defensive recitation of procedure.
Outputs
- Interview Records
- Process Walkthrough Notes
- Discrepancy Log
Onsite / Remote Assessment
The onsite assessment is the core of the audit engagement. Working to the agreed audit plan, we assess quality systems, review records, conduct physical facility inspections and test quality system function against regulatory requirements. Our assessors are trained to work systematically through the audit scope while remaining alert to indicators of systemic quality issues that warrant deeper investigation. Evidence is gathered, referenced and documented throughout the assessment. Remote audit formats use structured video walkthrough, shared document platforms and live interview sessions to achieve equivalent evidence quality.
Outputs
- Contemporaneous Audit Notes
- Evidence Records
- Preliminary Finding List
Closing Meeting
At the conclusion of onsite assessment, we conduct a formal closing meeting with your management and quality team. We present a summary of preliminary findings, explain the basis for each finding and discuss any factual matters that require clarification before the written report is issued. The closing meeting ensures that the audit team and auditee have a shared understanding of what has been observed, preventing surprises in the written report and enabling organisations to begin remediation planning promptly.
Outputs
- Closing Meeting Presentation
- Preliminary Findings Summary
- Agreed Factual Record
Reporting
Written audit reports are issued within 10 working days of audit completion. Reports contain an executive summary, audit scope and methodology, individual findings with regulatory basis, risk classification (critical, major, minor or observation), and recommended corrective actions for each finding. Findings are described with sufficient precision that remediation actions can be designed and implemented without requiring additional clarification. Reports are written to the standard that regulatory authorities apply when reviewing an organisation's supplier audit programme.
Outputs
- Full Audit Report
- Executive Summary
- Finding Classification Table
- Recommended CAPA Actions
CAPA Verification
Where requested, we review CAPA responses submitted in response to audit findings and provide a formal assessment of CAPA adequacy. We assess whether proposed actions address the identified root causes, whether implementation timelines are realistic and whether planned effectiveness checks will provide meaningful evidence of improvement. Following CAPA implementation, we can conduct effectiveness verification assessments to confirm that corrective actions have been implemented as described and have achieved the intended improvement.
Outputs
- CAPA Response Review
- CAPA Adequacy Assessment
- Effectiveness Verification Report
Remote & Hybrid Delivery
Our methodology supports fully remote and hybrid audit formats for document-intensive assessments, rapid qualification reviews and situations where travel is not practical. Remote audits are scoped to achieve equivalent evidence quality to onsite assessment, using structured video walkthrough, shared document platforms and live interview sessions.
Risk-Based Approach
All audit scope decisions are risk-based. We concentrate assessment effort on the areas of highest regulatory significance, not on comprehensively covering every procedural requirement regardless of risk. This approach reflects the risk-based principles of ICH Q9 and is directly aligned with how regulatory inspectors prioritise their own assessment activities.
Report Standards
Our reports are written to the standard expected in a supplier qualification programme reviewed by regulatory inspectors. Findings are evidence-based, specifically referenced to the applicable regulatory requirement and described with sufficient precision that the root cause and remediation pathway are clear without requiring additional interpretation.
Discuss an Audit Engagement
Contact our team to discuss your audit requirements and how our methodology applies to your specific scope and context.