A GMP compliance audit is one of the most revealing tests of how well a manufacturing operation actually runs. Regulators and auditors do not just examine documentation. They also look at whether it reflects activity on the production floor, whether people understand their responsibilities and whether the operation can provide consistent, traceable evidence of control.
For manufacturers in regulated sectors, preparation does not start in the week before an inspection. Instead, good audit readiness comes from ongoing discipline across documentation, training, quality systems and operational routines. This article sets out what to review before a GMP inspection and provides a practical framework you can use as a pre-audit checklist.
What a GMP compliance audit assesses
Before working through what to review, it helps to understand what auditors are looking for. Internal teams, customers and certification bodies may all conduct GMP compliance audits. In regulated pharmaceutical manufacturing, a regulator such as the MHRA may also carry out an inspection. Whatever the route, the focus remains on whether the systems and controls work as intended, not simply whether the organisation has documented them.
Auditors will typically compare written procedures with observed practice, interview staff to assess their understanding of training and review records to confirm that teams follow processes consistently. The areas covered align closely with the key areas of manufacturing compliance: document control, training, traceability, quality controls, deviation management and corrective actions.
Audit findings often highlight gaps between what a procedure says and what happens in practice. Incomplete records, outdated procedures and corrective actions that remain open can all create problems. Therefore, a well-prepared operation identifies and closes these gaps before the auditor arrives.
GMP compliance audit checklist
The following checklist covers areas commonly reviewed during a GMP compliance audit. Use it as a structured pre-inspection review to identify gaps before they become findings.
SOPs and document control
Outdated or inconsistently applied SOPs can quickly create problems during an audit. Before an inspection, check the following:
• Current SOPs reflect actual site practice and carry the correct approval
• Effective version control keeps superseded versions out of circulation
• People can access the SOPs they need at the point of use
• Recent process changes are reflected in updated procedures, with approval and communication completed
• Defined review schedules help teams identify and address overdue SOP reviews
Training records
Training is a primary line of enquiry for GMP auditors. They will want evidence that staff carrying out key tasks have received the right training and understand what their role requires. Where relevant procedures change, staff should also receive appropriate further training.
• Training records cover staff working across production, quality and related functions
• Individual records link training to specific procedures rather than only to job roles
• Updated SOPs trigger further training for the employees affected
• GMP induction records provide evidence that new starters have completed the required training
• Refresher training follows a defined and current schedule
Batch records and traceability
Batch records form a key part of the evidence that demonstrates GMP compliance. Auditors will look at whether the records provide accurate and complete information. They will also expect the manufacturer to retrieve them when required and demonstrate traceability from incoming materials through to finished product.
• Staff complete batch records at the time activities take place rather than retrospectively
• Each entry remains legible and includes the appropriate date and signature
• Corrections follow good documentation practice so the original entry remains readable, while the amendment is signed and dated
• Traceability records connect raw material receipt through to batch release
• Relevant batch records can be retrieved quickly when required
Deviation management and CAPA
Auditors scrutinise deviations and corrective and preventive actions (CAPA) closely during GMP audits. They want to see an effective system rather than a list of open items with little evidence of progress.
• Formal deviation records include an assessment of potential product impact
• Root cause investigations are completed and documented
• CAPA records include defined actions, named owners and target completion dates
• Evidence supports the closure of actions raised during previous audits and inspections
• Significantly overdue CAPA items have a clear and documented explanation
Cleaning and hygiene controls
Cleaning and hygiene are fundamental controls in both food and pharmaceutical manufacturing. During an audit, reviewers will examine cleaning procedures and records alongside evidence that teams apply the required controls consistently.
• Documented cleaning procedures cover relevant equipment and areas, including validation where required
• Cleaning records are completed at the time the activity takes place and retained appropriately
• Scheduled cleaning is carried out as planned, with deviations recorded where necessary
• In food manufacturing, allergen cleaning procedures and records demonstrate control between changeovers
• Environmental monitoring programmes provide evidence of ongoing control where required. See Gemba’s guidance on [food and beverage regulatory compliance](https://www.gembasolutions.com/food-and-beverage-regulatory-compliance-guide/) for a practical overview of hygiene and allergen controls in food production
Equipment calibration and maintenance
Production and quality testing depend on equipment that operates within the required specification. As a result, auditors will review calibration and maintenance records and look at how the organisation has handled any out-of-calibration events.
• Current calibration certificates confirm that relevant equipment remains within its calibration interval
• Out-of-calibration events are documented and assessed for potential product impact
• Preventive maintenance follows a defined schedule
• Equipment logs show that planned maintenance has taken place
• Critical quality control equipment has the appropriate documented qualification or validation status
Internal audit and self-inspection
A strong internal audit programme helps an operation actively identify and address compliance gaps. More importantly, it gives teams an opportunity to find and resolve issues before an external inspection.
• A defined schedule covers internal audits across relevant GMP areas
• Findings from the latest internal audit are formally raised and assigned
• Documented evidence confirms the closure of previous audit actions
• Supplier and contractor controls form part of the internal audit programme where relevant
Change control
Change control helps an organisation assess the GMP impact of modifications to processes, materials, equipment or procedures before implementation. During an audit, reviewers will therefore look for evidence that teams actively manage changes rather than simply making them.
• A formal change control process guides how teams assess and manage changes
• GMP impact assessments cover relevant changes to materials, suppliers, equipment or processes
• Regulatory notifications are completed where required
• Post-change monitoring or validation is carried out and documented when necessary
Common gaps that become audit findings
Even well-run operations can develop weaknesses over time. However, identifying them before an inspection gives teams an opportunity to put things right. Examples of issues that can lead to GMP audit findings include:
• SOPs that describe an ideal process but do not reflect what actually happens on site
• Training records that do not clearly link to specific procedures or show whether training remains current
• Batch records completed at the end of a shift rather than at the time the activity takes place
• Long-running CAPA items with no documented progress or risk assessment
• Expired calibration certificates without formal review or appropriate action
• Repeated internal audit findings that indicate the original issue was not effectively addressed
• Change control records created after the change they were intended to govern
The common thread is not necessarily a missing process. Instead, problems often arise when teams apply processes inconsistently or when available records do not provide enough evidence of control. Addressing these issues before an audit depends on operational discipline, record quality and clear visibility.
How software supports GMP audit readiness
Spreadsheets and paper can make GMP compliance activities harder to manage, particularly when information sits across different systems or locations. Over time, information can become scattered, teams can lose sight of ownership and retrieving evidence under audit pressure can take longer than it should.
Digital compliance software can help quality and operations teams bring inspections, checks and other compliance activities into one place. As a result, teams gain clearer visibility of completed work, outstanding actions and activities that still require attention.
For manufacturers preparing for a GMP compliance audit, that visibility matters. Software does not replace the expertise or judgement required to run a compliant operation. However, it can reduce the work involved in assembling evidence from multiple sources under time pressure. It also gives teams a clearer opportunity to identify and close gaps before an auditor finds them.
For food and beverage manufacturers, food safety compliance software can also support the checks, records and actions involved in maintaining audit readiness.
Audit readiness as an operational standard
GMP compliance audit readiness should not become a project that starts in the weeks before an inspection. Instead, it comes from consistent daily practice across documentation, training, quality controls and corrective action management.
Manufacturers that manage GMP compliance well can approach inspections with greater confidence, respond to findings quickly and demonstrate control to regulators and customers. The checklist above provides a structured starting point. However, it delivers the most value when the review becomes part of routine operations rather than a reactive exercise before an inspection.
To see how Gemba Compliance can support greater consistency across GMP-relevant activities, see how Gemba Compliance supports GMP audit readiness for manufacturers in regulated sectors.