Gap Analysis & Audit Readiness
A dry run of your next regulatory inspection — mock audit, documentation review, and shop-floor walkthrough — so findings surface before the real one.
In short
A GMP gap analysis is a structured pre-inspection assessment — documentation review, facility walkthrough and mock inspection — that surfaces the findings a regulator would raise, classified by severity, while there is still time to close them.
I’ve sat on both sides of the inspection table — supporting USFDA, WHO-Geneva, CDSCO, and ISO 13485 audits from inside the quality unit, and now helping sites prepare for them as an outside reviewer. That combination is what makes a mock audit useful: knowing what an inspector actually asks for, and how a real quality team is stretched trying to answer it live.
A gap analysis engagement is built to surface your findings on your schedule, not the regulator’s — classified by real risk, not documentation neatness, so your team spends its remaining time before inspection closing what actually matters.
How Gap Analysis & Audit Readiness engagements work
- 1
Scope & standard selection
Agree the target regulatory standard and inspection scope — facility, product line, or full site.
- 2
Mock inspection
A structured walkthrough that mirrors how the real authority will inspect: documents, facility, and people.
- 3
Gap classification
Every observation classified by severity and mapped to the specific clause or expectation it fails.
- 4
CAPA planning
A realistic, owned CAPA plan — not just a findings list — with dates that hold up under follow-up.
- 5
Verification
A follow-up pass to confirm CAPAs actually closed before the real inspection date.
Related GMP and quality consulting services
QMS Design & Implementation
Building a Quality Management System from the ground up — Quality Manual through SOPs — aligned to GMP, ICH Q10, and ISO 9001:2015.
- Quality Manual and Quality Policy
- Site Master File (SMF)
- Tier I–III document architecture (Quality Manual → SOPs → BMR / BPR / work instructions)
QMS Audit & Review
Independent, line-by-line review of an operating QMS — so weaknesses surface on your terms, not a regulator's.
- Document-by-document QMS review report
- CAPA effectiveness and closure-quality review
- Deviation and change-control trend analysis
CQV Documentation
Apex-level CQV governance through to execution — Master Plans, risk assessments, and URS-through-PQ protocols for facilities, utilities, equipment, and computerized systems.
- CQV Master Plan (CQVMP)
- System Level Impact Assessments (SLIA) and Quality Risk Assessments (QRA)
- URS, Design Qualification (DQ), FAT and SAT protocols
Knowledge Booklet
Technical modules on this subject
Module 1
Clean Room Design & Classification
What a classified room must achieve and how it is proven — ISO 14644 against Annex 1 grades, occupancy states, sampling and requalification.
Module 2
HVAC System Design
AHU architecture, how much supply air and why, filtration staging, humidity control, and the qualification that proves it. A CQV reference.
Module 3
Pharmaceutical Water Systems
Pharmaceutical water from source to point of use — pharmacopoeial limits, generation engineering, loop design, dead legs, rouging and three-phase validation.
Module 4
Water for Injection (WFI)
The water grade defined by bacterial endotoxin — WFI versus PW, endotoxin test methods, permitted generation routes, pure steam, hot and ambient distribution.
FAQ
Gap Analysis & Audit Readiness — frequently asked questions
What is a mock FDA inspection?
A mock inspection is a rehearsal that mirrors how the real authority will inspect: the same document requests, the same facility walkthrough, the same pressure on subject-matter experts to answer live and produce evidence within minutes. It tests three things at once — whether the documentation holds up, whether the facility matches what the documents claim, and whether your people can defend their own systems under questioning. The third is the one sites most often underestimate.
How far ahead of an inspection should a gap analysis run?
Far enough that the CAPAs can genuinely close, and then be verified. A gap report delivered a fortnight before an inspection produces a list of open findings an inspector may well discover you already knew about — which is worse than not having looked. The useful sequence is assessment, then remediation with real owners and dates, then a verification pass confirming closure before the inspection date.
How are gap-analysis findings classified?
Using the same severity language the regulators use: critical, major and minor. A critical finding indicates a deficiency that has produced, or leads to a significant risk of producing, a product harmful to the patient. A major finding is a non-critical deviation from GMP or from the marketing authorisation. A minor finding is a departure from good practice that is neither critical nor major. Each observation is mapped to the specific clause or expectation it fails, so remediation targets a requirement rather than an opinion.
We have already received a Form 483. Can you help?
Yes. The immediate constraint is timing: FDA considers a Form 483 response submitted within 15 business days of the inspection close-out before it decides on further action, so the first priority is a response that is complete, specific and realistic about dates. The harder work follows — root cause analysis that survives scrutiny, corrective actions that address the system rather than the symptom, and verification evidence that the fix held.
What is the difference between a gap analysis and an internal audit?
An internal audit is a scheduled element of your own quality system, run under your own SOP, usually against a defined scope and cycle. A gap analysis is a point-in-time diagnostic against an external target — a specific authority's expectations ahead of a specific event — and it is deliberately adversarial rather than procedural. Sites need both; they answer different questions.
Let’s talk
Ready to talk about Gap Analysis & Audit Readiness?
Share a little about your site and timeline — I'll follow up within one to two business days with next steps.