QMS Audit & Review
Independent, line-by-line review of an operating QMS — so weaknesses surface on your terms, not a regulator's.
In short
A QMS audit is an independent, evidence-based review of an operating quality system — procedures read against actual records and observed practice — that scores the gap between what a site has documented and what it really does, before a regulator scores it instead.
Every QMS drifts from its own documentation over time — a procedure gets a workaround, a CAPA closes without addressing root cause, a change control skips a step under deadline pressure. None of it shows up until an inspector finds it.
I review operating quality systems the way an inspector would: reading procedures against records, interviewing the people who actually run them, and scoring the gap between what’s written and what’s practiced. The output is a risk-ranked report your leadership team can use to close the right gaps first — backed by 25 years managing these same systems from the inside across pharmaceutical, biopharmaceutical, and vaccine manufacturing.
How QMS Audit & Review engagements work
- 1
Document & process walkthrough
Systematic review of the Quality Manual, SOPs, and records against current practice.
- 2
Process-owner interviews
Cross-check documented procedures against how the system actually runs on the floor.
- 3
Gap scoring
Score each gap against GMP, ICH Q10, and ISO 9001:2015 clauses, with severity ranking.
- 4
Findings report
A clear, prioritized report — not a raw checklist — that a leadership team can act on.
- 5
Remediation support
Optional hands-on support closing out the highest-risk findings first.
Related GMP and quality consulting services
QMS Design & Implementation
Building a Quality Management System from the ground up — Quality Manual through SOPs — aligned to GMP, ICH Q10, and ISO 9001:2015.
- Quality Manual and Quality Policy
- Site Master File (SMF)
- Tier I–III document architecture (Quality Manual → SOPs → BMR / BPR / work instructions)
Gap Analysis & Audit Readiness
A dry run of your next regulatory inspection — mock audit, documentation review, and shop-floor walkthrough — so findings surface before the real one.
- Mock inspection in the style of your target authority (USFDA / WHO / EU-GMP / CDSCO)
- Facility and documentation gap report, classified critical / major / minor
- CAPA plan with owners and realistic timelines
CQV Documentation
Apex-level CQV governance through to execution — Master Plans, risk assessments, and URS-through-PQ protocols for facilities, utilities, equipment, and computerized systems.
- CQV Master Plan (CQVMP)
- System Level Impact Assessments (SLIA) and Quality Risk Assessments (QRA)
- URS, Design Qualification (DQ), FAT and SAT protocols
Insights
Background reading on this topic
9 min read
Responding to an FDA Form 483
FDA reviews Form 483 responses received within 15 business days. What to do in each of those days, and the mistakes that trigger a Warning Letter.
7 min read
Tier I, II and III Quality Documentation
The three-tier documentation model — Quality Manual, SOPs, records. What belongs in each tier, why traceability matters, and how inspectors navigate it.
6 min read
How Often Is GMP Training Required?
No regulation sets a fixed interval. What 21 CFR 211.25 and EU GMP Chapter 2 actually require, and how to justify the training frequency you choose.
FAQ
QMS Audit & Review — frequently asked questions
How is an independent QMS audit different from a regulatory inspection?
The method is deliberately similar; the consequences are not. An independent audit follows the same evidence trail an inspector would — reading procedures against records, interviewing the people who actually run them, tracing a deviation from detection to CAPA closure — but the output is a prioritised report to your leadership team rather than a Form 483 or an inspection observation. The value is entirely in the timing: findings arrive while you still control the schedule for fixing them.
What does a QMS review actually examine?
Typically the Quality Manual and Site Master File against current practice; the core procedural set (CAPA, deviations, change control, OOS, self-inspection, training); CAPA effectiveness and closure quality rather than just closure rate; deviation and change-control trends over time; and clause-level benchmarking against ICH Q10, EU GMP and ISO 9001:2015. The recurring finding is rarely a missing procedure — it is a procedure that has quietly diverged from how the work is now done.
Can a QMS review be done remotely?
Documentation review, CAPA and deviation trending, and process-owner interviews all work well remotely, and that is often the efficient way to start. What remote work cannot replace is the shop-floor walkthrough — the gap between a written procedure and the practice on the line is usually visible only in person. A common structure is a remote documentation phase followed by a focused on-site pass against what the documents suggested.
How are findings prioritised?
By risk to product quality and patient safety first, regulatory exposure second, and documentation tidiness last. A raw checklist of every non-conformance is easy to produce and almost useless to act on; the point of the exercise is a ranked remediation plan that tells a leadership team which three things to fix first and why, with the specific clause or expectation each gap fails.
Let’s talk
Ready to talk about QMS Audit & Review?
Share a little about your site and timeline — I'll follow up within one to two business days with next steps.