The most effective tool for FDA compliance status

Mock FDA Inspection by Ex-FDA Investigators

Consider conducting a mock FDA inspection with your staff before the FDA arrives. This proactive step can identify significant compliance gaps and allow corrective action before those issues become Form FDA 483 observations. Addressing deficiencies after an inspection is usually more disruptive, expensive, and difficult than correcting them beforehand.

  • The Quality Management System Regulation established the Agency’s current medical device quality system framework and replaced QSIT with the inspection process described in Compliance Program 7382.850. A mock FDA inspection should reflect this current risk-based approach.
  • Internal Audits and Management Reviews: Under QMSR, the agency may review management review, quality audit, and supplier audit records that were previously exempt under former §820.180(c). CIRG helps your team prepare those records and explain them accurately without unnecessary speculation or overstatement.
  • Risk-Based Thinking and Technical Decisions: We do more than review SOPs. We evaluate how your organisation identifies risk, makes technical decisions, documents rationale, and demonstrates effective control under FDA scrutiny.
  • Remote and Hybrid Readiness: FDA may use Remote Regulatory Assessments, including livestream video, teleconferences, screen sharing, and records requests. We can simulate these conditions to test document retrieval, SME readiness, communication, and remote inspection coordination.
  • Aligned With FDA Compliance Program 7382.850: Our medical device mock FDA inspection approach reflects the FDA’s current QMSR inspection process and risk-based inspection methodology.
Contact Us
FDA consulting team reviewing compliance data, risk, and quality systems to support regulatory readiness

Critical Development for Foreign Manufacturers

FDA’s expansion of unannounced foreign inspections has changed the risk profile for overseas manufacturers. Advance notice can no longer be assumed, and inspection readiness must become a permanent operating condition rather than a short-term exercise. ISO 13485 certification alone does not demonstrate readiness for FDA scrutiny. Foreign facilities supplying the U.S. market should maintain the same level of preparedness expected of domestic manufacturers, with compliant documentation, effective quality systems, trained personnel, and records ready for immediate review. A mock FDA inspection can expose weaknesses before FDA does and give management time to correct them under controlled conditions. Significant deficiencies may lead to Form FDA 483 observations, Warning Letters, Import Alerts, or other regulatory consequences. For foreign manufacturers, the message is simple: prepare before FDA arrives, because the next inspection may come without warning.

RA QA Compliance

List of 21 CFR Parts and

International standards CIRG specializes in a mock FDA inspection.

Onsite Mock FDA Inspection

  • 21 CFR Part 4 Combination Products
  • 21 CFR Part 11 Electronic Records and Signatures
  • 21 CFR Part 210 Current Good Manufacturing Practice in Manufacturing (CGMP), Processing, Packing, or Holding of Drugs; General
  • 21 CFR Part 211 Current Good Manufacturing Practice for Finished Pharmaceuticals
  • 21 CFR Part 212 — PET Drug CGMP: Production, Testing, Quality Control, and Release of Positron Emission Tomography drugs.
  • 21 CFR Parts Relate to Bioresearch Monitoring (BIMO) 50, 54, 56, and 58
  • 21 CFR Part 314 Subpart H – Pre-Approval Inspection (PAI)
  • 21 CFR Part 814 Premarket Approval (PMA)
  • 21 CFR Part 803 Medical Device Reporting (MDR)
  • 21 CFR Part 820 Quality Management System Regulation (QMSR), Compliance Program 7382.850 Inspection Readiness
  • Section 361 of the Public Health Service (PHS) Act – Human Cells, Tissues, and Cellular and Tissue-Based Products (HCT/P)
    • 42 U.S.C. Section 264
    • 21 CFR Part 1271 Human Cells, Tissues, and Cellular and Tissue-Based Products (HCT/P)

MDSAP & ISO

Our FDA consultant is highly experienced with International Organization for Standardization standards, such as:

  • ISO 13485:2016 Medical Devices – Quality Management Systems – Requirements for Regulatory Purposes
  • ISO 11135 Sterilization of health-care products – Ethylene Oxide
  • ISO 14155:2020 Clinical Investigation of medical devices for human subjects – Good clinical practice (GCP)
  • ISO 14644 Cleanrooms and associated environments
  • ISO 9001:2015 Quality management systems – Requirements
  • ISO 14971:2019, with Amendment 1:2024 Application of risk management to medical devices
  • ISO 11607:2019 Packaging for terminally sterilized medical devices. Requirements for materials, sterile barrier systems and packaging systems
  • ISO 20395:2019 Biotechnology — Requirements for evaluating the performance of quantification methods for nucleic acid target sequences — qPCR and dPCR

If Your Quality System Is Strong, Prove It

A strong quality leader should have a “bring it on” attitude toward scrutiny. The stronger the quality system, the more willing leadership should be to prove it. A mock FDA inspection gives the quality unit that opportunity. It tests CAPA, investigations, data integrity, management oversight, employee readiness, and response under pressure. Strong quality leaders take criticism well because the goal is to find weaknesses before FDA does. They do not defend every observation during the mock. Defense belongs in the actual agency interaction, not in the rehearsal. Finding observations also does not mean the quality system is bad or failing. Even strong systems drift over time and need correction. Think of it like wheel alignment on a high-performance car: the car may be excellent, but periodic adjustment keeps it tracking straight. A mock FDA inspection helps bring the system back on course before small deviations become larger problems.

Certification of Compliance

“An ounce of prevention is worth a pound of cure.”

“To Err is Human.” But Why Do We Have No Room for Error

That’s because we are in a life-saving business. The margin of error is slim, if not zero. In other words, we are committed to the health and well-being of our patients. As such, we must minimise preventable errors and control their potential effects. It is crucial that we ensure no non-conforming products enter the distribution channel.

How to Prepare for an FDA Inspection

How to prepare for an FDA inspection is the most common question asked by many drug and medical device companies. Fortunately, one of the most effective tools is a mock FDA inspection. Manufacturers use mock inspections to assess compliance and strengthen inspection readiness. Process validation remains critical, including when manufacturing processes use automated or AI-enabled systems. Our consultant is a subject-matter expert (SME) in this area and can help you prepare for an FDA inspection.

Before an FDA inspector arrives, we can review the company’s Quality System Manual, Quality Management System, applicable CGMP requirements and the QMSR, CAPA, and manufacturing operations. Additionally, we can practice, strategise, organise, and train your staff to help them understand what actual FDA inspections entail.

Qualified Professionals Should Conduct a Mock FDA Inspection

For example, one of our principal FDA consultants has many years of extensive experience inspecting medical devices and drug manufacturers. Furthermore, he has received the following certifications from the US FDA:

  1. Performance Auditor Certification in 2003
  2. Investigator Certification in 1997

We will utilise our knowledge and experience to prepare you and your team for an FDA inspection of your manufacturing facilities. By choosing our mock FDA inspection, you can identify potential gaps and develop appropriate remediation plans.

Mimicking FDA Inspection

A CIRG FDA consultant will use the applicable current FDA compliance program, including Program 7382.850 for medical-device inspections, together with relevant IOM procedures. Please understand that we don’t promise that you will avoid receiving Form-483 or any observations. In fact, no one can make such claims. However, we can help you identify any areas for improvement. As such, let us help your staff prepare for an FDA inspection.

Practice, practice, and be ready when the FDA knocks on your door. Preventing observations is generally less resource-intensive than correcting deficiencies after an inspection.

Master the Current QMSR Inspection Process With Former FDA Investigators

21 CFR 820 incorporates ISO 13485:2016 by reference, while the Agency conducts device inspections under Compliance Program 7382.850. Our former FDA investigators conduct mock FDA inspection work around this current inspection process, not the retired QSIT model. We stress-test manufacturing controls, quality system effectiveness, management oversight, risk-based decisions, records, and employee responses. The objective is not simply to confirm ISO alignment. It is to determine whether your organisation can demonstrate compliance under FDA scrutiny. A strong FDA consulting program should prepare your team for how investigators actually evaluate the system today. That means testing evidence, implementation, system linkage, and management accountability before the real inspection begins.

Mock FDA Inspection to Improve Your Chances of Avoiding a Warning Letter

Official Action Indicated (OAI) is a serious FDA inspection classification. It means the FDA has determined that the facility is in an unacceptable state of compliance and that regulatory or administrative action may be warranted. CIRG FDA Consulting can help management understand the inspection findings, evaluate the underlying quality-system weaknesses, and develop a focused corrective action strategy. For senior executives, the objective should be to reduce the likelihood of escalation to a Warning Letter or other enforcement action whenever possible. Warning Letters can consume substantial management time, require extensive remediation, disrupt operations, and create reputational concerns. A confidential mock FDA inspection by former FDA investigators can identify significant weaknesses before the Agency does. We do not guarantee that a mock inspection will prevent an OAI classification or enforcement action. Compliance remains the manufacturer’s responsibility. Our role is to identify risk, challenge the system, and help your organisation strengthen compliance before the Agency makes that determination.

OAI

Prevent Escalation to an OAI Classification

Mock FDA QMSR Inspection CP 7382.850

The revised 21 CFR Part 820 Quality Management System Regulation (QMSR) incorporates ISO 13485:2016 by reference and includes additional FDA-specific requirements. It aligns the US device quality system requirements more closely with a globally recognised standard. This change has significant implications for inspection readiness, record integrity, and personnel preparedness.

The QMSR became effective on 2 February 2026. Device manufacturers must therefore already comply with their applicable requirements. Firms that have not completed their transition activities face potential noncompliance because their systems may not satisfy current Agency expectations.

To address this risk, manufacturers should conduct a mock FDA inspection well before an actual inspection. Early mock inspections allow internal teams to evaluate their systems and implement necessary changes. Companies that wait until the last minute may discover systemic issues involving design controls, risk management, supplier oversight, and corrective-action processes. A proactive simulation creates a foundation for continuous improvement. It also helps personnel understand the current regulatory framework before they face a formal inspection under Compliance Program 7382.850.

Allowing Time for CAPA Implementation Through Mock Inspections

Corrective-action deficiencies continue to appear in FDA Warning Letters. Under the current QMSR, ISO 13485:2016 Clause 8.5.2 addresses corrective action, while Clause 8.5.3 addresses preventive action. The former 21 CFR 820.100 should no longer be cited as the current CAPA requirement.

Manufacturers must maintain documented processes for investigating nonconformities, determining their causes, implementing appropriate actions, reviewing effectiveness, and retaining required records. A mock FDA inspection gives the quality unit a valuable opportunity to observe how personnel identify, investigate, and address actual deficiencies.

Mock inspection findings should undergo evaluation through the manufacturer’s established risk-based processes. Not every finding necessarily requires a formal CAPA. However, significant or systemic findings may justify corrective action before an Agency inspection occurs.

Conducting mock inspections well in advance gives manufacturers time to investigate findings, implement corrections, and verify effectiveness. CAPAs should not be closed merely to meet an inspection deadline. Properly addressing issues early can strengthen inspection readiness and reduce compliance risk.

Using Mock Inspections to Evaluate Readiness Across QMS Elements

The QMSR requires manufacturers to address multiple quality-system elements. These may include complaint handling, design and development validation, feedback, risk management, supplier controls, purchasing controls, and applicable reporting requirements.

Although many firms already follow ISO 13485, they may not have fully reconciled their procedures and records with FDA-specific requirements. They may also need to update procedures or retrain personnel on the current framework.

A mock FDA inspection, therefore, provides a comprehensive readiness assessment. It reviews procedures and records for alignment with applicable Agency expectations. Particular attention may be given to software validation, risk management, supplier oversight, complaint handling, and corrective action.

Teams can use the findings to update standard operating procedures, develop training programmes, and improve internal quality metrics.

Training Your Personnel for FDA Inspections

FDA inspections can challenge even experienced employees. Investigators may request records, tour facilities, conduct interviews, and ask detailed questions about manufacturing and quality-system activities. A mock FDA inspection allows personnel to practise these interactions.

Simulated inspections can also reveal communication and training gaps. Personnel learn how to locate records, answer questions accurately and concisely, and follow established procedures.

This preparation can reduce stress and support more accurate, consistent responses during an actual inspection. However, training cannot guarantee that an investigator will not identify observations.

Assessing Document Control and Data Integrity in Real Time

During an inspection, the Agency may evaluate whether required records are complete, accurate, reliable, controlled, and available for review. QMSR record requirements include those incorporated from ISO 13485:2016 and the additional requirements in 21 CFR 820.35.

21 CFR Part 11 applies when manufacturers create, modify, maintain, archive, retrieve, or transmit electronic records within its scope. It does not automatically apply to every electronic system or record.

During a mock FDA inspection, a consultant or internal audit team can test applicable record systems. This may include retrieving archived records, reviewing access controls, and evaluating electronic signatures or audit trails where required.

These exercises often identify obsolete documents, inconsistent procedure references, missing records, or inappropriate system access. Correcting such deficiencies before an Agency inspection supports continued compliance and more reliable quality-system operations.

Demonstrating a Culture of Compliance and Risk-Based Thinking

FDA evaluates whether a manufacturer has implemented an effective quality management system, including appropriate risk-management activities. Written procedures alone do not demonstrate effective implementation.

By scheduling a mock FDA inspection, a company can demonstrate internally that quality remains a strategic priority. The timing also matters. An early mock inspection allows sufficient time to investigate findings, implement appropriate actions, and verify their effectiveness.

Under the QMSR, the Agency may inspect management-review, quality-audit, and supplier-audit reports. Mock inspection and internal audit records that form part of the quality management system should therefore be accurate, appropriately controlled, and available when legally required.

Manufacturers should create and maintain these records to support genuine quality-system oversight—not solely for presentation during an FDA inspection. Properly documented monitoring can help distinguish proactive quality management from last-minute inspection preparation.

FDA Warning Letter Violations Under the QMSR and Related Regulations

As of August 2026, the FDA had publicly issued at least three Warning Letters expressly citing Quality Management System Regulation violations. The following observations appeared across those letters.

QMSR Observations

  • Rework was not documented or adequately evaluated for its potential adverse effect on the product — ISO 13485:2016, Clause 8.3.4.
  • Risk-management processes were missing, incomplete, outdated, or inadequately connected with product realization and postmarket information — Clause 7.1.
  • Corrective actions lacked adequate investigation, timely implementation, proportionality, or effectiveness — Clause 8.5.2.
  • Work-environment procedures and controls were inadequate — Clause 6.4.1.
  • Measuring equipment was not adequately calibrated or verified, and monitoring software lacked adequate validation — Clause 7.6.
  • Design and development procedures or supporting records were missing or inadequate — Clause 7.3.1.
  • Design or intended-use changes lacked adequate review, validation, risk analysis, or regulatory assessment — Clause 7.3.9.
  • Supplier selection, evaluation, monitoring, or oversight was inadequate — Clause 7.4.1.
  • Nonconforming products were not adequately identified and controlled to prevent unintended release — Clause 8.3.1.
  • Infrastructure, utilities, equipment maintenance, or related documentation was inadequate — Clause 6.3.
  • Production processes lacked adequate documented validation — Clause 7.5.6.
  • Device returns reporting possible failures were not evaluated and documented as complaints — 21 CFR 820.35(a).

Related UDI and GUDID Observations

  • Required UDI information was missing from device labeling — 21 CFR Part 801.
  • Required device information was not submitted to GUDID — 21 CFR Part 830.

Risk management under Clause 7.1 appeared in all three Warning Letters. This recurrence provides an early enforcement signal that manufacturers should evaluate carefully.

Contact CIRG

Walk-Through and Preparing for FDA Investigators

During an FDA inspection, the facility walk-through is commonly an important early step. Investigators often follow the production process from material receipt through storage, manufacturing, testing, packaging, and distribution. The exact approach depends on the inspection’s scope and what the investigator observes.

Here is why investigators conduct facility walk-throughs and what they may seek to accomplish.

Understand the Process Flow

FDA investigators may visually map the movement of materials, components, and products through the facility. This helps them:

  • Understand the device production process
  • Identify important process and quality controls
  • Observe how controls operate at each production stage
  • Select products, processes, and records for further review

Verify Consistency With Procedures

During a mock FDA inspection, auditors may assess whether activities on the production floor match approved procedures, the quality manual, and applicable production records. FDA investigators may conduct similar comparisons during an actual inspection.

Differences between written procedures and actual operations may indicate inadequate implementation or control.

Observe Compliance in Real Time

The walk-through allows investigators to:

  • Observe applicable CGMP practices, including cleanliness, gowning, and line clearance
  • Identify potential record-integrity risks, such as uncontrolled documents or improperly secured logbooks
  • Evaluate whether equipment is appropriately maintained, calibrated, validated, and used
  • Review relevant procedures and records
  • Speak with employees about the work they perform

Identify Potential Systemic Issues

Investigators may observe conditions that suggest broader quality-system deficiencies, such as:

  • Poor material segregation
  • Inadequate environmental controls
  • Improper labelling or traceability
  • Inadequate identification or control of nonconforming products
  • Failure to follow established production procedures

Assess Employee Knowledge and Training

During a mock FDA inspection, the auditor may speak with production employees or supervisors. FDA investigators may do the same during an actual inspection. These discussions can help evaluate:

  • Whether personnel have received appropriate education, training, skills, and experience
  • Whether employees understand and follow applicable procedures
  • Whether personnel understand their assigned quality responsibilities
  • Whether actual practices correspond with training and production records

Detect Warning Signs of Poor QMS Implementation

Visual and operational conditions may indicate that quality-system requirements have not been effectively implemented:

  • Disorganised production areas may indicate inadequate production or process controls.
  • Confused operators may indicate deficiencies in the training programme or its implementation.
  • Inadequate identification or control of nonconforming products may create a risk of unintended use or release.

A separate physical quarantine area is not always required. However, manufacturers must effectively identify, document, evaluate, segregate when appropriate, and control nonconforming products.

Set the Tone for the Inspection

The walk-through provides investigators with an early view of the facility’s operations. A clean, well-organised facility with informed personnel and visible control measures can support an orderly and cooperative inspection.

Conversely, confusion, clutter, uncontrolled materials, or apparent noncompliance may lead investigators to examine related processes and records more closely.

In Summary, FDA Investigators May Use the Walk-Through To:

  • Understand process flow: Confirm how materials and products move through the facility.
  • Compare practices with procedures: Determine whether operations match approved procedures and applicable QMSR requirements.
  • Observe CGMP compliance: Review cleanliness, labelling, storage, protective clothing, personnel practices, and other relevant controls.
  • Identify system-wide gaps: Detect conditions that may indicate broader QMS deficiencies.
  • Assess personnel understanding: Evaluate whether employees are trained and understand their assigned quality responsibilities.
  • Direct the inspection: Decide which products, processes, records, and quality-system areas require further examination.

Conducting a mock FDA inspection gives production personnel an opportunity to understand the inspection process. Simulations can help employees practise responding to questions and locating requested records in a realistic setting.

Participation also allows personnel to clarify questions and address uncertainty before an actual inspection. This preparation can improve confidence, communication, and inspection readiness. However, no mock inspection can guarantee a particular inspection outcome or prevent FDA observations.

Mock FDA Inspections for Pharmaceutical Manufacturers

Pharmaceutical manufacturers operating under 21 CFR Parts 210 and 211 must comply with Current Good Manufacturing Practice (CGMP) requirements. These requirements are enforceable and require manufacturers to maintain current methods, facilities, and controls. Noncompliance may result in Warning Letters, import alerts, product seizures, or other regulatory action.

Although many firms believe they are ready, a mock FDA inspection can reveal operational blind spots. A simulated inspection recreates relevant inspection conditions and identifies potential deficiencies before investigators arrive. However, it does not replace a manufacturer’s obligation to investigate quality problems and take appropriate action concerning potentially affected products.

Preparing for a First FDA Inspection

Firms facing their first FDA inspection may be unfamiliar with Agency’s expectations. Depending on the inspection’s scope, investigators may evaluate documentation, cleanliness, equipment calibration, personnel practices, and adherence to standard operating procedures. Even apparently minor deficiencies may indicate broader systemic problems.

By conducting a mock inspection, manufacturers can train personnel, test procedures, and assess their readiness under simulated inspection conditions.

What FDA Investigators Evaluate

Unlike reviews focused principally on business performance, FDA inspections evaluate compliance with applicable public-health requirements. Investigators assess whether manufacturing methods, facilities, and controls provide assurance that drug products possess the identity, strength, quality, and purity they are represented to possess.

A mock inspection can evaluate document retrieval, personnel responses, and the availability of complete and traceable records. Under Parts 210 and 211, investigators may examine cleaning validation where appropriate, batch records, laboratory controls, and investigations of deviations or unexplained discrepancies.

Preparing for Form 483 Observations

A mock inspection may include a simulated close-out meeting and discussion of observations modelled on an FDA Form 483. Only the FDA issues an official Form 483, and a Form 483 does not constitute a final Agency determination that a legal violation has occurred. Teams can nevertheless practise discussing mock observations and developing appropriate corrections or corrective and preventive actions.

This rehearsal can build organisational confidence and improve real-time responses. It turns theoretical training into practical experience. Without simulation, a first encounter with an FDA investigator may challenge even experienced operators.

Understanding 21 CFR Parts 210 and 211

Part 210 contains the general CGMP requirements for manufacturing, processing, packing, or holding drugs. Part 211 establishes minimum CGMP requirements for the preparation of finished drug products. Together, they provide the principal regulatory framework for many FDA drug-manufacturing inspections.

Applicable subparts require appropriate procedures, records, personnel qualifications, and oversight. For example, Subpart F of Part 211 requires written procedures for production and process control. A mock inspection can evaluate whether personnel follow those procedures in practice.

A difference between an approved procedure and actual practice may support an inspectional observation and require investigation. However, a discrepancy alone does not establish fraud or negligence.

Evaluating Pharmaceutical Records and Reports

Subpart J of Part 211 establishes specific record and reporting requirements. Required records should allow manufacturing, testing, review, and release activities to be appropriately documented and reconstructed. Applicable deviations, investigations, batch or lot identifiers, and test results must be documented as required by the regulations.

Investigators may request evidence showing that procedures were followed, rather than relying solely on written policies. A mock FDA inspection is not legally required, but it can be a valuable readiness tool. It simulates an environment in which inadequate controls may result in inspectional observations or subsequent regulatory action. Manufacturers can therefore use the exercise to strengthen their readiness before an actual FDA inspection.

Using Former FDA Investigators

One advantage of using former FDA investigators is their first-hand familiarity with inspection practices. They may understand the types of questions investigators ask, the records they request, and the conditions that may prompt further examination.

A mock inspection led by experienced professionals can add realism to the simulation. For example, the auditor may ask personnel to trace a selected batch from raw materials through production, testing, release, packaging, and distribution. This exercise may include reviewing equipment logs, cleaning procedures, deviation investigations, and quality-unit approvals.

Preparing Personnel for FDA Interviews

A mock inspection can also simulate personnel interviews. Staff may be questioned about procedures, responsibilities, and the handling of quality events. Responses should be truthful and should accurately reflect each employee’s responsibilities and actual working practices.

The exercise can identify differences between procedures, training, and daily operations. A realistic simulation may improve personnel composure, competence, and consistency during questioning. It cannot, however, guarantee how employees will respond during an actual inspection.

Assessing Data Integrity and Electronic Records

The benefits of a mock FDA inspection can extend beyond inspection preparation. They may include improving quality systems, correcting misconceptions, strengthening document control, and supporting cross-functional coordination.

A well-conducted simulation can also identify vulnerabilities affecting electronic records. Part 11 applies to electronic records and signatures within its scope, including certain records required by predicate rules and maintained electronically.

Depending on the applicable records and systems, a mock inspection may assess system access, electronic signatures, validation, and audit trails. These controls should be evaluated in accordance with predicate-rule requirements, FDA’s Part 11 guidance, and an appropriately documented risk assessment.

Reducing Compliance Risk Before FDA Arrives

Mock inspections also support proactive risk reduction. Instead of waiting for FDA to identify a deficiency, manufacturers can investigate and address problems earlier. Any potential effect on released or distributed products must still receive appropriate evaluation.

Early correction may reduce compliance risk, but it cannot guarantee fewer FDA observations or a particular inspection classification. Staff may become more comfortable answering difficult questions, while processes and records may become more robust. The facility can then demonstrate inspection readiness through objective evidence and actual performance.

Structuring a Realistic Mock FDA Inspection

To obtain full value, the simulation should reflect relevant FDA inspection methods. Begin by defining the scope, such as the facility, selected product lines, or the broader CGMP system. Develop an agenda that includes document review, a facility walk-through, and personnel interviews.

Use realistic document requests, including batch records, cleaning records, calibration files, and training records. During the mock inspection, observe how efficiently and accurately personnel retrieve controlled documents. Evaluate how they explain deviations, discrepancies, or test failures.

Include a simulated close-out meeting with clearly identified mock observations. A mock observation report may follow a format similar to an FDA Form 483, but it should not be represented as an official FDA document.

Documenting Findings and Corrective Actions

Document the simulation through an appropriate report. Record the findings, evaluate their significance, assign corrections or CAPAs where appropriate, and track implementation and effectiveness. Use the resulting information for internal quality oversight as appropriate.

A follow-up assessment may verify that actions have been implemented and remain effective. Reaching zero mock findings does not prove regulatory compliance or guarantee the outcome of a future FDA inspection. Nevertheless, realistic practice can strengthen familiarity, preparedness, and confidence before investigators arrive.

Here is the Top 10 Most Violative Conditions for 21 CFR Parts 210 and 211 in FDA Warning Letters issued by the FDA.

  1. 21 CFR 211.22(d) – Quality Control Unit Procedures. Quality unit responsibilities and procedures must be written and followed. Failure to do so is consistently the top violation cited in FDA Warning Letters.
  2. 21 CFR 211.192 – Production Record Review / Discrepancy Investigations. Manufacturers must thoroughly review production records for discrepancies. FDA often finds investigations either missing or insufficient.
  3. 21 CFR 211.160(b) – Laboratory Controls. Valid specifications, sampling plans, and scientifically sound test procedures must be established and followed. Labs often lack proper documentation.
  4. 21 CFR 211.100(a) – Written Procedures for Production and Process Control. There must be written and approved procedures for production and process control. Many firms either lack these or fail to follow them.
  5. 21 CFR 211.166(a) – Stability Testing Program. A stability testing program must demonstrate appropriate storage conditions and expiration dates. These programs are often found inadequate.
  6. 21 CFR 211.67(b)/(a) – Cleaning and Maintenance Procedures. Equipment must be cleaned and maintained according to written procedures. FDA routinely finds insufficient or missing documentation.
  7. 21 CFR 211.25(a) – Personnel Qualifications and Training. All personnel must be trained and qualified for their roles. FDA frequently cites training programs that are poorly documented or outdated.
  8. 21 CFR 211.68(b) – Controls Over Computerized Systems. Computer systems used in manufacturing must be controlled. Violations include lack of access controls, audit trails, and validations.
  9. 21 CFR 211.84 – Testing/Approval or Rejection of Components, Containers, Closures. Components and packaging materials must be tested and approved before use. Many firms skip required identity testing or acceptance criteria.
  10. 21 CFR 211.110(a) – In-Process Controls. Procedures for in-process monitoring must be in place to ensure consistent product quality. FDA often finds these either missing or not followed.

Top 20 Most Frequent FDA Warning Letter Violations for Combination Products

This document summarizes the most commonly cited violations found in FDA Warning Letters issued to combination product manufacturers under 21 CFR Parts 4, 11, 210, 211, and 820. It reflects enforcement trends as of July 15, 2025, based on public data and official guidance.

  1. Inadequate investigation of production record discrepancies (21 CFR 211.192). Frequently cited in drug-related components. FDA expects detailed root cause analysis and complete documentation.
  2. Lack of written procedures for production/process control (21 CFR 211.100). Procedures must be written, approved, and followed consistently. Firms often lack updates or documented approvals.
  3. Aseptic procedural failures or microbial contamination (21 CFR 211.113). Inadequate validation of aseptic processing is a repeated concern, especially for sterile combination products.
  4. Quality unit responsibilities are unclear or not enforced (21 CFR 211.22). The quality unit must oversee all CGMP-related decisions and ensure compliance with approved procedures.
  5. Environmental control deficiencies in ISO-classified areas. Combination products involving sterile components are often cited for poor airflow, improper gowning, or surface contamination.
  6. Personnel training and qualification gaps (21 CFR 211.25). Training must be continuous and role-specific. FDA cites failures in documentation and effectiveness verification.
  7. Component/packaging testing deficiencies (21 CFR 211.84). Manufacturers must test and approve all incoming materials before use. Missing identity testing is a key concern.
  8. Inadequate stability testing programs (21 CFR 211.166). FDA expects long-term and accelerated stability studies with scientific justification for shelf life claims.
  9. CAPA process failures (21 CFR 820.100). FDA often finds incomplete investigations, inadequate corrective actions, or failure to verify effectiveness.
  10. Design control implementation gaps (21 CFR 820.30). Design input/output, verification, and validation must be documented. Combination products often miss critical elements.
  11. Poor or missing purchasing controls (21 CFR 820.50). Supplier evaluations, agreements, and ongoing monitoring are often insufficient or poorly documented.
  12. Management responsibility failures (21 CFR 820.20). Executives must review quality data regularly and provide adequate resources for compliance.
  13. Lack of CGMP integration documentation (21 CFR Part 4). Combination product firms must define how they apply both drug and device CGMPs under a streamlined approach.
  14. No re-evaluation of stability after device modifications. When device changes impact drug delivery or storage, stability must be re-evaluated accordingly.
  15. Special testing (21 CFR 211.167) was not performed when applicable. This includes dosage delivery and functionality testing relevant to the drug-device combination.
  16. Complaint handling gaps (21 CFR 211.198 / 820.100). Firms often fail to route complaints properly across both drug and device systems.
  17. Trend analysis is not based on scientific data. FDA expects statistically justified trending and clear escalation criteria 18. Incomplete root cause analysis for recurring issues
  18. Failure to use tools like 5-Why or Fishbone leads to repeated issues and citations.
  19. Poor traceability or process capability metrics. Firms lack data linking batch performance to risk indicators or process capability indices.
  20. Inadequate postmarket reporting across drug and device systems (21 CFR 803 and others). Reports to FAERS and eMDR must be synchronized and timely. Many firms show disconnects or missed deadlines.

Why 21 CFR Part 4 Combination Product Manufacturers Should Consider a Mock FDA Inspection

Complex Compliance Landscape for Combination Products

Combination product manufacturers face a distinctive regulatory challenge. These products may include drug, device, and biological product constituent parts in various combinations. Depending on the product, its constituent parts, marketing authorisation, and record systems, applicable requirements may include 21 CFR Parts 4, 11, 210, 211, 314, 600, 606, 803, 806, and 820. Not every regulation applies to every combination product or manufacturer.

Noncompliance with an applicable requirement may lead to significant regulatory consequences. The investigators may examine how a manufacturer integrates drug CGMP and Quality Management System Regulation (QMSR) requirements within one operating system. An FDA mock inspection can help identify integration risks and unresolved compliance gaps before an actual inspection. However, conducting a mock inspection is voluntary and does not replace compliance with applicable regulations.

During the simulation, compliance professionals may follow relevant FDA inspection practices while reviewing documentation flow, system integration, and cross-functional responsibilities. This preparation can reduce last-minute confusion and operational disruption during an FDA inspection.

The Role of 21 CFR Part 4 and System Integration

21 CFR Part 4 clarifies which CGMP requirements apply to combination products. It also provides a framework for designing and implementing a CGMP operating system at facilities manufacturing single-entity or co-packaged combination products. Manufacturers of these products may demonstrate compliance with all applicable CGMP requirements for each constituent part. Alternatively, eligible manufacturers may use the streamlined approach under § 4.4(b).

Under the streamlined approach, a manufacturer may establish an operating system based principally on drug CGMP requirements and add specified QMSR requirements. A manufacturer may instead use a QMSR-based system and satisfy the specified drug CGMP provisions. For cross-labelled combination products whose constituent parts are manufactured at separate facilities, the CGMP requirements generally apply to each constituent part as they would if it were not part of a combination product.

The streamlined approach requires manufacturers to identify, document, and implement the provisions applicable to their operating system. For example, design and development requirements are now addressed through ISO 13485:2016 Clause 7.3 and its subclauses, as specified in § 4.4(b)(1)(ii). The former § 820.30 design-control citation is no longer current under the QMSR.

A mock FDA inspection can review how the quality management system maps to applicable regulatory requirements. It may also identify gaps between legacy procedures and the current QMSR framework. The exercise can be particularly valuable when reviewing electronic batch records, complaint databases, and other software systems. Part 11 applies only when the associated electronic records or signatures fall within its scope. An FDA mock inspection can also assess training, documentation, and data traceability across applicable manufacturing and postmarketing processes.

Spotlight on Part 11 and Data Integrity Risks

Combination products increasingly rely on electronic systems for process control, recordkeeping, and product tracking. Part 11 applies to certain required records maintained electronically and to electronic signatures intended to replace handwritten signatures. Part 11 does not automatically apply merely because a manufacturer uses software. Its application depends on the underlying record requirements, how the records are maintained, and how the manufacturer relies upon them.

Depending on the system and records selected for review, FDA investigators may request audit trails, access information, and system-validation documentation. These requests may involve complaint systems, electronic batch-record platforms, laboratory systems, or manufacturing software. Inadequate electronic-record controls may affect the reliability and integrity of required records and may result in inspectional observations. A mock FDA inspection can identify potential vulnerabilities involving system validation, user access, electronic signatures, and data-integrity controls.

The simulation may also include realistic document requests and questions about electronic records. This allows personnel to practise retrieving records and explaining relevant controls. A well-conducted simulation can assess whether appropriate personnel have received training on electronic-record procedures. Delaying this assessment may leave avoidable deficiencies undiscovered until an FDA inspection.

Understanding Expectations for Manufacturing Controls

Parts 210 and 211 apply to combination products that include a drug constituent part other than a medical gas. Part 213 applies when the drug constituent part is a medical gas. Additional requirements may apply to biological products or HCT/P constituent parts. Applicable drug CGMP requirements include production and process controls, cleaning procedures and validation where appropriate, laboratory controls, and stability testing. Some manufacturers may find it challenging to integrate these requirements into operations historically organised around device manufacturing.

An FDA mock inspection can assess these processes in a controlled setting. It may help determine whether the facility consistently maintains and follows required master production and control records and batch production and control records. The assessment may also examine environmental monitoring where applicable, deviation investigations, and raw-material controls. These exercises can identify deficiencies that might otherwise lead to FDA Form 483 observations. A Form 483 contains an investigator’s inspectional observations and is not a final Agency determination that a legal violation has occurred. A mock inspection cannot guarantee that the Agency will not issue observations. A mock FDA inspection can nevertheless help determine whether manufacturing systems support the requirements applicable to the complete combination product.

QMSR and Postmarketing Safety Reporting

For combination products containing a device constituent part, the QMSR requirements in 21 CFR Part 820 apply as specified by Part 4. The former Quality System Regulation terminology should no longer be used for the current Part 820 requirements. Postmarketing safety reporting obligations depend on the product’s application type and constituent parts. Part 4 Subpart B supplements applicable requirements in Parts 314, 600, 606, 803, and 806.

Part 803 medical device reporting requirements do not apply automatically to every combination product in the same manner. Manufacturers and applicants must determine the reporting requirements that apply under Part 4 and the product’s marketing authorisation. For example, a complaint-handling process should determine which drug, biological product, or device reporting requirements apply. The process should also identify the applicable report type, submission system, and reporting deadline.

FDA reporting systems may allow a combination product applicant to satisfy multiple reporting requirements through a single report when the applicable regulatory conditions are met. During an FDA mock inspection, reviewers may evaluate postmarketing safety reporting procedures, reporting decisions, timelines, data sources, investigations where required, follow-up activities, and associated records. The exercise can help organisations refine decision trees and assess reporting-system controls.

A mock FDA inspection may also evaluate whether complaint and postmarket information appropriately feed into data analysis, corrective action, design changes, and risk management. FDA investigators may examine these connections when assessing whether the quality management system has been effectively implemented.

The Leadership Role in Inspection Readiness

Executive, quality, and operational leaders have different responsibilities within an organisation’s compliance system. The QMSR includes management-responsibility requirements, while drug CGMP regulations assign specific authority and responsibilities to the quality control unit. An FDA mock inspection gives relevant leaders an opportunity to practise their inspection roles. Leaders responsible for combination products should understand the applicable operating system, postmarketing reporting pathways, and their assigned quality responsibilities.

Participation by appropriate management personnel can be valuable during a simulation. However, regulations do not require every executive to attend an FDA inspection or personally know where every record is stored. Personnel assigned to support the inspection should know how to locate and provide controlled records. Leaders should ensure that appropriate resources, responsibilities, and escalation processes are established before an inspection begins.

Visible management support during a mock inspection can reinforce internal accountability. Management responsibility and quality oversight must operate continuously rather than being created solely for an FDA inspection. Leadership preparation can help an organisation demonstrate effective oversight during an actual inspection. It cannot, however, determine how the Agency will classify the inspection or guarantee that investigators will not issue observations.

Remote Mock FDA Inspection

A remote mock FDA inspection can help medical device, pharmaceutical, and combination product manufacturers evaluate inspection readiness without the time and cost of onsite mock inspection. A remote FDA mock inspection is a private readiness exercise. It is not an FDA inspection, an FDA Remote Regulatory Assessment, or an official Agency determination of compliance.

During the exercise, experienced auditors model selected aspects of FDA inspection practice through secure remote technology. A remote simulation cannot reproduce every activity an FDA investigator may conduct during an on-site inspection. Companies may participate in document requests, quality-system reviews, and management or personnel interviews. The assessment can examine compliance with applicable requirements, including 21 CFR Parts 210 and 211, the Part 820 Quality Management System Regulation, and Part 4 for combination products. Part 11 may also apply when required records or signatures fall within its electronic-record scope. Not every regulation applies to every manufacturer, product, operation, or electronic system.

Remote inspections allow teams to practise managing document requests, organising electronic records, and responding to regulatory questions in a controlled environment. Relevant areas may include corrective action, complaint handling, production controls, design and development, validation, and data integrity. The assessment may produce documented observations and practical recommendations for strengthening the quality system and inspection readiness. However, mock observations are not FDA Form 483 observations and do not represent Agency conclusions.

A remote mock FDA inspection can provide an efficient method for identifying potential weaknesses before an actual inspection. It cannot guarantee compliance, prevent FDA observations, or predict an inspection classification. Because remote access limits direct observation of facilities, equipment, personnel practices, and manufacturing operations, an on-site assessment may also be appropriate. The appropriate format depends on the facility, products, processes, inspection risk, and purpose of the assessment.

How to Prepare

One approach is to establish remote “front-room” and “back-room” teams. FDA does not require this arrangement, but companies may use it to organise a mock inspection. The front-room team communicates with the mock auditor through a secure video meeting. The back-room team retrieves controlled documents, such as standard operating procedures, batch records, validation reports, training records, and complaint files. When the auditor requests a corrective-action record, the back-room team retrieves and securely provides the controlled document for review. Personnel should confirm that they supply the correct, complete, and approved version.

The exercise should evaluate whether the team can retrieve records accurately and within a reasonable timeframe. Speed should not take priority over document accuracy, security, or established review procedures. This arrangement helps personnel practise document control, internal communication, electronic record retrieval, and interactions with a mock auditor. It can also reveal technical problems involving video access, screen sharing, file permissions, or remote document-review procedures. A remote mock FDA inspection can help manufacturers identify weaknesses and improve readiness before an actual FDA inspection. It remains a limited simulation and should be supplemented with an on-site review when physical operations cannot be adequately evaluated remotely.

Contact CIRG

Why a Mock FDA Inspection Matters for Section 361 HCT/P Establishments

Understanding the Importance of the First FDA Inspection

Establishments that manufacture human cells, tissues, and cellular and tissue-based products regulated solely under section 361 of the Public Health Service Act face a distinctive regulatory framework. An HCT/P qualifies for regulation solely under section 361 only when it satisfies every criterion in 21 CFR 1271.10(a). These criteria concern minimal manipulation, homologous use, combination with other articles, and systemic effect or dependence on the metabolic activity of living cells.

HCT/Ps that do not satisfy all the criteria may instead be regulated as drugs, devices, biological products, or combination products. Additional requirements, including premarket review, may then apply. The Agency applies risk-based inspection schedules to registered drug and device establishments. For establishments manufacturing HCT/Ps regulated solely under section 361, § 1271.400 gives the Agency discretion over inspection frequency. No routine biennial inspection frequency applies to these establishments.

An initial FDA inspection may provide the Agency with its first direct assessment of the establishment’s compliance with Part 1271. Inspection findings may inform subsequent oversight, together with complaints, reports, compliance history, and other available information.

Regulation solely under section 361 does not provide leniency from applicable Part 1271 requirements. Establishments must comply with requirements concerning donor eligibility, Current Good Tissue Practice, facilities, environmental controls, processing, process validation where required, records, tracking, and reporting. An FDA mock inspection can help identify weaknesses before an Agency inspection. However, it cannot guarantee a favourable outcome or prevent the Agency from issuing observations.

FDA Discretion and the Importance of Inspection Readiness

21 CFR Part 1271 establishes requirements for HCT/P establishments. Depending on the HCT/P and the manufacturing activities performed, these requirements may include registration and listing, donor screening and testing, records, CGTP controls, tracking, complaint handling, and reporting. Under § 1271.400, establishments must permit the Agency to inspect manufacturing locations at reasonable times and in a reasonable manner. FDA may conduct an inspection with or without prior notification, and the frequency remains at the Agency’s discretion.

Drug and device establishments are currently inspected under statutory risk-based schedules rather than a universal requirement for inspection every two years. Section 361 HCT/P establishments do not have a prescribed routine inspection interval. An initial inspection may influence the Agency’s understanding of an establishment’s operations and compliance status. Significant observations may lead to corrective-action requests, follow-up inspections, or other regulatory action. Conversely, an inspection without significant observations does not create immunity from future inspections or establish ongoing compliance. Inspection readiness must therefore be maintained continuously.

The exercise is voluntary. It can support a broader readiness programme, but it is not legally required and cannot control the timing or outcome of an FDA inspection.

What a Mock FDA Inspection Should Cover

The assessment should reflect the HCT/Ps manufactured, the activities performed, and the Part 1271 requirements applicable to the establishment. Requirements differ for certain reproductive HCT/Ps and other specialised operations. The assessment should first examine whether the HCT/P satisfies every criterion for regulation solely under section 361. Product processing, intended use, labelling, advertising, and other evidence of the manufacturer’s objective intent may affect this determination. The assessment may then review:

  • Registration and HCT/P listing
  • Donor-eligibility determinations
  • Donor screening and testing records
  • Quarantine and release controls
  • Processing and process controls
  • Process validation where required
  • Environmental controls and monitoring, where applicable
  • Equipment cleaning, maintenance, and calibration
  • Labelling and tracking systems
  • Complaint and HCT/P deviation records
  • Adverse-reaction and deviation reporting, where applicable
  • Record retention and accessibility

The assessment should also determine whether standard operating procedures are accurate, current, appropriately approved, available to personnel, and consistently followed. Personnel training, facility cleaning records, corrective actions, and quality-audit records may also be reviewed. Part 1271 requires periodic quality audits of activities relating to core CGTP requirements.

Former FDA professionals may bring useful inspection experience when their knowledge remains current. Their participation does not make the exercise an FDA inspection or provide authority to issue an official FDA Form 483. Findings from an FDA mock inspection should receive appropriate investigation and corrective action. If a finding may affect a distributed HCT/P, the establishment must evaluate its regulatory responsibilities, including notification, quarantine, recall, or reporting where required.

Identifying Common Violations and Strengthening Compliance

Inspectional observations and Warning Letters involving HCT/P establishments have addressed inadequate procedures, environmental controls, donor-eligibility records, deviation investigations, tracking, and corrective actions. These deficiencies are not merely administrative. They may affect the ability to prevent the introduction, transmission, or spread of communicable disease.

A mock FDA inspection can help identify deficiencies in documentation, training, and implementation. Correcting them may reduce compliance risk, but it cannot guarantee that the Agency will not issue a Form 483, Warning Letter, or take another action. A Form 483 contains an investigator’s inspectional observations. It does not constitute a final Agency determination that a legal violation has occurred. When a deficiency affects distributed HCT/Ps, correcting the procedure alone may not be sufficient. The establishment may also need to investigate affected products, assess recipient risk, notify other establishments or consignees, and submit required reports. Part 1271 requires establishments to conduct periodic quality audits for management review. These audits must evaluate objective evidence relating to core CGTP requirements. Appropriate corrective actions must be documented and verified for effectiveness.

The Value of Engaging Former FDA Investigators

Involving former FDA personnel in an FDA mock inspection can provide practical experience with Agency inspection procedures, document requests, and personnel interviews. That experience should be combined with current knowledge of Part 1271 and the establishment’s HCT/Ps and operations.

A realistic simulation can help personnel practise responding accurately to difficult questions and retrieving requested records. Responses should remain truthful and reflect actual procedures and working practices. Hiring a former investigator does not send an official message to the Agency or influence an inspection classification. FDA evaluates the conditions, practices, records, and evidence it encounters during its inspection. The principal value of an experienced auditor lies in identifying potential deficiencies and helping the establishment understand how its controls may be evaluated.

Preparing Now to Avoid Surprises Later

HCT/Ps regulated solely under section 361 follow a different regulatory pathway from products regulated as drugs, devices, or biological products. Their regulation focuses on preventing the introduction, transmission, and spread of communicable diseases.

The Agency expects establishments to comply fully with all applicable provisions of Part 1271. Registration or listing does not constitute approval or confirmation that an establishment complies with the regulations. Preparation should begin with an accurate determination that each HCT/P meets all the criteria in § 1271.10(a). The establishment should then assess its compliance with applicable donor-eligibility, CGTP, tracking, complaint, recordkeeping, and reporting requirements.

A mock FDA inspection is one useful readiness tool among internal quality audits, gap assessments, training exercises, and corrective-action reviews. It can identify weaknesses and build confidence across the organisation. Facilities that prioritise continuous compliance are better positioned to demonstrate their quality controls through objective evidence. Nevertheless, no preparatory exercise can guarantee the outcome of an FDA inspection.

Why conduct a mock FDA inspection?

Manufacturers of regulated medical products face scrutiny from regulators, patients, customers, investors, and stakeholders. When quality or safety concerns arise, attention can intensify and extend beyond an Agency inspection. A well-designed internal audit or mock FDA inspection can identify compliance gaps before they become harder to correct. Manufacturers with higher-risk products, complex processes, or compliance obligations should treat inspection readiness as an ongoing priority. Early preparation allows teams to investigate causes, complete validation, strengthen controls, and verify corrective-action effectiveness. Our FDA Consulting support provides an assessment led by a former FDA investigator. Contact us today to discuss your inspection-readiness needs and schedule an assessment. Do not wait until an inspection is imminent before reviewing critical systems. Process validation, supplier remediation, data review, and quality-system improvements may require substantial time. Starting early gives your organization more time to implement evidence-based corrections.

Contact CIRG