GMP Inspection Readiness Self-Assessment for Pharma Plants
Regulators judge a site on how its quality system behaves day to day, not only on documents. This self-assessment asks 10 questions about the areas inspectors most often probe and gives you a score with a short action list.
1. How do you handle deviations and investigations?
Think about timeliness, root cause quality and recurring issues.
2. How effective is your CAPA system?
3. How mature is your data integrity programme?
4. How current are your SOPs and batch records?
5. How do you manage change control?
6. How current is equipment qualification and calibration?
7. How well is your workforce trained for GMP?
8. How do you control suppliers and contract labs?
9. How prepared is your inspection team and document retrieval?
10. How do you review environmental and utility monitoring trends?
How to use the assessment
Answer for the site as it actually operates today, ideally together with the heads of QA, QC and production so that optimistic answers get challenged. Each answer scores 0, 2 or 4 points, and the result converts to a percentage. Export the result and the recommendations to share with leadership, then repeat the assessment after a mock inspection to see what moved.
Why these topics
Deviations, CAPA, data integrity, change control, equipment, training and suppliers appear again and again in warning letters and inspection reports. They also link to each other: a weak deviation process produces weak CAPA, and weak CAPA allows repeat events. Environmental and utility trending is included because it shows whether the site notices drift before it becomes a failure.
Reading the score
The bands are a guide, not a rating from any regulator. A site with a high score and one serious data integrity gap is still at risk, so look at individual answers as well as the total. Any question where you chose the lowest option deserves a named owner and a date, whatever your overall score.
- Use the lowest scoring answers to set the mock audit scope.
- Check that the same issues are not already in open CAPAs.
- Reassess after major changes such as a new line or system.
Common mistakes
Readiness drives are often a burst of document cleanup right before a visit. Inspectors notice when records have been rewritten, and the real exposure is in behaviour on the floor. Prepare people to answer questions honestly and consistently, and make sure the team can show the evidence for any statement made in an opening presentation.
Frequently Asked Questions
Is this an official regulator score?
No. It is a self-assessment tool built from common inspection themes. It does not predict the outcome of an FDA, EMA, MHRA or other inspection, but it helps you find weak spots before an inspector does.
How long does the assessment take?
About 10 minutes if the right people are in the room. The value comes from the discussion about each answer and the evidence behind it, so allow extra time to agree on owners and dates for the gaps you find.
Should we run a mock inspection as well?
Yes, if the score is below the top band. A mock inspection by an independent auditor tests how staff respond, how fast records are retrieved and whether practice matches procedures, which a questionnaire cannot show.
Does it apply to medical device or API plants?
The themes apply, but regulations differ, for example 21 CFR 820 or ISO 13485 for devices and ICH Q7 for APIs. Treat the questions as a starting point and add checks specific to your regulations and products.
If you want evidence rather than self-reported answers, Netray can help build a private on-prem dashboard over your ERP, QMS and LIMS data showing overdue deviations, calibrations and training in one place.
Related Tools
Pharma Data Integrity ALCOA+ Audit Checklist
Walk through ALCOA+ expectations for paper records, lab instruments and electronic systems in a regulated plant.
Industry TemplatesEU GMP Annex 1 Cleanroom Grades Reference
Look up Annex 1 grade limits for airborne particles and microbial monitoring next to ISO 14644-1 class limits.
ERP OperationsFDA 21 CFR Part 11 Readiness Assessment
Answer 8 questions on e-signatures, audit trails, access control, and validation status to see how ready your electronic records and systems are for FDA scrutiny.
Developer ToolsGxP Audit Trail Entry JSON Generator
Build a structured audit trail record with user, time, change, reason and signature meaning for a regulated integration.
More Compliance & Contracts tools
See all- GMP Change Control Form Template
- SAP SoD Residual Risk Score Calculator
- SAP Firefighter ID Usage Review Log
- IBM i (AS/400) User Profile Access Review Worksheet
- SyteLine Security and User Access Audit Checklist
- Infor XA (MAPICS) User Access Review Worksheet
- China ERP Data Security and Compliance Assessment
- ERP Vendor Data Processing Agreement Outline
- GDPR ERP Data Migration Checklist