Quick snapshot, timeline, and scope

• How soon is the inspection or regulatory review scheduled? Options: Within 2 weeks, 2-4 weeks, 4-8 weeks, 8-12 weeks, 12+ weeks
• Please select the type of inspection prompting this readiness work Options: Pre-approval tied to a filing (NDA, BLA, MAA), Routine surveillance inspection, For-cause inspection after complaint or AE, Post-acquisition compliance assessment, Other
• Estimate the target list of sites and lines you want included in the mock inspection Options: Single site, single production line, Single site, multiple lines, Multiple sites in one country, Multiple international sites, Site plus contract manufacturer(s)
• Who on your team will be the primary decision maker for moving forward and who will be the day to day contact?
• Which single outcome from this engagement would justify the investment for your leadership? Options: No critical observations, No major observations, Clear path to close findings within 90 days, Documented inspector-style report that leadership trusts, Improved readiness for filing or sale, Other

Where risk lives in practice

• Recall the last time an authority inspection or audit raised a critical observation at one of your sites, what caused it and what still worries you about that root cause?
• Identify the recurring findings or trends internal audits have surfaced in the past 12 months Options: Documentation and recordkeeping, CAPA effectiveness, Deviation investigations and trending, Sterility or contamination controls, Data integrity and electronic records, Supplier and COA controls, Training and competence, Other
• How often have those findings led to formal regulatory actions or long remediation timelines in the last two years? Options: Never, Once, 2-3 times, More than 3 times
• Which unresolved item, if not closed before the inspection, would most likely trigger increased inspector scrutiny or enforcement?
• Describe the business impact if that item remains open through the inspection

Behind the scenes, documents, sites, and people

• Who outside of quality or regulatory is expected to meet or be interviewed by inspectors, and why might their testimony create risk?
• List the categories of documents and systems you expect to provide for the mock inspection Options: Batch production records, Validation and qualification reports, Environmental monitoring logs, Deviation and investigation files, CAPA records, Training records, Stability and analytical data, Supplier agreements and COAs, Quality metrics and trend reports
• Can your team provide electronic batch records and indexed quality metrics for the last 12 months within two weeks of authorization? Options: Yes, fully indexed and ready, Partial, will need 1-2 weeks to prepare, No, mostly paper and will take longer than 2 weeks, Restricted by policy or legal holds
• Tell us whether there are active legal holds or confidentiality agreements that would restrict document sharing during fieldwork Options: No known holds or restrictions, Yes, legal hold limits some records, Confidential agreements require redaction and review, Unsure, need legal confirmation
• Name any site or department that absolutely cannot be included in fieldwork and explain the access constraint

What inspection success actually proves

• If a mock inspection today returned the findings your internal team expects, how many observations would you expect and which would you prioritize for remediation?
• Share the remediation timelines leadership expects for critical, major, and minor findings Options: Critical within 14 days, major 30-60 days, minor 90 days, Critical 30 days, major 60-90 days, minor 120 days, All findings within 90 days, No firm timelines set
• Estimate the internal headcount and roles available to execute remediation within your target window Options: Dedicated remediation team >5 FTE, 2-5 people part-time, 1-2 people with other duties, No dedicated capacity, ad hoc support
• What single verification criterion would satisfy leadership that a closed finding will not reoccur?
• Would you accept a phased remediation plan that addresses inspection-critical issues first and lowers inspection risk quickly? Options: Yes, phased critical-first plan, Only if we see detailed verification steps, Prefer full remediation before inspection, No, not acceptable

Which alternatives are genuinely on the table

• Name the external options you are actively considering, including the option to prepare internally, and briefly why each feels viable Options: Internal team only, Specialized regulatory readiness consultant with ex-inspectors, Large audit firm, Contract GMP auditor, Clinical quality consultant, Other
• If an alternative could reliably deliver fewer than three inspector observations, which option would you choose and why? Options: External specialized consultant, Internal team with targeted external review, Large audit firm, Contract GMP auditor, Undecided
• Are any internal stakeholders advocating for a do-it-yourself approach, and who would be accountable if that approach fails? Options: Yes, site leadership, Yes, corporate QA, Yes, operations, No one currently advocating DIY, Undecided
• Select the incumbent or internal model qualities that would need to change for you to stay with them instead of hiring outside help Options: Faster remediation execution, More inspector-style mock inspections, Lower cost, Access to ex-regulators for interviews, Clearer verification evidence, Faster reporting cadence
• What would have to be true about your current approach for you to keep it instead of bringing in external support?

Operational readiness and gate risks

• Is there any regulatory, legal, or corporate approval that can block access or delay the engagement, and how long would it take to obtain clearance? Options: No blocking approvals, Legal review required, 1-3 weeks, Corporate approval required, 2-6 weeks, Regulatory constraints that vary by country, Unsure, need to confirm
• Confirm whether site badges, visitor policies, and site-specific PPE can be arranged within five business days Options: Yes, within 5 business days, Yes, with exceptions at specific sites, No, will take longer than 5 business days, Depends on site security policy
• Rate the degree of electronic document readiness for the engagement Options: Fully indexed and searchable, Mostly electronic with partial indexing, Mixed paper and electronic, Primarily paper, significant digitization required
• Identify the internal owners of IT, lab systems, or APIs we would need to engage for data access and who currently holds access credentials
• Point to the single operational blocker that would cause you to pause or cancel fieldwork today

• Execute full-scale mock regulatory inspection
• Produce inspector-style observation and evidence report
• Conduct simulated inspector interviews with site staff
• Run document-request and retrieval drills
• Redline and revise controlled documents on-site
• Draft CAPA packages and corrective documentation
• Implement corrective actions and process changes
• Provide live back-room advisory during inspections
• Prepare inspector briefing and evidence submission package
• Assemble and submit written responses to findings
• Remediate laboratory data integrity issues
• Coach senior leaders for regulator interactions

Execute full-scale mock regulatory inspection

• Provide the site identifiers to include in the mock inspection (site code, facility location, manufacturing vs laboratory)
• Specify the inspection scenario to simulate (FDA pre-approval tied to NDA/BLA, routine surveillance, for-cause after complaint, post-acquisition review) Options: FDA pre-approval (NDA/BLA), Routine surveillance (FDA/EMA), For-cause inspection after complaint, Post-acquisition due diligence
• Indicate the planned on-site duration per site for mock inspection activities Options: Half day, 1 day, 2-3 days, 4+ days
• Identify the stakeholder groups to engage during the mock inspection (quality, manufacturing, QC lab, engineering, regulatory) Options: Quality Assurance, Manufacturing/Operations, Quality Control/Laboratory, Engineering/Maintenance, Regulatory Affairs, Senior Leadership
• Describe the on-site access level required for records (originals, redacted copies, electronic access only) and any archive retrieval needs Options: Originals on-site, Redacted copies on-site, Electronic access only (eQMS/LIMS), Archive retrieval required
• State the regulatory standards you want the mock inspection benchmarked against (examples: 21 CFR Part 211, EU GMP Annex 1, ICH Q7) Options: 21 CFR Part 211, EU GMP Annex 1, ICH Q7, Other / multiple

Produce inspector-style observation and evidence report

• Describe the preferred deliverable format for the inspector-style report and evidence set (PDF with embedded photos, CSV for eQMS import, slide deck) Options: PDF with photos, Structured CSV/Spreadsheet, Slide deck with annexes, Hybrid: PDF + CSV
• Define the severity classification scheme you require for observations (example anchors: critical=patient-safety risk, major=systemic GMP gap, minor=documentary) Options: Use company severity matrix, Map to 21 CFR/EU GMP severity examples, Use consultant standard (critical/major/minor), Custom
• Outline your evidence-handling requirements for attachments (acceptable filetypes for raw chromatograms, instrument logs, batch records and redaction rules) Options: PDF/JPEG only, Native raw files allowed (e.g., .RAW, .CDF), CSV for tables, PDFs for records, Redaction required before transmission
• Assign the internal role that will approve final issuance of the observation report (job title required)
• Decide whether the report should include a remediation tracker linking each finding to CAPA and change-control identifiers Options: Yes, include tracker with CAPA IDs, No tracker, separate tracker later, Tracker optional
• Provide the acceptance criteria that will confirm the observation report is complete for your inspection-readiness decision (examples: all critical findings include root cause and proposed CAPA, photo or raw-data evidence attached)

Conduct simulated inspector interviews with site staff

• List the departments and functions to include in simulated inspector interviews (QA, QC, production operators, engineering, regulatory, clinical)
• Provide the target number of interviewees per function to achieve representative sampling (e.g., 3 operators, 1 supervisor, 1 manager) Options: 1-2 per function, 3-5 per function, 6-10 per function, Custom
• Cite specific SOPs, master batch record steps, validation protocols or test methods interviewers should probe for procedural knowledge
• Will recordings and time-stamped transcripts of interviews be required as evidence for follow-up CAPA and training? Options: Yes, recordings and transcripts required, No, notes only, Recordings only
• State the job titles who should receive consolidated interview themes and action items (e.g., Head of QA, Site Director)
• Are language translation services or local regulatory liaison support required for interviews at the site? Options: Yes, translation required, No, English sufficient, Local regulatory representative required

Run document-request and retrieval drills

• Identify the document categories to include in retrieval drills (master batch records, executed BPRs, validation reports, certificates of analysis, training records)
• Select the target document retrieval SLA for drills Options: Within 2 hours, Same business day, 48 hours, 3 business days
• Name the systems where requested documents are stored for retrieval (eQMS, LIMS, ELN, chromatography data system, paper archive) Options: eQMS, LIMS, ELN, Chromatography data system (CDS), Paper archive, Shared drive
• Will chain-of-custody logs be required for paper records captured and moved during the drill? Options: Yes, No
• Estimate the sample count per document category to request during a drill (example: 5 executed batch records, 3 validation protocols)
• Confirm whether electronic signatures and system audit trails must be presented for retrieved electronic records Options: Yes, audit trails required, No, screenshots suffice, Exports will be provided by IT

Redline and revise controlled documents on-site

• Identify the controlled document types targeted for on-site redline and revision (SOPs, master batch records, validation protocols, test methods) Options: SOPs, Master batch records, Validation protocols, Test methods, Training materials
• Describe your required approver chain and effective-date handling for revised SOPs or procedures
• Indicate the change-control thresholds that mandate a formal change package when documents are revised (for example, critical parameter change, safety-critical wording) Options: Any critical parameter change, Safety-critical wording changes only, All revisions require change control, Custom thresholds
• Decide whether updated training records must be created and uploaded immediately after on-site redline sessions Options: Yes, immediate training records required, No, training planned separately, Depends on the revision type
• Estimate the maximum number of documents you expect redlined on-site per engagement week Options: 1-5, 6-10, 11-20, 20+
• Clarify if redline edits will trigger validation protocol updates or equipment requalification activities Options: Yes, full validation/requalification, Targeted requalification only, No validation impact expected

Draft CAPA packages and corrective documentation

• Describe the root-cause analysis methods you require in CAPA packages (5 Whys, fishbone, FMEA) Options: 5 Whys, Fishbone/Ishikawa, FMEA, Other
• Specify measurable effectiveness checks you want included in CAPAs (examples: X% reduction in deviations, defined metrics and monitoring period)
• Name the roles who will be CAPA owners responsible for implementation and verification
• Set the expected maximum timeline from finding identification to CAPA implementation Options: 30 days, 60 days, 90 days, Custom
• Indicate whether CAPA packages should include draft change-control documentation and proposed SOP text Options: Yes, include drafts, No, high-level CAPA only, Include drafts for high-risk findings only
• Specify if CAPA artifacts must be formatted for direct upload into your eQMS and the preferred file types Options: Yes, eQMS-ready (CSV/JSON), No, Word/PDF acceptable, Need format guidance

Implement corrective actions and process changes

• Provide the process areas targeted for corrective action implementation (sterile fill/finish, aseptic processing, QC analytical methods, packaging)
• Describe the owners and cross-functional teams responsible for executing corrective actions and their expected responsibilities
• Specify the verification evidence required for implemented actions (revised SOPs, retraining records, re-run test results, qualification reports)
• Decide whether process validations or requalification runs are expected as part of corrective-action implementation Options: Yes, full revalidation, Targeted requalification only, No revalidation required
• State the escalation path and timeframes if corrective actions do not meet verification criteria
• Choose the project reporting cadence you require for corrective-action progress (weekly, bi-weekly, monthly) Options: Weekly, Bi-weekly, Monthly, On-demand

Provide live back-room advisory during inspections

• Specify the mode of back-room advisory you require during live inspections (remote, on-site, hybrid) Options: Remote only, On-site advisor(s), Hybrid (remote + on-site)
• Indicate the maximum number of advisors to be available during inspection windows Options: 1 advisor, 2-3 advisors, 4+ advisors
• Describe the permitted scope of advisory interventions (answer drafting, evidence triage, interview coaching, escalation support)
• Confirm whether advisor communications must be logged in an inspection communication log for traceability Options: Yes, mandatory log, No, informal notes acceptable, Partial logging required
• Document the local working hours and time-zone constraints for advisory coverage during the live inspection
• Select the level of repository access advisors will have during inspection (full eQMS/LIMS view, limited folder access, evidence steward provides documents) Options: Full access to eQMS/LIMS, Limited access to specific folders, Evidence steward will supply documents

Prepare inspector briefing and evidence submission package

• List the components required in the evidence submission package for an inspector briefing (executive summary, indexed evidence list, CoAs, validation snapshots)
• Specify redaction and confidentiality rules applicable to evidence submitted to regulators (patient data redaction, proprietary formulation redaction) Options: Redact patient-identifiable data, Redact proprietary formulation data, No redaction unless required, Use regulator-specific redaction rules
• Provide the acceptance criteria that will confirm the briefing and evidence package is ready for regulator review (examples: complete index, original CoAs attached, signatures present)
• Name the designated contact who will handle evidence transfer and confirm chain-of-custody (job title and contact method)
• Select the preferred evidence transmission method and note any required portal endpoints or encryption (secure SFTP, secure portal, hand-delivery) Options: Encrypted SFTP, Secure portal upload, Physical delivery, Other
• Detail any regulator-specific format requirements for evidence (examples: FDA eMDR snippets, EMA dossier excerpts, local authority templates)

Assemble and submit written responses to findings

• Provide the expected timeline for drafting and submitting written responses after a mock inspection (examples: 7 business days, 14 business days, 30 days) Options: 7 business days, 14 business days, 30 calendar days, Custom
• Describe the preferred structure of written responses you want prepared (root cause, corrective action, verification plan, timelines)
• Name the roles who must review and approve written responses prior to submission (titles and escalation reviewers)
• Decide whether regulatory-style citations should be included in written responses (for example citing 21 CFR, EU GMP clauses) Options: Yes, include regulatory citations, No, internal references only, Include citations for critical findings only
• Select whether responses should be portal-ready for regulator upload or formatted as formal letters/PDFs Options: Portal-ready format, Formal letter (PDF), Both
• Specify your internal review SLA for draft responses before final sign-off Options: 48 hours, 5 business days, 10 business days, Custom

• Master Services Agreement (MSA)
• Statement of Work (SOW)
• Non-Disclosure & Data Access Terms
• Site & System Access Authorization
• Payment Schedule & Billing Milestones
• Change Order Agreement
• Data Processing Agreement (DPA) — conditional
• Inspection Support Addendum

• Fieldwork Logistics and Scope Confirmation
• Document Review Working Session
• Staff Interviews and Operational Walkthroughs
• Full Mock Inspection and Immediate Debrief

• Document any urgent containment actions and a date by which containment effectiveness will be verified.
• Confirmed interview roster with time windows to control operational impact.
• Agreed escalation path for urgent findings during fieldwork.
• Confirm mock inspection scope and success criteria
• Identification of any immediate containment actions required before the mock inspection.
• Publish consolidated interview notes and observation logs tied to specific processes and records.
• List immediate containment steps required for any high-risk operational findings.
• Flag items that require further evidence collection and schedule those retrievals before the mock inspection.
• Execute the mock inspection using inspector checklists
• Inspector-style findings list accepted or disputed with disputed items logged with the evidence needed for resolution.
• Severity rating and prioritization assigned to each accepted finding.
• Verification criteria and the exact evidence required to close each finding documented.
• Agreed timeline for delivery of the full assessment report and remediation plan.
• Publish the complete mock inspection report with findings, severity, and verification criteria within 48 hours.
• List evidence items required per finding and request retrieval of those items by a specified date.
• Schedule the Assessment Report and Remediation Planning session with dates and deliverable expectations.
• Definitive list of documents, batches, and samples to be available on-site.
• Finalized fieldwork schedule and access plan that the buyer and seller accept.
• Publish the finalized fieldwork schedule, site access instructions, and parking/badging details.
• Deliver the definitive documents and samples list with storage locations by a specified date.
• Provide a consolidated interview roster with role descriptions and availability windows.
• Provide emergency contact details and the agreed escalation path for on-site issues.
• Review prioritized batch and production records
• Annotated findings list from document review with clear citations to document locations.
• Complete missing-evidence log itemizing each gap and the evidence needed to close it.
• Prioritized list of documents requiring deeper review during subsequent sessions or mock inspection.
• Deliver the annotated document findings spreadsheet with citations to the exact record locations.
• Produce the missing-evidence request list for immediate retrieval before the mock inspection.
• Schedule targeted detailed review document reviews for high-priority items identified in this session.
• Operator station walkthrough and observation
• Documented interview notes and observation logs that record where practice departs from procedure.
• Prioritized operational findings list with initial root-cause hypotheses for each item.
• Compare SOPs and change records against observed practices
• Supervisor and shift handover interviews
• Finalize site schedule and access plan
• Immediate debrief, item-by-item consensus
• Quality unit interview and sample release walkthrough
• Agree document, batch, and sample list for review
• Define verification criteria and evidence required for closure
• Compile evidence gaps and missing documentation
• Agree next steps and timing for remediation planning
• Confirm interview roster and timing
• Prioritize documents for follow-up detailed review
• Synthesize observations against documented procedures
• Define real-time escalation and safety triggers

• current_state
• desired_state
• decision_readiness
• stakeholders
• gaps
• success_criteria
• desired_state
• decision_readiness
• current_state
• success_criteria
• gaps
• stakeholders
• desired_state
• success_criteria
• stakeholders
• gaps
• current_state
• decision_readiness
• decision_readiness
• decision_readiness
• decision_readiness
• decision_readiness

• Upload final assessment report and remediation plan to the shared workspace
• Mark the assessment deliverable as 'Final' and lock further edits
• Receive written acceptance of the assessment deliverable and remediation plan from the buyer's designated approver
• Buyer confirms acceptance of remediation plan owners, sequencing, timelines, and verification steps
• Document and sign off acceptance criteria and verification methods for prioritized findings
• Seller issues invoice for the agreed billing milestone per the executed engagement agreement
• Buyer acknowledges receipt of the invoice and confirms billing milestone trigger
• Attach all sign-off artifacts and update the platform milestone status to 'Acceptance & Billing Sign-Off complete'

• Remediation Validation Health Check
• First Effectiveness Measurement
• Inspection Support Planning
• Quarterly Sustain Review
• Annual Compliance Outcomes Review

• Publish the prioritized enhancement backlog with resolution dates and acceptance criteria.
• Assemble a single inspection evidence binder with verification notes and an evidence locator index.
• Prepare an inspector Q&A packet with likely questions and scripted, evidence-linked responses.
• Publish the on-call advisory roster, communication channel, and expected response SLAs for the inspection window.
• Present year-to-date compliance outcomes and metric trendlines
• Agree a prioritized enhancement backlog with target close dates for the quarter.
• Confirm that a client-side owner is assigned to every remaining remediation item.
• Ensure the findings acceptance rate trend is stable or improving quarter over quarter.
• Reconfirm remediation verification criteria
• Schedule targeted training sessions for areas with recurring findings and document attendance tracking.
• Update the issue tracker to ensure owner assignment exists for all remaining remediation items and verify evidence links.
• Present annual inspection and remediation closure summary
• Produce a documented summary of annual outcomes and systemic gap areas with recommended sustainment actions.
• Agree the ongoing monitoring cadence and metric owners for the next 12 months.
• Identify any systemic process changes requiring investment and agree next steps to evaluate options.
• Publish the annual compliance outcomes report and distribute to stakeholders identified in the sustainment plan.
• Create a 12-month sustainment schedule with metric owners and reporting dates aligned to the roadmap.
• Document systemic process change options with estimated timelines for executive consideration.
• Confirm remediation evidence meets the verification criteria recorded in Assessment Report & Remediation Plan.
• Identify any critical open issues that require remediation within 14 days.
• Establish the channel and trigger for on-call inspection advisory requests.
• Publish the remediation evidence index with file links and verification notes.
• Log open issues in the issue tracker with requested resolution dates and impact level.
• Schedule on-site or remote verification walkthroughs for remaining remediation items.
• Schedule follow-up verification walkthroughs for items with incomplete or low-quality evidence.
• Present verification data against targets
• Determine whether remediation execution is on track to meet the targets recorded in Assessment Report & Remediation Plan for implementation blockers resolved and prioritized action count closed.
• Agree corrective actions with timelines to close any gaps within the next 30 days.
• Confirm whether inspection advisory will be requested and what evidence is still required before activation.
• Update the remediation evidence index with verification timestamps and inspector-style notes for each closed action.
• Create remediation task entries for unresolved prioritized actions with target close dates and acceptance criteria.
• Confirm inspection schedule, logistics, and points of contact
• Confirm advisory activation criteria and the communication protocol for live inspections.
• Ensure the inspection evidence package contains required verification items and is accessible during inspection.
• Reduce the open prioritized action count to the threshold required for advisory or document acceptable mitigations per Assessment Report & Remediation Plan.
• Review open issues and enhancement request backlog
• Review root-cause trends and systemic risks
• Define back-room advisory scope and escalation triggers
• Diagnose root causes for any gaps
• Verify completed remediation evidence
• Agree corrective actions and timelines
• Prioritize enhancements and agree resolution sequencing
• Agree a 12-month sustainment roadmap
• Early inspection signals and staff readiness
• Validate inspection evidence package and Q&A packet
• Training refresh and refresh of evidence standards
• Confirm reporting and evidence requirements for the next year
• Confirm advisory posture for upcoming inspections
• Run a short mock Q&A escalation drill
• Open issues and blockers
• Agree immediate remediation actions
• Agree communication channel and response SLAs