Auditor Expectations for QMS Basics & Definitions During FDA, EMA and MHRA Inspections


Published on 03/12/2025

Auditor Expectations for QMS Basics & Definitions During FDA, EMA and MHRA Inspections

In the regulated industries of pharmaceuticals, biotechnology, and medical devices, a robust Quality Management System (QMS) is essential for compliance with various regulatory standards, including those set forth by the FDA, EMA, and MHRA. This article provides a comprehensive, step-by-step tutorial on QMS basics and definitions, focusing on what quality managers, regulatory affairs, and compliance professionals must do to ensure adherence to these standards.

Step 1: Understanding QMS Basics

The first step in establishing a compliant QMS is understanding its fundamental principles. A QMS is a structured system of procedures and processes that helps organizations ensure their products consistently meet customer and regulatory requirements. The key objectives of a QMS include:

  • Ensuring
product quality and safety
  • Enhancing customer satisfaction
  • Facilitating regulatory compliance
  • Improving operational efficiency
  • Key documents involved in this phase include the Quality Manual, which outlines the QMS structure, and the Quality Policy, which sets the organization’s quality objectives. The roles responsible for this step typically include the Quality Manager, who oversees the QMS, and the Regulatory Affairs Manager, who ensures compliance with external regulations.

    Common inspection findings related to QMS basics often include inadequate documentation of quality policies and objectives, lack of employee training on QMS principles, and insufficient management commitment to quality initiatives. For example, during a recent FDA inspection, a pharmaceutical company was cited for failing to document its quality policy, which led to non-compliance with 21 CFR Part 820.20.

    Step 2: Defining Quality Management vs Quality Assurance vs Quality Control

    It is crucial to distinguish between Quality Management (QM), Quality Assurance (QA), and Quality Control (QC) as they play different roles within a QMS. Quality Management encompasses the overall management of quality within the organization, including the establishment of a QMS. Quality Assurance refers to the systematic processes that ensure quality requirements are met, while Quality Control involves the operational techniques and activities used to fulfill quality requirements.

    Key documents for this phase include the Quality Plan, which outlines how quality will be managed, and Standard Operating Procedures (SOPs) for QA and QC processes. The Quality Manager typically oversees this phase, with input from QA and QC personnel.

    Common findings during inspections often relate to confusion among staff regarding these definitions, leading to inadequate implementation of QA and QC processes. For instance, an EMA inspection revealed that a medical device manufacturer had not clearly defined its QA processes, resulting in inconsistent product testing and release.

    Step 3: Implementing ISO Standards

    Implementing ISO standards, such as ISO 13485 for medical devices, is a critical step in achieving compliance. ISO 13485 provides a framework for a QMS that demonstrates the ability to provide medical devices that consistently meet customer and regulatory requirements. The objectives of this step include:

    • Establishing a documented QMS
    • Ensuring effective communication and training
    • Facilitating continuous improvement

    Key documents include the ISO 13485 compliance checklist and internal audit reports. The Quality Manager and ISO Compliance Officer are typically responsible for ensuring that the organization meets ISO standards.

    Common inspection findings in this area often include inadequate documentation of processes, lack of employee training on ISO requirements, and insufficient internal audits. For example, during a recent MHRA inspection, a biotech company was found to have incomplete records of internal audits, which led to non-conformance with ISO 13485 requirements.

    Step 4: Establishing Risk Management Processes

    Risk management is a vital component of a QMS, particularly in the pharmaceutical and medical device industries. The objective is to identify, assess, and mitigate risks associated with product quality and safety. ISO 14971 provides guidelines for risk management in medical devices, emphasizing the need for a systematic approach.

    Key documents include the Risk Management Plan and Risk Assessment Reports. The Quality Manager, along with the Risk Management Team, is responsible for implementing these processes.

    Common inspection findings often relate to inadequate risk assessments or failure to implement risk mitigation strategies. For instance, an FDA inspection revealed that a pharmaceutical company had not adequately assessed the risks associated with a new drug formulation, leading to significant quality issues during production.

    Step 5: Conducting Internal Audits

    Internal audits are essential for evaluating the effectiveness of the QMS and ensuring compliance with regulatory requirements. The objectives of internal audits include identifying non-conformities, assessing the implementation of processes, and facilitating continuous improvement.

    Key documents include the Internal Audit Schedule and Audit Reports. The Quality Manager typically oversees the internal audit process, with auditors drawn from various departments to ensure objectivity.

    Common inspection findings often relate to inadequate follow-up on audit findings or failure to address identified non-conformities. For example, during an EMA inspection, a company was cited for not addressing corrective actions from previous audits, leading to repeated non-compliance issues.

    Step 6: Managing Non-Conformities and CAPA

    Managing non-conformities and implementing Corrective and Preventive Actions (CAPA) is a critical aspect of maintaining a compliant QMS. The objective is to identify the root cause of non-conformities and implement effective corrective actions to prevent recurrence.

    Key documents include the Non-Conformance Report and CAPA Plan. The Quality Manager and CAPA Coordinator are typically responsible for overseeing this process.

    Common inspection findings often include inadequate root cause analysis or failure to implement corrective actions effectively. For instance, a recent FDA inspection found that a medical device manufacturer had not adequately investigated a recurring non-conformity, leading to ongoing quality issues.

    Step 7: Training and Competence Management

    Ensuring that employees are adequately trained and competent is vital for maintaining compliance within a QMS. The objective is to provide employees with the necessary knowledge and skills to perform their roles effectively and in compliance with regulatory requirements.

    Key documents include the Training Plan and Training Records. The Quality Manager and HR Manager typically oversee training programs and competence management.

    Common inspection findings often relate to inadequate training records or failure to provide necessary training. For example, during a recent MHRA inspection, a company was cited for not maintaining adequate training records for its production staff, leading to compliance issues.

    Step 8: Continuous Improvement and Management Review

    Continuous improvement is a fundamental principle of a QMS, aimed at enhancing the effectiveness and efficiency of processes. The objective is to foster a culture of quality and ensure that the QMS evolves to meet changing regulatory requirements and customer expectations.

    Key documents include the Management Review Minutes and Continuous Improvement Plans. The Quality Manager and Executive Management are typically responsible for leading continuous improvement initiatives.

    Common inspection findings often relate to a lack of documented evidence of continuous improvement efforts or failure to act on management review outcomes. For instance, an FDA inspection revealed that a company had not implemented any improvements based on previous management reviews, raising concerns about its commitment to quality.

    Conclusion

    Establishing and maintaining a compliant Quality Management System is essential for organizations in regulated industries. By following the steps outlined in this article, quality managers, regulatory affairs, and compliance professionals can ensure that their QMS meets the expectations of regulatory bodies such as the FDA, EMA, and MHRA. Understanding the basics and definitions of QMS, along with the practical implementation of ISO standards and effective risk management, will contribute to the overall success and compliance of the organization.

    See also  Principles of Quality Management Systems in Contract Manufacturing and Outsourced Operations