SOP: Self-Inspection (Internal GMP Audit)
1. Purpose
To define the procedure for planning, conducting, reporting, and following up self-inspections to verify compliance with GMP/GDP, internal procedures, and regulatory requirements; to identify improvements and prevent recurrence of non-conformities.
2. Scope
Applies to all GMP-relevant areas and activities at [Company/Site]: Production, QC, QA, Warehouse, Engineering/Utilities, Validation, Microbiology, Maintenance, Calibration, IT/CSV, Safety & Hygiene, Contracted operations, and Supporting services.
3. References
-
WHO TRS 986 Annex 2 / EU GMP Part I Ch. 9 (Self-inspection)
-
ICH Q9 (Quality Risk Management), ICH Q10 (Pharmaceutical Quality System)
-
Company QMS documents (Change Control, Deviation, CAPA, Training, Document Control)
4. Definitions
-
Observation grading:
Critical: Potential patient safety/legal impact; significant GMP breach.
Major: Could affect product quality/compliance; systemic failure.
Minor: Isolated lapse with low risk. -
CAPA: Corrective and Preventive Action.
5. Responsibilities
-
QA Head (Process Owner): Approves annual plan, auditor qualification, final reports; monitors CAPA closure & effectiveness.
-
Lead Auditor (QA or trained cross-functional): Plans, conducts audits, issues report, verifies corrections.
-
Auditee HODs: Ensure access, provide records, own CAPA and timely closure.
-
Auditors (Team): Perform interviews, review records, record objective evidence.
-
Training: Ensures auditors maintain competency records.
6. Auditor Qualification & Independence
-
Trained in GMP, auditing techniques, risk grading, data integrity.
-
Not auditing their own routine work area (independence).
-
Qualification records maintained by QA.
7. Frequency & Planning
-
Minimum: Each GMP area at least once per year.
-
Risk-based frequency: Up to quarterly for high-risk areas (e.g., aseptic ops, water systems, complaints/recalls, data integrity).
-
Prepare Annual Self-Inspection Plan (areas, dates, auditors). Revisions controlled through change control.
8. Audit Preparation
-
Review previous reports, open CAPAs, changes, OOS/OOT, deviations, complaints/recalls, regulatory commitments.
-
Prepare Audit Checklist aligned to area (Production, QC, Warehouse, Utilities, DI/ALCOA+).
-
Notify auditees (scope, date, team) ≥5 working days in advance (unannounced allowed by QA for cause).
-
Arrange PPE, access permits, and sampling tools if required.
9. Conduct of Self-Inspection
9.1 Opening Meeting
-
Confirm scope, criteria, schedule, safety rules, document access, photo policy, confidentiality.
9.2 On-site Activities
-
Gemba walk: Observe flows (personnel, material, waste), line clearance, housekeeping (5S), segregation, environmental control.
-
Interviews: With operators, supervisors, analysts; verify training & understanding of procedures.
-
Record review: BMR/BPRs, logbooks, e-records/audit trails, calibration & qualification, cleaning & sanitation, deviations, change controls, validations, COAs, data backup/restore.
-
Sampling of records: Risk-based; at least last 10 lots or last 3 months, whichever larger (adapt per area).
-
Data Integrity (ALCOA+): Check contemporaneity, attributable signatures, controlled copies, electronic audit trails, access controls.
-
Traceability test (where applicable): From raw material receipt → batch disposition or reverse.
-
Utilities check: Water system, HVAC, compressed air—parameters vs. limits; recent OOC/alerts and actions.
9.3 Evidence & Observation Recording
-
Record objective evidence (document ID, equipment tag, batch no., photo ID where allowed).
-
Classify Critical/Major/Minor with rationale and risk statement.
-
Discuss in-process corrections where possible (without disturbing operations).
9.4 Closing Meeting
-
Present observations with grades and examples; agree on responsible person and target dates for each CAPA; note any immediate containment actions.
10. Reporting
-
Issue Self-Inspection Report within 5 working days (Critical: same day notification to QA Head/Management).
-
Report content: scope, team, dates, areas covered, summary of previous CAPAs status, detailed observations (grade, evidence, requirement breached), risk assessment, agreed actions & due dates, photographs (if permitted), annexed checklist & attendance.
11. CAPA Management
-
CAPA plan due from auditee within 10 working days (Critical: 48 hours).
-
CAPA must include: root cause (5-Why/Fishbone), corrections vs. corrective vs. preventive actions, owner, due date, effectiveness criteria, and risk mitigation.
-
CAPA linkage to change control, revalidation, retraining, document revisions as needed.
12. Timelines for Closure (default)
-
Critical: Containment immediate; CAPA complete ≤30 days.
-
Major: ≤45 days.
-
Minor: ≤60 days.
(Adjust per company policy/regulation; extensions via QA approval with justification.)
13. Effectiveness Verification
-
Lead auditor/QA verifies implemented CAPAs against defined effectiveness measures after 30–90 days or next audit cycle.
-
Methods: targeted re-audit, KPI trend review (deviations, OOS, complaints), sample record checks.
14. Escalation & Management Review
-
Repeated/uncleared Critical/Major → escalation to Site Head; possible batch impact assessment and regulatory notification per recall/field alert SOPs.
-
Include self-inspection metrics & trends in Management Review: number by area & grade, closure on time %, repeat observations %, DI findings, top 5 root causes.
15. Documentation & Records (retention ≥ 5 years)
-
Annual plan, checklists, attendance, raw notes, reports, CAPA plans, closure evidence, effectiveness reviews, auditor training/qualification records.
16. Data Integrity & Confidentiality
-
Handle records per document control; no alteration of original entries.
-
Photos/screenshots only as permitted; store securely with access control.
17. Health, Safety & GMP Etiquette
-
Follow gowning flows, PPE, and entry restrictions. Do not obstruct operations. Sanitize hands/equipment before entry to controlled areas.
18. Attachments / Templates (Annexes)
-
Annex 1: Annual Self-Inspection Plan (matrix by month vs. area).
-
Annex 2: Area-wise Audit Checklists (Production/QC/Warehouse/Utilities/DI).
-
Annex 3: Observation Report & Grading Sheet.
-
Annex 4: CAPA Plan Template with root-cause form.
-
Annex 5: Auditor Qualification & Training Matrix.
-
Annex 6: Attendance & Opening/Closing Meeting Minutes.
Comments
Post a Comment