Conducting an FDA Mock Quality Audit Across Regulated Industries
Inspection-Readiness Services by J&J Compliance Consulting Group (JJCC Group)
An FDA mock audit, also called a mock inspection or pre-inspection audit, is a simulated regulatory inspection conducted internally or by an outside consultant before the real FDA investigator arrives. The objective is straightforward: identify and correct deficiencies on your own terms, when findings carry no legal consequence, rather than discovering them when an FDA investigator documents them on a Form FDA 483. A well-executed mock audit replicates the scope, intensity, and methodology of an actual FDA inspection so that personnel, facilities, and records are tested under realistic conditions.
FDA investigators do not inspect every industry the same way. Each regulated product category is governed by a distinct part of Title 21 of the Code of Federal Regulations, and investigators apply the corresponding Compliance Program Guidance Manual and inspection technique, such as the Quality System Inspection Technique (QSIT) for devices or the systems-based drug inspection approach. J&J Compliance Consulting Group (JJCC Group) conducts mock audits that mirror these methods precisely, deploying former-investigator perspective, the same document requests, and the same line of questioning your team will face. This guide explains how mock audits work, what a Form 483 is and how it arises, and the industry-specific elements JJCC Group covers for drugs, medical devices, dietary supplements, food, cosmetics, and tobacco.
What Is a Form FDA 483 and How Does It Arise?
A mock audit is a full rehearsal of an FDA inspection. We walk your facility, pull records and question staff exactly as an investigator would. You get a mock Form 483 and a fix plan while there is still time to act.
How we run a mock audit
At the end of an inspection, the investigator may issue Form FDA 483, Inspectional Observations. It lists conditions that may violate FDA rules. A weak response can lead to a Warning Letter, import alert or further action.
- Pre-audit planning: scope, regulation, inspection type and your recent history.
- Opening meeting: run as FDA would, including Form FDA 482 handling.
- Facility walkthrough: production, warehouse, lab and utilities.
- Document review: SOPs, batch or device records, CAPAs, complaints, training.
- Staff interviews: operators, QA and management.
- Closing meeting: a mock 483 and a prioritized remediation roadmap.
Pharmaceuticals and Drug Products
Governing Regulations: 21 CFR Parts 210 and 211 (cGMP for finished pharmaceuticals), with API expectations under ICH Q7. FDA applies its systems-based drug inspection model covering the quality, facilities/equipment, materials, production, packaging/labeling, and laboratory systems.
Drug inspections are among the most rigorous the FDA conducts. JJCC Group’s mock audit probes each of the six FDA inspection systems exactly as an investigator would, with particular emphasis on data integrity and the quality system.
What we inspect against
- Drugs Parts 210/211: quality unit, investigations, lab controls, data integrity, validation
- Medical devices QMSR (Part 820 with ISO 13485): risk management, design, CAPA, complaints, MDRs, suppliers
- Supplements Part 111: specifications, identity testing, MMR/BPR, QC review, complaints
- Food Part 117: food safety plan, preventive controls, sanitation, allergens, records
- Cosmetics MoCRA records, safety substantiation, adverse events, ISO 22716 practices
- Tobacco Manufacturing controls, PMTA commitments, labeling and warnings
Medical Devices
Governing Regulations: 21 CFR Part 820 (Quality System Regulation), transitioning to the harmonized QMSR aligned with ISO 13485:2016. FDA uses the Quality System Inspection Technique (QSIT) focusing on four major subsystems.
JJCC Group structures the device mock audit around QSIT, the same framework FDA investigators follow, tracing the four interconnected subsystems and the linkages between them.
Elements Covered in the Device Mock Audit
- Management Controls: Quality policy, management review, quality planning, and organizational structure per §820.20.
- Design Controls: Design inputs, outputs, verification, validation, transfer, changes, and the Design History File per §820.30.
- CAPA: Complaint linkage, nonconforming product, root-cause analysis, and effectiveness checks per §820.100.
- Production and Process Controls: Process validation, acceptance activities, and the Device History Record per §820.70–80.
- Medical Device Reporting: Complaint handling and MDR obligations under 21 CFR Part 803.
Dietary Supplements
Governing Regulations: 21 CFR Part 111 (cGMP for dietary supplements), with serious adverse event reporting obligations and facility-level provisions under 21 CFR Part 117 where applicable.
Supplement mock audits focus on the identity, purity, strength, and composition controls FDA investigators scrutinize most heavily, particularly the quality control unit and records that prove specifications were met.
Elements Covered in the Supplement Mock Audit
- Quality Control Operations: QC unit authority, material review, and product disposition per §111.65 and §111.123.
- Master and Batch Records: Completeness of master manufacturing records (MMR) and batch production records (BPR) under Subpart E.
- Identity and Specification Testing: Component, in-process, and finished-product specification verification with valid test methods.
- Complaints and Adverse Events: Serious adverse event reporting and complaint investigation procedures.
Food Manufacturers
Governing Regulations: 21 CFR Part 117 (cGMP and Preventive Controls for Human Food under FSMA), with 21 CFR Part 507 for animal food and Parts 120/123 for juice and seafood HACCP.
FDA food inspections under FSMA verify that a facility’s food safety plan is not only written but actively implemented and verified. JJCC Group’s mock audit tests the plan against real-world execution.
Elements Covered in the Food Mock Audit
- Food Safety Plan: Hazard analysis, preventive controls, and PCQI oversight per §117 Subpart C.
- Preventive Controls Implementation: Process, sanitation, allergen, and supply-chain controls with monitoring and corrective actions.
- Current Good Manufacturing Practices: Sanitation, personnel hygiene, and environmental monitoring per §117 Subpart B.
- Recall and Traceability: Recall plan adequacy and lot traceability under FSMA requirements.
Cosmetics
Governing Regulations: The Modernization of Cosmetics Regulation Act (MoCRA), the forthcoming FDA cosmetic GMP rule, and existing labeling and prohibited-ingredient provisions under 21 CFR Parts 700–740. JJCC Group benchmarks against ISO 22716 in the interim.
With MoCRA expanding FDA authority over cosmetics, manufacturers should prepare for inspections that examine GMP, safety substantiation, and adverse event systems. The mock audit anticipates these focus areas.
Elements Covered in the Cosmetics Mock Audit
- Cosmetic GMP (ISO 22716): Production, quality control, personnel, equipment, and premises controls.
- MoCRA Registration and Listing: Facility registration, product listing, and responsible-person verification.
- Safety Substantiation: Adequacy of records substantiating product safety.
- Adverse Event Reporting: Procedures for capturing and reporting serious adverse events.
Tobacco Products
Governing Regulations: The Tobacco Control Act and FDA’s proposed Tobacco Product Manufacturing Practice (TPMP) requirements under section 906(e) of the FD&C Act, with registration and listing obligations under 21 CFR Part 1140 and related provisions.
As FDA finalizes manufacturing practice requirements for tobacco products and ENDS, JJCC Group prepares manufacturers for inspection by simulating reviews of manufacturing controls and the documentation underpinning Premarket Tobacco Product Applications (PMTA).
Elements Covered in the Tobacco Mock Audit
- Manufacturing Controls: Process and design specifications and contamination prevention aligned with proposed TPMP requirements.
- PMTA Documentation: Quality and stability records supporting premarket applications.
- Establishment Registration: Registration, product listing, and ingredient reporting verification.
- Recordkeeping and Traceability: Batch records, specifications, and finished-product traceability.
Why Choose JJCC Group for Your Mock Audit
A mock audit is only as valuable as the realism and expertise behind it. J&J Compliance Consulting Group conducts inspections with the same rigor, document requests, and questioning techniques FDA investigators use, then delivers a mock Form 483 and a prioritized remediation roadmap your team can act on immediately. Our consultants bring deep experience across SOPs, CAPA, validation, data integrity, FDA 21 CFR Parts 210/211/820, EU GMP, ICH guidelines, and ISO 13485, enabling us to audit single-product startups and complex multi-industry manufacturers alike.
Beyond identifying gaps, JJCC Group prepares your personnel for the human side of an inspection: how to host an investigator, manage the document room, respond to questions, and avoid volunteering unnecessary information. Through ThecGMPAcademy, we reinforce this readiness with ongoing training so that audit preparedness becomes part of your quality culture rather than a one-time exercise.
Testimonial
What our clients say about JJCC
Professional, knowledgeable team guided us through FDA registration and complete product listing accurately and efficiently.
Frequently Asked Questions
A rehearsal of a real FDA inspection by experienced auditors. It shows what an investigator would likely cite, while you still have time to fix it.
A list of inspectional observations the investigator gives you at the close of an inspection. It is not a final agency decision, but it must be answered.
Investigators record conditions that may violate FDA rules, based on what they see, read and hear. Unanswered requests and inconsistent answers often become observations.
A 483 is the investigator's list of observations. A Warning Letter is an official FDA notice of significant violations, published on FDA's website.
There is no legal deadline, but FDA considers responses received within 15 business days before deciding next steps.
They are FDA's inspection classifications: No Action Indicated, Voluntary Action Indicated and Official Action Indicated. OAI can lead to regulatory action.
FDA uses the Quality System Inspection Technique (QSIT), which examines four subsystems: Management Controls, Design Controls, CAPA, and Production and Process Controls. JJCC Group structures its device mock audit around QSIT.
FDA retired its QSIT technique when the QMSR took effect on Feb 2, 2026, and now inspects against the QMSR with a risk-based approach.
FDA's drug inspections cover six systems: quality, facilities and equipment, materials, production, packaging and labeling, and laboratory controls.
An inspection FDA may run before approving a drug or PMA device application, to confirm the site can make the product as described.
Yes. FDA can request records in advance or instead of an inspection. Your documents must be ready to send quickly and read clearly.
Usually 2 to 5 days on-site, depending on facility size and scope. The report follows within about a week.
No. Our mock 483 has no regulatory standing. It is a private tool to help you prepare.
Quality leadership, production and lab supervisors, and the staff who will face investigators, including the person who will host FDA.
FDA needs to trust your records. Missing audit trails, shared logins and backdated entries are common and serious findings.
At least once a year, and before any expected inspection, product launch or major change.
Yes. We help fix the findings, write procedures, train staff and prepare your 483 response if FDA visits.
Book a call. We will agree scope and dates and send a pre-audit document request.
Have a different question?
We probably have an answer.
A mock Form 483(no regulatory standing).
A prioritized CAPA planwith owners and dates.
Front-room and back-room trainingso staff can handle investigator requests.
Follow-up training through The cGMP Academy.