A GMP gap assessment is a structured review of your current quality systems, procedures, and documentation against applicable regulatory requirements - typically FDA 21 CFR Parts 210/211, EU GMP, and WHO Technical Report Series. It identifies where your current state falls short of where it needs to be, and prioritises findings so your team can close the most inspection-critical gaps first.
Unlike a regulatory inspection, a gap assessment is conducted proactively - giving you time to remediate findings before an inspector arrives. Companies that conduct regular gap assessments consistently perform better in formal inspections and receive fewer Form 483 observations and Warning Letters.
When Should You Conduct a Gap Assessment?
There are several situations that trigger the need for a gap assessment:
- Pre-inspection preparation - 3–6 months before a scheduled or expected regulatory inspection
- New regulatory requirements - when the FDA or EMA publishes updated guidance that affects your operations
- After a Warning Letter or 483 - to understand the full scope of compliance weakness beyond what was cited
- Post-merger or acquisition - when integrating a new site or product line into your quality system
- Expansion into new markets - when entering markets with different regulatory frameworks (e.g. moving from WHO GMP to EU GMP)
- Routine compliance maintenance - an annual gap assessment as part of a proactive quality programme
What Does a Gap Assessment Cover?
A comprehensive GMP gap assessment typically covers the following domains:
- Documentation and record management - SOP completeness, version control, review cycles, retention schedules
- Training records - personnel qualification records, training matrices, effectiveness assessments
- Change control - completeness and quality of change records, impact assessment rigour
- Deviation management - investigation quality, root cause analysis depth, CAPA effectiveness
- Data integrity - audit trail configuration, access controls, data review procedures, backup verification
- Laboratory controls - OOS investigation procedures, analytical method validation status, instrument calibration
- Vendor management - approved supplier lists, audit programmes, certificate of analysis review
- Validation status - cleaning validation, process validation, computerised system validation status matrix
- Environmental monitoring - sampling plans, alert/action limits, trend analysis
Scope is agreed upfront. PHARPRO defines the scope, depth, and regulatory framework for each gap assessment in the project proposal - ensuring the assessment is calibrated to your specific regulatory environment and inspection history.
How Is a Gap Assessment Conducted?
A well-structured gap assessment follows a consistent methodology:
- Scoping and planning - agree the regulatory frameworks to assess against, the departments and processes in scope, the depth of review, and the timeline
- Document review - review SOPs, batch records, validation reports, deviation logs, training records, and audit trails against the regulatory standard
- Personnel interviews - interview QA, production, and laboratory staff to understand how procedures are applied in practice (procedures that exist on paper but are not followed are a common finding)
- Facility and systems walkthrough - physical inspection of the facility, equipment status boards, labelling practices, and computer system configurations
- Gap identification and risk rating - each gap is rated by regulatory risk (Critical / Major / Minor) and likelihood of inspector detection
- Report and CAPA plan - a written finding report with each gap described, its regulatory basis cited, and a proposed CAPA with owner and deadline
What Are the Deliverables?
A PHARPRO gap assessment delivers:
- Gap Assessment Report - a structured finding report listing all identified gaps, their regulatory basis, risk rating, and priority
- CAPA Plan - a prioritised action plan with specific corrective actions, responsible owners, target completion dates, and effectiveness check criteria
- Executive Summary - a one-page summary of the compliance status and key risk areas, suitable for senior management and board reporting
- Regulatory Reference Matrix - a mapping of findings to specific regulatory clauses (FDA, EU GMP, WHO) for use during inspection responses
How Long Does a Gap Assessment Take?
A focused gap assessment of a single site against one regulatory framework typically takes 2–3 weeks from kickoff to final report. A broader assessment covering multiple departments, multiple regulatory frameworks, or a larger site may take 4–6 weeks. PHARPRO can mobilise gap assessment teams within 3–5 business days for inspection-driven situations.
Free GMP Gap Assessment Checklist
Download our 60-point GMP gap assessment checklist covering documentation, data integrity, validation status, and inspection readiness across FDA and EU GMP frameworks.
Download Free Checklist →