CDMO Audit Coverage: Key Focus Areas and Compliance Objectives

Auditing provides essential quality assurance for a cGMP Contract Development and Manufacturing Organization (CDMO). When a customer considers partnering with a CDMO to manufacture its drug product, they make a significant decision. Product managers commit time, money, reputations, and sometimes careers to this choice. Unforeseen market delays and production costs from the CDMO directly affect the company’s profitability, making the audit a critical part of supplier qualification and evaluating the CDMO.

An effective audit benefits both the customer (auditor) and the CDMO (host) by improving regulatory compliance. Difficulties arise when the CDMO’s performance standards and motivations conflict with the customer’s expectations. This guide provides tips to smooth the process for both parties.

Understanding Audit Team Composition for CDMO Audits

 Internal Audit Teams and Roles in CDMO Oversight

Large multinational customers usually maintain dedicated audit teams that travel year-round and visit many sites. While these auditors know the regulations well and possess strong auditing skills, they may not understand the full scope of the contractual relationship or project-specific issues. They will likely interpret the regulations and evaluate the CDMO’s company practices.

Third-Party Consultants

Some customers, particularly overseas or emerging companies, contract consulting firms to perform audits on their behalf. These third-party auditors often include cGMP auditors who perform ISO-based quality system audits for other industries. Their interpretation of regulations and audit emphasis varies with their experience.

Customers need to select consultants who know the CDMO’s services, latest draft regulatory guidance, and recent FDA-483 observations. Many consultants worked previously as FDA investigators and bring excellent training, good insight into compliance issues, and a nose for finding GMP gaps quickly.

Determining Optimal Audit Team Size

Third-party audits typically run 50% longer than small internal audit teams. However, third-party auditors generally maintain more impartiality and have less incentive to interpret ambiguous regulations favorably for the CDMO.

The most effective audits involve two auditors who know the relationship well and whose professions complement each other. For example, representatives from quality and technical groups can split responsibilities where one covers the quality system while the other addresses process and engineering areas. Working within their areas of expertise, auditors move through the agenda more efficiently. A two-auditor team also provides checks and balances when reaching consensus with the CDMO on difficult points.

Regulatory Compliance Baseline

Regulatory compliance serves as the fundamental indicator during any CDMO audit. Auditors should assess:

• Current cGMP compliance status
• Recent FDA-483 observations and responses
• ISO-based quality system implementation (for third-party auditors)
• Adherence to latest draft regulatory guidance
• GMP compliance gaps and remediation efforts

Quality System Maturity

Auditors must evaluate whether the CDMO has established quality systems that demonstrate:

• Consistency in performance standards
• Alignment between CDMO motivations and customer expectations
• Openness toward improving quality systems
• Solid documentation practices and record-keeping standards
• Internal audit programs with effective corrective actions
• Clear quality agreement provisions that define roles and responsibilities

Operational Performance Metrics

Key performance indicators that directly affect the customer include:

• Production timelines and reliability
• Cost management and efficiency
• Market responsiveness and flexibility
• Profitability impact through unforeseen delays
• Reputation and career implications of partnership decisions

Relationship and Communication Dynamics

Auditors must assess the working relationship between audit team members and CDMO personnel, particularly:

• Consensus-building capabilities on sticking points
• Responsiveness to audit findings
• Openness to recommendations
• Quality of technical exchanges
• Alignment of contractual expectations with operational realities

Auditors should focus on:

1. Critical quality and compliance gaps that could directly affect company profitability through unforeseen market delays and production costs
2. High-risk operational areas specific to the contracted drug product manufacturing
3. Contractual relationship concerns indicating misalignment between customer expectations and CDMO performance
4. Regulatory compliance issues that could impact the drug product’s approval or commercial viability

Tailoring Audit Depth to Auditor Experience and CDMO Maturity

Two auditors working in their respective areas of expertise can:

• Move through the agenda more quickly and efficiently
• Provide checks and balances when reaching consensus with the CDMO
• Split coverage between quality system and process/engineering areas
• Avoid the 50% longer timeline that third-party audits typically require

Tailoring to Auditor Experience and CDMO Maturity

Auditors should adjust priorities based on:

• The audit team’s familiarity with the contractual relationship and specific project issues
• Whether the team includes dedicated internal auditors or third-party consultants
• The CDMO’s maturity level and regulatory compliance history
• Geographic and cultural considerations for overseas CDMOs
• Recent regulatory observations and industry trends

Structured Documentation Approach

Effective documentation captures findings in ways that smooth the process for both parties:

For Quality and Technical Auditors: When representatives from quality and technical groups work together, documentation should clearly separate system-level findings from process and engineering observations, allowing each professional to contribute within their expertise.

For Relationship-Familiar Auditors: Auditors who know the contractual relationship should document context around specific project issues, helping interpret whether findings represent systemic problems or isolated concerns.

Balancing Impartiality and Context

 Third-party auditors generally maintain more impartiality. Their documentation should:

• Apply ISO-based quality system standards from other industries
• Reference the latest draft regulatory guidance and recent FDA-483 observations
• Identify GMP compliance gaps objectively
• Provide interpretation based on varied industry experience

However, documentation should acknowledge when regulation interpretation varies with auditor experience, ensuring customers understand the basis for findings.

Recommendations and Follow-Up

 Documentation methods should include:

• Clear distinction between observations, findings, and recommendations
• Specific citations to regulatory requirements or guidance documents
• Actionable recommendations that young CDMOs can implement while respecting that established CDMOs resist changes without good reason
• Follow-up mechanisms to assess whether regulatory compliance increases as intended
• Assessment of whether difficulties stem from misalignment between the CDMO’s performance standards and customer expectations

Consensus Documentation

Since reaching consensus with the CDMO on sticking points remains critical, documentation should:

• Record areas of agreement and disagreement
• Capture the rationale behind audit team conclusions
• Note CDMO responses and commitments
• Provide sufficient detail for both parties to reference during post-audit discussions
• Enable tracking of whether the audit achieves its goal of ensuring quality assurance

Auditors must carefully consider scope, team composition, prioritization, and documentation techniques when conducting a CDMO audit. By focusing on these key areas, auditors can improve regulatory compliance while streamlining the process for all parties involved. The ultimate objective remains ensuring that the decision to work with a CDMO safeguards the client’s time, money, reputations, and careers while upholding the quality control necessary for successful pharmaceutical product manufacturing.