Conducting Internal Audits for SOP Compliance: Step-by-Step Guidance

Internal audits are essential tools in pharmaceutical quality systems to ensure ongoing compliance with SOPs. They help identify procedural gaps, training lapses, and operational non-conformances before regulatory authorities do. A robust internal audit program can transform SOPs from mere documents into active compliance drivers.

This guide offers practical instructions on how to structure, conduct, and follow up on internal audits focused on SOP compliance.

Purpose of SOP-Focused Internal Audits:

The goal of these audits is not just to verify that an SOP exists but to assess:

• Whether the SOP reflects actual practices on the ground
• If personnel are trained and following the latest approved version
• Whether documentation is consistent with procedural requirements
• How deviations and non-compliance are identified and addressed

Benefits of Regular SOP Audits:

• Early detection of non-compliance and training gaps
• Improved readiness for external inspections
• Better alignment of documentation and execution
• Support for continuous improvement initiatives

According to USFDA guidance, lack of adherence to written procedures remains one of the top reasons for warning letters in the pharma industry.

Step-by-Step: How to Audit SOP Compliance:

1. Plan the Audit:

• Define audit scope: department, SOP category, or a specific procedure
• Select auditors who are independent of the function being audited
• Develop an audit checklist mapped to SOP steps and requirements
• Schedule with department heads to ensure availability

2. Prepare the Audit Tools:

Prepare the following tools and references:

• Latest approved version of the SOP
• Training records of involved employees
• Logbooks or batch records related to SOP implementation
• Audit checklist tailored to SOP clauses

3. Conduct the Audit:

During the audit:

• Observe live processes and compare to SOP requirements
• Interview staff on understanding and execution of SOP steps
• Review documentation to match actual vs. written practice
• Note deviations, gaps, or outdated instructions

All findings must be documented with date, location, responsible person, and relevant SOP clause.

Key Focus Areas in SOP Compliance Audits:

• Training: Was the training provided before SOP implementation?
• Version Control: Are only current versions in use?
• Execution: Are critical steps being consistently followed?
• Deviations: Are procedural deviations properly recorded?
• Periodic Reviews: Are SOPs revised as per review timelines?

These focus points help auditors uncover systemic and recurring issues.

Using Checklists for SOP Audits:

A well-designed checklist can make audits more objective and thorough. It should include:

• SOP title and code
• Audit date and auditor name
• Training compliance verification
• Execution check against SOP clauses
• Documented observations and comments

Checklists also support audit trail completeness and traceability.

Post-Audit Activities:

1. Report Generation:

Summarize the audit in a structured report including:

• Scope and objectives
• Key observations
• Categorization of findings (critical, major, minor)
• Recommendations and target completion dates

Ensure reports are shared with relevant departments and QA management.

2. CAPA Integration:

Audit findings should trigger CAPA investigations as needed. Each non-conformance should include:

• Root cause analysis
• Corrective action for existing failures
• Preventive action to avoid recurrence

CAPA outcomes should be tracked in a centralized QMS or similar tool.

Audit Frequency and Risk-Based Approach:

Audit frequency should be based on:

• Regulatory risk of the SOP
• Historical non-compliance data
• Criticality of operations governed by the SOP
• Recent procedural or staff changes

High-risk SOPs like those for aseptic operations or data integrity should be audited more frequently.

Tracking and Trending Audit Results:

Use digital dashboards to track audit KPIs such as:

• Number of SOPs audited vs. total
• % of SOPs with major findings
• Average time to close CAPAs
• Recurring issues by department

These trends support management reviews and regulatory inspections.

Internal Audit Best Practices:

• Use a blend of announced and unannounced audits
• Rotate auditors to prevent familiarity bias
• Involve cross-functional representatives
• Audit entire SOP lifecycle—drafting, training, execution, review
• Include SOP audit outcomes in Annual Product Quality Reviews (APQR)

Consistency in methodology ensures audit reliability and effectiveness.

Challenges in SOP Auditing and Solutions:

• Incomplete Records: Ensure real-time documentation and logbook reviews.
• Staff Resistance: Conduct awareness sessions on the importance of internal audits.
• Audit Fatigue: Schedule audits smartly to avoid redundancy and overload.
• Resource Constraints: Leverage digital audit tools and standardized templates.

These challenges can be mitigated with proactive planning and clear communication.

Conclusion:

Internal audits are an indispensable part of SOP compliance monitoring in pharmaceutical companies. When structured correctly, they uncover latent risks, reinforce procedural discipline, and support regulatory preparedness. With the help of clear checklists, defined protocols, and CAPA integration, QA teams can turn audits into powerful tools for continuous quality improvement. Organizations looking to standardize their audit protocols may explore solutions offered by pharma validation platforms that align with GxP expectations.

Failure to Document Temporary SOP Changes: A Critical GMP Compliance Breakdown

Introduction to the Audit Finding

1. Nature of the Finding

Temporary changes made to standard procedures were executed during manufacturing or quality operations but not documented formally through the change control system.

2. Why It’s a Compliance Red Flag

Any change, especially emergency deviations from validated SOPs, must be formally approved, justified, tracked, and reversed or formalized. Without documentation, traceability is lost.

3. Example Scenarios

Bypassing cleaning verification due to unavailable reagents, modifying sampling frequency during equipment breakdowns, or adjusting gowning protocols during resource shortages.

4. Risk to Product and Process Integrity

Undocumented changes compromise the validated state of the process, introduce variability, and weaken batch record integrity.

5. How This Typically Surfaces

During batch record review, inspection of floor logs, or interviews with personnel disclosing ad hoc instructions from supervisors.

6. Undermines Quality Management System

Absence of documentation indicates poor implementation of change control, inadequate oversight by QA, and breakdown in compliance culture.

7. Systems Most Affected

Manufacturing, quality control, cleaning validation, stability testing protocols, and equipment operation.

8. Bottom Line

Every temporary change must be justified, documented, assessed for impact, and eventually integrated into SOPs or discontinued through formal means.

Regulatory Expectations and Inspection Observations

1. 21 CFR 211.100(a)

Mandates that changes to production procedures must be drafted, reviewed, and approved by QA.

2. EU GMP Chapter 4 (Documentation)

Requires complete documentation of changes, including temporary measures. No undocumented instruction is acceptable under EU regulations.

3. WHO TRS 1010

Highlights that temporary instructions must be formally documented and traceable to their origin and impact.

4. FDA 483 Example

“Temporary gowning practice introduced due to supply constraints was not supported by written procedure or change control.”

5. MHRA Observation Case

Found use of handwritten temporary instructions not captured in the formal QMS, raising data integrity concerns.

6. CDSCO India Audit Findings

Sites cited for verbal approval of temporary changes without traceable documentation or impact justification.

7. EMA Statement

Notes that temporary measures must follow the same control mechanism as permanent ones—including review, approval, and closure.

8. Risks Observed During Inspections

Inconsistent operator behavior, undocumented line clearance changes, and unexplained deviations in trend data.

9. International Best Practice

GMP-compliant companies treat temporary changes as formal deviations with defined end dates and tracking mechanisms.

Root Causes of Undocumented Temporary SOP Changes

1. Lack of Change Control Awareness

Staff may be unaware that even temporary deviations must be routed through the QMS.

2. Verbal Culture in Emergency Situations

Supervisors often issue verbal instructions during crises without follow-up documentation.

3. Weak QA Oversight

Quality Assurance teams may not monitor or verify procedural deviations in real-time.

4. Time Pressure During Batch Execution

Operators prioritize timelines over compliance, especially during urgent production timelines.

5. No Template for Temporary Change Recording

Absence of a formal system or template makes it difficult to capture short-term deviations.

6. Disconnect Between QA and Operations

Changes made on the floor are not escalated to QA, indicating poor communication pathways.

7. Poor Training on Documentation Principles

Employees may not understand that all actions impacting GMP processes require written justification.

8. Overdependence on Verbal Approvals

Senior personnel often rely on verbal instructions assuming informal authority suffices.

9. Culture of Compliance Shortcuts

A systemic issue where compliance is deprioritized during operational challenges.

Prevention of Undocumented Temporary Changes

1. Establish Temporary Change SOP

Create a procedure specifically governing short-term changes and their documentation route.

2. Introduce Change Log Template

Provide a rapid documentation format for urgent changes, routed via QA review.

3. Ensure QA On-Floor Presence

QA personnel should be present during key production and QC shifts to monitor changes.

4. Integrate Deviation and Change Control Systems

Allow temporary changes to be initiated via deviation but tagged under emergency change category.

5. Provide Training on Change Documentation

Conduct frequent refreshers on the importance and method of recording even temporary instructions.

6. Review Batch Records for Anomalies

Train reviewers to look for inconsistencies between SOP steps and executed actions.

7. Establish Verbal Instruction Policy

Clearly define that verbal changes must be documented within 24 hours with justification.

8. Enforce End-Date for Temporary Changes

Ensure all emergency changes are time-bound and either formalized or withdrawn promptly.

9. Promote Compliance Culture

Encourage employees to prioritize documentation and compliance—even under production pressure.

Corrective and Preventive Actions (CAPA)

1. Identify Past Undocumented Changes

Review batch logs, floor diaries, and verbal instructions to trace unrecorded deviations.

2. Formalize Emergency Change SOP

Draft and approve a dedicated SOP that outlines procedure for documenting temporary changes.

3. Update Change Control System

Add a new category for temporary/emergency changes with fast-track review and closure cycles.

4. Train All Department Heads

Ensure manufacturing, QA, and QC leadership are trained on handling and documenting urgent deviations.

5. Create Temporary Change Tracker

Maintain a QA-monitored log of all temporary changes with status, justification, and review dates.

6. Integrate into Internal Audit

Make temporary changes a mandatory checkpoint during internal GMP audits.

7. Monitor for Repeat Behavior

Use quality metrics to detect repeated undocumented deviations from the same area or team.

8. Escalate Non-Compliance

Define escalation pathway for any undocumented deviation found during audits or reviews.

9. Benchmark with Regulatory Guidance

Align internal practices with best practices from agencies like USFDA, EMA, and WHO.