Unannounced Notified Body Audit: What If Your Quality Manager Isn't There?
How Medical Device Manufacturers Can Prepare Their Teams, Processes, and Documentation for an Unexpected AuditImagine arriving at work and discovering that two Notified Body auditors are already waiting at reception.Your Quality Manager is on holiday.Production is running as usual.The receptionist doesn't know whom to contact, and the person responsible for retrieving Quality Management System records is unavailable.Would your organization know what to do?This scenario highlights an important weakness that can exist even in companies with well-established procedures and experienced employees.A Quality Management System may appear organized on paper, but if the company's audit response depends entirely on one individual, its readiness may be more fragile than expected.In this episode of Medical Device Made Easy, we explore how medical device manufacturers can prepare for unannounced Notified Body audits by establishing clear responsibilities, reliable communication, accessible documentation, and practical response procedures.The objective is simple: build an audit response system that works even when your usual Quality Manager is not available.What Are Notified Body Auditors Actually Looking For?An unannounced audit is not simply an exercise in checking whether procedures exist.Auditors want to understand whether the company's actual working practices are consistent with its documented processes and applicable regulatory requirements.This may involve examining manufacturing activities, product conformity, process controls, records, suppliers, outsourced processes, and relevant sampling or testing activities.Consider a manufacturer producing sterile medical devices.An auditor selects a particular batch and asks the company to demonstrate its complete manufacturing history.The investigation may follow the product through several stages:Components → Manufacturing → Packaging → Sterilization → ReleaseAt each stage, the auditor may ask:Which materials and components were used?Who performed the manufacturing activities?Were the equipment and processes appropriately controlled?Were deviations identified and managed?What records demonstrate the activities performed?Who authorized the product's release?The company must be able to connect its procedures and records to the actual product being evaluated.Having documentation is useful. Being able to demonstrate what happened to a real product is essential.1. People: Establish Clear Responsibilities and BackupsOne of the most important elements of unannounced audit preparation is defining who takes responsibility when auditors arrive.Every manufacturer should consider establishing an internal response structure that includes an Audit Leader and a designated deputy.Depending on the organization, the team may also involve representatives from Quality Assurance, Regulatory Affairs, Manufacturing, Warehouse, document coordination, and Management.However, assigning names to responsibilities is not enough.A deputy must be able to perform the role effectively.For example, appointing a backup Quality Manager provides little value if that person cannot access the necessary documentation or make the decisions required to coordinate the response.It is also important to distinguish between coordinating the audit and explaining operational activities.Quality Assurance may coordinate the response, but process owners should be able to explain their own work.This helps auditors understand how the Quality Management System operates throughout the organization.2. Alert: Make Sure Everyone Knows What to DoAn unannounced audit may begin at reception, not in the Quality Department.That makes reception and security personnel an important part of audit readiness.They should have clear instructions explaining what to do when auditors arrive.An effective internal notification process should identify:The primary contact responsible for responding.A designated deputy.An escalation route if neither person is available.Appropriate telephone or messaging contacts.Supporting email distribution lists.Arrangements covering different shifts, holidays, and absences.A useful question to ask is:If your primary contact doesn't answer, what happens next?If the answer is unclear, the communication process needs attention.Companies may establish internal response targets to evaluate their readiness.For example, they might aim to acknowledge an alert within five minutes, involve the audit coordinator within ten minutes, and retrieve a simple requested record within fifteen minutes.These are examples of internal performance objectives, not regulatory deadlines or permission to delay auditor access.The goal is to establish a response that is organized, prompt, and reliable.3. Rooms: Organize Audit Coordination and Evidence ManagementWhen auditors arrive, the organization needs a practical way to coordinate discussions, retrieve documents, and track requests.One approach is to prepare two working areas.The Front RoomThe front room is used for discussions with auditors, reviewing requested evidence, and coordinating the audit activities.The Back RoomThe back room supports the internal team responsible for retrieving documentation, contacting process owners, and managing outstanding requests.An alternative space should also be considered in case the usual rooms are unavailable.A simple request log can help the team track:What the auditor requested.Who is responsible for providing it.Which requests remain pending.What information has already been supplied.However, coordinating evidence must never become an exercise in hiding or manipulating information.Records should never be backdated, altered, or created retrospectively to improve their appearance during an audit.The purpose of coordination is to provide accurate and complete information efficiently.4. Access: Can Your Team Retrieve the Evidence?A procedure is only useful during an audit if the relevant employees can access it when needed.Imagine that an auditor requests a released batch record.The document exists, but only the absent Quality Manager has permission to open the system.The company now faces an avoidable problem.To prepare effectively, manufacturers should test access to important information, including:Quality Management System procedures.Manufacturing and batch records.Process validation documentation.Supplier and outsourced-process records.Product release information.Relevant testing and inspection results.The deputy should test these systems using their own authorized account rather than relying on another employee's credentials.Physical access is equally important.Manufacturers should consider how auditors will access relevant production areas, including any necessary safety instructions, gowning arrangements, or cleanroom requirements.A logical manufacturing route can help the company organize its response, but auditors must still be able to select relevant areas and activities within the applicable audit scope.Audit readiness means being able to demonstrate the actual work—not simply presenting selected documents.5. Practice: Test the System Before Auditors ArriveThe most effective way to identify weaknesses in an audit response procedure is to test it.A company may have clear instructions and designated backups, but those arrangements should be evaluated under realistic conditions.One useful exercise is a mock unannounced audit in which the usual Audit Leader is deliberately unavailable.The exercise can begin at reception.Can the receptionist identify the correct contact?Does the notification cascade work?Can the deputy coordinate the response?Are operators and supervisors comfortable explaining their activities?Can the team retrieve the complete history of a released production batch?These exercises can reveal practical weaknesses that are not obvious when reviewing procedures.After the exercise, the organization should document the gaps, assign improvement actions, and verify that the changes are effective.Training should also reflect the responsibilities of different employees.Reception staff need to understand notification procedures.Operators need to explain the work they actually perform.Supervisors should understand their processes and supporting records.The objective is not to teach employees scripted answers.It is to help them accurately explain their real activities and demonstrate the evidence supporting them.What Should Happen When Auditors Actually Arrive?When an unannounced audit begins, the organization should follow its established response process.Reception promptly verifies the auditors' identity and contacts the designated representative.The notification cascade begins, and the Audit Leader or deputy assumes responsibility for coordination.Internal support activities can then be organized while facilitating the auditors' access.A brief opening discussion may establish the audit priorities and practical arrangements.From there, process visits and evidence requests begin.For example, an auditor may ask:“Show me this production batch.”The Document Coordinator records the request, the Manufacturing team identifies the relevant information, and the response team tracks the evidence until it is supplied.Throughout the process, employees should focus on accuracy.Consider these two examples.Poor response:“We always do it this way.”Better response:“Here is the instruction I follow, and this is the record showing the check I performed.”Another example involves a missing signature.Poor response:“The signature is missing. I'll add it now.”Better response:“The entry is missing. We need to investigate the issue and assess its potential impact.”An audit should reflect the actual state of the Quality Management System.When employees cannot answer a question, they should explain the limitation and refer it to the appropriate person rather than speculate.After the Audit: Turn Findings into ImprovementsThe audit response does not end when the auditors leave.Manufacturers need to understand the findings, applicable response deadlines, and any potential impact on product conformity or patient safety.Appropriate follow-up activities may include investigating root causes, implementing corrective actions, and evaluating their effectiveness.The organization should also review how the audit itself was managed.Did the notification process work?Were the right employees available?Could the team retrieve the requested documentation?Were there unnecessary delays?Did any employees struggle to explain their responsibilities?It is important to distinguish between different types of weaknesses.For example, an incomplete batch record and difficulty retrieving that record are two separate problems.The first concerns the completeness of the manufacturing documentation.The second concerns accessibility and the effectiveness of the audit response process.Both problems may require action, even if they were discovered during the same audit.Three Practical Actions You Can Take TomorrowPreparing for an unannounced audit does not necessarily require beginning with a large project.Three simple exercises can provide valuable information about your current readiness.1. Ask Reception What Happens When Auditors ArriveImagine the Quality Manager is away.Does reception know whom to contact and what to do if the primary contact is unavailable?2. Ask Your Deputy to Retrieve One Released Batch RecordCan the deputy access the necessary systems and retrieve the relevant documentation using their own authorized credentials?Can the organization trace the batch from incoming materials through manufacturing and release?3. Use an Audit-Readiness ChecklistReview your existing arrangements for people, communication, coordination rooms, access, and practice.Identify the remaining gaps, assign responsibilities, and track improvements.These activities can help reveal whether the audit response procedure works in practice.Final Takeaway: Build a System That Works Without YouAn unannounced Notified Body audit should not become a crisis simply because one person is absent.A prepared organization has clear responsibilities, trained employees, accessible records, effective communication, and processes that can be demonstrated under real operating conditions.The goal is not to create a perfect performance for auditors.It is to maintain a Quality Management System that works consistently, regardless of who is present.The best way to prepare for an unannounced audit is to build a system that works even when you're not there.🎙️ In this episode of Medical Device Made Easy, we explore the practical steps manufacturers can take to strengthen their audit response and identify weaknesses before they become problems.Need Support with Audit Preparation?At Easy Medical Device, we support medical device companies with Quality Management Systems, regulatory compliance, and audit preparation.If your organization wants to improve its audit readiness, strengthen its internal processes, or prepare its team for Notified Body assessments, explore how we can help.🌐 Visit: https://easymedicaldevice.com/And remember: audit readiness starts long before the auditors arrive.Social Media to followMonir El Azzouzi Linkedin: https://linkedin.com/in/melazzouziTwitter: https://twitter.com/elazzouzimPinterest: https://www.pinterest.com/easymedicaldeviceInstagram: https://www.instagram.com/easymedicaldeviceThis podcast is hosted by Podcastics, the easiest platform to create and publish your podcast.
