How do pharma and biotech manufacturers build a GMP-compliant quality system that holds up under a regulatory inspection?
We support manufacturers of medicinal products, active substances and sterile products in building and optimizing GMP-compliant production in line with the EU GMP Guide and 21 CFR Part 210/211 - from the gap analysis through the quality management system to inspection by EMA or FDA. The decisive hurdle is rarely a single missing process, but the missing link: as long as the deviation, CAPA and change control systems are not interlocked, every gap only surfaces during the inspection itself, when there is no time left to remediate.
- Pharma
- Biotech
- MedTech
- IVD
Overview
What does GMP require of manufacturers in practice?
Support from gap analysis to inspection · EU GMP Guide Part I/II & Annexes, 21 CFR Part 210/211, ICH Q7, Q9, Q10
Last updated: 2026-06-13
Good Manufacturing Practice under the EU GMP Guide (EudraLex Volume 4) and 21 CFR Part 210/211 is mandatory for manufacturers of medicinal products, active substances and sterile products - as well as for CDMOs, contract manufacturers and importers. Four points where GMP systems most often break down in practice:
- Outdated SOPs and specifications fail to keep pace with the current state of the EU GMP Guide and the ICH guidelines, so that documented and actual practice drift apart.
- The quality management system per ICH Q10 is in place, but deviation management, CAPA and change control are not linked - findings are addressed, but root causes are not closed out systematically.
- Sterile manufacturing is run against the revised Annex 1 without the required Contamination Control Strategy existing as a coherent document.
- Qualification and validation per Annex 15 are started too late in a scale-up or with a new facility, so that process validation slows down the production start instead of safeguarding it.
Services
How we support you
GMP gap analysis & readiness assessment
A systematic as-is/to-be comparison of the existing GMP status against EU GMP Guide Part I/II, the applicable Annexes and 21 CFR Part 211. The result is a prioritized action plan with responsibilities and a timeline.
Learn more →Quality management system build-up
Development and implementation of a GMP quality management system per ICH Q10: SOP structure, batch record system, specifications and release processes with traceable document control.
Learn more →Deviation, CAPA & change control system
Building interlinked processes for deviation management, CAPA and change control on the basis of Quality Risk Management per ICH Q9, so that deviations lead to documented root cause remediation rather than one-off notes.
Learn more →Validation & qualification
Planning and execution of qualification and process validation per EU GMP Annex 15, including the validation master plan and the connection of computerised systems to Annex 11.
Learn more →GMP training & qualification
Training of production, QA and QC personnel on GMP fundamentals, hygiene, documentation obligations and deviation management, with verifiable training records for the personnel file. Also available as in-house training.
Inspection preparation & regulatory support
Mock inspections to simulate EMA and FDA audits, preparation of the inspection team, compilation of the documentation, plus support during the inspection and in working off the findings.
Learn more →How we work together
What it comes down to
A GMP system rarely fails because of a single missing process, but because of sequence and linkage. The GMP gap analysis against the EU GMP Guide (EudraLex Volume 4) and 21 CFR Part 211 makes clear at the outset which gap is critical, before SOPs are written and equipment is qualified. Only then is it worth building the quality management system per ICH Q10: SOPs, batch records and release processes form the framework into which deviation management, CAPA and change control are hooked. These three processes specifically must interlock, because an inspector does not check whether a deviation was documented, but whether its root cause has been demonstrably closed, underpinned by Quality Risk Management per ICH Q9.
The most common bottleneck arises further downstream, in qualification and validation per Annex 15 and in the computerised systems per Annex 11. Anyone who starts process validation only shortly before the production start turns it into a bottleneck, because without a validated process no batch may be released to the market. That is why we pull the validation master plan and the data integrity concept forward, to where corrections are cheap, rather than into the inspection, where the same gap becomes a critical finding and pushes the project back by months. In sterile manufacturing, the revised Annex 1 comes into play, requiring the individual hygiene measures to be combined into a coherent Contamination Control Strategy.
Our approach
Our approach
Step
Result
GMP gap analysis
Prioritized action plan: where the system stands relative to the EU GMP Guide and 21 CFR Part 211, what is critical, and what is a matter of effort.
QMS build-up & documentation
SOP structure, batch records, specifications and release processes per ICH Q10, documented and controlled.
Deviation & CAPA system
Interlinked processes for deviation, CAPA and change control with risk assessment per ICH Q9 in operation.
Qualification & validation
Validation master plan and completed qualification/process validation per Annex 15.
Mock inspection & training
Simulated EMA/FDA inspection, prepared team, trained personnel with documented records.
Regulatory inspection & follow-up
Supported inspection, structured working off of the findings via a scheduled CAPA plan.
Common pitfalls
Where projects commonly fail
Deviation management is decoupled from the CAPA system.
Deviations are documented but not translated into corrective and preventive actions; during the inspection it becomes apparent that the same root cause recurs - a classic trigger for a critical finding.
The SOPs do not reflect actual practice.
When processes are carried out differently from what is described, a gap opens up between documentation and reality that an inspector exposes immediately during the walkthrough via the personnel interview.
In sterile manufacturing, the coherent Contamination Control Strategy is missing.
The revised EU GMP Annex 1 requires a consistent, overarching strategy; individual hygiene measures without connecting logic count as a gap, not as evidence.
Qualification and validation per Annex 15 start too late.
If process validation is only tackled shortly before the planned production start, it becomes the bottleneck, because without a validated process no batches may be released to the market.
Computerised systems are operated without a data integrity concept.
If the audit trail, access rights and validation per Annex 11 are missing, EMA and FDA flag the integrity of the GMP-relevant data regardless of the quality of the production itself.
FAQ
Frequently asked questions
Sources
- EU GMP Guide (EudraLex Volume 4) - Part I, Part II, Annex 1, Annex 11, Annex 15
- Directive (EU) 2017/1572 - principles and guidelines of good manufacturing practice for medicinal products for human use (replaces Directive 2003/94/EC)
- 21 CFR Part 210/211 - Current Good Manufacturing Practice for Finished Pharmaceuticals
- ICH Q7, Q9, Q10 - GMP for active substances, Quality Risk Management, Pharmaceutical Quality System
- https://theentourage.de/expertise/good-manufacturing-practice/ (existing page content, revised)
Life Science Journal
Regulatory updates, straight to your inbox.
New requirements, authority decisions and practice notes. Once a month, unsubscribe any time.
Case Studies
What this looks like in practice
Related insights
All insights →Regulations & standards considered
- EU GMP Guide (EudraLex Volume 4)
- EU GMP Guide Part I (medicinal products for human use)
- EU GMP Guide Part II (active substances / APIs)
- EU GMP Guide Annex 1 (manufacture of sterile medicinal products)
- EU GMP Guide Annex 11 (computerised systems)
- EU GMP Guide Annex 15 (qualification and validation)
- Directive (EU) 2017/1572 (GMP principles for medicinal products for human use)
- 21 CFR Part 210 (cGMP - general principles)
- 21 CFR Part 211 (cGMP - finished pharmaceuticals)
- ICH Q7 (GMP for active substances)
- ICH Q9 (Quality Risk Management)
- ICH Q10 (Pharmaceutical Quality System)
Related topics
Annex 1 (Sterile Manufacturing) →
GMP requirements for sterile manufacturing in detail
Inspection Readiness →
Preparation for EMA and FDA inspections as the follow-on step
GxP Audit Consulting →
Auditing GMP compliance to complement the system build-up
Computer System Validation →
Validation of computerised systems per Annex 11
Have a concrete project?
Briefly outline your situation. We'll respond with an initial assessment, usually within one business day.
Prefer direct? +49 89 4161170-0
info@theentourage.de
- Reply usually within one working day
- 4 offices: DE · CH · IT · US
- 100% life sciences