GMP Surveillance Audit: What Happens After Certification
The certificate is not the end of the process. It is the point at which a cycle starts, and the cycle is what makes the document mean anything a year later.
- Surveillance pattern stated in the original quotation
- Written quotation, no open-ended fees
- Nearly two decades of assessment experience
- Open to every manufacturing industry, not just food and pharma
Sites that understand this find the GMP surveillance audit uneventful. Sites that treat certification as a project with a completion date find the first interim visit uncomfortable, and usually for the same reason each time.
Coming up to a surveillance visit? IAS can review where you stand before the assessor arrives — talk to IAS Qatar.
At a glance
- The cycle: initial assessment, certificate, periodic surveillance, then full recertification.
- What surveillance checks hardest: whether previous findings really closed, and whether the system still describes practice.
- What it is not: a repeat of the full assessment.
- What keeps it easy: an internal audit programme that has already found your drift.
- What ends a certificate: drift nobody corrected, not a single bad day.
What a GMP surveillance audit actually examines
A GMP surveillance audit is shorter and more targeted than the initial assessment. It samples rather than covers, and it concentrates on three things.
Closure of previous findings
Not the paperwork saying they were closed — the evidence that the change held. An assessor will look at records created since the corrective action and check that the new practice is the actual practice.
Whether the system still describes current operation
Every change since the last visit is a candidate: a new supplier, a revised procedure, replaced equipment, a reformulated product, a new shift pattern. The question is whether each was assessed before it happened and traced into documents, training and records.
A sample of the core system
Records, document control, training, equipment status, complaints and deviations. Enough to establish that the system is running, not enough to constitute a full audit.
| Focus area | What the assessor is testing | What answers it quickly |
|---|---|---|
| Previous findings | Whether the change held in practice | Records created after the corrective action |
| Changes since last visit | Whether each was assessed beforehand | A maintained change log |
| Records | Contemporaneous completion | Recent batch records, chosen at random |
| Document control | Floor copies matching the register | A current register and a clean workstation |
| Training | Retraining after revisions | Personnel files linked to document revisions |
| Internal audits | That the programme is real | Reports with genuine findings, closed |
The pattern that causes trouble
It is consistent enough to be predictable. A site certifies, files the certificate, and changes nothing about how it works. Twelve months later the assessor arrives and finds three or four procedure revisions that never reached training, a supplier added without assessment, and records completed in blocks at shift end.
None of that is dramatic. All of it is drift, and drift is what a GMP surveillance audit exists to catch.
The reverse pattern is equally consistent. A site that runs its own audits — one area a month, findings written down and closed — arrives at its GMP surveillance audit having already found and fixed most of what the assessor would raise. The visit becomes a conversation about work already done.
Recertification is not surveillance repeated
At the end of the cycle, a full reassessment renews it. This is closer in scope to the original assessment than to a GMP surveillance audit, and sites sometimes underestimate it because the intervening visits were light.
What has usually changed since the initial assessment is more than people expect: product families added, equipment replaced, staff turned over, procedures revised several times. Recertification tests the whole system as it now stands, not the one that was certified three years ago.
The practical implication is to start preparing before the final surveillance rather than after it, and to use that visit to identify what recertification will examine.
Recertification due within the year? Scope the reassessment now rather than close to expiry — request a quotation.
Changes that need telling us about, not just logging
Some changes are internal matters. Others affect what the certificate says, and those need raising rather than waiting for the next visit.
- A new production line or product family outside the current scope.
- An additional site, or a relocation.
- A significant change in process affecting how the product is made.
- A change in the legal entity holding the certificate.
- Ceasing an activity that is named in the scope.
Every one of them alters the accuracy of what is printed on the document. Raised in advance, they are scoped into a planned visit at marginal cost. Discovered at surveillance, they are findings — and the goods produced in between sat outside a certificate that appeared to cover them.
The commercial reason any of this matters
For manufacturers here, the certificate is usually doing work in tender processes and supplier qualification. Both check validity, and both check it at the point of decision rather than when the certificate was issued.
A certificate that lapsed between cycles, or that names a scope the business has outgrown, fails at exactly the moment it was bought to succeed. Keeping it current is not an administrative chore; it is what protects the commercial value already paid for.
What makes the whole cycle straightforward
One thing, mostly: an internal audit programme that runs whether or not anyone is visiting.
A site auditing one area a month generates its own findings, closes them on its own schedule, and can show an assessor a record of self-correction. That record is itself among the strongest evidence a system is working, and it makes every subsequent visit shorter.
Where staff cannot be released together, the online cGMP internal auditor training works at each person’s own pace, and the cGMP foundation course gives the wider team the grounding that keeps records worth sampling. IAS also publishes an ISO training schedule for Qatar for sites that would rather book a scheduled session.
The month before a surveillance visit
Preparation for a GMP surveillance audit is different from preparation for a first assessment, because the assessor already knows your system and is looking for movement since they last saw it.
Four weeks out — reread the last report
Not the summary; the findings. Each one will be revisited, and the question is whether the change held rather than whether it was made.
Three weeks out — assemble the change log
Everything that altered since the last visit: procedures revised, suppliers added, equipment replaced, staff moved into new roles, products reformulated. For each, be able to show the assessment that preceded it.
Two weeks out — sample your own records
Pull five recent ones at random and check completion timing, corrections, signatures. This is where drift shows first and where an assessor looks early.
One week out — check the workstations
Procedure revisions at the point of use, matching the register, with superseded copies gone rather than filed nearby.
| Timing | Task | What it prevents |
|---|---|---|
| 4 weeks | Reread previous findings | Being surprised by a reopened finding |
| 3 weeks | Assemble the change log | The commonest surveillance finding |
| 2 weeks | Sample your own records | Drift in completion habits |
| 1 week | Walk the workstations | Superseded documents in use |
The underlying point. Every item on that list is something an internal audit programme would have caught during the year. Sites running one are confirming what they already know; sites without one are compressing twelve months of checking into four weeks, which is both harder and less reliable.
That difference — checking continuously versus checking before a visit — is what separates a GMP surveillance audit that takes a morning from one that generates findings.
Quick definitions
- Certification cycle: the period a certificate runs before full reassessment.
- Surveillance visit: the shorter interim assessment within the cycle.
- Recertification: the end-of-cycle reassessment that starts the clock again.
- Drift: the gradual divergence between documented and actual practice.
- Change log: the running record of what changed and how it was assessed.
- Scope currency: whether the certificate still describes the business.
- Lapse: a certificate that expired without renewal.
- Self-correction record: evidence the site finds and fixes its own gaps.
Why manufacturers in Qatar work with IAS
- The surveillance pattern stated in the original quotation, so the whole cycle is visible from the start.
- Changes can be raised between visits and scoped into a planned assessment rather than found as gaps.
- Recertification scoped in advance rather than close to expiry.
- Internal auditor training available alongside certification, which is what makes surveillance straightforward.
- Suited to any producer in this market, whatever the sector or output.
Two different things, kept apart deliberately: IAS runs assessments and courses; regulatory authorities decide who may operate and what may be sold.
Surveillance and recertification are planned from the start: the certification process page sets out the cycle, frequently asked questions answers the questions that recur between visits, and contacting IAS is where a reassessment is scheduled.
Frequently Asked Questions
How often does surveillance happen?
On a pattern set at the start of the cycle and stated in the quotation, so the commitment is visible before you begin rather than arriving as a surprise later.
Is surveillance a full audit again?
No. A GMP surveillance audit is shorter and targeted, concentrating on whether previous findings really closed, whether changes since the last visit were assessed, and a sample of the core system.
What does an assessor look at first?
Usually the previous findings, and specifically whether the change held in practice rather than whether the paperwork says it closed.
Can findings be raised at surveillance?
Yes, and often are. Surveillance is a genuine assessment, not a formality, and drift since the last visit is exactly what it exists to detect.
What happens if we have made changes we did not report?
They become findings, and the more awkward issue is the period during which goods were produced outside a scope the certificate appeared to cover. Raising changes as they are planned avoids both.
When should we start preparing for recertification?
Before the final surveillance, and use that visit to identify what the reassessment will examine. Leaving it until close to expiry puts continuity at risk unnecessarily.
Does a certificate expire suddenly?
It runs on a cycle rather than stopping on a date with nothing in between. What ends a certificate is uncorrected drift or a cycle allowed to lapse, not a single difficult visit.
Can a surveillance visit be rescheduled?
Within limits, and it is far better to raise a clash early than to host a visit with the relevant lines idle and the right people absent. What causes difficulty is a visit deferred repeatedly until the cycle itself is at risk.
Does a scope reduction need reporting?
Yes. Ceasing an activity named on the certificate makes the document inaccurate in a way that matters, because it now claims coverage of something you no longer do. It is a straightforward amendment once raised.
What if we change certification body mid-cycle?
The incoming body assesses rather than inheriting, so plan it around your cycle rather than in the middle of one. Groups consolidating several certificates usually do this at recertification for exactly that reason.
Is there any value in surveillance beyond keeping the certificate?
Most sites find there is. An outside assessor sampling your system once or twice a year catches drift that internal familiarity hides, and the findings feed your own programme rather than duplicating it.
Who is responsible for maintaining GMP certification?
One named person, with the authority to be told about changes before they happen. Cycles slip where the certificate belongs to everybody and therefore to nobody, and the first sign is usually a change that reached production before it reached whoever manages the certificate.
What is the most common surveillance finding?
Procedure revisions that never reached training, and changes made without assessment. Both are drift, and both are exactly what an internal audit programme would have caught.
