For many medical device manufacturers, mock audits are viewed as a final rehearsal before the US Food and Drug Administration (FDA) arrives, but three QualityHub subject matter experts (SMEs) argue they should be much more than that.
When designed properly, mock audits can expose weaknesses in a company’s quality system, identify documentation gaps, reveal training deficiencies, and prepare employees for the pressure of interacting with FDA investigators. More importantly, they provide an opportunity to correct problems before they become Form 483 observations or warning letters.
Whether manufacturers rely on outside consultants, internal auditors, or a combination of both, QHub SMEs Melinda Novatny, Elisabeth George, and Jeff Caldwell say the objective should always be the same: create an inspection experience that is as realistic as possible.
Don’t Treat Mock Audits Like a Compliance Exercise
Many firms still conduct mock audits by reviewing one clause of the quality system at a time to satisfy requirements outlined in international quality systems standard ISO 13485:2016. While that approach meets the standard, it doesn’t reflect how FDA investigators actually inspect device makers.
“Companies significantly underestimate the value of a strong audit program,” QualityHub Principal Consultant Melinda Novatny said. “It’s not a check-the-box exercise.”
Instead, she recommends designing mock audits to mirror FDA’s investigative approach.
“You miss the opportunity to really challenge your system when you do it discreetly,” Novatny said. “If you start to think about the QMSR [FDA’s Quality Management System Regulation] and you start to focus on risk across your quality system and pull the threads, that’s much more valuable.”
Rather than auditing corrective and preventive action (CAPA) systems, complaints, purchasing controls, and recalls as separate elements, investigators frequently follow information wherever it leads. A complaint may lead to CAPA, which leads to risk management, which leads to supplier controls or design changes. Companies should structure their mock audits the same way.
“It gives you an opportunity to use your internal audit program as your pre-inspection method,” Novatny said while acknowledging that manufacturers still need to ensure every quality system element is reviewed periodically. If broader, process-based audits leave lower-risk areas uncovered, those can be addressed later through more targeted mock audits.
Train the People Who Will Face FDA
A mock audit is only as valuable as the people participating in it, QualityHub Principal Consultant Elisabeth George stressed.
Companies often focus heavily on procedures while overlooking employee preparedness. Among the biggest mistakes George sees firms making “is not educating the people that are going to get audited and not ensuring that everybody knows what their role is.”
Employees should understand more than their job descriptions. They should know their responsibilities during an FDA inspection, where documents are located, how records should be reviewed before they’re presented, and what types of questions investigators commonly ask.
George says FDA investigators will sometimes ask company executives simple questions designed to catch them off guard. “They’re going to ask you minutia that you won’t be expecting, like what your middle initial is and what your job title is,” she said.
One memorable question came when George witnessed an investigator ask a CEO, “What makes you capable of doing your job?”
“The inspection doesn’t start in the ‘front room.’ The inspection starts when the FDA investigator drives onto your parking lot.” – Jeff Caldwell
The CEO “hesitated because the question seemed so unusual,” she said. “But a hesitation like that from the head of a company can be problematic.”
Instead of overthinking a response, George recommends preparing employees – from the shop floor to the C-suite – to answer confidently by briefly summarizing their education, industry experience, and qualifications.
Another frequent problem involves communication. Because mock audits often feel less formal than FDA inspections, employees tend to continue talking after answering a question. That’s why George advises practicing disciplined communication during every mock inspection.
And during a real facility inspection, FDA investigators frequently spend long stretches of time reviewing documents without speaking. Employees should become comfortable allowing those moments of silence rather than volunteering additional information.
“The bottom line here is to answer only the questions you are asked and to learn to respect silence,” George said. (Related Story: “Don’t Say That! How Loose Lips Can Sink Your Next FDA Inspection,” QualityHub, July 8, 2026.)
Surprise Your Employees
Preparation doesn’t always require advance notice. Consultant Novatny believes manufacturers can gain valuable insights by conducting unannounced mock inspections.
She doesn’t recommend having consultants masquerade as FDA investigators. Instead, she advises informing employees that a mock inspection will occur only on the morning it begins.
“It’s a good pressure test of your system,” Novatny said. “If you make it an unannounced audit from a consultant, employees experience many of the same pressures as an actual inspection without feeling deceived.”
The approach also allows companies to test operational readiness.
“For example, when I walk into a facility I’ll introduce myself to the front desk as though I’m an investigator so I can gauge how the front desk operates when I show up, and to make sure they call the right people,” she said, noting that such exercises often reveal weaknesses that document reviews never uncover.
The Inspection Starts in the Parking Lot
Meanwhile, QualityHub Principal Consultant Jeff Caldwell believes companies often overlook the most basic aspect of inspection readiness.
“The inspection doesn’t start in the ‘front room,’” he said. “The inspection starts when the FDA investigator drives onto your parking lot.”
A so-called inspectional “front room” is a designated area in a company’s facility where FDA investigators carry out the majority of their work while on site. It’s also where the firm’s representatives respond to investigator questions and provide requested information, among other tasks.
Caldwell encourages companies to conduct Gemba walks that follow an investigator’s path from the parking lot through the facility entrance.
“The condition of the property and the condition of the facility as investigators walk up to the building all contribute to first impressions,” Caldwell said, noting that he coaches clients to evaluate everything that visitors encounter, including reception areas, lobby furniture, conference rooms, and even landscaping and sidewalks.
“The best mock audit is with a third party, hands down.” – Elisabeth George
Those observations aren’t about appearances alone, Caldwell said. From the get-go, investigators will develop theories about how well an organization manages its operations.
“They’ll be looking for evidence of control,” he said.
Throughout his career, Caldwell has seen manufacturing facilities with dirty ceiling vents, damaged furniture, cluttered workspaces, missing outlet covers, dirty floors, and other signs of poor housekeeping.
“If a company isn’t cleaning its ceiling vents, then an investigator is going to wonder if their air-handling system is common to their clean room,” he said. “The investigator is going to check that.”
Likewise, poorly maintained grounds may prompt investigators to question preventive maintenance programs, equipment upkeep, or facility controls.
Every Interaction Reinforces a State of Control
Facility conditions represent only part of the equation. Consultant Caldwell said employees should understand that every interaction with investigators either reinforces or weakens confidence in the company’s quality system.
“It’s your job to demonstrate that you understand your procedure – that you understand what you need to do,” he said.
Preparation should extend to front-room operations, back-room support, information technology, executive leadership, and document retrieval. Organizations should practice those roles during mock audits until responses become routine. (Related Story: “Tips From the ‘Back Room’: 5 Strategies for Successful FDA Inspections,” QualityHub, July 8, 2026.)
“Make sure you’re demonstrating a state of control from the moment that investigator walks in,” Caldwell said.
Practice Makes Perfect
Mock audits shouldn’t become a frantic exercise performed only after an FDA inspection is announced.
Instead, QualityHub’s Caldwell, George, and Novatny encourage manufacturers to build realistic inspection scenarios into their ongoing quality programs.
By combining risk-based auditing, independent assessments, certified auditors, employee interview preparation, realistic role-playing, and facility readiness, companies can identify vulnerabilities long before FDA investigators discover them.
And the payoff extends beyond a smoother inspection. Done well, mock audits strengthen quality systems, reinforce accountability throughout the organization, and help create the culture of inspection readiness that regulators increasingly expect to see.
Third-Party Audits Offer Different Perspective
While internal auditors understand company procedures, know where records are stored, and often have longstanding relationships with employees, such advantages also create limitations.
Consultant George believes manufacturers receive the greatest value from independent auditors who approach the company with fresh eyes.
“The best mock audit is with a third party, hands down. It’s somebody who does not know your organization and will come in and do an audit very similar to the way the FDA performs an inspection,” she said. “Outside auditors will ask you to present certain things. They will ask you to share records that they’ve never seen before. They will follow a cadence similar to the FDA.”
Because external auditors are unfamiliar with the organization, employees can’t rely on shared assumptions or informal explanations. Instead, they must demonstrate compliance exactly as they would during an FDA inspection.
“You don’t get the same value proposition from an internal auditor that you would by having two or three outside people doing a focused audit,” George said.
If You Can’t Bring in Consultants, Follow FDA’s Lead
Not every manufacturer has the resources for outside mock audits, however. When firms conduct mock inspections internally, George recommends modeling every aspect of the exercise after FDA’s inspection methodology.
“Companies should definitely leverage the FDA’s guidance on its inspection methodology found in the agency’s Compliance Program Manual [CPM] for inspecting device makers,” she said.
CPM 7382.850 details for FDA investigators what they should look and ask for during a facility inspection, among other activities. (Related Story: “Takeaways From FDA’s Retooled Compliance Manual for MedTech Inspections,” QualityHub, March 27, 2026.)
George says firms should review the same types of records FDA investigators typically request, understand how inspections flow from operational activities back to management responsibility, and follow issues wherever they lead.
She further recommends using the MDSAP audit methodology as another valuable framework. The Medical Device Single Audit Program allows a MedTech manufacturer to undergo one quality systems audit to satisfy the regulatory requirements of the US, Canada, Japan, Brazil, and Australia.
And perhaps most importantly, manufacturers should ensure their audit team includes experienced personnel.
“If you don’t have at least one person in your organization that is a certified auditor, you should make sure to get one,” George said, pointing out that auditing is a specialized discipline requiring formal training and experience.
“Being trained as an auditor takes talent,” she said.
