How do pharma, biotech, medtech and IVD companies test their audit readiness before the notified body or the authority is actually at the door?

A mock audit is a dress rehearsal, and its value hinges on the sequence. It has to fall early enough that the genuinely expensive findings, Critical and Major, can not only be captured but effectively closed before the real date. If it falls too late, it merely documents the gap instead of removing it. The bottleneck is rarely the document review. Missing evidence can be supplied after the fact; what gives way under the pressure of an audit is the staff interviews and the walk-through, because that is where correct facts, presented in an untrained way, create the wrong impression. This is precisely why the audited area must not be forewarned: an announced mock audit tests the tidied-up state, not real audit readiness.

The second sequence concerns what happens after the findings report. Classifying findings as Critical, Major, Minor and Observation is only the start; what matters is that the resulting actions run through the existing CAPA system and are checked for effectiveness before the external body arrives. An item marked as done but ineffective weighs more heavily in the real audit than the open finding would. Under the EU GMP Guidelines and the MDR (EU) 2017/745, inspections can also be unannounced. Anyone who establishes audit readiness only sporadically before a known date does not maintain the state in between, and the optional closing audit then becomes the only reliable sign-off before the real thing.