How do pharma, biotech, medtech and IVD companies use mock audits to test their audit readiness before the notified body or the authority is actually at the door?

A mock audit is a dress rehearsal, and its value hinges on when it is held. It has to fall early enough that the genuinely expensive findings, Critical and Major, can not only be captured but effectively closed before the real date. If it falls too late, it merely documents the gap instead of removing it.

The bottleneck is rarely the document review. Missing evidence can be supplied after the fact; what gives way under the pressure of an audit is the staff interviews and the walk-through, because that is where correct facts, presented in an untrained way, create the wrong impression.

In the mock audits Entourage runs, most avoidable findings arise exactly in the staff interviews and walk-through: not in the document, but in the conversation. This is precisely why the audited area must not be forewarned: an announced mock audit tests the tidied-up state, not real audit readiness.

It pays to log every document request with a timestamp during the mock audit, from the auditor's question to the moment the document is in the front room. Long lead times show where filing, access rights or the roles in the back room do not fit, and they can be shortened before the date. In the real inspection, the same delay looks like uncertainty to the inspector.

Equally important is the sequence after a mock audit's findings report. Classifying findings as Critical, Major, Minor and Observation is only the start; what matters is that the resulting actions run through the existing CAPA system and are checked for effectiveness before the external body arrives.

An item marked as done but ineffective weighs more heavily in the real audit than the open finding would.

The findings report also works as a rehearsal for the response to the authority. After an FDA inspection, a response to Form FDA 483 has to arrive within 15 business days to be reviewed before FDA decides on a Warning Letter; in the EU, comments on the draft report follow (see inspection readiness). Answering the mock report within the same window shows whether root cause analysis and approval route hold up in three weeks.

In medicinal product manufacturing, the competent authority may inspect unannounced where necessary (Article 111(1) of Directive 2001/83/EC). For medical devices and IVDs, the notified body audits unannounced at least once every five years under Annex IX, Section 3.4 of the MDR and IVDR, on a plan it does not disclose.

A site that establishes audit readiness only before known dates does not maintain the state in between, and the optional closing audit becomes the only reliable sign-off before the real thing.