Maturity model

Inspection readiness maturity

Readiness is a state, not a project. Maturity here is the difference between a site that prepares when an inspection is announced and one that could host an unannounced inspection this week.

In one line

Inspection readiness maturity is whether you can demonstrate control at inspection pace without a preparation sprint.

The five levels

What each level looks like here

Level 1

Reactive

The process runs when something forces it to.

Preparation begins when an inspection is announced. Previous commitments may be closed on paper without evidence attached.

Typical weakness. No knowledge of the site's current position without a project to establish it.

Risk. An unannounced inspection finds whatever state the site was already in.

Level 2

Controlled

Procedures exist and are followed, mostly.

A preparation procedure exists and documents can be found, but retrieval is slow and the back room has never been rehearsed.

Typical weakness. Demonstrability lags actual compliance.

Risk. Slow retrieval reads as poor document control, and scrutiny widens.

Level 3

Systematic

The process is designed, resourced and measured.

Timed retrieval is exercised, previous commitments are closed with evidence, and SMEs have been briefed on answering only what is asked.

Typical weakness. Narrative consistency across departments is untested.

Risk. Two departments describing the same process differently.

Level 4

Integrated

It connects to the rest of the quality system.

Mock inspections run at inspection pace including back-room simulation, and findings feed the internal CAPA system like any other event.

Typical weakness. Mock inspections may avoid the genuinely difficult areas.

Risk. Rehearsal that confirms comfort rather than testing exposure.

Level 5

Optimized

It improves itself, and the improvement holds.

The site is continuously ready, self-inspection reliably finds what an inspector would find first, and readiness is maintained rather than restored.

Typical weakness. Sustaining rehearsal discipline between inspections.

Risk. Readiness decaying quietly in a long gap between inspections.

Expected controlsWhat a site at level 3 or above should be able to show.
Timed retrieval capability
A named record produced within minutes, exercised rather than assumed.
Functioning back room
Requests logged, documents checked before they go in, and a record of what was provided.
Closed previous commitments
Every action from the last inspection closed with evidence attached.
Narrative consistency
Production, QA and engineering describing the same process the same way.
Effective self-inspection
Internal audits that surface findings before an inspectorate does.
Moving up

What actually shifts the level

  • Run one timed retrieval exercise. It predicts the first day of an inspection better than any document review, and takes under a day.
  • Rehearse the back room — it is usually the part nobody has practised and where delays become visible.
  • Interview production, QA and engineering separately about the same process and compare the accounts.
  • Check that every previous commitment has evidence attached, not just a closure date.
Regulatory basis

Where the underlying requirements sit

Limits

This is a framework, not a classification

These five levels are a GMPConsultant.nl framework for structuring a conversation about capability. They are not an official regulatory classification, no authority recognises or issues them, and a maturity level is not a statement of GMP compliance.

Next step

Score this domain rather than estimate it

The GMP Health Index scores seven domains and maps each to a maturity level, in about ten minutes. It calculates in your browser and stores history on your device only.