Chief Executive

GMP for CEOs

GMP reaches the chief executive's desk in exactly one form: as a threat to supply, to licence, or to reputation — and usually later than it should have. This section is about recognising the exposure while it is still a management decision rather than a regulator's deadline.

Why it reaches you

Understand the strategic business implications of GMP, before the timeline stops belonging to you.

A manufacturing or importation authorisation is conditional on continued GMP compliance. That single sentence is why GMP is a board-level matter rather than a departmental one: the licence to operate is contingent, and the contingency is assessed by someone outside your organisation on a schedule you do not set.

The failure mode is rarely dramatic. It is gradual: an audit slips a quarter, a re-qualification rolls forward, a CAPA is closed on retraining without a confirmed cause. Each decision is defensible on the day it is taken. Read together by an inspector two years later, they support a finding that the quality system is not effective — which is systemic, and far harder to answer than any individual item.

The asymmetry matters commercially. The cost of closing a gap early is a project. The cost of closing it after a finding is a project plus a deadline you did not choose, plus the visibility of a published outcome, plus whatever the interruption did to supply. Same work, different price.

There is a second-order effect executives consistently underestimate: what a quality culture signals to the people in it. Where raising a problem is penalised, problems stop being raised. Inspectors are trained to notice that, and the resulting findings are about management rather than about the event.

What you are accountable forWhere GMP lands on this desk specifically.
The licence to operate
Manufacturing authorisations depend on demonstrated compliance. Outcomes are published in EudraGMDP, visible to customers, partners and competitors.
Supply continuity
Batch release delays, held stock and remediation programmes all reduce what reaches the market, regardless of demand.
Whether quality is resourced honestly
A quality function fully consumed by intake never reaches the work that prevents the next failure. That is a resourcing decision taken at your level.
Deal risk
GMP due diligence in an acquisition routinely surfaces validation debt, CAPA backlogs and inspection history that materially change valuation.
Tone from the top
Whether raising a problem is safe determines whether you find out about problems. This is set by management behaviour, not by procedure.
Early signalsThese appear in data you already have, before anyone external sees them.

What to watch, in your own reporting

Release keeps slipping and nobody can predict it

The business plans around quality rather than with it. That is a process problem being absorbed as a permanent constraint.

The same problem recurs

Recurrence says the previous correction did not work — which is read as a statement about the system rather than the event.

Quality is consulted after decisions

By the time quality sees a decision, the cheap options have usually closed.

Nobody can answer 'are we ready' without a project

If establishing your own readiness requires weeks of work, you do not currently know your position.

Questions worth askingIf any of these cannot be answered without a project, that is itself the answer.

Six questions that surface exposure early

  1. 01When is our next inspection likely, and what would it find today rather than after preparation?
  2. 02What did our last inspection or client audit commit us to, and is every commitment closed with evidence?
  3. 03Which single site or supplier, if it stopped tomorrow, would interrupt supply — and what is its compliance position?
  4. 04Is our quality function resourced to prevent problems, or only to process them?
  5. 05What did management review actually decide last quarter, and what got funded?
  6. 06If we acquired a site next year, who would do the GMP due diligence and what would they look for?
One GMP problem. Multiple perspectives.Each links through to the technical article and to the other three perspectives.

Six GMP topics, read from the CEO chair

CAPA

What does a recurring failure say about the organisation?

Technical article

Recurrence is a statement about the system

A repeat finding is treated far more seriously by an inspectorate than a first one, because it demonstrates the previous correction did not work. At executive level the signal is not the event but the pattern: an organisation that cannot make its own corrections hold is one whose assurances about anything else carry less weight.

Ask for recurrence rate and closure quality, not CAPA volume. Volume tells you about activity; recurrence tells you whether the system learns.

Data integrity

Why do these findings escalate so quickly?

Technical article

It undermines the evidence for everything else

A validation report, a batch record and a release decision are only worth what the underlying data is worth. A data integrity finding therefore calls into question the evidential basis of the whole site, not just the record in front of the inspector.

Treat data integrity as a culture and design question at your level: where people are penalised for raising problems, pressure to make data look acceptable is created by management, not by individuals.

Inspection readiness

What would an unannounced inspection find this week?

Technical article

Readiness is a state, not a project

An unannounced inspection removes the preparation window by design, so readiness becomes whatever state you were already in. Sites that prepare continuously spend less in total than sites that prepare in a three-week sprint, because sprint preparation competes with the day job at exactly the wrong moment.

Ask for the current position rather than a preparation plan. If establishing readiness requires a project, you do not currently know your position.

Deviations

What does our deviation record say about us?

Technical article

It is read as evidence of control

Investigation cycle time is one of the metrics inspectors use as a proxy for whether the quality system is under control. A queue of open investigations says the site cannot close what it opens — a conclusion drawn from your own records, not from an inspector's opinion.

Ask for ageing and recurrence, and for how often 'human error' appears as the concluded cause. Both are visible internally long before an inspection.

Validation

Why does this surface at the worst possible time?

Technical article

Validation debt is called in by events

It is paid during a transfer, a scale-up, an audit, or the introduction of a product that needs the equipment now. Work that would have been routine becomes a project on somebody else's timeline, frequently blocking a commercial commitment already made.

Treat validation status as a precondition for commercial commitments involving new products, sites or equipment, not as a downstream task.

Supplier and CMO risk

Where is our supply genuinely dependent?

Technical article

Their finding becomes your shortage

A contract manufacturer's compliance position is a dependency on your balance sheet whether or not it appears there. Concentration in a single site or supplier converts their regulatory problem directly into your supply interruption.

Ask which single supplier or site, stopping tomorrow, would interrupt supply — and what is known about its compliance position.

Tools for this roleBoth calculate in your browser and submit nothing.

Move from reading to a position

Next step

Establish the position before deciding the response

The readiness score covers seven quality-system domains in twenty questions and names the two areas carrying most of your exposure. It calculates in your browser and submits nothing.