Record: GMP Auditor Qualification and Independence

This is a ready-to-use record for qualifying and requalifying a GMP supplier auditor. Replace every <<FILL: ...>> placeholder with your own specifics, set your document numbers and dates, and route it through your normal document control and training records process. A worked filled specimen follows the template. Verify each cited regulation against the current published source before you rely on it. This template is an educational reference for you to adapt to your own quality system, products, and regulatory context; it is not legal, regulatory, or professional advice. Suppliers and regulators both ask the same question about an audit report: who are you to judge this. This record is the answer. It also answers the harder question that follows a favourable audit of a supplier somebody in your company badly wants to keep, which is whether the auditor had any reason to reach that conclusion.

Record control

1. Education and technical background

Technical background matters more than most qualification programmes admit. An auditor with three years in a QC laboratory will find things in a QC laboratory that a career QA generalist will walk past. The point of this section is not to collect credentials, it is to feed section 4, where you decide what this person can lead alone.

2. GMP and auditing training

Record assessment, not just attendance. A training row that shows a person sat in a room proves nothing about whether they can write a defensible finding. Useful evidence of effectiveness includes a graded finding-writing exercise, a classification calibration exercise scored against a reference set, or a supervised audit with a documented mentor assessment.

3. Audit experience

3.1 Audits performed

3.2 Progression summary

3.3 Report quality assessment

The clearest test of an auditor is a report somebody else has to defend. Assess at least one report per qualification cycle against the criteria you apply to any audit report.

4. Technical scope of qualification

This is the section that does the real work. Say what this person may lead alone and what they may only audit with a technical SME beside them. Vagueness here is how an auditor with no microbiology background ends up signing off a sterility assurance system.

Rule: an auditor may write a finding in an area marked “with SME support” only where the SME who was present agrees the finding is technically sound. The lead auditor still owns the grade and the report.

5. Conflict of interest and independence declaration

I declare, in respect of my appointment as <<FILL: role>> for audits performed under <<FILL: SOP-ID>>, that:

Exceptions or disclosures: <<FILL: none, or describe each, with the mitigation agreed and who approved it>>

Supplier-specific exclusions: <<FILL: name any supplier this auditor may not audit, and why>>

The purchasing conflict is the one that gets missed. A supplier quality professional whose objectives include cost savings, on-time delivery, or keeping a sole-source qualified is not independent of the outcome of that supplier’s audit, even with the best intentions. That does not mean supply chain people cannot participate; it means they attend as observers or technical contributors, and they do not author findings, grade them, or sign the report. Write the rule down before the situation arises, because arguing it in the week the audit report is due never goes well.

6. Continuing competence

Triggers for early reassessment

That last trigger is uncomfortable and worth keeping. Not every missed problem is an auditor failure, and a programme that treats it as one will produce auditors who never conclude anything. But an audit file that is never re-examined after a supplier failure is a programme that cannot learn.

7. Quality unit approval

Retained per <<FILL: records retention schedule>> for <<FILL: period>>, and available on request during an inspection of the supplier oversight programme.

Filled specimen

A completed record for an illustrative auditor. Name, employer, records and dates are invented for teaching purposes.

Record control: AQ-0052 rev 2. P. Raghavan, Senior Specialist, Supplier Quality. Employee. Reports to Head of Supplier Quality. Qualification status: lead auditor, restricted scope. First qualified 14 March 2023. This assessment 06 February 2026. Next requalification February 2029. Governing procedure SOP-QA-046.

Education and background: MSc Analytical Chemistry, 2012. Eleven years GxP experience: QC analyst 2013 to 2017 (chromatography, release and stability testing of small molecule and biologic drug product); QC systems specialist 2017 to 2021 (chromatography data system administration, audit trail review programme, method transfer); supplier quality 2021 to date. Hands-on operational experience: QC chemistry 8 years, computerised systems in a QC setting 4 years. No operational experience in sterile manufacturing or microbiology. Product types: sterile biologics, small molecule API, one gene therapy programme. Regulatory exposure: SME for QC data integrity during an FDA pre-approval inspection, September 2023, and an EMA inspection, June 2024.

Training, extract:

Audit experience: 14 audits since 2022. Two as observer (2022), four as co-auditor under K. Ferreira and M. Lindqvist (2023), eight as lead (2023 to 2026). Types: 6 qualification, 5 periodic, 2 for-cause, 1 pre-approval readiness. Suppliers: 4 contract testing laboratories, 5 API and intermediate manufacturers, 3 excipient and single-use component suppliers, 2 contract manufacturers. Report quality assessed on SUP-AUD-2025-009 by the audit programme owner, February 2026: all criteria met, one development point on writing risk in plain language for non-specialist readers, addressed in coaching 20 February 2026.

Technical scope:

Independence declaration: all ten declarations answered yes on 06 February 2026, with one disclosure. Disclosure: the auditor’s spouse is employed as a process engineer at Brackenfield Analytical Ltd, a contract testing laboratory that Northvale Sterile Services subcontracts to and which we also hold as a directly approved supplier. Mitigation agreed with the quality unit: P. Raghavan is excluded from all audits of Brackenfield Analytical, and from assessing the Brackenfield element of any audit at a supplier that subcontracts to them; that element is assigned to another team member and stated in the audit plan. Approved by the Head of Quality Assurance, 06 February 2026. Supplier-specific exclusion recorded on the auditor assignment list.

Continuing competence: 5 audits in 2025 against a minimum of 3, two as lead. Data integrity refresh current to February 2027. Classification calibration completed January 2026. Report quality review completed February 2026. Independence declaration renewed annually and at the start of each audit. Requalification due February 2029.

Approval: qualified as lead auditor with the technical restrictions above, valid to February 2029. Approved by M. Lindqvist, Audit Programme Owner, and D. Osei, Associate Director QA, 09 February 2026.

Two things in this specimen carry the weight. The first is the scope table: this auditor is genuinely strong in laboratory and data integrity, and the record says so, but it also says plainly that he cannot lead a sterility assurance assessment. That single line prevents the most common scoping failure in supplier audit programmes, which is sending whoever is available to audit whatever comes up.

The second is the spouse disclosure. Nothing in it suggests bad faith, and the auditor volunteered it. But if it had surfaced for the first time when a favourable audit of Brackenfield was challenged, no explanation would have repaired it. Declared and mitigated in advance, it costs one line in an audit plan.

Common inspection findings this record prevents

• Audits performed by people with no documented qualification, so the company cannot show the auditor was competent to reach the conclusions in the report.
• Auditor training records showing attendance with no assessment of whether the person can actually write a defensible finding.
• Supplier audits led by the person who owns the commercial relationship with that supplier, with no independence declaration on file.
• An auditor assessing a technical area far outside their background, with the resulting report giving assurance nobody was competent to give.
• Conflicts of interest that existed but were never declared, discovered only when a favourable conclusion is challenged.
• Auditors who have not audited in years still listed as qualified, with no minimum activity requirement and no requalification.
• No record of who may lead which type of audit, so scoping and assignment happen by availability.
• Finding classification that varies widely between auditors because no calibration exercise is performed.
• Contract auditors used with no equivalent qualification and independence record on file.
• An internal or supplier auditor reviewing systems or decisions they were themselves responsible for.

How to adapt this record

1. Set your own progression requirements in section 3.2. The numbers here are illustrative; what matters is that the steps are defined and that promotion to lead requires a supervised audit and an assessed report, not just a count.
2. Rewrite the technical areas in section 4 to match what your suppliers actually do. Delete rows for modalities you never audit, and add the ones you do, such as plasma-derived products, radiopharmaceuticals, or single-use system suppliers.
3. Set the employment cooling-off period in declaration 4 to your own policy, and check it against local employment and privacy law before you ask for family relationship information.
4. Adapt this record for contract auditors and consultants. They need the same qualification evidence, the same independence declaration, and a check that they are not simultaneously consulting for the supplier they are about to audit.
5. If your organisation uses the same auditor pool for internal self-inspection, add declaration 6 as the controlling rule and cross-reference your internal audit programme so an auditor cannot inspect their own area.
6. Keep the calibration exercise. Consistency of grading between auditors is what makes an audit programme defensible, and it is the cheapest thing on this page to run.
7. Attach this record to the audit plan by reference, so every plan names the qualification record for each team member and any restriction that shaped the team composition. See Plan: On-Site GMP Supplier Audit (Notification Package) for where it lands, and how to conduct a supplier or GMP audit for the surrounding method. For general GxP training and competency evidence, see Record: GxP Training and Competency.