Checklist: Self-Assessment Against Recurring 483 and Warning Letter Trend Categories

This checklist does not come from a generic control framework. Every section below is a citation theme that recurs across years and modalities in published FDA 483s and warning letters: inadequate investigations, data integrity gaps, laboratory control failures, quality unit weaknesses, aseptic and contamination control, cross-contamination and cleaning validation, and CAPA system weaknesses. Walking your own operation against each theme, honestly, before an inspector does it for you, is the closest thing to reading the next inspection’s script in advance. Replace every <<FILL: ...>> placeholder, record Pass, Gap, or N/A for every line, and capture the evidence named. A section that does not apply to your modality (aseptic processing at a non-sterile oral solids site, for example) is marked N/A as a block with a one-line rationale, not silently skipped. A filled specimen follows.

Document control header

Field	Entry
Document title	Self-Assessment Against Recurring 483 and Warning Letter Trend Categories
Document number	`<<FILL: CHK-ID, e.g. CHK-QA-052>>`
Version	`<<FILL: version, e.g. 1.0>>`
Effective date	`<<FILL: effective date>>`
Document owner	`<<FILL: RI lead or QA>>`
Applies to	`<<FILL: site / area in scope>>`

How to use this checklist

Run this at the site or process level, not the enterprise level; controls and evidence differ site to site.
For every line, decide Pass, Gap, or N/A, and record where the evidence lives (procedure number, record reference, self-check reference). A Pass with no evidence reference is not a pass.
Mark an entire section N/A only with a stated rationale (for example, “no sterile manufacturing at this site”), not by leaving it blank.
Log every Gap in the gap summary with a risk rating and an owner. This checklist does not replace CAPA; it feeds it.
Use this ahead of a mock inspection, between formal internal audit cycles, or whenever a theme in this checklist appears as rising in the Regulatory Intelligence Signal and Trend Log.

Scoring legend: Pass, control is in place and evidenced. Gap, control is missing, partial, or unevidenced; must be logged. N/A, theme does not apply to this site; state why.

Assessment context

Field	Entry
Site / area assessed	`<<FILL>>`
Modality / process scope	`<<FILL>>`
Assessor (name, date)	`<<FILL>>`
Trigger for this assessment	`<<FILL: scheduled / rising theme in RI register / pre-mock-inspection>>`

1. Inadequate investigations

#	Check	Pass criterion	Evidence to capture	Result
I1	Root cause supported by evidence	OOS and deviation root causes are supported by documented investigation steps, not asserted	Sample of closed investigations, last 6 months	`<<FILL>>`
I2	”Analyst error” or “human error” is not a default	Where human error is cited, the record shows the specific mechanism and why other causes were ruled out	Sample investigations citing human error	`<<FILL>>`
I3	Laboratory-phase investigation precedes invalidation	OOS results are not invalidated before the laboratory-phase investigation is complete	Sample OOS records, sequence of events	`<<FILL>>`
I4	Investigation scope includes other affected batches	A confirmed root cause triggers a documented check for other batches or lots that could share it	Sample investigation extended-impact sections	`<<FILL>>`

See OOS Investigation Process and Human Error in Deviations.

2. Data integrity

#	Check	Pass criterion	Evidence to capture	Result
D1	Audit trail review performed and documented	Audit trail review happens at the defined frequency with a documented, signed record, not just a stated procedure	Sample review records	`<<FILL>>`
D2	No shared or generic logins	Every GxP system user has a unique, attributable login	User account export	`<<FILL>>`
D3	Role-based access control enforced	Access privileges match job function; no unassigned elevated access	Access control matrix	`<<FILL>>`
D4	System clocks synchronized and protected	Clocks are synchronized to a controlled source and cannot be altered by ordinary users	Time-sync configuration	`<<FILL>>`
D5	Trial, test, and aborted runs are visible	No pattern of trial injections or aborted runs being excluded from the reported record	Audit trail sample for trial/aborted runs	`<<FILL>>`

See Data Integrity Foundations, ALCOA+ in detail, and Operationalizing Audit Trail Review.

3. Laboratory controls

#	Check	Pass criterion	Evidence to capture	Result
L1	Methods validated before routine use	Analytical methods in routine use have a completed validation or verification record	Method validation index	`<<FILL>>`
L2	System suitability not manipulated	System suitability failures are investigated, not repeated until passing without documented cause	Sample sequences with SST failures	`<<FILL>>`
L3	No testing into compliance	No pattern of repeat testing until a passing result appears without a documented, justified reason	OOS / repeat testing log review	`<<FILL>>`

4. Quality unit authority

#	Check	Pass criterion	Evidence to capture	Result
Q1	Quality unit reviews and approves before release	No batch is released without documented quality unit review and disposition	Sample batch disposition records	`<<FILL>>`
Q2	Quality unit has authority to stop release	Procedure and practice both confirm the quality unit can hold or reject a batch without being overridden informally	Interview / procedure review	`<<FILL>>`
Q3	Procedures are followed, not just written	Spot-check of actual practice against the written procedure for a sampled activity shows consistency	Direct observation or record sample	`<<FILL>>`

5. Aseptic processing and contamination control

Mark this entire section N/A if the site runs no sterile manufacturing. State the rationale in the assessment context above.

#	Check	Pass criterion	Evidence to capture	Result
A1	EM excursions trigger investigation	Every environmental monitoring excursion above the defined limit has a documented investigation, not just a trend note	Sample EM excursion records	`<<FILL>>`
A2	Media fill program current and passing	Media fills are performed at the required frequency, covering worst-case interventions, with no unresolved failures	Media fill schedule and results	`<<FILL>>`
A3	Gowning qualification current	Personnel gowning qualification is current for everyone with aseptic core access	Gowning qualification records	`<<FILL>>`

See Aseptic Processing and Media Fills and Annex 1 Contamination Control Strategy.

6. Cross-contamination and cleaning validation

#	Check	Pass criterion	Evidence to capture	Result
C1	Cleaning validation covers the worst-case product/equipment combination	Cleaning validation studies justify the worst-case grouping used	Cleaning validation summary	`<<FILL>>`
C2	Shared-equipment risk assessed	Where equipment is shared across products, a documented cross-contamination risk assessment exists	Risk assessment record	`<<FILL>>`

See Cross-Contamination Control in Shared Facilities and Cleaning Validation Fundamentals.

7. CAPA system

#	Check	Pass criterion	Evidence to capture	Result
P1	Effectiveness checks are performed, not assumed	Closed CAPAs show a documented effectiveness check with a defined sampling basis, not just “implemented”	Sample closed CAPAs	`<<FILL>>`
P2	Recurring root causes are flagged	A new deviation matching a prior root cause is identified as a repeat, not logged as an isolated fresh event	Deviation trend review	`<<FILL>>`
P3	CAPA fixes the system, not just the instance	Sampled CAPAs show a systemic fix (procedure, training, configuration) where the root cause was systemic, not only correction of the single event	Sample CAPA records	`<<FILL>>`

See What Is a CAPA and CAPA Effectiveness Verification.

Gap summary

Gap ref	Check #	Description	Risk (H/M/L)	Owner	Remediation / due date	Status
`<<FILL: G1>>`	`<<FILL>>`	`<<FILL>>`	`<<FILL>>`	`<<FILL>>`	`<<FILL>>`	`<<FILL>>`

Overall result

Field	Entry
Sections assessed / N/A	`<<FILL>>`
Lines assessed	`<<FILL: count>>`
Pass	`<<FILL: count>>`
Gap (open)	`<<FILL: count>>`
Highest open risk	`<<FILL: H / M / L>>`
Overall verdict	Pass / Conditional (gaps with plan) / Fail
Assessor (signature, date)	`<<FILL>>`
QA review (signature, date)	`<<FILL>>`

References

21 CFR Part 211, including 211.22, 211.42, 211.68, 211.100, 211.113, 211.160, 211.165, 211.192, 211.194. 21 CFR Part 11 (electronic records and signatures). FDA guidance, Data Integrity and Compliance With Drug CGMP: Questions and Answers (December 2018). ICH Q9(R1), Quality Risk Management.

Confirm the current version and clause numbers of each reference before issue. This checklist is an educational self-assessment aid, not a compliance guarantee.

Revision history

Version	Date	Author	Summary of change
`<<FILL: 1.0>>`	`<<FILL: date>>`	`<<FILL: author>>`	Initial issue.

Filled specimen (excerpt)

Illustrative assessment for a single-site oral solids manufacturer, no sterile operations. Findings are illustrative.

Assessment context: Site A, oral solid dose, assessed by M. Osei, 14 Sep 2026, triggered by a rising DI/audit trail theme in the RI register.

Section 5 (Aseptic processing) marked N/A: no sterile manufacturing at this site.

Sample of completed lines:

#	Check	Result	Evidence / note
I2	Analyst error not a default	Gap	Two of eight sampled investigations cited “analyst error” with no supporting root-cause evidence
D1	Audit trail review performed and documented	Pass	Weekly review records complete for all 4 CDS instruments, last 6 months
L2	System suitability not manipulated	Pass	No pattern of repeated SST runs without documented cause in sampled sequences
P1	Effectiveness checks performed	Gap	3 of 10 sampled closed CAPAs show no effectiveness-check evidence beyond “implemented”

Gap summary:

Gap ref	Check #	Description	Risk	Owner	Remediation / due date	Status
G1	I2	Root cause assigned to analyst error without supporting evidence in 2 of 8 sampled investigations	M	QC Manager	Retrain investigators on root-cause standard; re-open the 2 investigations; DEV-2026-0210	Open
G2	P1	3 closed CAPAs lack documented effectiveness-check evidence	H	QA	Reopen the 3 CAPAs, define and execute effectiveness checks; CAPA-2026-0233	Open

Overall verdict: Conditional. Two open gaps, both with a dispositioned remediation plan and an owner. The CAPA effectiveness gap (G2) is rated High because it undermines confidence in every other CAPA closed under the same practice, not just the three sampled, so the remediation plan includes a broader sample review beyond the three found here.

Common inspection findings this checklist prevents

A site can describe its controls in general terms but has never walked its own operation against the specific themes that recur in published enforcement actions.
“Analyst error” or “human error” used as a closing statement rather than a supported conclusion.
CAPAs closed on “implemented” with no effectiveness-check evidence, discovered only when an inspector samples the CAPA file directly.
A self-assessment that reports all Pass with no gaps, which itself signals the assessment did not look hard enough.

How to adapt this checklist

Set your document number, owner, and effective date in the header.
Mark sections N/A only where genuinely not applicable to the site’s modality, with the rationale stated in the assessment context.
Add or adjust check lines to match your own operation’s specific process risks; the seven sections here are the recurring themes, not an exhaustive list.
Feed every open gap into your real deviation or CAPA process, and track the gap summary to closure the same way any other finding is tracked.
Pair this checklist with a mock inspection when the trigger is pre-inspection readiness rather than a routine periodic check.