What FDA Inspectors Are Really Looking for in Your BCP — and How to Pass

FDA inspectors don’t announce their BCP criteria in advance. But after analyzing inspection reports and deficiency patterns, the expectations are clear — and almost entirely predictable. Here’s what they test, what they find, and what to do about it.

FDA inspectors don't approach business continuity planning the way your consultant told you they would. They don't grade you on document length, formatting, or how many appendices you've included. What they test — consistently, across product types and company sizes — is whether your plan reflects reality, is integrated into your quality system, and could actually be executed by your team in a genuine disruption. Plans that were never built with those three tests in mind tend to struggle when an inspector actually probes them.

How FDA BCP Scrutiny Has Evolved

Five years ago, an FDA inspection finding specifically citing BCP deficiencies was relatively uncommon. Business continuity planning was addressed tangentially — through quality system requirements, supplier qualification expectations, and GMP continuity obligations — but rarely surfaced as a discrete inspection focus.

That has changed. The supply chain disruptions of 2020–2024, combined with several high-profile manufacturing site failures with direct patient safety consequences, have moved business continuity planning to the center of FDA inspection programs for manufacturing, QC, and clinical operations. The 2025 inspection priorities reflected this shift explicitly.

The inspectors conducting your next site visit have been specifically trained on BCP assessment. They have checklists. They know what good looks like. And increasingly, they know what your BCP probably doesn't have.

The Six Things FDA Inspectors Test

Test #1: 21 CFR Part 11-Compliant Documentation Trail

FDA inspectors reviewing your BCP expect it to be a controlled document with a proper documentation trail: version control, review history, approval signatures, and change log. A BCP stored as a Word document on a shared drive without version control fails this test immediately.

This is not a technicality. 21 CFR Part 11 requirements for electronic records apply to your BCP to the extent it is stored and managed electronically. Inspectors look for evidence that your BCP is treated as a quality document — with the same rigor as a Master Batch Record or standard operating procedure — rather than an administrative file.

Typical Inspector Questions

• Where is your BCP stored and how is it version-controlled?
• Who has approval authority for BCP changes and how are changes tracked?
• When was this version approved and what changed from the previous version?

How to Prepare

Integrate your BCP into your QMS as a controlled document. Assign a document number. Implement version control with change descriptions. Require QA signature for approval. Store in your validated document management system.

Test #2: GMP Continuity Integration

FDA inspectors expect your BCP to address GMP continuity specifically — not just operational continuity. This means: how do you maintain GMP compliance if your primary site is unavailable? How do you protect batch records, COAs, and regulatory documentation during a disruption? How do you maintain cold chain integrity for in-process materials? What happens to ongoing batch production if key personnel are unavailable?

BCPs that address IT systems, facilities, and personnel but say nothing about GMP-specific continuity are incomplete by FDA standards. The question isn't just "can we keep the lights on?" — it's "can we maintain GMP compliance while we do it?"

Typical Inspector Questions

• How do you ensure GMP record protection and access during a site disruption?
• What procedures exist for in-process material disposition during an unplanned shutdown?
• How is cold chain integrity maintained during a logistics disruption?

How to Prepare

Add a GMP continuity section to your BCP that specifically addresses: batch record protection and off-site backup, in-process material handling during disruption, cold chain emergency procedures, and minimum GMP staffing requirements for each operational scenario.

Test #3: Supplier and CMO Contingency Documentation

Following the supply chain disruptions of 2024, FDA inspectors are specifically probing for supply chain contingency planning. They want to see that you have identified your critical material suppliers, assessed the risk of disruption at each, and developed contingency procedures for your highest-risk single-source dependencies.

For companies that use CMOs, inspectors also look for documented procedures in the event of CMO unavailability — transfer site plans, technology transfer status, alternative manufacturer qualification status, and how you would manage product supply during a transition.

Typical Inspector Questions

• What are your single-source critical material dependencies and what is your contingency for each?
• If your primary CMO was unavailable for 90 days, what would you do?
• How current are your technology transfer packages for your key processes?

How to Prepare

Complete a supplier vulnerability assessment and document it in your BCP. For each critical single-source material, document contingency options and their qualification status. Ensure technology transfer packages are current and accessible.

Test #4: Evidence of Testing and Tabletop Exercises

This is the fastest-growing category of FDA BCP observation, and it mirrors the trend in other regulated industries. Inspectors are increasingly asking not just whether you have a plan, but whether you've tested it. Documentation of at least one annual exercise — with participants, scenario, findings, and CAPA — is becoming an expectation at leading inspection programs.

Typical Inspector Questions

• Has this plan been tested? When? With whom?
• What did you find during your last exercise and what was your CAPA?

How to Prepare

Schedule an annual tabletop exercise and document it through your CAPA system. Include QA, operations, and regulatory affairs. Treat exercise findings as quality events with documented disposition.

Test #5: Drug Shortage and Regulatory Notification Procedures

For companies that manufacture or market drug products, FDA inspectors specifically look for documented procedures for drug shortage notification — including trigger criteria, timeline obligations, and designated responsible parties. FDASIA Section 1001 requirements for drug shortage notification are well-established; inspectors want to see that your BCP operationalizes them.

Typical Inspector Questions

• At what point in a supply disruption do you assess whether FDA notification is required?
• Who is responsible for making that assessment and initiating the notification?

How to Prepare

Document a drug shortage assessment procedure with specific trigger criteria. Assign a named responsible party with a backup. Include pre-approved FDA Drug Shortage Staff notification language and timeline obligations.

Test #6: Annual Review Integrated into Quality Calendar

FDA inspectors look for evidence that BCP review is a scheduled, documented quality activity — not an ad hoc event that happens when someone remembers it exists. Proof of annual review integrated into the quality calendar, with documentation of the review, reviewer, and any changes made, is an increasingly standard expectation.

Typical Inspector Questions

• When was this BCP last reviewed? By whom? What was changed?
• Is BCP review part of your annual quality management review?

How to Prepare

Add BCP annual review to your quality calendar. Include it as an agenda item in your Management Review. Document the review with date, participants, scope, and outcomes. Archive review records in your QMS.

FDA BCP Inspection Readiness Checklist

• BCP stored as controlled document in validated QMS with version control and approval signatures
• GMP continuity section addressing batch records, cold chain, in-process materials, and minimum staffing
• Supplier vulnerability assessment with contingency procedures for critical single-source materials
• CMO contingency procedures including technology transfer status and alternative manufacturer qualification
• Tabletop exercise documentation with participants, scenario, findings, and CAPA disposition
• Drug shortage notification procedures with trigger criteria, timeline, and named responsible party
• Annual review documented and integrated into quality calendar and Management Review agenda
• Clinical trial protection protocols (for sponsor organizations) including investigator notification and study pause procedures