How to Prepare for a MAT Audit

Most MedTech companies treat audits as one-off events. (And it costs a lot more than money) This mindset costs: • Market access • Investor trust • Years of work product • And lots of money    But the biggest cost isn't financial. It's human lives. The ones that depend on life-saving devices that are getting locked out of the market. Not because their technology wasn’t good enough. But because of preventable mistakes. Because they treated compliance as an event. Not a culture. Passing a Notified Body Audit isn’t luck. It’s discipline. It’s daily habits. It’s system-level thinking. Here are 4 ways the best MedTech companies prepare (and how you can too): 1. They build audit-ready systems Your documentation must tell a complete story: • Align QMS to ISO 13485:2016 and MDR Article 10 • Justify risk management with defensible rationales • Show proactive surveillance in PMS reports • Close CAPAs fully with evidence of resolution • Validate claims with clinical performance data 2. They eliminate silent compliance risks Fix problems that quietly undermine audits: • Complete missing risk–benefit rationales • Update and control all key documents • Close gaps in complaint and vigilance logs • Strengthen post-market surveillance • Link CAPAs directly to audit findings 3. They train for audit readiness every day. Turn audit behavior into muscle memory: • Run mock audits and rotate team roles • Train clear, non-speculative auditor responses • Assign scope ownership across all functions • Focus answers — no speculation or improvisation    4. They set up audit execution in advance. Plan logistics that create calm, not chaos: • Prepare a dedicated audit room with indexed files • Assign document fetchers and tech support • Track requests and responses live during audits • Maintain a calm, professional audit environment Here’s the truth: An audit isn’t something you survive. It’s a mirror that reflects how you operate every day. What’s the biggest audit challenge your team is facing right now? ♻️ Find this valuable? Repost for your network. 💡 Follow Bastian Krapinger-Ruether for actionable tips on MedTech compliance and QM.

The First Impressions Set the Tone of an Audit—Make Them Count After several onsite and virtual audits, I can tell—almost instantly—whether a manufacturer will glide or grind through the next two days. Yes, there are initial signs and hints and yes, it is possible to prepare for them. Below is a six-point checklist I share with anybody who wants an audit to feel like a strategy review, not a stress test. 1️⃣ Share the Quality Manual in Advance ↳ Send the current PDF at least one week before Day 1. ↳ A healthy manual shows several controlled revisions every year—evidence that procedures evolve, not collect dust. Prep time: 30 min to export + 2 h internal spot-check for outdated links. 2️⃣ Show a Management Review That Tracks New Regulations ↳ Include a table that lists MDR amendments, ISO changes, and MDCG guidance published since the last review. ↳ Define input channels (reg-watch service, NB newsletters, industry forums) so auditors see the radar, not just the blips. Prep time: ½ day to update the table; worth every minute. 3️⃣ Present a One-Page “What Changed” Briefing ↳ Headcount shifts, market feedback, design updates—cover the last 12 months. ↳ This transparency lets the audit focus on facts rather than detective work. Prep time: 1–2 h with your cross-functional leads. 4️⃣ Bring Top Management to the Table ↳ CEO or site lead joins the opening, closing, and management sections. ↳ Ten minutes of visible commitment unlock faster decisions during the audit. Prep time: Calendar invites—send them now, not the night before. 5️⃣ Keep a Single, Complete CAPA List ↳ One spreadsheet (or database view) that merges internal findings, last external audit actions, and significant events. ↳ No hidden tabs, no side lists—one source of truth builds instant trust. Prep time: 1 h to reconcile lists, 15 min to add status notes. 6️⃣ Lay Out PMS Files—Ready to Discuss ↳ PSURs, complaint trend graphs, FSCA log, and summary conclusions within arm’s reach. ↳ When teams know their post-market story, the auditor’s tough questions sound like confirmation, not confrontation. Prep time: ½ day to print or hyperlink the latest versions. Why Invest This Effort Up Front? ✅ Smooth, interruption-free audit flow ✅ Fewer “Please provide…” scramble breaks ✅ A reputation with NBs that provides calmness next year Auditors and manufacturers—what single practice gives you a confident start? ---------------------------------- MedTech regulatory challenges can be complex, but smart strategies, cutting-edge tools, and expert insights can make all the difference. I’m Tibor, passionate about leveraging AI to transform how regulatory processes are automated and managed. Let’s connect and collaborate to streamline regulatory work for everyone! #automation #regulatoryaffairs #medicaldevices

After being in the audit industry for many years, one thing is clear: First impressions matter in the compliance industry……. Having performed many audits, both onsite and virtual, I can quickly tell whether a company will smoothly navigate the process or struggle through it. There are clear signs, and you can absolutely prepare for them. Here’s a simple six-point checklist I share with anyone who wants their audit to feel like a strategic review instead of a stressful test: 1. Share Your Compliance Documents Early Send your latest compliance documents (like QMS, FDA, and ISO certifications) at least one week before the audit. A good QMS should reflect consistent updates, showing that your procedures are evolving and not stagnant. 2. Show How You Track Regulatory Changes Include a list of any important regulatory changes (like FDA or ISO updates) since the last review. Highlight how you stay updated, through newsletters, regulatory bodies, or industry guidelines. 3. Give a "What Changed" Briefing Talk about any major changes like staffing shifts, product updates, or market feedback from the last year. This helps the auditor focus on the key changes, instead of wasting time finding them. 4. Have Top Management Participate Have your CEO or site leader attend the opening, closing, and management review sections. Their involvement demonstrates commitment and helps speed up decision-making during the audit. 5. Keep a Simple CAPA List Maintain a single list or document that includes all internal CAPA actions, past audit findings, and significant events. This single source of truth builds trust and avoids confusion. 6. Have Your Post-Market Files Ready Ensure all relevant post-market documents (PSURs, complaint data, FSCA logs) are organized and easy to access. When your team is prepared, the tough questions from auditors feel more like confirmation rather than confrontation. Why should you invest time upfront? It makes the audit go smoothly with fewer “please provide” moments. It also builds a good reputation with regulators, making future audits easier. Auditors and quality teams: What single practice gives you a confident start?

Learning Box Series: Are You Audit-Ready? The SME Checklist You Wish You Had. Because the best audit is the one you’re ready for.When auditors arrive, they don’t bring surprises, they bring structure. Most SMEs treat the annual audit like an event, something to be endured once a year.But the truth is, audit readiness is built gradually. Here’s a practical, no-nonsense checklist that can help every SME prepare for their audit before the email saying, “We’ll start next week.” The SME Audit-Ready Checklist: 1. General Ledger (GL) Clean-Up: ·       Post all entries, including depreciation, accruals, and provisions. ·       Review suspense and control accounts - they shouldn’t carry balances at year-end.Ensure all ledgers reconcile with the trial balance. 2. Bank Reconciliations: ·       Match every bank balance with statements as of the closing date. ·       Investigate old unreconciled items or long-pending cheques. ·       Keep all bank confirmations ready for auditors to send directly to the bank. 3. Receivables & Payables Confirmations ·       Obtain written confirmations from key customers and suppliers. ·       Identify long-outstanding balances and decide whether to provide for doubtful debts. ·       Ensure intercompany balances agree between entities. 4. VAT & Tax Compliance ·       Reconcile VAT returns with sales and purchase ledgers. ·       Verify input tax claims and output tax accuracy. ·       Maintain tax invoices and supporting documentation as per FTA standards. 5. Fixed Assets Register (FAR) ·       Update the register for additions, disposals, and depreciation. ·       Verify physical existence of assets, especially major equipment and vehicles. ·       Ensure depreciation policies are consistent with prior years. 6. Payroll & Staff Costs ·       Ensure WPS records, payroll summaries, and gratuity provisions are up to date. ·       Keep employment contracts and leave records accessible. ·       Reconcile payroll expense with bank transfers. 7. Inventory Verification ·       Conduct a physical count at year-end. ·       Reconcile stock records with GL values. ·       Identify obsolete or slow-moving inventory. 8. Legal & Compliance ·       Keep trade licenses, lease agreements, MoA, and renewal certificates current. ·       Prepare updated company structure details for auditor review. 9. Corporate Tax Readiness ·       Ensure your books are aligned with UAE Corporate Tax Law. ·       Verify all related-party transactions are documented and priced at arm’s length. ·       Maintain computation templates ready for 2025 tax filing. 10. Documentation & Communication ·       Keep supporting documents in logical, labeled folders , could be digital or physical. ·       Assign one internal point of contact for the audit team. ·       Maintain an audit timeline for clarity and accountability. Why It Matters: Audit readiness isn’t a task, rather it’s a habit.

I've sat in more than 50 audits across GCC & Europe (ISO 27001, SOC 2, SAMA etc..) You rarely fail for missing a piece of evidence... You fail because the proof is scattered, outdated, ownerless, or can't be found (while the person providing it swears they submitted already) To avoid this: 1- Pick one system of record for evidence (SharePoint or Google Drive, etc.). No WhatsApp, Teams DMs, or email threads as “evidence.” 2- Create one folder per Framework. Create sub folder per control group. Use a clean name for files, {ControlName}{YY-quarter(e.g. Q1)} 3- Assign one named owner per domain (Access, Assets, Change, Incident). Give each an audit response cheat sheet: what to show, where it lives, who to pull in (good luck with getting other teams doing it!) 4- Run a pre-audit dry run: fresh eyes click every link, open every file, check dates/signatures, and tie each piece of evidence to the control ID. Time-box to 2 hours. Ask the team: “If we were audited tomorrow, where would you point the auditor to?” 5- Automate refresh: exports/screenshots as needed (monthly?), owner sign-offs, and expiry checks so proofs don’t go stale. Simple fix: Make evidence hygiene the product, not an afterthought. Or simply save yourself the headache, at Vamu we automate a large part of this, and map controls to owners and time-stamped proofs so the folder is clean by default. But you can start with the list above this week. Audits are won (or lost) in the evidence folder.

The auditor spent only 12 minutes in my factory before saying, We’ll get back to you. They never did. That moment changed how I approach audits forever. Most of the time, it’s not because of machines or manpower. It’s because the factory is not audit-ready when buyers walk in. Two suppliers may produce the same part… Yet only one gets approved. The reason? Systems. Documentation. Reliability. Here are 5 actions that help MSMEs qualify OEM & corporate audits faster: 1️⃣ Build a strong QMS • Use ISO-based processes • Standardize QC for every order • Keep documents ready for audits A solid QMS shows you deliver consistent quality every time. 2️⃣ Standardize production & capacity • Map your workflow • Show scalability • Maintain machines with a preventive plan This tells auditors you can handle higher volumes confidently. 3️⃣ Strengthen financial & legal compliance • Maintain clean payment history • Keep statutory registrations updated • Ensure insurance & legal documents are current 4️⃣ Follow EHS & labour requirements • Safety norms • Worker welfare • Track approvals & renewals 5️⃣ Improve supply chain & logistics • Prove on-time delivery • Monitor lead times • Plan for disruptions Audit readiness is not difficult. It’s a step-by-step transformation that builds trust with OEMs and opens doors to bigger opportunities. 👉 If you want, I can help you convert these 5 points into a simple internal checklist for your factory. Just comment “CHECKLIST” or DM me.

I became an auditor to discover financial truth. An audit is a mirror to a company's reality. I learned this early in my career. Transactions are not just debits and credits. They are about people and their choices. Audits surface what culture tries to hide. Late reconciliations, rushed reviews, brittle controls. Behind each symptom is a habit. If we treat an audit like a fight, we lose the lesson. If we treat it like an opportunity, the company grows. Here are my 7 tips to help you prepare for an audit: 1. Close cadence: ➞ Every task has an owner, a deadline, and reviewer. ➞ Have a clear plan so the audit starts on time. 2. Reconciliations: ➞ Bank, ledgers, intercompany, inventory, payroll.  ➞ Verify, explain, clear or escalate. 3. Evidence on first click: ➞ Policies, contracts, approvals, and calculations. ➞ Saved with transactions for easy access. 4. Cutoff discipline: ➞ Shipments, revenue, accruals, and provisions ➞ Completed promptly with clear timestamps. 5. Segregation of duties: ➞ Nobody does everything. ➞ Share tasks to lower collusion or fraud risks. 6. Open door policy: ➞ Staff can flag pressure or errors without fear. ➞ Encourage proactive disclosure. 7. Review within 72 hours: ➞ After close, capture errors and fix root causes. ➞ Prompt improvements save you time. When leaders do this, their audit costs reduce and trust increases. Run this ritual for your next audit and let me know how it goes. How do you keep better financial records? ------- ➕ Follow Jonathan Maharaj FCPA for finance‑leadership clarity. 🔄 Share this insight with a decision‑maker. 📰 Get deeper breakdowns in Financial Freedom, my free newsletter: https://lnkd.in/gYHdNYzj 📆 Ready to work together? Book your Clarity Session: https://lnkd.in/gyiqCWV2

What is the "silliest" thing you have ever been caught on during an audit? I saw a post on my feed a few weeks ago. A team smiling, holding a certificate, celebrating an "AA Grade." It looked so effortless. But it reminded me of a time early in my career when it wasn’t effortless. It was a disaster. The Auditor sent an email: "I’ll be in your region sometime in July. I’ll drop by." I read "July" and thought: "Great, I have 3 weeks to prep." He showed up on July 2nd. Tuesday. 8:15 AM. The Plant Manager was on holiday. The cleaning crew had missed the drains the night before. And I was still printing out "missing" records from March. Security called me: "Lizzy, there is a gentleman with a clipboard here." My stomach didn't just drop it left the building. We spent the next 8 hours "managing" the auditor (stalling him in the boardroom) while the team frantically scrubbed the factory floor. We passed, but barely. And I promised myself: Never again. If you have to "Get Ready" for an audit, you have already failed. "Audit Ready" isn't a sprint you do once a year. It is a lifestyle. Here is how you shift from "Panic Mode" to "Peace of Mind": 1. Stop "Prepping." Start "Living." If you treat the audit standard (BRC/FSSC) as a "special occasion," your team will treat it as optional. The standard must be the daily bare minimum. If you walk past a dirty gasket on Monday, don't expect the operator to fix it for the audit on Friday. 2. The "Visitor Test" (Daily) Every morning, walk your floor with "stranger eyes." We get "Factory Blindness." We stop seeing the peeling paint or the dust on the pipes. Ask yourself: "If the Auditor walked in this door right now, would I offer them a coffee, or would I stall them at the gate?" 3. The 15-Minute Rule (Records) The #1 thing that annoys auditors is waiting. Test yourself: Can you retrieve the cleaning logs from exactly 6 months ago in under 15 minutes? If not, fix your filing system (digital or physical) today. 4. Be Your Own Worst Nightmare Your Internal Audits shouldn't be a "tick-box" exercise. They should be brutal. Find the non-conformances before the external guy does. If your internal reports are all green, you aren't looking hard enough. My new rule: The auditor is not a "Visitor." They are just another verification step in a system that already works. #dairy #food #foodsafety #auditing #qualityassurance