A supplier or CMO failure
Their deviation becomes your recall assessment, and their inspection outcome becomes your customer's question. Accountability does not transfer with the work.
Assess product impact and contractual position in parallel — the quality agreement usually determines what you can require.
Roughly the first working day
- Establish what material is affectedWhich lots, at what stage, and whether any has already been used in product that reached the market.
- Read the quality agreement before the conversationNotification obligations, audit rights and responsibilities are usually settled there, and knowing them changes how the discussion goes.
- Quarantine and assess incoming materialPrevent further use while the scope of the supplier's issue is established.
- Ask why you were not told earlierThe answer indicates whether this is an isolated event or a notification failure that will recur.
What must not be lost while people react
- The supplier's notification, in writing, with dates.
- Goods-in records, certificates of analysis and any retained samples.
- The current quality agreement and qualification file.
- Traceability of affected lots through to finished product.
What shapes the investigation
- 01Is this a one-off event at the supplier, or evidence of a systemic weakness?
- 02Was their qualification current, and would our own audit have detected this?
- 03What product has been made with affected material, and where is it?
- 04Do we have an alternative source, and what would qualifying it take?
- 05Did the quality agreement require notification we did not receive?
Things to consider, not conclusions to adopt
- Responsibility for outsourced activity remains with the contract giver; the supplier's failure does not transfer accountability.
- Where affected material reached released product, consider whether quality defect and recall processes are engaged.
- A supplier's inspection outcome may be publicly visible and may prompt questions from your own customers.
What sites commonly get wrong
- Managing it as a procurement issue rather than a quality event.
- Accepting the supplier's own investigation without independent assessment.
- Not assessing whether the same weakness affects earlier deliveries.
- Failing to update the qualification and agreement afterwards, so the same gap remains.
Ten steps, in this order
- 01
Contain
Stop the situation getting worse. Quarantine affected material, halt the process step if continuing would compound the problem, and secure the area or system involved.
- 02
Assess
Establish what is known versus assumed. What happened, when, to what, and who observed it. Resist the pull to conclude a cause in the first hour.
- 03
Escalate
Notify according to your own procedure. Getting the right people informed early costs little; discovering later that QA or the QP was not told is itself a finding.
- 04
Investigate
Establish the cause with evidence rather than plausibility. Depth should be proportionate to risk, but the standard for a confirmed cause does not move.
- 05
Document
Record contemporaneously as you go. Reconstructing a record afterwards converts a quality problem into a data integrity problem, which is a different order of seriousness.
- 06
Determine impact
Assess product impact beyond the batch in front of you — other batches sharing equipment, materials, personnel or time window, and material already released.
- 07
Correct
Fix the immediate instance, and separately address the cause. Conflating correction with corrective action is the most common weakness in a response.
- 08
Prevent recurrence
Address why the process permitted the event. Where the design invites the error, training a person not to make it is a delay rather than a correction.
- 09
Verify effectiveness
Check against a criterion defined before implementation. This is the step most often skipped, and the one that decides whether the event returns as a repeat finding.
- 10
Close and monitor
Close with evidence attached, and keep the indicator under review long enough to know the fix held rather than merely completed.
Background and next steps
This is quality guidance, not legal advice
This is practical quality guidance, not legal or regulatory advice. Whether a specific event triggers a particular regulatory obligation depends on the product, the market, the marketing authorisation and the facts. Assess against your own procedures, and take qualified advice where the situation may involve notification, recall or a deliberate act.
A date you did not choose
If there is a response deadline or an investigation that has to hold up under scrutiny, a short call is the fastest route to a view on what to do first.