The FDA “Big Five” — Basic GMP Controls Failing
The FDA “Big Five”: Why the Most Basic GMP Controls Are Still Failing
Regller Knowledge Hub
By Regller Team | March 2026 | 8 min read
Five seemingly fundamental CFR requirements account for nearly 25% of all FDA inspection issues.
These are not edge cases. They are the controls everyone assumes are solid — and the very ones slipping through even the tightest palms.
Ask any GMP professional whether these are in place, and the answer is almost always yes. That confidence is exactly the problem.
The Five CFRs Everyone Thinks They Control
- 21 CFR 211.192 — Investigations and record review
- 21 CFR 211.22(d) — Quality Unit responsibilities
- 21 CFR 211.100(a) — Written procedures and process control
- 21 CFR 211.160(b) — Laboratory controls
- 21 CFR 211.68(b) — Automated systems and controls
Why “Basic” Controls Are the Ones Failing
These CFRs don’t fail because they’re complex. They fail because they’re assumed to be under control. When something is considered “foundational,” it often:
- Receives less scrutiny
- Escapes challenge
- Is reviewed only when something breaks
Over time, execution drifts while confidence stays high.
1. Quality Oversight That Exists — But Isn’t Actively Exercised (211.22(d))
Most companies have a Quality Unit. What FDA finds instead:
- QA is informed, not empowered
- Decisions are escalated late
- Risk tradeoffs are accepted silently
Quality oversight becomes procedural, not assertive. The structure exists. The authority erodes.
2. Procedures That Are Approved — But Not Truly Followed (211.100(a))
SOPs are approved, trained, and archived. But FDA repeatedly sees:
- Informal workarounds
- “Temporary” deviations becoming permanent
- Process changes implemented without full evaluation
Procedures become reference documents, not control mechanisms. This is where tight plans quietly loosen.
3. Laboratories Detect Problems — But Don’t Always Resolve Them Systemically (211.160(b))
Labs often surface issues first. FDA observations include:
- Inadequate OOS investigations
- Weak method justification
- Data integrity vulnerabilities
The lab does its job — but the system around it doesn’t connect the dots.
4. Automation That Runs — But Isn’t Fully Governed (211.68(b))
Most systems are validated. But FDA finds:
- Manual overrides without justification
- Audit trails reviewed inconsistently
- Changes made faster than controls adapt
Automation makes execution faster — but also makes small gaps propagate quickly.
5. Investigations That Close — Without Preventing Recurrence (211.192)
This is where everything converges. FDA is not questioning whether investigations are done. They are questioning whether they work. Repeated citations often show:
- The same issues
- The same root causes
- The same ineffective CAPAs
The investigation process exists — but learning does not compound.
The Pattern FDA Sees (And Companies Often Miss)
These controls fail together, not individually.
- Weak quality authority
- Unchallenged procedures
- Fragmented lab data
- Loosely governed systems
- Superficial investigations
Each one looks manageable on its own. Together, they create systemic blind spots. This is how “easy” things slip out of even the tightest plans.
The Uncomfortable Truth
The most dangerous GMP failures are rarely in advanced science or new technology. They are in familiar processes, trusted controls, and long-standing assumptions. That’s why these five CFRs dominate FDA findings.
Final Thought
If 25% of FDA issues come from five “basic” regulations, the lesson is clear: What feels easiest to control is often what gets watched the least. Quality maturity is not about adding more controls. It’s about never assuming the fundamentals are safe just because they’ve always been there.
How Regller Addresses This
Regller’s QMM assessment specifically evaluates these high-impact areas using structured questions derived from FDA Title 21. By identifying maturity gaps in laboratory controls, process validation, documentation, facilities, and complaint handling, Regller helps organizations prioritize improvements where they matter most.
Ready to Get Started?
Connect with our team to learn how Regller can transform your quality management.
Ready to Measure Your Quality Maturity?
See how Regller helps manufacturers quantify quality, accelerate site readiness, and meet regulatory expectations.