Navigating The MDSAP During COVID-19

Existing Clients

• Surveillance Audits may be conducted using off-site remote techniques or a limited schedule extension.
• Re-certification Audits may be conducted using off-site remote techniques. Certifications renewed with a remote audit will have a validity period not to exceed six (6) months and be subject to subsequent on-site verification before the expiry of the renewed certificate.
• Initial Stage 2, special, and unannounced audits cannot be performed using off-site remote techniques under these measures.
• Re-certification audits that are unable to be audited remotely may have Certification temporarily withdrawn. However, the MDSAP Regulators will endeavor to apply discretion, as warranted and within their respective jurisdictions, with respect to marketing authorizations supported by certification documents suspended or lapsed because of missed or delayed audits related to quarantine orders and travel restrictions issued in response to the spread of COVID-19.

New Clients

• Stage 1 Audits may be conducted using off-site remote techniques.
• Certification Audits (stage 2) audits cannot be performed using off-site remote techniques under these measures. Every effort will be made to proceed with Stage 2 audits as the travel and other restrictions ease.

What Are Remote Audits In The MDSAP?

These measures introduce a new feature to the MDSAP – remote audits. The ability to use Information Communication Technology (ICT) to audit with audio/video is not new for some programs however it is a new technology for MDSAP currently.

ICT is the use of technology for gathering, storing, retrieving, processing, analyzing and transmitting information. It includes software and hardware such as smartphones, handheld devices, laptop computers, desktop computers, drones, video cameras, wearable technology, artificial intelligence, and others.

To determine if a remote audit is feasible, for either the Surveillance or Re-certification audit, a few steps are undertaken by the SAI Global Client Services and Technical Services Team:

1. Assessment For Alternate Audit Measures
   1.  Review previous audits and the standing of the client’s quality management system
   2. Assess the risk of audit being conducted with ICT
   3. A decision is made on proceeding with the ICT.
2. Preliminary Remote Audit Assessment
   1. Questionnaire
   2. ICT Feasibility – a selection of an ICT software that will work for both the client and SAIG security and systems (e.g. Microsoft Teams)
3. Remote Audit Planning
   1. Audit Plan for processes covered by ICT
   2. Audit Plan for processes requiring an on-site visit
   3. Schedule confirmation, audit and proposal adjustments if required
   4. Verifying the selected ICT software works.

What To Expect For An effective Remote Audit

• The assessment should be facilitated in quiet environments whenever possible to avoid interference and background noise (i.e., speakerphones, earbuds, etc.).
• Conduct a formal opening and closing meeting as you would for an on-site assessment
  Conduct a virtual tour of the facility using a mobile device video call app
  Cover the scope of the audit as a normal assessment.
• Expect to interview the same range of staff (management, leadership and operational teams including production, manufacturing controls, warehousing staff, QC, Ops management, purchasing, finance, risk management teams, etc.)
• Both the Audit Team and Auditee should make their best effort to confirm what was heard, stated, observed, read throughout the audit.
• Enough communication between the Audit Team members and/or with the auditee should be made immediately in the case that change(s) and/or variations are made.
• The time required for the remote audit is about the same as the scheduled/required time.
• When a remote Audit is conducted, the content of the audit report (evidence reviewed, findings, etc.) is expected to be the same as when the Audit Team physically visits the site.

Learn more about the MDSAP and ISO 13485.
Or, contact us to find out more about MDSAP remote auditing.