When a new drug earns approval or a critical medication continues to fill pharmacy shelves, public perception assumes an FDA investigator walked into the facility, toured the plant floor, and signed off on compliance. But behind the closed doors of pharmaceutical regulation, how the agency evaluates manufacturing safety is undergoing a profound structural evolution.
The FDA's updated "Concept of Operations" (ConOps) framework—dated October 21, 2026—outlines a modernized operating model between the Center for Drug Evaluation and Research (CDER) and the Office of Inspections and Investigations (OII, formerly the Office of Regulatory Affairs). Following major agency reorganizations, this framework establishes strategic alignment across divisions to handle the growing complexity of global drug manufacturing.
The reality of modern drug oversight is far more complex, remote, and internationally integrated than traditional factory walk-throughs. Here are four key takeaways from the FDA's updated playbook that reveal how drug facilities are evaluated, prioritized, and regulated today.
Takeaway 1: Remote audits are everywhere, but legally they aren't "inspections"
To adapt to modern oversight needs, the FDA relies heavily on Remote Regulatory Assessments (RRAs). These virtual evaluations include formal requests for records under section 704(a)(4) of the Federal Food, Drug, and Cosmetic (FD&C) Act, as well as Remote Interactive Evaluations utilizing live streaming video of operations, teleconferences, and screen sharing. Both CDER and OII use risk-based approaches to initiate these remote evaluations.
However, the ConOps framework highlights a critical legal nuance: even though RRAs are vital tools for evaluating drug applications and assessing risks, they do not legally count as physical inspections under the law. Because an RRA involves zero physical entry into an establishment, it cannot satisfy statutory physical inspection mandates.
The FDA explicitly highlights this statutory boundary in the updated framework:
"While RRAs conducted using 704(a)(4) authority do not satisfy inspection requirements as outlined under section 704(a)(1) of the Act due to the lack of physical entry into the establishment, RRAs can help the Agency to fulfill its regulatory responsibilities."
For regulatory strategists and pharmaceutical executives, this distinction carries immense operational significance. While an RRA cannot satisfy a statutory 704(a)(1) physical inspection requirement, an adverse finding during an RRA can stall an application's approval just as effectively as a failed physical inspection.
Furthermore, the agency leverages 704(a)(4) quality systems assessments when facilities are located in Department of State Level 3 (or higher) Travel Warning Areas. In these regions, remote assessments allow the agency to evaluate risk when physical 510(h) surveillance inspections are not feasible during the fiscal year.
Takeaway 2: International trust — foreign regulators can fulfill US statutory inspection requirements
While a domestic remote assessment under section 704(a)(4) cannot legally satisfy statutory physical inspection requirements, foreign inspection reports often can. Under Mutual Recognition Agreements (MRAs) signed with trusted international regulatory partners—including the European Union, the United Kingdom, and Switzerland—the FDA routinely utilizes inspection reports generated by overseas authorities.
Crucially, these MRAs enable regulators to accept official inspection findings for facilities located both inside and outside the partner agency's home territory. While a domestic RRA fails to meet physical inspection mandates under section 704(a)(1), an MRA inspection report from a recognized international partner can satisfy statutory inspection requirements under section 510(h) of the Act.
This reliance on international partners creates a far more efficient global regulatory network. By accepting the data and reports generated by foreign counterparts, the FDA reduces redundant audits for global manufacturing sites, streamlines supply chain oversight, and focuses its field resources on higher-risk facilities.
Takeaway 3: The division of power — investigators don't always have the final say
A common misconception is that the FDA field investigator who inspects a plant has the ultimate authority to clear or penalize a facility. In reality, the updated ConOps outlines a strict operational division of responsibilities between field investigators in OII's Office of Human and Animal Drug Inspectorate (OHADI) and headquarters assessment teams within CDER.
During preapproval evaluations, an Integrated Quality Assessment (IQA) Team in CDER determines whether an on-site visit is necessary. OHADI investigators lead physical on-site visits and issue initial observations (Form FDA 483) and an Initial Field Recommendation (IFR). However, for inspections yielding potential violations—classified as Voluntary Action Indicated (VAI) or Official Action Indicated (OAI)—the case moves to CDER sub-offices like the Office of Pharmaceutical Manufacturing Assessment (OPMA) or the Office of Manufacturing Quality (OMQ) for final classification.
Speed is critical in this workflow. When an inspection reveals findings that are potentially Official Action Indicated (pOAI), OHADI is mandated to log an IFR and alert CDER systems within two days of the inspection close. This rapid notification triggers tight enforcement timelines across the agency.
Day 0
Inspection close
2 days
pOAI alert to CDER
45 days
Complete EIR endorsement
90 days
Final classification & letter
The process is governed by strict operational clocks. Field teams must ensure complete Establishment Inspection Report (EIR) packages are endorsed within 45 days. Final classifications and decisional letters generally follow within 90 days of the inspection close date.
Procedurally, the release of the EIR depends on the final outcome. For final VAI classifications, OMQ issues a Field Management Directive (FMD)-145 decisional letter, updates Profile Class Codes (PCCs), and releases the EIR to the facility. For final OAI classifications, OMQ may withhold the release of the EIR until the appropriate regulatory or enforcement action is determined.
Takeaway 4: Algorithms and dossiers — how the FDA prioritizes which facilities to visit
With thousands of drug manufacturing sites operating across the globe, the FDA relies on sophisticated backend data systems to decide where to send inspectors. CDER's Office of Quality Surveillance (OQS) maintains the CDER Facilities Catalog and utilizes a data-driven Site Selection Model to rank establishment risks annually.
Before an investigator steps foot on site, OQS compiles a targeted "Site Dossier." This dossier synthesizes establishment inspection histories, recall records, customer complaints, foreign audit findings, and submitted Field Alert Reports (FARs) or Biological Product Defect Reports (BPDRs).
For corporate quality leaders, this means facility audit readiness can no longer be managed in isolation. Because FDA inspectors arrive equipped with centralized cross-facility intelligence, quality data across sister plants and international sites must be fully synchronized ahead of time.
Furthermore, OQS doesn't just build dossiers before an audit; it also conducts post-classification surveillance analysis. By examining quality trends across regions, facilities, and product classes, OQS continuously refines future inspection priorities.
Finally, field teams actively monitor supply chain integrity. If an inspection uncovers issues that could disrupt commercial production or distribution, investigators are mandated to immediately notify CDER's Drug Shortage Staff (DRUGSHORTAGES@fda.hhs.gov) and request that the establishment notify the agency directly.
Conclusion & looking ahead
The updated 2026 ConOps framework establishes an agile, aligned operating model designed for a complex global supply chain. By clarifying functional roles between CDER and OII, leveraging remote assessment tools, and expanding reliance on international partner networks, the FDA aims to eliminate redundancy and accelerate regulatory decision-making.
As digital intelligence, remote monitoring, and international reliance frameworks continue to mature, a broader question emerges for regulatory leaders: will remote assessments and automated data intelligence eventually replace routine physical factory inspections altogether?
Source: FDA, CDER–OII Concept of Operations. Discussed on The Regulatory Mix.
Related
Preparing for an inspection or a remote assessment?
A 15-minute introductory discussion to understand your situation and agree the next step. Technical review is scoped separately.
This article is general information from a consulting perspective summarizing a public FDA document. It is not legal advice and does not replace the manufacturer's designated Quality Unit.
