top of page

Home / Core Services / Internal & supplier audits

Medical device internal & supplier audit services

Know where your quality system stands.

An audit should give leadership a useful view of how the system works and where attention is needed. ES³ Solutions provides independent internal, supplier, and readiness audits grounded in objective evidence and the requirements that apply to your organization.

Internal and supplier audit services diagram

A clear line from evidence to action.

An independent assessment with a practical purpose.

Whether you are maintaining an audit program, qualifying a critical supplier, or preparing for an external assessment, the work begins with a clear objective. We define the criteria, processes, locations, and interfaces to assess so the audit produces findings your team can understand and act on.

When this support is useful
  • Your internal audit program needs independent expertise or additional capacity.
  • A supplier or contract manufacturer needs qualification or closer oversight.
  • An upcoming certification audit calls for a clearer assessment of readiness.
  • Recurring findings suggest that the audit program is missing important process weaknesses.
Scope of support

Work defined around your needs.

Choose a focused assessment or a broader implementation engagement. The scope and deliverables are agreed before work begins.

01

Internal QMS audits

Assess selected processes and their connections against the agreed ISO 13485 and applicable regulatory criteria.

02

Supplier & contract-manufacturer audits

When internal resources are limited, ES3 Solutions, Inc. can provide supplemental audit resources to review these critical partners for you. We evaluate controls for the supplied product or outsourced process, considering risk, responsibilities, and quality agreements.

03

Readiness & focused assessments

Review a defined process, documentation set, or operating area before an external audit or significant business milestone.

04

Audit-program support

Help define the audit schedule, scope, auditor competence needs, reporting approach, and follow-up responsibilities.

Planning the engagement

A clear scope. Realistic priorities.

Audit duration and delivery method depend on the scope, sites, process complexity, supplier risks, and availability of evidence. Remote review may support part of the work; activities that need direct observation should be assessed accordingly.

You work directly with the experienced consultant responsible for understanding the issue and delivering the agreed work.

What you can expect

  • An agreed audit plan, scope, and criteria
  • A record of the evidence sampled and areas assessed
  • Clear findings tied to the applicable criteria
  • A closing discussion of significant issues and priorities
  • Agreed follow-up support for corrective actions

How the work progresses

From understanding to effective action.

Questions before you begin

Practical answers. A clearer starting point.

These answers provide general context. The right approach depends on your products, operations, and applicable requirements.

Reinforce the work with your team

Build the understanding to sustain the improvement.

Strengthen your internal audit capability through planning exercises, interviewing practice, evidence review, and finding-writing workshops. Process-owner coaching can also support preparation and follow-up.

Connected support

Related services

Let’s define the practical next step.

Tell us what you need to accomplish, where the difficulty sits, and any timing constraints. We can discuss the support that fits your organization.

01

Plan

Define the objective, criteria, and scope.

02

Examine

Sample records and follow the process.

03

Explain

Connect evidence to clear findings.

04

Follow up

Review actions and effectiveness evidence.

Can we outsource our medical-device internal audit program?

Yes. External auditors can provide competence, capacity, and an independent perspective. Your organization retains responsibility for its QMS, audit program, and corrective actions. The assignment should address auditor objectivity and avoid having auditors assess their own work.

What should an ISO 13485 internal audit cover?

The audit program should address the QMS against its defined criteria, considering process importance, changes, and previous audit results. Individual audits can focus on selected processes, but the program needs appropriate coverage and effective follow-up.

What is the difference between a gap assessment and an internal audit?

A gap assessment often establishes a baseline or evaluates readiness for a new requirement. An internal audit is part of the organization's planned system for evaluating QMS conformity and effectiveness. The methods can overlap, but the objective, criteria, scope, and reporting purpose should be explicit.

Can supplier audits be performed remotely?

Sometimes. Suitability depends on what must be evaluated, the supplier's risk and history, and whether reliable evidence can be obtained remotely. Manufacturing activities, facilities, or controls requiring observation may justify an on-site audit.

What happens after the audit?

Your team evaluates the findings, determines appropriate corrections and corrective actions, and assigns responsibility and timing. ES³ Solutions can support investigation and follow-up as separately agreed, with objectivity considered when reviewing completed work.

Medical device CAPA & FDA 483 response support

MDSAP consulting & audit preparation

ISO 13485 & medical device QMS consulting

bottom of page