How early should audit preparation start for major certifications?

For most major certifications, audit preparation should start months in advance, not weeks. A reasonable planning window is often 6 to 12 months before the audit, with longer lead time if you have significant process changes, new software, weak document control, site expansion, high turnover, or known gaps from prior audits.

If the organization is already disciplined, records are current, and internal audits are working, the timeline can be shorter. If evidence is fragmented across paper, spreadsheets, MES, ERP, PLM, QMS, and email, preparation usually takes longer because the real issue is not the audit date. It is whether the underlying system is consistently operating and traceable.

What should happen early

• Confirm scope, sites, products, processes, and applicable requirements.

• Review prior findings, overdue CAPA, repeat issues, and open risk items.

• Run internal audits early enough to correct root causes, not just clean up records.

• Check training, approvals, revision control, equipment status, and record retention.

• Test whether evidence can be retrieved quickly and consistently across systems.

• Stabilize major process or system changes before the audit where possible.

What usually drives a longer timeline

• Recent ERP, MES, PLM, QMS, or document management changes

• Brownfield integrations with weak data mapping or inconsistent master data

• Paper-to-digital transitions that are not fully adopted on the floor

• Poor closure discipline for deviations, NCRs, CAPA, or training records

• Multi-site operations with local workarounds and inconsistent procedures

• High personnel turnover or reliance on tribal knowledge

In regulated and long-lifecycle environments, late preparation is risky because many gaps cannot be solved quickly without creating new problems. Rewriting procedures, changing workflows, or replacing systems close to an audit can introduce validation burden, retraining needs, new failure modes, and questions about whether the process is mature or merely staged for the audit.

This is also why full replacement strategies often fail as an audit-readiness tactic. In brownfield plants, ripping out legacy MES, ERP, PLM, or QMS platforms before a major audit usually increases risk due to integration complexity, downtime constraints, qualification effort, and the need to preserve traceability and change control across long equipment lifecycles. Coexistence and targeted remediation are often more realistic than wholesale replacement.

The practical goal is not to “prepare for the audit” as a short-term event. It is to make sure the operating system, records, and evidence trail can withstand normal scrutiny. If preparation only starts when the auditor is scheduled, the organization is usually too late for meaningful corrective action and left with superficial fixes.

So the short answer is: start as soon as the audit becomes likely, and ideally treat audit readiness as a continuous discipline. For a major certification, 6 to 12 months is common. More time may be necessary if your processes, systems, or evidence trail are not stable.