cGMP vs GMP: What “Current” Actually Changes

Set cGMP vs GMP side by side and you are looking at the same discipline twice. The difference is one word, and that word changes what an auditor looks for rather than what a manufacturer is trying to achieve. GMP asks whether adequate controls exist. cGMP asks whether those controls still describe how the plant runs today.

That single distinction is the whole of cGMP vs GMP, and it accounts for a disproportionate share of audit findings — the reason two facilities can both be “GMP compliant” while only one of them can prove it.

At a glance

• The terms: GMP is the general discipline; cGMP is the same discipline with an explicit requirement to stay current.
• What changes: not the rules, but the evidence an auditor asks for.
• On the certificate: the scheme is always named, because “cGMP” alone identifies nothing.
• Who it applies to: any manufacturer, packer, processor or handler, not only pharmaceutical plants.
• Two different services: certification assesses the organisation; internal auditor training builds the people who check it between assessments.

cGMP vs GMP: where the two terms come from

Good Manufacturing Practice is the umbrella term for the requirements that keep manufactured products consistently safe and correctly made. It appears, in different forms, across several published frameworks, and different product categories reference different ones.

Current Good Manufacturing Practice is the same body of requirements with the word “current” attached. The word originates in United States regulation and travels widely in pharmaceutical contexts, but it now appears on certificates and in purchase-order conditions well beyond that origin.

Neither term in cGMP vs GMP names a single worldwide standard. That is why a certificate that says only “cGMP certified” is not usable evidence — it tells a buyer nothing about which requirements were applied or to what.

What “current” adds to an audit

The practical effect of cGMP vs GMP is that several routine audit questions become comparisons across time rather than single-point checks.

The right-hand column is not a separate audit. It is what an experienced auditor adds to each of the questions in the middle column.

The twenty-minute exercise that shows the difference

Take a procedure governing an active process. Note its revision number and date. Everything after that is a matter of following one thread.

The four checks, in order

• The workstation copy. Go and read the version in use. Same revision?
• The training records. Were the people performing it trained on that revision, and how soon after it was issued?
• Three completed records. Pull three from since the revision date. Do they reflect what the new version requires?
• The change itself. Did the revision reach validation, training and documentation, or stop at approval?

Where all four line up, the system is current in that respect. Where the thread breaks, you have a specific finding and a clear picture of which system failed: document distribution, training linkage, or the change process that should have connected them.

That exercise is cGMP vs GMP in miniature. The requirement was always there. What “current” adds is the expectation that you can demonstrate it holds today.

Why the distinction matters commercially

Customer auditors and certification bodies apply this emphasis whether or not the word cGMP appears on their checklist. They ask when a record was completed, not only whether it was. They compare the version at the workstation against the register. They look for the change that never reached validation.

A site whose own auditors work the same way finds those gaps first. That changes an external audit from a source of surprises into a confirmation of what the site already knew. That is the whole commercial argument in cGMP vs GMP, and it holds regardless of which term appears on the certificate.

Certification and training are different purchases

A certified system is expected to audit itself, so the two support one another. But completing a course certifies no company, and holding a certificate produces no auditors. Most sites need both, in that order of dependency: certification sets the criteria, and internal auditors keep the system honest between visits.

Background on the organisational route is set out on the IAS GMP certification page. For the people side, see GMP internal auditor training, or the self-paced online cGMP internal auditor training where staff cannot be released together.

When the term turns up in a purchase order

The moment this stops being terminology and starts being commercial is when a customer’s purchase order or supply agreement carries a line like “Supplier shall maintain cGMP compliance” or “Supplier shall hold current GMP certification”.

Those clauses are usually written by a legal or procurement team rather than a quality team, and they rarely define what they mean. Responding well matters, because the wrong answer either overcommits you or looks evasive.

How to respond to the clause

• Ask what evidence satisfies it. Most buyers want a certificate they can file, naming a framework they recognise and a scope covering what they are buying. Some want a completed questionnaire instead. A few want an audit. These are very different obligations, and the clause on its own does not distinguish them.
• Match the scope to the order. A clause saying you must be compliant for the goods supplied is narrower than one saying your facility must be compliant. If your certificate covers three of your five lines and they are buying from the fourth, raise that gap before the contract is signed rather than at the first audit.
• Do not accept a clause you cannot evidence. A commitment to maintain something you have no certificate for is a commitment to be judged by that buyer’s interpretation, on a day of their choosing. If the clause asks for more than you hold, the honest options are to negotiate the wording or to close the gap.
• Watch for approval language. Clauses occasionally slide from certification into regulatory approval — asking a supplier to warrant that products are approved or registered somewhere. That is a different kind of promise, it is not something a certificate supports, and it belongs with whoever handles your regulatory affairs.

Clause wordings and what they usually mean

The pattern behind all five rows is the same. A certificate is a specific document making a specific statement, and a contract clause is only satisfied when the two actually line up. Reading them side by side takes ten minutes and prevents the most common form of supply-chain dispute in this area — a supplier who believed they were covered and a buyer who believed something broader.

Quick definitions

• GMP: Good Manufacturing Practice — the general term for manufacturing quality requirements.
• cGMP: the same requirements with an explicit expectation that practice stays current.
• Scheme: the named framework a certificate is issued against.
• Scope: what the assessment reached — the goods, the operations and the addresses.
• Objective evidence: a record, observation or statement that can be checked by someone else.
• Nonconformity: a gap between a stated requirement and what the evidence shows.
• Surveillance: the lighter check that falls between two full assessments.
• Recertification: the complete reassessment that renews the cycle.

Why manufacturers work with IAS

• Certification services delivered under IAS’s UQAS accreditation.
• Every certificate names its scheme and defines its scope, so a buyer can read what was actually assessed.
• One fixed written quotation after scoping, rather than a published rate that has to be revised.
• Certification and internal auditor training available from the same organisation, so criteria and method match.
• Open to any manufacturing, processing, packing or handling operation, not only pharmaceutical and food producers.

Worth stating plainly: IAS delivers training and certifies management systems. Whether a plant may run, and whether goods may go on sale, are calls made by regulatory authorities and nobody else.

Any certificate already issued can be checked through the IAS certificate search.