What Is CGMP? FDA's Core Manufacturing Standard, Explained

TL;DR

• CGMP stands for Current Good Manufacturing Practice — FDA's minimum legal requirements for the methods, facilities, and controls used to manufacture, process, and hold a drug product (FDA, CGMP Regulations)
• The requirements live in the Code of Federal Regulations: 21 CFR Part 211 covers finished pharmaceuticals, Part 210 covers drug manufacturing generally, Part 212 covers PET drugs, and Part 600 covers biological products
• CGMP isn't a certificate a company earns once — it's a standard FDA re-checks at every inspection, and it can change over time, which is why the regulation says "current"
• 21 CFR 211.22, the quality control unit's authority, was the single most-cited CGMP provision in FY2025 warning letters — 62 of 134 inspection-based letters cited it (Argus HQ: the 5 most-cited FDA warning letter violations in FY2025)
• A Warning Letter that cites "211.100(a)" or "211.192" isn't inventing a rule — it's pointing at one specific numbered subsection of a regulation any manufacturer can read in advance

What Is CGMP? FDA's Core Manufacturing Standard, Explained

A new compliance hire's first Warning Letter usually arrives the same way: a wall of CFR numbers with no glossary attached. 211.22. 211.100(a). 211.192. The letter assumes the reader already knows what CGMP is. Most don't, not on day one.

Here's the plain answer. CGMP stands for Current Good Manufacturing Practice, and it is FDA's set of minimum requirements for the methods, facilities, and controls a company uses to manufacture, process, and hold a drug product, so that the product is safe and actually contains what it claims to contain (FDA, CGMP Regulations).

Where do the CGMP requirements actually live?

CGMP is not one document. It's a set of regulations spread across Title 21 of the Code of Federal Regulations, and which part applies depends on what's being made.

Source: FDA, CGMP Regulations

Part 211 is the one that shows up in almost every drug Warning Letter, because it's the finished-pharmaceutical rulebook, and it breaks down into subparts that map directly onto how a plant actually runs: personnel, buildings and facilities, equipment, control of components, production and process controls, packaging and labeling, holding and distribution, laboratory controls, and records and reports. FDA's own Q&A resource on CGMP requirements is organized around those exact same categories, which is a useful map for reading any citation (FDA, Q&A on CGMP Requirements).

Is CGMP a certification, or something FDA checks every time?

Not a certification. That's the part the word "current" is doing in the name — the standard isn't frozen at whatever a facility built five years ago. FDA assessors and investigators evaluate whether a firm has the facilities, equipment, and demonstrated ability to manufacture the drug it intends to market, both during the approval process for new and generic drug applications and again at every later inspection (FDA, CGMP Regulations). Passing an inspection in 2023 says nothing about whether the same line passes in 2026. Each inspection is its own snapshot.

That's also why a single Warning Letter can cite a company on multiple, unrelated CGMP subsections at once. A recent FDA sweep of nine OTC drug manufacturers across seven countries illustrates the pattern well: most of the letters shared the same core citation, but individual firms picked up additional, plant-specific findings on top of it (Argus HQ: why did FDA cite nine OTC drug manufacturers on three continents the same day?). CGMP isn't one rule to satisfy. It's dozens of them, checked independently.

Why do Warning Letters cite a CFR subsection instead of just saying "not CGMP compliant"?

Because "not CGMP compliant" isn't specific enough to act on. Every CGMP finding in a Warning Letter traces to a numbered subsection an investigator can point to on the floor: 211.22 governs the quality control unit's authority; 211.192 governs how a firm investigates unexplained discrepancies; 211.100(a) governs whether written process-control procedures exist and are followed. A citation is a pointer, not a vague judgment call, and 21 CFR 211.22 was the most-cited of all in FY2025 — present in 62 of 134 inspection-based drug Warning Letters (Argus HQ: the 5 most-cited FDA warning letter violations in FY2025).

Does CGMP mean the same thing as "our quality system"?

Related, not identical. A quality system is how a company chooses to satisfy CGMP — its SOPs, training program, deviation-handling process. CGMP is the floor those systems have to clear. It can be stricter than CGMP requires. It cannot be looser and still pass inspection.

What this means for a compliance program

• Read citations by subsection, not by headline. "CGMP violation" in a press summary tells you almost nothing. The actual CFR subsection tells you exactly which control failed.
• Don't treat a clean inspection as permanent. CGMP status is re-evaluated every time FDA shows up, not banked from the last visit.
• Map your SOPs to Part 211's subparts directly. If a written procedure can't point to which subpart it satisfies, that's usually where an investigator finds the gap first.
• Expect stacked citations, not single ones. Most Warning Letters with a CGMP finding cite more than one subsection, because a single inspection typically surfaces more than one control failure.

FAQ

Is CGMP the same thing as GMP?

Functionally yes for FDA purposes. "GMP" is the general international term; FDA's regulations specifically use "CGMP" to emphasize that the standard is current and evolving, not a fixed historical bar.

Does CGMP apply to medical devices?

No. Medical devices are governed by the Quality System Regulation (now the Quality Management System Regulation, or QMSR) under 21 CFR Part 820, a related but separate framework from the drug CGMP regulations in Parts 210 and 211 (Argus HQ: is FDA's new device quality rule a compliance reset?).

Can a company be CGMP compliant on one product line and not another?

Yes. Findings are inspection- and facility-specific, sometimes line-specific. A firm can run one compliant line and one non-compliant line in the same building; FDA cites only what the inspection actually found.

Where can a company check what CGMP citations FDA has issued recently?

FDA's public Warning Letters database is the primary source. Argus HQ tracks and analyzes the same letters as they're issued — search the Warning Letter database →

Related reading

• What actually makes an FDA warning letter response "adequate" enough to close out?
• How to read your FDA inspection classification: NAI vs. VAI vs. OAI

Sources: FDA, CGMP Regulations; FDA, Q&A on CGMP Requirements. Byline: The Argus Regulatory Analysis Team. Published 2026-07-13.