I’ve been on both sides of audits and inspections enough times to tell which companies have genuine quality culture and which are performing for the auditor. To be fair, the distinction isn’t always black-and-white — teams can be sincere but under-resourced — but inspectors are remarkably good at spotting theatre. In practice this means they look for repeatable behaviour, not polished slides.

Why the difference matters (beyond "tick-box" compliance)

Quality theatre gets you a tick on a checklist. Real quality keeps patients safe and reduces rework. Under MDR, the regulator expects manufacturers to implement an effective quality management system and produce Technical Documentation that reflects how the device is designed, produced and monitored (see MDR Article 10 and Annex I/II). Notified bodies and competent authorities assess not just whether you have processes, but whether they are effective.

Put differently: a neat training matrix satisfies Annex IX documentary requirements, but it does not demonstrate that training has a measurable impact on non-conformities, CAPAs, or supplier quality. Inspectors know that.

What inspectors actually look for

During an audit they don’t watch your slide deck; they watch your people and records. Things that raise confidence:

• Staff can explain their daily tasks and how those tasks feed the QMS — not recite policy language, but describe actions and consequences.
• CAPAs show depth: clear detection point, robust root cause analysis, effective corrective actions, and verification that the actions actually reduced recurrence. CAPA-driven risk assessment is a real differentiator here.
• Findings convert to quality events quickly. When a complaint or audit finding appears, it should already be in your change-control/CAPA workflow with traceability to affected product lots and relevant documents.
• Trend analysis that drives decisions — e.g., supplier trend that triggered a supplier audit or design risk control.
• Management review that discusses effectiveness metrics, not just status updates. Demonstrable decision-making (budget, resource changes, escalation) is what counts.
• Evidence of continuous monitoring: post-market surveillance, PMCF activities where applicable, and complaint handling that closes the loop back to design and production.

And the things that set off alarm bells:

• Reams of "evidence" created immediately before the audit: training records with identical timestamps, last-minute risk assessments, or "corrective action" entries with no follow-up evidence.
• Overly rhetorical management review documents with no resource allocation or measurable outcomes.
• CAPAs closed with procedural changes only, without verified effect.
• Documents that claim "all good" with no data: no trends, no returns, no supplier performance metrics.

Concrete behaviours that separate culture from theatre

From my time defending Technical Files to notified bodies, the following patterns appear again and again.

Quality culture — what I see:

• Engineers show me the non-conformance log and point to a recurring item. They explain the workaround and the long-term fix that’s in progress.
• Supplier QRs are embedded in procurement: supplier scorecards feed supplier audits, and poor scores create automatic escalation.
• Findings immediately spawn a quality event (not a separate, detached spreadsheet). The whole chain — finding → investigation → CAPA → verification — is traceable.
• Staff discuss "why" rather than "who". Root cause analysis actually looks for system causes, not person-fault.

Quality theatre — what I see:

• The QMS folder is immaculate, but no one outside QA knows how to record a complaint or initiate a CAPA.
• Training completion is 100 per cent on paper, but producers revert to informal processes on the line because the documented process is unusable.
• A mountain of "continuous improvement" forms that are never prioritised; they live in a backlog, never implemented.

Practical steps to move from theatre to culture

I work in a mid-sized company where resourcing is always under pressure, so these are realistic, actionable steps I’ve used or defended with notified bodies.

• Make findings into events, not files: ensure every audit finding, customer complaint, and non-conformance automatically creates a traceable quality event in your QMS. This reduces theatre and increases accountability.
• Link CAPA to risk and design control: require CAPA owners to complete a CAPA-driven risk assessment that updates the risk file and design documentation where relevant.
• Use native workflow integration (or at least connected workflow) so change control, CAPA, and document control aren’t siloed. In practice this means you can follow a single item from detection to verification without manual stitching.
• Train for competency, not completion: require demonstrable competence (observed work, quizzes focused on scenario-based tasks), not just a signed attendance list.
• Make management review meaningful: present decisions framed as risks, options, and resources required. If the review doesn’t change anything, you should ask why you held it.

To be clear: automation helps, but it is not a cure-all. Automated CAPAs and AI-assisted triage can speed detection and classification, but the underlying quality judgement must still be human, reviewable, and traceable.

What I tell teams before an audit

I tell them: expect questions that start "why". Be prepared to show how a single complaint influenced a change in product, supplier oversight, or instructions. Bring the chain of evidence. If you can’t show it, you have theatre, not culture.

Inspectors have limited time. They will make sampling decisions based on what people say in interviews and whether records are coherent. So rehearsed answers are less useful than being able to walk through a real example — a closed CAPA with evidence of verification, or a supplier escalation that led to a documented decision.

What have you done that actually changed behaviour in your company — one small procedural change that killed quality theatre and produced repeatable culture?