KGMP Certification for Foreign Manufacturers: A Complete Roadmap

Why KGMP Sits on Its Own Track

Manufacturers entering Korea with an existing ISO 13485 certificate often assume KGMP is a paperwork translation. It is not. KGMP is a separate certification regime run by MFDS through accredited third-party bodies, and it imposes Korean-specific requirements that ISO 13485 does not cover — including a mandatory Korean Quality Manual, Korean import-record traceability obligations, and a complaint-handling channel routed through the Korean License Holder. The cleanest path is to treat KGMP as an extension on top of ISO 13485, not a replacement.

The Three Audit Types

Foreign manufacturers encounter three distinct KGMP audits, and the document set differs for each.

1. Document-Only Audit (서면심사)

Used for the lowest-risk product classes and for renewal audits where prior compliance is strong. The certification body reviews the quality manual, procedures, and quality records remotely. Faster (4–8 weeks) but rare for first-time foreign sites.

2. On-Site Audit (현장심사)

The default for first-time KGMP certification of Class II and above. Auditors visit the manufacturing facility for 2–4 days, observe processes, sample records, and interview personnel. For foreign sites, a Korean-speaking interpreter is required and audit findings are issued in Korean.

3. Site Survey by Accredited Body (실태조사)

A combined or shortened audit format used when a recognized third-party certification is in place (e.g., MDSAP for the same scope). MFDS will accept portions of MDSAP audit reports against KGMP scope, reducing the on-site duration. This is the highest-leverage option for manufacturers already operating under MDSAP.

What ISO 13485 Does Not Cover

A clean ISO 13485 QMS handles around 80% of KGMP requirements. The 20% gap is consistent across audits:

1. Korean Quality Manual — A standalone document (not a translation of the master manual) that references Korean regulations and the KLH relationship.
2. Import record procedure — Korea requires the KLH to maintain a record of every device shipment received, with lot/serial traceability back to the manufacturer's records. The procedure has to specify the handoff.
3. Complaint routing — Complaints filed in Korea (in Korean) must route to the manufacturer within a defined SLA. Most ISO 13485 QMSes assume English-language complaint intake.
4. Adverse event reporting — Korea uses its own MFDS reporting system separate from FDA MedWatch or EU EUDAMED. The procedure must specify timelines and the responsible party (KLH vs manufacturer).
5. Korean labeling change control — Any label change for the Korean market requires notification to MFDS. The change control procedure must include the Korean notification step.

The 16-Week Sequence

A realistic path from ISO 13485 baseline to KGMP certification:

Phase	Weeks	Deliverables
Gap assessment	1–2	Map ISO 13485 procedures to KGMP requirements; identify Korean-specific additions
Korean Quality Manual draft	3–5	Write standalone manual; reference KLH and Korean regulatory framework
Procedure overlays	4–8	Add import records, complaint routing, adverse event, labeling change procedures
Internal audit	9–10	Korean-language audit of the new procedures; correct findings
Application filing	11	Submit to accredited certification body with KLH support
On-site audit	12–14	Auditors visit; corrective actions for findings
Certificate issuance	15–16	KGMP certificate issued after CAPA closure

This timeline assumes ISO 13485 is current and not under non-conformity. Sites with open ISO non-conformities should resolve those first; auditors will flag them against KGMP scope.

Audit Day: What Auditors Actually Look At

In our experience accompanying foreign sites through KGMP audits, three areas drive 70% of findings:

Design controls — Korean auditors expect the design file to show explicit risk-control linkage from hazard analysis to verification evidence. ISO 13485 allows looser linkage; KGMP audits do not.

Supplier control — Component and contract sterilization suppliers must be on an approved-supplier list with current audit records. Korean auditors will request the audit dates and findings for the top three suppliers.

Sterilization validation — For sterile devices, the validation report must be in the audit file in full, not by reference to an external certificate. Many ISO 13485 audits accept a third-party validation summary; KGMP requires the full report.

Maintaining KGMP After Certification

KGMP certificates are valid for three years. Surveillance audits occur annually, with the recertification audit in year three. Between audits, the certificate is suspended if the KLH relationship is terminated, the manufacturing site address changes, or if MFDS finds non-compliance during a post-market inspection.

The ongoing maintenance work is light in volume but high in consequence. Our Korea License Maintenance service holds this calendar so the certificate does not lapse during product launches or commercial transitions.

Where Leanabl Plugs In

The KGMP Certification solution runs the full 16-week sequence with a Korean RA lead embedded with the foreign manufacturer's QA team. For sites that need foundation work before KGMP, Korea QMS Foundation builds the ISO 13485 + KGMP-ready procedure set from scratch. Audit preparation specifically is handled through Korea Audit Readiness.