QualiFood

Food Safety Audits

A customer, internal, or certification audit should not be the first time a company tests its operation against the applicable requirements. A prior assessment provides a realistic view of compliance, supports findings with evidence, and turns gaps into concrete actions before a critical audit.

Who is it for?

Food companies preparing for customer or certification audits, seeking a clear view of their compliance level, reviewing whether their system works in practice, or organizing and closing known findings.

What we can assess

The audit framework is agreed before work begins. It may cover a complete system, a specific requirement, or a defined part of the operation, always with clear criteria and boundaries.

  • Good Manufacturing Practices (GMP)

    Applicable hygiene, infrastructure, personnel, operational, recordkeeping, and basic control conditions.

  • HACCP

    Alignment between hazard analysis, defined controls, monitoring, and evidence of day-to-day application.

  • FSSC 22000

    Readiness gaps across the management system, prerequisite programs, and applicable additional requirements.

  • Specific customer requirements

    Criteria communicated by a customer to assess suppliers, processes, products, or defined evidence.

  • Regulatory or internal requirements

    Obligations or internal standards previously identified and explicitly included in the scope.

What an audit may include

The specific content depends on the objective and contracted scope. An audit may include the following elements without assuming that every item applies to every project.

  • Prior definition of the scope, assessment criteria, and included areas or processes
  • Definition of the engagement type: diagnostic assessment, pre-audit, internal audit, supplier audit, or focused review
  • Document review and preparation of the required background information
  • On-site assessment when the scope requires direct observation of operations
  • Interviews and verification of records, practices, and other available evidence
  • Assignment of relevant competence and review of objectivity and impartiality for the audit type
  • Identification of findings and gaps against the agreed criteria
  • Prioritization by criticality or risk when appropriate to the assessment framework
  • Report, recommendations, and action plan according to the contracted service

How we work

The assessment moves from the agreed criteria to a practical response to the findings. Follow-up is included when it forms part of the contracted scope.

  1. Scope definition: we agree on the framework, criteria, areas, and purpose of the assessment.

  2. Review and preparation: we request background information and organize what is needed before the assessment.

  3. Assessment: we compare documents, practices, and evidence with the defined criteria, including on-site work when appropriate.

  4. Findings and prioritization: we document gaps and order them according to their relevance to the agreed scope.

  5. Action plan: we turn findings into recommendations or actions with clear priorities.

  6. Follow-up: when included in the service, we review progress, closure evidence, and effectiveness.

What the company receives

Depending on the scope, the company may receive a combination of the following deliverables and working criteria.

  • Structured view of compliance

    An organized reading of the observed status against the defined criteria.

  • Evidence-based gaps

    Findings linked to records, observations, or other available evidence.

  • Intervention priorities

    A work order that helps focus resources on the most relevant gaps.

  • Audit report

    A clear record of the scope, assessment, and findings identified.

  • Recommendations or action plan

    Guidance for addressing gaps according to the contracted service.

  • Basis for follow-up and closure

    Criteria for reviewing progress and supporting closure when that work is included.

From gap to closure

Finding a gap is the starting point. For the audit to support improvement, each finding must become a verifiable decision proportionate to its cause and impact.

  1. 01

    Finding

    The observed difference from the agreed criterion is recorded.

  2. 02

    Analysis

    The context, evidence, and causes sustaining the gap are reviewed.

  3. 03

    Corrective action

    A response aligned with the identified cause and risk is defined.

  4. 04

    Owner and deadline

    The action is assigned and placed within a realistic implementation timeframe.

  5. 05

    Follow-up

    Progress and available evidence are reviewed to support closure.

  6. 06

    Effectiveness check

    When appropriate, the action is checked to confirm that it addressed the cause and holds over time.

Service scope: QualiFood engagements may be diagnostic assessments, pre-audits, internal audits, supplier audits, or focused reviews, depending on the agreed scope. Consistent with ISO 19011:2026 guidance, criteria, competence, objectivity, and impartiality are reviewed before calling the work an audit. Prior consulting on the same scope must be disclosed and any conflict managed. These services do not replace a third-party certification audit or guarantee certification.

Frequently asked questions

What is the difference between a diagnostic audit and a certification audit?

A diagnostic audit identifies gaps and supports improvement decisions without issuing certification. A certification audit is conducted by an independent, accredited body that assesses the system and makes the certification decision.

When should an audit be carried out before certification?

It should be scheduled with enough time to review evidence, correct gaps, and confirm that changes are applied in operations. The right timing depends on system maturity, scope, and the planned external audit date.

What information does QualiFood need before starting?

We need the objective, reference framework or requirement, included areas, relevant date, and available background information. This allows us to define a realistic scope and assessment method.

Can the audit focus on GMP, HACCP, or FSSC 22000?

Yes. The scope can focus on GMP, HACCP, FSSC 22000 readiness, or a defined combination of requirements, depending on the company's needs and maturity.

What happens after the gaps are identified?

Findings are organized and can be translated into recommendations or an action plan. When follow-up is contracted, progress, closure evidence, and effectiveness are also reviewed as appropriate.

Can a specific customer requirement be assessed?

Yes, provided that the requirement and its criteria are available and explicitly included in the scope. The assessment is limited to the agreed information, areas, and evidence.

Does a QualiFood audit replace the certification body's audit?

No. QualiFood diagnoses, prepares, and supports gap closure. The audit and certification decision belong exclusively to an independent, accredited certification body.

Prepare for an audit with a clear scope

Let's discuss the framework, your operation, and the right timing for your company.