BRCGS Audit Checklist for Food Manufacturing: A Practical Guide for Issue 9 Compliance

BRCGS Audit Checklist for Food Manufacturing

The Complete BRCGS Issue 9 Audit Checklist Every Food Manufacturer Needs

A BRCGS audit checklist for food manufacturing is a structured list of evidence and procedures a site must have in place to pass certification against the BRCGS Global Standard for Food Safety. The current standard is Issue 9, mandatory for all audits since 1 February 2023. To pass, a site must satisfy nine sections of requirements and twelve “fundamental” clauses, any one of which can cause an automatic non-certification if a major non-conformity is raised.

The checklist below maps directly to those nine sections in the order an auditor walks the site, and flags every fundamental clause.

What Is a BRCGS Audit?

A BRCGS audit is a third-party certification audit performed by a registered Certification Body against the BRCGS Global Standard for Food Safety. It verifies that a food manufacturer’s safety and quality management system meets the requirements of one of the most widely recognised schemes benchmarked by the Global Food Safety Initiative (GFSI). Major retailers and brand owners frequently require BRCGS certification as a condition of supply.

If you run a food manufacturing site preparing for a BRCGS audit, the difference between a Grade AA result and a stack of major non-conformities usually comes down to one thing: how systematically you prepared. After years of walking factories before audits — from spice grinders in South Asia to ready-meal facilities in the EU — the sites that pass cleanly aren’t the ones with the fanciest documentation. They’re the ones that turned the standard into a daily checklist their floor teams actually use, supported by a structured approach to food and beverage compliance.

Heads up on Issue 10: BRCGS opened public consultation for the next revision of the standard, which closed in February 2026. Until Issue 10 is published and a transition period ends, Issue 9 remains the standard you’ll be audited against.

What Does a BRCGS Auditor Actually Check?

A BRCGS Food Safety auditor verifies three things in parallel during a typical 2–3 day on-site visit (8–9 hours/day, rarely exceeding 10):

  1. Documentation exists and is current — policies, HACCP plan, procedures, and records.
  2. What’s documented is actually being done — verified during the site walk and operations review.
  3. People at every level understand why — tested through floor interviews, including with operators, not just management.

Issue 9 raised the bar significantly on the third point. Food safety culture is now woven throughout the standard, not isolated in one clause. An auditor will ask a packing-line operator how they would report a foreign body concern, and the answer matters.

What Are the BRCGS Issue 9 Audit Options?

There are three audit programs to choose from:

  • Announced audit — scheduled, with a mandatory unannounced audit every three years.
  • Blended announced audit — up to 50% conducted remotely (documents and systems only), the rest on-site, plus the same triennial unannounced requirement.
  • Unannounced audit program — the auditor arrives within an agreed window without warning.

If your culture is genuinely strong, the unannounced route often demonstrates that better than any policy document can.

What Are the 12 Fundamental Requirements of BRCGS Issue 9?

BRCGS Issue 9 designates twelve clauses as fundamental. A major non-conformity against any one of these means automatic non-certification — you cannot pass the audit with a fundamental failure, regardless of how strong the rest of your system is.

# Clause Topic
1 1.1 Senior Management Commitment and Continual Improvement
2 2 The Food Safety Plan (HACCP)
3 3.4 Internal Audits
4 3.5.1 Management of Suppliers of Raw Materials and Packaging
5 3.7 Corrective and Preventive Actions
6 3.9 Traceability
7 4.3 Layout, Product Flow and Segregation
8 4.11 Housekeeping and Hygiene
9 5.3 Management of Allergens
10 6.1 Control of Operations
11 6.2 Labelling and Pack Control
12 7.1 Training (raw material handling, preparation, processing, packing and storage areas)

The checklist below is organised by section so you can work through it sequentially. Every item that touches a fundamental clause carries extra weight.

Section 1: Senior Management Commitment

This section sets the tone for everything else. Auditors increasingly start here because weakness at the top almost always shows up later in the audit.

Documentation and policy

  • Signed, dated product safety, quality, and legality policy that explicitly references continual improvement of food safety and quality culture
  • Documented food safety and quality culture plan with defined activities, performance measurements, and a review schedule (Clause 1.1.2)
  • Clear organisational chart showing reporting lines for food safety
  • Documented objectives for food safety, quality, and culture, with review dates

Evidence to have ready

  • Minutes of the most recent management review meeting (must cover non-conformities, complaints, recalls, internal audit results, and culture plan progress)
  • Resource allocation evidence — budgets, staffing, capital expenditure tied to food safety
  • Records showing senior management actively reviews the culture plan, not just signs it

Common failure point The commitment policy is often a piece of paper reprinted before each audit and signed by the site manager. Issue 9 expects culture to permeate daily operations. A senior manager must be available during the audit to discuss implementation of the culture plan — this is a specific Issue 9 addition.

Section 2: The Food Safety Plan (HACCP)

Issue 9 aligned this section with the 2020 revision of the Codex Alimentarius General Principles of Food Hygiene, with significantly more emphasis on validation.

Pre-HACCP requirements

  • Documented prerequisite programs (PRPs) covering cleaning, pest control, maintenance, hygiene, and allergen management
  • Multidisciplinary HACCP team with documented training records and a defined team leader
  • Full product descriptions for each product or product group
  • Identified intended use and consumer (including vulnerable groups)
  • Process flow diagrams verified on-site by walking the line

HACCP plan itself

  • Hazard analysis covering biological, chemical, physical, allergenic, radiological, and authenticity hazards at every step
  • Documented CCP determination (decision tree or equivalent justification)
  • Validated critical limits with scientific justification
  • Defined monitoring procedures — what, how, when, by whom
  • Documented corrective actions for each CCP deviation
  • Verification procedures distinct from monitoring
  • Records that prove the system runs daily

Why validation matters in Issue 9 Validation is now required before implementing changes — including new equipment, new products, and changes to control points or critical limits. Have the validation report ready before the auditor asks why you trust your new metal detector setting.

Section 3: Food Safety and Quality Management System

This section contains four fundamental requirements (3.4, 3.5.1, 3.7, 3.9), so it deserves disproportionate preparation time.

Document control

  • Master list of all controlled documents with current revision status, ideally held in a centralised document repository rather than scattered across shared drives
  • Evidence of document approval and distribution control, supported by clear version control so the wrong revision never reaches the floor
  • Removal procedure for obsolete documents
  • Specifications for all raw materials, packaging, and finished products — reviewed at a defined frequency

Internal audit program (Clause 3.4 — fundamental)

  • Documented annual audit schedule covering all clauses of the standard at least once per year
  • Audits conducted by trained, independent auditors
  • Reports identifying non-conformities, root causes, and corrective actions with deadlines
  • Evidence of follow-up verification that corrective actions worked, with a complete audit trail showing who did what and when
  • Separate fabrication inspections at least monthly in open product areas, with results reviewed at management review

Supplier and raw material approval (Clause 3.5.1 — fundamental)

  • Documented supplier approval procedure with risk-based criteria
  • Approved supplier list, current and reviewed
  • Evidence of ongoing performance monitoring for all suppliers — including service providers like consultants and training providers (a specific Issue 9 addition)
  • A defined process for retail and supplier audits, so document collection isn’t a fire drill before each certification
  • Outsourced processing controls equivalent to those at your own site (Clause 3.5.4)
  • Risk assessment for each raw material covering safety, authenticity, legality, and quality

Corrective and preventive action (Clause 3.7 — fundamental)

  • Documented procedure including root cause analysis for every non-conformity
  • Defined timescales and named responsible persons, ideally enforced through an approval process that prevents items from being closed without sign-off
  • Verification step confirming actions were effective
  • Trend analysis triggering systemic improvements when recurring patterns appear, supported by automated workflows that surface overdue actions before they become audit findings

Control of non-conforming product

  • Procedure including segregation, identification, and disposition decisions
  • Management of returned product (an Issue 9 addition to clause 3.8.1)

Traceability (Clause 3.9 — fundamental)

  • Forward and backward traceability achievable in a defined time (target: under 4 hours), measurably faster when supported by a traceability dashboard rather than manual lot reconstruction
  • Compliance with legal requirements in the country of sale or intended use
  • Mass balance reconciliation tested at audit (typically 100% within ±0.5%)
  • Documented test of the traceability system at least annually

Section 4: Site Standards

This is where the auditor spends most of the on-site walk. Two fundamental clauses live here (4.3 and 4.11).

External and internal site standards

  • External areas controlled — no standing water, vegetation managed, drainage adequate
  • Building fabric in good repair, no leaks, no flaking paint over open product
  • Floors, walls, and ceilings cleanable and intact
  • Lighting protected (shatterproof or covered) over open product
  • Adequate ventilation; positive air pressure in high-care or high-risk where required

Layout and segregation (Clause 4.3 — fundamental)

  • Defined risk-based zones: enclosed, low-risk, high-care, high-risk, ambient high-care
  • Documented product, personnel, equipment, and waste flow preventing cross-contamination and allergen cross-contact
  • Physical or procedural segregation appropriate to risk
  • Changing facilities aligned with zone requirements

Equipment (Clause 4.6 — major Issue 9 revision)

  • Documented purchase specification for each piece of equipment, including legislation and food-contact approval
  • Suppliers must provide evidence equipment meets the specification
  • Equipment register with location, calibration, maintenance, and warranty data
  • Hygienic design verified
  • Defined commissioning and decommissioning procedures

Maintenance

  • Planned preventive maintenance schedule with completion records
  • Engineering work controlled in production areas (work permits, post-work hygiene clearance)
  • Tool control register — what went in, what came out
  • Lubricants food-grade where contact possible

Pest control

  • Contract with a competent provider OR competent in-house team
  • Site map showing all bait stations, traps, and electric fly killers
  • Inspection records with trend analysis and corrective actions
  • Annual program review

Cleaning and hygiene (Clause 4.11 — fundamental)

  • Cleaning schedules for every area and item of equipment with defined frequency, method, chemicals, contact times, and concentrations
  • Cleaning instructions (CICs/SSOPs) with verified efficacy
  • Validation of cleaning for allergens and critical microbiological organisms
  • Routine verification through visual checks, ATP, swabs, or microbiological testing
  • Cleaning equipment colour-coded by zone

Foreign body management

  • Risk assessment driving controls (metal detectors, X-ray, sieves, filters, magnets)
  • Glass, brittle plastic, and ceramic register with quarterly checks
  • Knife, blade, and small tool register
  • Wood control or exclusion policy

Chemical and physical contamination control

  • Approved chemical list with SDS and food-grade status
  • Segregated chemical storage with restricted access
  • Controls on tape, pens, jewellery, and personal items in production

Section 5: Product Control

Product design and development

  • Documented procedure for new products and changes to existing ones
  • Shelf-life studies with scientific justification
  • Trial production records and final approval before launch

Allergen management (Clause 5.3 — fundamental)

  • Site-specific list of allergens handled, including those legally regulated in countries of sale
  • Risk assessment of cross-contact at every step
  • Segregation in storage, processing, and packaging
  • Dedicated, identified utensils for allergen-containing materials (colour-coding is the cleanest approach)
  • Validated cleaning between allergen and non-allergen runs
  • Precautionary allergen labelling justified by risk assessment, not used as a default

Authenticity and food fraud (terminology updated in Issue 9)

  • Documented vulnerability assessment (VACCP) covering raw materials and supply chain
  • Mitigation plan for material categories with elevated fraud risk
  • Specifications and supplier audits aligned with vulnerabilities

Product packaging

  • Specifications confirming food-contact suitability
  • Storage segregated from raw materials and finished product
  • Controls on printed packaging and labels — Issue 9 clarified this includes labels printed both on and off site

Product inspection, on-site laboratory testing, and product release

  • Sampling plans tied to risk
  • Laboratory accreditation (ISO/IEC 17025 or equivalent) where independent results are needed
  • Defined positive release procedure where applicable

Section 6: Process Control

Control of operations (Clause 6.1 — fundamental)

  • Documented process specifications for every product, ideally managed alongside your SOPs and policies so operating instructions stay synchronised with master records
  • Operating windows defined and monitored
  • Records demonstrating consistent operation within those windows
  • Change control procedure for any process modification

Labelling and pack control (Clause 6.2 — fundamental)

  • Pre-production check verifying correct artwork, ingredients, allergen declaration, dates, and weights
  • Online verification (vision systems, manual checks at defined frequency)
  • End-of-run reconciliation to detect mixed packaging
  • Procedure for handling redundant or obsolete labels — destroyed, not stored loose

Quantity, weight, volume, and number control

  • Calibration records for all measuring equipment
  • Average weight legislation compliance for the country of sale
  • Documented checks at defined frequency

Calibration and control of measuring devices

  • Master list of measuring equipment affecting product safety or legality
  • Calibration against traceable national or international standards
  • Procedure for handling out-of-calibration findings — including assessment of product made since the last successful calibration

Section 7: Personnel

Training (Clause 7.1 — fundamental)

  • Induction training before any new employee enters production areas
  • Job-specific training documented for each role, with role-based access control ensuring people only see and sign off on what’s relevant to them
  • Refresher training at defined frequency
  • Competency assessment, not just attendance records
  • Training records linked to individuals and roles
  • Coverage of agency, temporary, and contractor staff

Personal hygiene

  • Documented hygiene rules covering hand washing, hair and beard cover, jewellery, fingernails, smoking, eating, and drinking
  • Visible compliance — auditors will photograph violations
  • Cuts and wounds policy with detectable plasters
  • Visitor and contractor procedure

Medical screening

  • Pre-employment health questionnaire
  • Return-to-work procedure after illness, particularly gastrointestinal
  • Notification procedure for notifiable diseases

Protective clothing

  • Provided by the site, not personal
  • Laundered to defined standard (in-house with validated process or by approved external provider)
  • Zone-specific colour or design where appropriate
  • Storage that prevents contamination between shifts

Sections 8 and 9: Zone-Specific and Traded Product Requirements

Section 8 applies if you operate high-risk, high-care, or ambient high-care production zones — for example, cooked-chilled, ready-to-eat, or specific dairy. It layers extra requirements over Section 4 around segregation, environmental monitoring, personnel flow, and protective clothing changes.

Section 9 is the traded products section, new in Issue 9 numbering. It applies if you handle products that fall within the certification scope but are not manufactured, processed, packaged, or labelled at your site (for example, finished goods you store and dispatch under your brand). Section 9.1 requires a separate or integrated HACCP plan covering goods receipt, storage, and dispatch. This section remains voluntary — opt in only if you need it on your certificate.

If neither applies to your site, document the exclusion clearly in your scope.

How Should You Plan a BRCGS Pre-Audit Timeline?

Sites that pass cleanly the first time tend to follow this rhythm:

12 months out

  • Confirm your audit option (announced, blended, or unannounced)
  • Schedule a full internal audit covering all 12 fundamental clauses
  • Complete the BRCGS Site Self-Assessment Tool — useful for preparation, but note that BRCGS explicitly states this cannot substitute for an internal audit

6 months out

  • Close out internal audit non-conformities with documented root cause analysis
  • Conduct a traceability and mass balance test
  • Test the incident management procedure (full test, not just recall)
  • Review all supplier approvals and specifications

3 months out

  • Walk every zone with a fresh pair of eyes (a colleague from another site if possible)
  • Verify all calibration, pest control, and cleaning verification records are current
  • Confirm management review meeting minutes are signed and complete
  • Brief floor staff on what auditors will ask — and crucially, do not script answers. Coached responses are obvious and damage culture scoring

2 weeks out

  • Final document check
  • Confirm auditor logistics, PPE, and sign-in
  • Pre-audit huddle with senior management to align on the culture conversation

What Sets Sites That Pass Apart from Those That Don’t?

Three patterns appear consistently in sites that achieve AA grades:

They treat the standard as a floor, not a ceiling. The fundamental clauses are the minimum to certify, not a target. Sites that build genuinely effective systems find the audit becomes a verification of reality rather than a performance.

Their floor staff are confident, not coached. When an auditor asks an operator about allergen changeover, the best answer is a relaxed, accurate description of what they actually did this morning. That only happens when training is real and culture is real.

They use non-conformities as fuel. The corrective action and root cause requirements in Clause 3.7 exist because most food safety failures repeat. Sites that aggressively investigate root causes — not just symptoms — find their audit findings drop year over year.

Where Document Automation Cuts the Most Time

Roughly 70% of the items in the checklist above are documentation problems, not technical ones. The hazard analysis is sound. The cleaning works. The training happens. What fails the audit is finding the proof when the auditor asks for it.

Sites that move from filing-cabinet or shared-drive systems to purpose-built manufacturing document control typically see three things change:

  • Pre-audit prep collapses from weeks to days because specifications, SOPs, training records, and supplier certificates are already current and searchable
  • Supplier compliance gaps surface earlier instead of being discovered the week before the audit
  • Internal audits become useful again because findings link directly to the documents and owners that need to act

If you’re rebuilding your BRCGS readiness ahead of your next certification, see why DCN is built specifically for the documentation patterns SQF and BRCGS auditors look for, or schedule a demo to see how a typical food manufacturer organises Section 3 evidence.

FAQs About BRCGS Audit Checklist

What is a BRCGS audit checklist?

A BRCGS audit checklist is a structured list of evidence, procedures, and records a food manufacturing site must have in place to demonstrate conformance with the BRCGS Global Standard for Food Safety. It is organised around the nine sections of the standard and the twelve fundamental clauses, and is used both for internal audit preparation and as a readiness tool before a third-party certification audit.

What are the 9 sections of the BRCGS Food Safety Standard?

The nine sections are: (1) Senior Management Commitment, (2) The Food Safety Plan – HACCP, (3) Food Safety and Quality Management System, (4) Site Standards, (5) Product Control, (6) Process Control, (7) Personnel, (8) Production Risk Zones (high-risk, high-care, ambient high-care), and (9) Traded Products.

What is the current version of the BRCGS Food Safety Standard?

The current version is Issue 9, released in August 2022 and mandatory for all audits since 1 February 2023. Public consultation on the next revision (Issue 10) closed in February 2026; a transition period will follow once Issue 10 is published.

How long does a BRCGS audit take?

A typical announced BRCGS audit takes 2 to 3 days on site, with auditors working 8–9 hours per day and rarely exceeding 10 hours. Exact duration is calculated using the BRCGS audit duration calculator based on site size, product categories, and number of employees.

How much does BRCGS certification cost?

BRCGS certification typically costs between US$5,000 and US$15,000 per site for the initial certification cycle, depending on facility size, product categories, audit duration, and the certification body chosen. This generally covers the on-site audit, technical review, certification decision, and administrative fees, but excludes auditor expenses (travel, accommodation), preparation costs, training, and any corrective-action work. Larger or more complex sites pay more.

How long does it take to get BRCGS certified?

Most facilities need 6 to 12 months to prepare for and pass an initial BRCGS audit. Sites with mature food safety management systems already in place (such as existing HACCP, GMP, or other GFSI scheme certifications) can often move faster, while sites starting from scratch may need longer to close documentation, infrastructure, and training gaps.

What is the difference between BRC and BRCGS?

BRC originally referred to the British Retail Consortium, the UK retail trade association that developed the original food safety standard. BRCGS (Brand Reputation through Compliance Global Standards) became the standalone organisation in 2019 when it separated from the BRC. The terms are often used interchangeably, but BRCGS is the correct current name.

What is the difference between BRCGS and SQF?

Both are GFSI-benchmarked food safety certification schemes that share the same core foundations: HACCP, prerequisite programs, risk-based controls, and verification. The main differences are geographic and structural — SQF (Safe Quality Food) is more common in North America and uses a tiered structure (Food Safety Code and Quality Code), while BRCGS is more common in Europe and is structured as a single integrated standard. Neither is “better” universally; the right choice usually depends on which scheme your customers require.

Is BRCGS certification recognised by GFSI?

Yes. The BRCGS Global Standard for Food Safety was the first food safety management programme to be recognised by GFSI, in 2000. It remains one of the most widely used GFSI-benchmarked schemes alongside SQF and FSSC 22000.

How is a BRCGS audit graded?

BRCGS audits are graded based on the number and severity of non-conformities raised. Non-conformities are classified as minor, major, or critical. The grading scale runs from AA (highest) → A → B → C → D → Uncertified, with a “+” appended for unannounced audits (for example, AA+). An AA grade typically requires no more than 5 minor non-conformities, while a single critical non-conformity or a major against a fundamental clause results in failure.

What grades can a site achieve in a BRCGS audit?

Grades range from AA+ down to D, depending on audit type (announced, blended, unannounced) and the number and severity of non-conformities raised. A major non-conformity against any of the 12 fundamental clauses results in non-certification, regardless of overall performance.

What is a critical non-conformity in a BRCGS audit?

A critical non-conformity is a serious failure that poses an immediate food safety risk or breaches legal requirements — for example, a documented food safety hazard not being controlled, falsified records, or evidence of unsafe product being released to market. A single critical non-conformity results in non-certification, and the site must restart the certification process from scratch.

What are the 12 fundamental requirements of BRCGS Issue 9?

They are clauses 1.1 (Senior Management Commitment), 2 (Food Safety Plan/HACCP), 3.4 (Internal Audits), 3.5.1 (Supplier Approval), 3.7 (Corrective and Preventive Actions), 3.9 (Traceability), 4.3 (Layout and Segregation), 4.11 (Housekeeping and Hygiene), 5.3 (Allergen Management), 6.1 (Control of Operations), 6.2 (Labelling and Pack Control), and 7.1 (Training).

How long is a BRCGS certificate valid?

A BRCGS certificate is valid for 12 months. Sites must undergo a re-certification audit each year to maintain certified status. Sites graded C or D are subject to 6-month audit cycles instead of annual, and a Grade D requires a follow-up audit within 28 days to close out major non-conformities.

How often is a BRCGS audit required?

BRCGS certification is awarded annually. Sites on the announced or blended audit programs must undergo a mandatory unannounced audit at least once every three years. Sites on the unannounced program receive every audit on an unannounced basis within an agreed window.

What documents must be available during a BRCGS audit?

The auditor will ask for: the signed food safety, quality, and legality policy; the current HACCP plan; CCP monitoring records for the audit period; calibration certificates; internal audit reports with closure evidence; allergen risk assessment; supplier approval records; staff training matrices; pest control reports; cleaning verification records; and the most recent traceability test report. Every record must be retrievable within minutes of being requested.

What are the most common BRCGS audit non-conformities?

The most frequently cited non-conformities include: incomplete or unsigned CCP monitoring records, expired calibration certificates, allergen documentation that does not match the current production schedule, repeated fabric and maintenance defects without closure evidence, training matrices that omit temporary or agency staff, and traceability tests that cannot complete an end-to-end trace within four hours. Weak food safety culture evidence has also become a major Issue 9 finding category.

How do I prepare for an unannounced BRCGS audit?

Treat every working day as an audit day. The practical preparation framework: keep all CCP monitoring, calibration, cleaning, and pest control records current within their stated frequency; ensure HACCP review is up to date after any process or formulation change; maintain a complete traceability test within the past 12 months; train all shifts (not just day shift) on auditor questions; and run quarterly internal audits against the 12 fundamental clauses. Sites that pass unannounced audits AA+ are simply running the standard as a daily operating system.

What is new in BRCGS Issue 9 compared to Issue 8?

Key additions include the blended audit option, expanded food safety culture requirements throughout the standard (not just one clause), alignment of HACCP with the 2020 Codex Alimentarius revision, a new section on traded products (Section 9), revised equipment requirements (Section 4.6), updated outsourced processing controls, and a terminology change from “integrity” to “authenticity”.

Can the BRCGS Site Self-Assessment Tool replace an internal audit?

No. BRCGS explicitly states that the Site Self-Assessment Tool is for audit preparation only and cannot be used as evidence of an internal audit. A separate, documented internal audit covering all clauses at least annually is required under Clause 3.4.

Final Word

A BRCGS audit is fundamentally a test of whether your food safety system works on a normal Tuesday at 3 a.m. on a night shift, not whether it works on audit day. The checklist above is comprehensive, but the deeper test is whether the people on your floor would do the same things if no one was watching.

Get the documentation right, but spend more time than you think you need to on the floor with your teams. That’s where Issue 9 grades are won and lost.

Useful References

This guide reflects BRCGS Food Safety Issue 9, the version mandatory for all audits since 1 February 2023. Public consultation on the next revision closed in February 2026; a transition period will follow publication of Issue 10.

👁️ 38 Views

Scroll to Top