Recognised by

Certification audit preparation

Evidence assembled, documents closed out, the team briefed and a straight verdict on whether the audit is winnable at the grade you need.

What is certification audit preparation?

Certification audit preparation is focused work in the weeks before a food safety audit, covering the evidence an auditor will ask for, the documents that need closing out, and the readiness of the people who will be interviewed. It assumes the system is already built. The purpose is to make sure what exists can be found, explained and evidenced on the day.

A large share of findings raised at certification audits come from disorganisation. The record exists and cannot be located. The document was revised and never approved. A previous finding was closed and the evidence was never attached. None of those are system failures, and all of them are graded the same way.

Summary

Preparation removes the findings that come from things being in the wrong place. It cannot fix a system with genuine gaps, and the readiness verdict says so plainly where that is the case.

Audit preparation at a glance

Assumes
A system already built and running
Standards
BRCGS, IFS, FSSC 22000, ISO 22000, SQF, customer codes
Lead time
Eight weeks is a workable minimum
Delivery
Remote, with site visits by arrangement
Coverage
Worldwide
Output
Evidence pack, readiness verdict, audit day plan
Pricing
Quoted on scope
Languages
Any language, including English, Spanish, French, German, Italian and Portuguese

Audit preparation countdown

Work backwards from the date. Anything needing evidence over a period has to start early, because those records cannot be created close to the audit.

WhenWhat to do
8 weeksConfirm scope and evidence
Confirm the audit scope, standard and issue with your certification body. Identify every clause requiring evidence over a period, because those records cannot be created later.
6 weeksClose open findings
Any open nonconformity from the last audit, internal audit or customer visit is closed with evidence attached. An open finding at an audit is worse than never having raised it.
4 weeksComplete the audit cycle requirements
Internal audits covering the full scope, management review with the required inputs, traceability exercise, and any annual verification the standard specifies.
3 weeksDocument control sweep
Version numbers, approval signatures, review dates and withdrawal of superseded copies. Check what is posted on the floor matches what is in the system.
2 weeksAssemble the evidence pack
Records indexed against the clauses they satisfy, so a request during the audit takes seconds. This is the single highest value preparation task.
1 weekBrief the team
Whoever will be interviewed knows the scope, knows what they are responsible for, and knows to answer only what is asked.
Day beforeWalk the site as an auditor
Fabrication, hygiene, labelling on the floor, open product, personnel practice and anything visibly out of place.
On the dayRun the audit properly
One escort, one scribe, records fetched promptly, findings acknowledged as they arise, and nothing argued at the closing meeting that can be evidenced afterwards.

What auditors check first

These eight tell an auditor whether the system is operated or only documented, and the answer shapes how closely everything else gets examined.

Open findings from last time

The first thing most auditors look at. A previous finding still open, or closed without evidence, sets the tone for everything that follows.

Internal audit coverage

Whether the programme covered the full scope of the standard within the cycle, and whether it raised anything. A programme that found nothing invites closer attention everywhere else.

Management review inputs

Standards specify what a review has to consider. Minutes with none of the required inputs fail the clause regardless of how good the meeting was.

The traceability exercise

Whether it was run, timed, reconciled by mass balance, and whether any failure was corrected.

Validation evidence for critical limits

Commonly requested and commonly absent. Limits taken from guidance with nothing showing they work on your equipment attract findings quickly.

Document control

Version numbers, approvals and superseded copies still in circulation. Easy to fix beforehand and easy to find on the day.

Records completed at the time

Handwriting, ink, timing patterns and gaps. Records completed in a batch afterwards are visible, and the consequence is serious.

Whether people can explain their own work

Auditors ask operators what they do and why. An answer that contradicts the procedure is a finding against the system.

Where preparation goes wrong

These eight cost businesses grades every year, and every one of them is avoidable.

What you receive

Everything below is produced before the audit date and handed over ready to use on the day.

ElementWhat it covers
Readiness verdictA clear statement of whether the audit is winnable at the target grade, and what stands between you and it.
Evidence packRecords indexed against the clauses they satisfy, so any request is answered in seconds.
Document gap closureThe documents that need writing, revising, approving or withdrawing before the audit, with the work done.
Cycle requirement checkConfirmation that internal audits, management review, traceability and annual verifications are complete and evidenced.
Open finding reviewEvery previous finding checked for closure and for evidence supporting the closure.
Team briefingA session for the people who will be interviewed, covering scope, responsibility and how to answer.
Site walkthroughThe visual and practice issues an auditor notices in the first hour, listed and prioritised.
Audit day planEscort, scribe, record retrieval routes and who answers on which subject.

Who certification audit preparation is for

Food businesses with an audit date scheduled and a system already built. Where the system itself has gaps, a gap assessment is the better starting point, and the preparation work follows once those gaps are closed.

An audit date is booked and you are unsure the evidence is in place.

You are moving to a new standard or a new issue for the first time.

Your last audit produced findings you want to avoid repeating.

The technical team has changed since the previous audit.

You are entering an unannounced audit programme.

A customer has specified a minimum grade you have to reach.

A new site or line is in scope for the first time.

Your first ever certification audit is scheduled.

How preparation is carried out

  • 1

    Intake

    You confirm the standard, the issue, the audit date, the scope agreed with your certification body and the grade you need.

  • 2

    Cycle check

    Internal audits, management review, traceability and annual verifications are checked for completion and evidence.

  • 3

    Document sweep

    Version control, approvals and superseded copies are reviewed, and the gaps are closed.

  • 4

    Evidence pack

    Records are indexed against the clauses they satisfy, so requests are answered in seconds on the day.

  • 5

    Briefing and walkthrough

    The people who will be interviewed are briefed, and the site is walked as an auditor would walk it.

  • 6

    Readiness verdict

    A straight statement of whether the audit is winnable at your target grade, and what remains.

Not included

Preparation assumes the system exists. Building documentation, writing a HACCP plan or closing genuine system gaps are separate pieces of work.

Records that were never kept cannot be created. Where a gap exists in the record history, it is documented honestly with the corrective action.

Attendance on the audit day is arranged separately where you want it.

What certification audit preparation costs

Every project is quoted against your own scope. A mature system eight weeks out and a first certification with a month left are very different pieces of work. These factors set the price.

Standard and issue

Audit date

Site size

System maturity

What this service is assessed against

These are the primary sources this work is built on. Where a market you sell into has its own requirement, that takes precedence and we assess against it.

BRCGS, IFS Food, FSSC 22000 and SQF published requirements
The clause your certification body audits against, which differs between schemes and between issues. BRCGS
ISO 19011, guidelines for auditing management systems
Audit programme management, auditor competence and the conduct of an audit. ISO
CXC 1-1969, General Principles of Food Hygiene
The international reference for prerequisite programmes and for the seven HACCP principles. Codex Alimentarius

Certification audit terms

Certification audit
An audit carried out by a certification body to determine whether a business meets a standard and can hold a certificate.
Announced audit
An audit where the date is agreed in advance with the certification body.
Unannounced audit
An audit carried out without advance notice of the date, used by several schemes and mandatory in some programmes.
Audit scope
The sites, products, processes and clauses the audit covers, agreed before it takes place.
Evidence pack
Records assembled and indexed against the clauses they satisfy, ready for retrieval during an audit.
Opening meeting
The start of an audit, where scope, method, timing and confidentiality are confirmed.
Closing meeting
The end of an audit, where findings are presented before the report is issued.
Grade
The outcome level recorded by a certification body, reflecting the number and severity of findings.

Audit preparation questions

Work backwards from the date. Around eight weeks out, confirm the scope and identify every clause needing evidence over a period. Six weeks out, close open findings with evidence. Four weeks out, complete internal audits, management review and the traceability exercise. Three weeks out, sweep document control. Two weeks out, assemble the evidence pack indexed against clauses. One week out, brief everyone who will be interviewed. The day before, walk the site as an auditor would.

Longer than most businesses allow. Anything requiring evidence over a period cannot be created close to the date. Internal audits, management review, traceability exercises and trend data all need a run up, so eight weeks is a workable minimum for a business with a functioning system.

Open findings from the previous audit, internal audit coverage, and management review inputs. All three tell an auditor whether the system is being operated or simply documented, and the answer shapes how closely everything else is examined.

Preparation is focused work closing gaps and assembling evidence in the weeks before the audit. A mock certification audit is a full rehearsal at the same protocol and duration as the real one, producing a report in certification body format. Preparation fixes what is known. A mock audit finds what is not.

By treating readiness as a continuous state. Unannounced programmes remove the run up entirely, so the evidence pack has to be maintained continuously, cycle requirements completed on schedule, and document control kept current. Preparation work for an unannounced programme is about building those habits.

Operators, hygiene staff, engineering, goods in and dispatch, alongside the technical team. Auditors deliberately ask people doing the work what they do and why, because an answer that contradicts the procedure is a finding against the system.

Answer the question asked, accurately and completely, and stop there. Volunteering information beyond the question opens areas the auditor had no plan to examine. Where someone does not know, the correct answer is that they will find out, followed by finding out.

Missing records cannot be created after the event. Completing monitoring records retrospectively is visible to an experienced auditor and is treated as falsification, which carries far more serious consequences than the original gap. Where a record was not kept, that is documented honestly with the corrective action.

Say so early. Certification bodies would generally prefer to move a date than conduct an audit that produces a poor outcome, and rescheduling is usually possible with notice. Going ahead unprepared costs more than a postponement.

No. The outcome depends on the auditor, the day and how your team performs. Preparation removes the findings that come from disorganisation, missing evidence and unclosed items, which is a substantial share of what gets raised. It cannot fix a system with genuine gaps in it, and the readiness verdict says so plainly where that is the case.

Attendance is arranged separately where you want it. Most preparation value sits in the weeks before, and a business that has prepared properly generally handles the day itself without external help.

A readiness verdict, an indexed evidence pack, closed document gaps, confirmation that cycle requirements are complete, a review of previous findings, a team briefing, a site walkthrough list and an audit day plan.

Who carries out this work

Confi Food assigns work by subject. HACCP, labelling, certification standards, regulatory compliance, supplier assurance and monitoring are separate disciplines, and each piece goes to someone who works in that area. Every deliverable is reviewed internally by a second specialist before it reaches you.

Our technical positions are built from primary sources, meaning the legislation, the competent authority, Codex Alimentarius, the certification scheme owner or the relevant standards body. We set out how that works in our technical review and editorial policy, and what happens at each stage of an engagement in how Confi Food works.

Related services

Request audit preparation

Tell us the standard, the audit date and the grade you need, and receive a written quote covering the scope, the deliverable and the price.