Measure the distance before you commit the money

Most wasted gap audits are wasted before anyone reaches the site, because the scope was never settled. ASC starts by establishing what would appear on the certificate: which legal entity, which sites, which product categories, which processes, and whether outsourced activities such as contract packing, external cold storage or third party laboratories fall inside the boundary. Scope decides which requirements apply, and the wrong scope produces a register that is precisely wrong.

Where the business is undecided between standards, the audit is designed from the start to test against both. That is often the most useful version of the exercise, because a buyer generally wants to know which standard is achievable in the time available, not whether one particular standard is. Assessing two schemes on one visit costs far less than two separate exercises and produces a comparison the business can put in front of the customer.

If a system exists, it is read against the standard rather than admired. The HACCP or hazard analysis study is tested for whether its scope matches the process flow, whether the flow diagram matches the plant that was walked, whether hazards are reasoned rather than copied, and whether critical limits are supported by something other than custom. Prerequisite programmes are checked against ISO 22002-1 or the scheme’s own prerequisite requirements, not against a generic hygiene checklist.

Document control is examined for the failures certification bodies find first: uncontrolled copies on the floor, procedures describing a line that was reconfigured years ago, forms in use that do not exist in the register, and approval signatures from people who have left. Where no documented system exists, that is recorded as a build rather than a repair, because the two carry very different effort.

Standards make demands of the building itself, and these are the findings that cost real money. The audit covers site layout and product flow, segregation of raw and ready to eat, personnel and waste routes, the condition of floors, drains, walls, ceilings and services, air handling and pressure differentials where the standard requires them, glass and hard plastic control, pest proofing, water supply, and the fabric of high care or high risk areas where those apply.

Each physical finding is written so a maintenance manager or a quantity surveyor can act on it, with the requirement quoted, the condition recorded and the remedy indicated. Capital items are flagged separately, because they follow a different approval route, budget cycle and calendar. The audit also confirms the legal baseline, because a site pursuing a private standard while its certificate of acceptability under R638 of 22 June 2018 is unresolved has a problem no scheme requirement will fix.

This is where optimism dies. A certification body audits records rather than intention, and a large part of any first certification is evidence that has to accumulate while the site operates normally. The audit samples what exists across monitoring and verification records, calibration, cleaning verification, allergen management, supplier approval and incoming goods, traceability exercises and mock recalls, complaints, environmental monitoring where applicable, and the analytical results supporting the food safety plan.

Findings here are written in terms of maturity, not existence. A traceability exercise completed last week does not carry the weight of a documented history with corrective outcomes, and a cleaning schedule signed in advance is a finding in itself. Where a scheme expects a period of operating records before an initial audit, the register says so and tells the business to confirm that expectation and any transition dates with its certification body.

Training files are easy to produce and prove very little. The audit looks at whether the people the standard relies on can do the work: whether the HACCP team holds the competence the scheme requires, whether internal auditors were trained to audit rather than to inspect, whether the person verifying critical control points understands what verification is, and whether operators can explain their control in their own words at the line.

Competence gaps are recorded with the route to closing them, because they are often the fastest to close and the ones most likely to be left until last. Where formal training is the answer, ASC is a FoodBev SETA Accredited Provider No. 587/00337/1900 and can deliver it, but the register states what is needed regardless of who provides it.

Sites that fail their first certification audit rarely fail on hygiene. They fail on the management machinery: an internal audit programme that has not covered the whole standard, corrective actions closed on assertion rather than evidence, no root cause analysis worth the name, a management review that never happened, and no controlled process for handling change to products, processes or suppliers.

The audit tests these directly. It asks whether an internal audit cycle covering every requirement can realistically be completed before the certification audit, whether findings are closed with the evidence the finding named or with something else that was easier to obtain, and whether the management review makes decisions rather than recording attendance. The FSMS audit work exists because these processes have to keep running long after the certificate is issued.

The deliverable is a register, not a report with a register buried in it. Each line carries the requirement as the standard words it, the current state as observed with the evidence seen, the gap stated as the difference between the two, a severity grade, a named owner inside the business, a target date, and an effort estimate split between consultant input and client input. Nothing is written as a placeholder, and nothing is assigned to the quality manager by default simply because the subject is quality.

The register arrives sequenced rather than in clause order. Long lead items start first: evidence that has to mature over months of normal operation, capital work including design, quotation, approval, installation and validation, a full internal audit cycle followed by a management review, supplier approval where documents must be obtained from third parties, and analytical work with a laboratory turnaround. Quick documentary work is deliberately placed later, because it can be absorbed into any week, while the long items cannot be compressed at any price.

Sequencing turns the register into a budget, showing which spend falls in which financial period, which items need board approval, and whether the customer’s deadline survives contact with reality. Where implementation follows, the FSMS and food science consulting team works the register in that order, and it stays the control document.