Auditing Takes Center Stage in FSMA

In today’s complex global supply chain and environment of ever-expanding market requirements, it has become common to rely on third-party audits to help assure the safety of one’s supplies. Not only are food safety regulations driving this uptick, but retailers and other buyers are demanding it to reduce risk to consumer and brand value. Third-party audit schemes, such as those benchmarked by the Global Food Safety Initiative (GFSI), build confidence in the supply chain. Companies in compliance with such schemes have appropriate and comprehensive food safety controls in place to address hazards expected within their operation and for their specific product type.

Third-party audits provide companies with an objective assessment of their programs and practices, enable them to identify opportunities for continuous improvement, and delineate gaps in their practices from industry best practices or regulatory requirements. Use of such audit schemes aid companies in minimizing food safety risks by ensuring implementation of the practices and programs necessary to reduce foodborne illness. A key factor in ensuring the integrity of scheme implementation and compliance is auditor competence. An auditor’s interpretation of food safety audit standards is critical to ensuring the rigor of the audit scheme. Experienced auditors with the appropriate training and education provide objective and thorough assessments of the evidence gathered during the audit.

The Audit Era

The Food Safety Modernization Act (FSMA) emphasizes prevention and accountability across the supply chain to ensure the safety of foods consumed within the U.S., irrespective of where the food is produced. Seven regulations have been finalized and issued by the U.S. FDA as part of FSMA, four of which address auditing in some manner.

Specifically, the Preventive Controls for Human Food (PCHF) and Foreign Supplier Verification Program (FSVP) rules highlight the use of audits as an appropriate, and in some cases, a required supplier verification activity. These rules explicitly state that auditing must be conducted by a “qualified auditor” for those instances in which it is used as a supplier verification activity. Qualified auditors must have the technical expertise—obtained through education, training, experience, in any combination—to perform the auditing function as required. Audits may be conducted by the processor or FSVP importer, provided they employ individuals who meet FDA’s definition of a qualified auditor.

Serious hazards that the processor or FSVP importer cannot mitigate through its own control measures may be identified as reasonably foreseeable for raw materials and ingredients. In such cases, annual onsite audits must be conducted to verify the adequacy of supplier controls to address the identified hazards. A hazard is considered “serious” where exposure to that hazard through food will result in serious adverse health consequences or death—i.e., hazards that would result in “Class I” recalls. In general, under these two rules, the processor or FSVP importer will determine appropriate verification activities based on the hazard of concern and the supplier’s practices and food safety performance. For instance, appropriate verification activities may include audits conducted by a “qualified auditor,” sampling and testing, or review of records and other related food safety documentation. Audits by third-party certification bodies can be used to achieve verification; such audits assess an operation’s hazard analysis and implementation of preventive controls to ensure they meet the requirements of the regulations and are conducted by a “qualified auditor.”

The food industry has relied on private audits for years to ensure compliance with purchasing requirements. Given FSMA’s supply chain provisions, reliance on third-party audits and the use of third-party auditors who meet the “qualified auditor” definition is likely to grow even more. The FDA refers to the use of private third-party audit schemes, such as the GFSI benchmarked schemes, to foster compliance with the Produce Safety Rule issued as part of FSMA. This is consistent with FDA’s stated intention to work with the produce industry and other government and private partners to improve the rigor and reliability of private audits.