BRCGS Audit Checklist for South African Food Manufacturers

Use this practical BRCGS audit checklist to identify gaps before your BRC food safety audit and avoid costly non-conformances at your South African facility.

A BRCGS audit is not a paper exercise. The auditor will walk your production floor, open your records, interview your staff, and probe your food safety culture — all within a single day or two. If you are not prepared, non-conformances stack up fast, and a Major non-conformance against a Fundamental clause can suspend your certificate entirely. This checklist is built around BRCGS Food Safety Issue 9 and is specifically calibrated for the realities South African manufacturers face: multi-shift operations, load-shedding contingencies, diverse supplier bases, and retailer-specific add-on requirements from the likes of Woolworths, Pick n Pay, and Shoprite.

Work through each section below before your audit. Where you find a gap, treat it as a corrective action item — log it, assign an owner, set a deadline, and close it out with objective evidence. That discipline is exactly what auditors want to see.

How BRCGS Audits Work in South Africa

BRCGS (Brand Reputation through Compliance Global Standards) is a GFSI-benchmarked standard. In South Africa, audits are conducted by accredited Certification Bodies (CBs) — organisations like SGS, Intertek, and Bureau Veritas operate locally. Your CB sends a lead auditor who is sector-specific to your product category. The audit follows a defined cycle: announced or unannounced, depending on your grade.

Issue 9, which became mandatory for new certificates from February 2023, introduced a stronger emphasis on food safety culture, increased oversight of outsourced processes, and tightened requirements around product authenticity and labelling. If you are still preparing against Issue 8 documentation, update your system before you request an audit date.

Audit Grades at a Glance

BRCGS Audit Checklist: Section by Section

1. Senior Management Commitment and Food Safety Culture (Fundamental)

• A signed, dated food safety and quality policy is displayed in the facility and is no more than 12 months old.
• Senior management attendance is documented in at least the last four food safety team meetings — not just signed minutes, but evidence they contributed.
• A food safety culture plan exists with measurable objectives, assigned owners, and documented progress reviews. Issue 9 requires this to be a formal, active programme.
• Staff at all levels — including floor workers and night-shift supervisors — can explain the facility's top food safety commitments in plain language when the auditor asks.
• Resources allocated to food safety (budget lines, personnel, equipment) are documented and signed off by senior management.

2. HACCP System (Fundamental)

• Your HACCP plan is reviewed and re-validated at least annually, or whenever a process, ingredient, or product changes.
• The food safety team has documented competency — training records, qualifications, or HACCP certification — not just job titles on an org chart.
• All hazard analyses are product-specific and cover biological, chemical, physical, and allergen hazards as separate categories.
• Critical Control Points (CCPs) have defined Critical Limits, monitoring procedures, corrective actions, verification activities, and records — all seven HACCP principles applied at each CCP.
• CCP monitoring records from the last 12 months are complete, legible, and show no unexplained gaps or overwritten entries.
• Corrective action records exist for every out-of-limit event, and each record shows root cause, action taken, and sign-off by a responsible person.

3. Site Standards: Fabric, Equipment, and Pest Control

• Walls, floors, drains, and ceilings in all production and storage areas are intact, cleanable, and free from flaking paint, rust, or standing water.
• A site map shows zoning: high-risk, high-care, ambient high-care, and low-risk areas are clearly separated with documented controls at each boundary.
• All equipment has an up-to-date maintenance schedule, and PPM (Planned Preventive Maintenance) records are accessible for audit.
• Pest control is conducted by a registered pest control operator. The contract, site map of bait stations, visit reports, and trending analysis are all in a single accessible file.
• Pest activity logs show corrective actions for every sighting, including root cause and follow-up inspection.
• Load-shedding contingency procedures are documented — covering cold chain integrity, CCP monitoring continuity, and food safety decisions during power interruptions. South African CBs now routinely ask for these.

4. Product Control: Allergens and Authenticity

• An allergen risk assessment covers raw materials, processing aids, rework, shared equipment, and cross-contamination pathways.
• Allergen cleaning validations are documented — not just a cleaning procedure, but evidence (swab results, ELISA testing, or equivalent) that the procedure eliminates cross-contact to an acceptable level.
• Label accuracy is verified before each production run: allergen declarations, ingredient lists, and weight/volume claims are checked against the current approved specification.
• A food fraud vulnerability assessment (FFVA) is in place, updated at least annually, and considers all ingredients with an authenticity risk — including South African-specific risks such as game meat, rooibos, and honey.
• Food defence measures are documented: site access controls, visitor management, and staff screening procedures are written up and evidenced.

5. Process Control: Monitoring, Calibration, and Traceability

• All measuring and monitoring equipment (thermometers, scales, pH meters, metal detectors) is listed in a calibration register with calibration frequency, method, acceptance criteria, and last calibration date.
• Calibration is traceable to a national or international standard — in South Africa, traceable to SANAS-accredited laboratories.
• Metal detector and/or X-ray challenge tests are performed at a defined frequency (typically start of production, after a jam or stoppage, and end of production) with records showing test piece type, sensitivity setting, and pass/fail outcome.
• A traceability exercise has been completed within the last 12 months achieving 100% traceability both forward (raw material to finished product) and backward (finished product to raw material) within four hours.
• Rework controls are documented: rework is identified, stored separately, added back to product only against a defined procedure, and is fully traceable.

6. Personnel: Hygiene, Training, and Competency

• All production staff have documented induction training covering personal hygiene, allergen awareness, and food safety responsibilities — before they start working on the production floor.
• Training records include the date, content covered, trainer name, and evidence of understanding (a short test, sign-off, or observation record). A signature sheet alone is not sufficient.
• Handwashing stations are positioned at all production entry points, are stocked with soap and single-use drying, and their inspection is logged.
• Medical screening procedures for illness and wounds are documented and applied consistently across all shifts, including night shifts and contracted staff.
• Jewellery, nail varnish, and personal effects rules are written, communicated, and enforced — with records of spot checks or pre-shift inspections.

7. Supplier Approval and Raw Material Control

• Every ingredient and packaging material supplier is on an approved supplier list. No unapproved suppliers are in use.
• Approval is risk-based: high-risk suppliers (those supplying allergens, raw animal proteins, or materials with a high fraud risk) are approved via audit or current GFSI certificate, not just a completed questionnaire.
• Supplier performance is reviewed at least annually — defect rates, complaints, and certificate expiry dates are tracked.
• Incoming goods procedures specify inspection or testing requirements per material, and receiving records show the checks were performed.
• Certificates of Analysis (COAs) are matched to incoming deliveries and reviewed for compliance to specification before goods are released.

8. Internal Audits (Fundamental)

• Internal audits cover all areas of the BRCGS standard at least once per year, with a documented schedule.
• Internal auditors are trained and competent — training records and audit methodology are on file.
• Non-conformances raised in internal audits have root cause analyses, corrective actions, and verified close-out dates.
• Internal audit reports are reviewed by senior management, and trends are used to update the food safety management system.
• The most recent audit cycle is complete, with no outstanding overdue corrective actions.

9. Complaints, Incidents, and Withdrawals

• A customer complaint procedure is in place and complaints are logged, categorised, and root-caused.
• Complaint trend analysis is performed and reported to management — not just a log, but evidence that patterns are acted on.
• A product withdrawal and recall procedure is documented, includes contact lists for your CB and relevant regulatory bodies (DAFF, SAHPRA where applicable), and has been tested within the last 12 months via a mock recall.
• Incident management covers food safety incidents, near misses, and potential product safety threats — with a clear escalation path to senior management.

Common Non-Conformances South African Auditors Raise

Based on patterns seen across South African BRCGS audits, the following are the most frequently cited non-conformances. If you can close these before your audit, you will be ahead of most of your peers.

1. Food safety culture evidence is superficial — a poster on the wall does not constitute a culture programme. Auditors want records of communication activities, staff feedback mechanisms, and management responses.
2. HACCP plans have not been updated after product or process changes — particularly common after reformulations driven by ingredient cost pressures.
3. Allergen cleaning validations are missing or use cleaning procedure documents as a substitute for actual validation data.
4. Calibration records are incomplete or instruments have lapsed calibration dates — metal detectors and thermometers are the most common offenders.
5. Supplier approval files contain expired GFSI certificates or questionnaires that have never been reviewed after initial approval.
6. Internal audit non-conformances are raised but corrective actions are not closed out within the timeframe committed to — a sign-off culture gap rather than a technical gap.
7. Load-shedding and utility failure contingency procedures do not address food safety decision-making, only operational continuity.

How to Use This Checklist Effectively

A checklist is only as useful as the discipline behind it. Here is how to get the most from this one in the weeks before your audit.

1. Assign section ownership: each checklist section should be owned by a named person who is accountable for closing gaps, not just reporting them.
2. Run a mock audit: have someone — ideally an external consultant or a competent person from another site — walk through this checklist as if they were the auditor. They should ask staff questions, pull records at random, and inspect the physical site.
3. Build a gap register: list every item you cannot tick, assign a corrective action, set a realistic close-out date, and track progress weekly in the four to six weeks before your audit.
4. Test your traceability: run a full forward-and-backward traceability exercise under timed conditions. If it takes longer than four hours, your documentation or batch coding system needs work.
5. Prepare your team for verbal questioning: auditors routinely ask floor staff 'what do you do if you find a pest?' or 'how do you know this is a CCP?' Brief your team without scripting them — authentic, accurate answers matter.
6. Review your corrective action log: close out all overdue internal audit actions before your audit date. An auditor finding open, overdue actions from a prior cycle is a quick route to a Major.

BRCGS certification in South Africa is achievable for any manufacturer willing to build a genuinely functional food safety system — not a paper-based façade. The checklist above covers the critical areas, but real readiness comes from embedding these controls into daily operations, not from a sprint in the week before your audit. If your system is working day-to-day, the audit should simply confirm what you already know.