CFSQA key terms

The set of policies, procedures, standards, regulations, or scheme requirements against which audit evidence is compared to determine conformity. Criteria must be agreed before the audit begins and communicated to the auditee.

Records, statements of fact, observations, or other verifiable information collected during an audit and used to evaluate conformity with audit criteria. Evidence must be sufficient, relevant, and reliable to support audit findings.

Fulfilment of a specified requirement, such as a regulation, standard clause, scheme rule, or the organization's own documented procedure. Nonconformity is the absence of conformity or a failure to meet that requirement.

A situation where an auditor's personal, financial, or professional interests could improperly influence audit judgments. Auditors must declare such situations and be excluded from auditing activities where impartiality could be compromised.

The state of being objective and free from bias, pressure, or undue influence when making audit decisions. It requires auditors to base conclusions only on evidence and to avoid favoring the auditee or the certification body.

The structural and behavioral separation that keeps auditors from auditing their own work or being managed by those they audit. It protects the credibility of conclusions, particularly in internal audits and third-party certification.

The stated boundaries of an audit, including the sites, processes, products, and time period covered. A clearly defined scope prevents later disputes about what was and was not examined.

A documented schedule describing audit objectives, criteria, scope, dates, locations, audit team roles, and the processes to be examined. It is agreed with the auditee in advance and updated if significant changes occur.

The overarching set of arrangements for multiple audits over a period, including frequency, methods, responsibilities, and resourcing. It is managed to cover all relevant processes and to address risk and prior performance.

An approach that allocates audit time and attention according to the likelihood and severity of potential failures. Higher-risk processes, products, or sites receive more frequent or deeper examination than lower-risk ones.

A short meeting at the start of an audit that confirms objectives, scope, criteria, schedule, methods, and reporting arrangements. It also establishes communication channels and confirms that required resources and personnel are available.

The meeting at the end of an audit where the audit team presents findings, conclusions, and any nonconformities to the auditee. It clarifies next steps, including corrective action expectations and reporting timelines.

Data or information that can be verified and is not dependent on personal opinion, such as records, measurements, or direct observation. It forms the factual basis for audit findings and conclusions.

The ability to follow a product, batch, or record through all stages of production, distribution, and use. Auditors test it by selecting a finished lot and tracing it forward and backward through records.

A documented approach describing how many items, records, or samples will be examined and how they are selected. It should be statistically or risk justified and large enough to support credible conclusions.

The possibility that conclusions drawn from a sample differ from what would be found by examining the entire population. It is reduced by larger or better-targeted samples but never eliminated entirely.

The structured use of open, probing, and closed questions to gather accurate information during an audit. Effective technique avoids leading questions and confirms verbal answers against records or direct observation.

A step-by-step observation of a process, from input to output, used to verify that documented procedures match actual practice. It often combines observation, interview, and record review in one sequence.

A systematic process to identify biological, chemical, physical, and radiological hazards that may be introduced, increased, or controlled at each step. It evaluates significance and informs where preventive controls are needed.

A control applied to significantly minimize or prevent a food safety hazard identified through hazard analysis. Examples include process controls, allergen controls, sanitation controls, and supplier controls.

A step in a process where a control measure is applied and is essential to prevent, eliminate, or reduce a significant hazard to an acceptable level. Each CCP has defined critical limits and monitoring.

A measurable value that separates acceptable from unacceptable product at a critical control point, such as a minimum temperature or maximum pH. Deviation from a critical limit requires corrective action.

Scheduled measurement or observation to confirm that a control is operating within its specified limits. Monitoring records must identify the person, time, method, and result for each check.

A failure to meet a critical limit or specified requirement during production. It triggers evaluation of affected product, a documented disposition decision, and corrective action to prevent recurrence.

Basic environmental and operational conditions needed before and alongside HACCP, such as sanitation, pest control, personnel hygiene, maintenance, and supplier approval. Weak prerequisite programmes undermine every preventive control built on them.

A written procedure describing how and when cleaning and sanitizing tasks are performed, by whom, with what chemicals, and how effectiveness is verified. Records must show the procedure was followed.

A programme of sampling surfaces, air, or equipment to detect pathogens or indicator organisms in the processing environment. Results guide hygiene improvements and verify sanitation effectiveness, especially for ready-to-eat products.

The unintended transfer of an allergenic food or ingredient into a product that should not contain it, through shared equipment, utensils, air, or personnel. Controls include scheduling, cleaning validation, and dedicated lines.

Action taken to eliminate the cause of a detected nonconformity or deviation so it does not recur. It goes beyond immediate correction and requires root cause analysis and verification of effectiveness.

A structured method, such as the five whys or a fishbone diagram, used to identify the underlying system cause of a problem rather than the person nearest to it. It drives effective corrective action.

A documented failure to meet a requirement of the audit criteria, supported by objective evidence. It is graded by severity and must be closed with correction, root cause analysis, and corrective action.

The result of evaluating audit evidence against audit criteria, which may indicate conformity or nonconformity. Findings are recorded, classified, and communicated to the auditee for response.

Confirmation through objective evidence that specified requirements have been met, such as checking that a corrective action actually prevented recurrence. It is distinct from monitoring, which observes ongoing operation.

Obtaining evidence that a control measure or process is capable of achieving its intended food safety outcome before it is put into routine use. It answers whether the approach can work, not whether it is working today.

The follow-up review of evidence showing that a corrective action was implemented and effective, often through records, re-audit, or trend data. It is the final step before a nonconformity is formally closed.

A targeted audit conducted after corrective actions are claimed complete, to confirm implementation and effectiveness. It may be on-site or documentary, depending on the severity of the original finding.

Verification that a product label matches the approved formula, declares allergens correctly, and meets regulatory and scheme requirements. Errors in labels are a frequent cause of recalls and audit findings.

A simulated exercise used to test whether the traceability and recall system can identify and recover affected product within a required time. It is timed, documented, and evaluated for gaps.

A defined quantity of product produced under uniform conditions during a specific time period. Lots allow traceability, sampling, and recall to be managed at a practical level of granularity.

The decision on what happens to product affected by a deviation or nonconformity, such as release, rework, downgrade, or destruction. The decision must be authorized, justified, and documented.

The organization, process owner, or person being audited. The auditee is responsible for providing access, evidence, and resources, and for responding to findings with corrective action.