Cold-storage group: multi-site sampling, remote audits and team competence
You manage the ISO 22000 certification programme for a client with 14 cold-storage and distribution sites. Eleven sites perform identical receiving, storage and dispatch activities under one central FSMS with a single hazard analysis; three sites additionally repack bulk nuts into retail packs on their own line with a separate hazard analysis. The client requests one multi-site certificate covering all 14 and asks that the three repack sites be 'sampled along with the others'. In the previous cycle one of the eleven identical sites received a major nonconformity for temperature-excursion records, and was reinstated after a desk review of documents. The client now asks for all stage 2 audits to be conducted remotely because travel budgets have been cut. Your pool has four auditors: one has never audited category G transport and storage; one is the nephew of the client's logistics director; the rest are fully competent. An accreditation witness audit is scheduled in eight weeks.
1. Is multi-site sampling permissible for all 14 sites? Justify your answer and outline the sampling plan you would build.
Read the worked answer
No - not as one population. Multi-site sampling under ISO 22003-1 and IAF MD1 rests on the sites being substantially similar: same or similar activities, same central FSMS, one hazard analysis, and a central function with authority over all sites. The eleven cold stores plausibly meet that test. The three repack sites have a different activity and a different hazard analysis; they are not interchangeable with the cold stores and cannot be included in the same sample. Either they are certified as separate sites (own audits, possibly on one certificate with distinct scope wording) or the population is split and each population sampled on its own merits - with the auditor competence for nut repacking (allergen, roasting, packaging) addressed.
For the eleven cold stores: audit the central function at every audit; calculate the sample from risk, not only from headcount - consider internal audit and verification results, complaint levels, previous nonconformities, turnover of key staff, volume and product risk. Reinstate the temperature-excursion site in the first sample regardless of formula, since its previous failure was closed by desk review only and it has never had an on-site follow-up. Ensure every site is audited at least once within the certification cycle. If a sampled site produces a nonconformity suggesting a system-wide issue, increase the sample rather than continue as planned.
Document the sampling rationale for the certification decision record; sampling decisions are a favourite accreditation witness-audit question.
2. How do you respond to the request for fully remote stage 2 audits?
Read the worked answer
Remote auditing is permitted but is a decision for the certification body, not the client, and it must be justified and risk-based.
- What must be demonstrated: the ICT platform has been tested, the site has connectivity and a camera operator, and remote techniques can gather the evidence needed. For cold storage the critical evidence is temperature records, alarm response, traceability and physical condition of the store - so a live, guided walkthrough with real-time readings and record sharing is needed, not a documentary review.
- What should not be fully remote: initial certification of a site with no audit history, sites with unresolved nonconformities, and any situation where fraud risk or record integrity is in question. The temperature-excursion site should be visited on site.
- What the request really is: a cost argument. Explain that audit time is determined by the activities and risk, and that partial remote delivery may reduce travel but not the audit duration; any reduction must be justified in the programme records.
- Document it: the justification, the ICT used, the areas delivered remotely, and any evidence limitations go in the audit file, because the accreditation witness audit will look for exactly this.
A helpful compromise is a blended approach: opening and document review remote, physical walkthrough on site.
3. Plan the audit team and address the competence and impartiality issues in the auditor pool.
Read the worked answer
Competence: map the pool against the food chain categories, technical knowledge (cold chain, nut repacking, allergens), audit principles, and the language of the sites. The auditor with no category G experience must not lead a category G audit; use them as a team member under a competent lead, with a documented competence-development plan and witnessed performance before independent assignment.
Impartiality: the nephew of the logistics director is a threat that cannot be 'managed' by good intentions. Remove him from this client's programme entirely - not merely from the sites his uncle touches - and record the decision and the analysis of the relationship. Check the wider pool for any other relationship (previous employment with the client within the cooling-off period, consultancy, training delivery, shared ownership). Ask each team member to declare relationships before assignment; declarations are only useful if someone acts on them.
Programme-level actions: adjust the audit programme plan for the added time of separate populations and the reinstated site visit; ensure team composition covers all categories and that the lead auditor for each audit has the authority to make the compliance recommendation. Given the witness audit in eight weeks, brief the whole team on the sampling rationale, remote-audit justification and impartiality records that will be examined.