Stage 2 in three weeks after a CCP record gap
A 150-employee ready-to-eat salad processor has booked its ISO 22000 stage 2 audit in three weeks. Stage 1 was eight weeks ago and raised two minor findings: the internal audit programme did not cover all clauses, and management review inputs were incomplete. The company has since done one internal audit of production only and a management review with a new agenda. The internal audit found a major nonconformity: CCP monitoring records were missing for 11 days in the previous month because the recorder was broken. Operators used a handheld thermometer but did not record the readings. The broken recorder was replaced. No product was recalled; a risk assessment says 'no impact'. The quality manager wants to proceed with stage 2 because the customer is waiting and the major nonconformity is 'closed' (recorder replaced and operators retrained). The certification body has not been informed of the major finding.
1. Advise whether the company should proceed with stage 2. What should be communicated to the certification body?
Read the worked answer
Proceeding is high risk and probably premature. The recorder replacement and retraining are corrections, not a complete corrective-action package. The company has not shown root cause analysis, product impact assessment, verification of effectiveness, or a full internal audit cycle. The missing 11 days of CCP records mean the FSMS could not demonstrate control of a critical limit, which goes to the effectiveness of the FSMS, not just to document completeness.
The certification body should be informed of the major internal audit finding and the actions taken. Withholding it creates a credibility problem and may undermine the audit. The audit programme should also be updated: the internal audit covered production only, so the stage 1 minor finding about coverage remains unresolved.
The defensible advice is to postpone stage 2, or use the date for a pre-assessment, until the corrective action is complete and verified. The customer should be given a realistic date. If the company insists on proceeding, it should expect a major nonconformity and no certification decision until closure is verified.
2. What will the stage 2 auditor likely find, and what will be the consequence?
Read the worked answer
The auditor will sample the CCP monitoring records and see the 11-day gap. Even with the recorder replaced, the auditor will ask: what product was affected, how was it assessed, what was the root cause, what corrective action was taken, and how was effectiveness verified? The 'no impact' risk assessment is likely to be challenged if it lacks lot-level data, time-temperature history and a competent food safety team decision.
The auditor will also check internal audit coverage and management review inputs. The stage 1 minors may not be closed: one production-only audit does not cover all clauses, and a new agenda does not prove complete inputs. The likely outcome is a major nonconformity against the control of monitoring/measurement and corrective action, and possibly a minor against internal audit.
A major nonconformity normally prevents certification until the correction and corrective action are accepted and verified. The certification body may require a follow-up audit. The timeline will slip, and the customer relationship may be damaged more than if the company had postponed voluntarily.
3. What should the company complete before a new stage 2 date? Give a prioritised action list.
Read the worked answer
Contain and assess product. Identify all product made during the 11-day gap, reconstruct time-temperature evidence where possible, and document a food safety team decision on release, withdrawal or recall. If the product cannot be shown safe, act accordingly.
Root cause and corrective action. Why was the recorder not repaired sooner, and why did operators not record handheld readings? Address maintenance response, backup monitoring, record design, supervision and training. Verify effectiveness over a defined period.
Complete the internal audit programme. Cover all clauses and all processes, not just production, and include the outsourced/PRP areas. Record findings and corrective actions.
Complete management review. Ensure required inputs include audit results, CCP/PRP performance, deviations, customer complaints, corrective actions and improvement. Top management must attend and record decisions.
Test traceability and recall. Demonstrate lot-level traceability and a withdrawal/recall exercise.
Inform the certification body and agree a new date. Be transparent. A short delay with evidence is better than a failed stage 2.