SQF Audit Readiness

How to Prepare for an SQF Audit: A Practical Checklist for Food Manufacturers

A practical, operations-focused checklist for food manufacturers preparing for SQF certification or recertification.

The short answer: Successful SQF audit preparation requires more than completed procedures. Your facility must define the correct certification scope, assign qualified ownership, implement the applicable SQF Code, maintain objective records, verify that programs work, train employees, close internal-audit findings, and confirm readiness with a focused pre-assessment or mock audit.

An SQF audit evaluates both the documented food safety system and the way that system operates on the plant floor. Policies matter, but auditors also look for consistent execution, reliable records, knowledgeable employees, maintained facilities, and evidence that management responds when controls do not perform as intended.

The following checklist helps food manufacturers organize audit preparation into practical workstreams instead of scrambling through documents during the final weeks.

1. Confirm the audit scope and applicable SQF Code

Start by defining exactly what the certification will cover. The scope should identify the site, food-sector categories, products, production processes, and any approved exclusions. This decision controls which system elements and good industry practices apply and what the certification body will evaluate.

  • Confirm the legal business and site information.
  • List products, processes, production lines, storage areas, and supporting activities.
  • Verify the correct SQF Code and edition for the operation.
  • Resolve proposed exclusions before the audit rather than during it.
  • Make sure the scope in the SQF Assessment Database matches the agreed certification scope.

2. Assign clear SQF system ownership

The SQF Practitioner coordinates development, implementation, review, and maintenance of the system. That person needs authority, time, facility knowledge, and access to senior management. A substitute should also understand the program well enough to maintain continuity across shifts, vacations, or turnover.

Readiness check

  • Is the practitioner formally designated?
  • Are responsibilities documented and understood?
  • Can managers explain who owns corrective actions, verification, training, sanitation, supplier approval, and document control?
  • Is there a workable backup when the primary practitioner is unavailable?

3. Build a requirement-by-requirement implementation matrix

Create a cross-reference that maps every applicable SQF requirement to the facility procedure, responsible owner, required record, verification method, and current status. This turns the Code into a working project plan and exposes gaps that a general document review can miss.

A useful matrix answers five questions: What is required? Where is it documented? Who performs it? What record proves it happened? Who verifies effectiveness?

4. Make sure the food safety plan matches actual operations

Your HACCP or preventive-controls food safety plan should reflect current products, ingredients, equipment, process flow, hazards, controls, and facility conditions. A polished plan that no longer matches the floor creates audit risk.

  • Walk the process flow from receiving through shipping.
  • Confirm the hazard analysis considers biological, chemical, physical, allergen, and other relevant hazards.
  • Check monitoring procedures, limits, frequencies, responsible roles, and required records.
  • Review validation and verification support for the controls used.
  • Confirm deviations trigger documented correction, corrective action, product evaluation, and prevention of recurrence when required.

For facilities subject to FDA preventive-controls requirements, align the plan with the applicable FSMA obligations as well as the SQF Code. The systems can support each other, but one should not be assumed to replace the other.

5. Verify records before the auditor arrives

Records show whether written programs are part of daily operations. SQFI recommends that a site have at least 90 days of records available before an initial audit. Review records for completeness, legibility, correct dates, signatures or initials, required verification, and timely responses to exceptions.

High-priority record groups

  • Preventive control or critical control point monitoring
  • Sanitation inspections and pre-operational checks
  • Allergen controls and label verification
  • Calibration and preventive maintenance
  • Environmental monitoring, when applicable
  • Supplier approval and incoming-material verification
  • Traceability, withdrawal, and recall exercises
  • Training, internal audits, complaints, and corrective actions

Sample records across different shifts, supervisors, products, and operating conditions. A strong first-shift record set does not prove that the system works around the clock.

6. Conduct internal audits that test implementation

An internal audit should do more than confirm that a procedure exists. Observe work, interview employees, review records, inspect conditions, and trace requirements across departments. Record findings clearly and assign owners and due dates.

Then verify closure. A corrective action is not complete because a form was signed. The facility should identify the cause, correct the immediate problem, prevent recurrence, evaluate affected product when relevant, and confirm that the action worked.

7. Test traceability and recall readiness

Use a realistic product and conduct a documented exercise through raw materials, packaging, processing records, rework, finished goods, storage, and distribution. Reconcile quantities and investigate unexplained differences. Confirm that the recall team knows its roles and that customer, regulatory, and certification contacts are current.

8. Prepare employees for normal auditor questions

Employees do not need memorized speeches. They should understand the controls connected to their jobs and know what to do when something goes wrong. Supervisors should be able to explain how they review records, address deviations, and verify completion.

  • What food safety risk does this step control?
  • How do you know the process is within requirements?
  • What do you do if a limit is missed?
  • Where is the procedure or work instruction?
  • Who do you notify about a food safety concern?

9. Walk the facility with fresh eyes

Inspect the site as an auditor would: exterior conditions, employee practices, traffic flow, zoning, housekeeping, equipment condition, temporary repairs, glass and brittle plastic, pest evidence, chemical control, allergen separation, waste handling, and product protection. Compare actual conditions with the facility’s own procedures.

10. Use a pre-assessment or mock audit strategically

SQFI describes a pre-assessment as optional, but it can help identify program and implementation gaps before the certification audit. Schedule it early enough to investigate causes, make corrections, retrain employees, and collect evidence that the improvements are sustained.

Practical rule: Do not use the mock audit only to create a list. Use it to test whether the facility can identify, assign, correct, verify, and prevent problems through its normal management system.

Common SQF audit preparation mistakes

  • Waiting until the final month to begin implementation
  • Writing procedures that do not match actual practices
  • Relying on one practitioner instead of shared departmental ownership
  • Closing findings without root-cause analysis or effectiveness checks
  • Reviewing documents but not employee execution
  • Ignoring night shift, weekends, rework, changeovers, or unusual production
  • Failing to control obsolete forms and uncontrolled copies

SQF audit preparation FAQs

How far in advance should SQF audit preparation begin?

Begin as soon as the scope and applicable Code are known. The timeline depends on the site’s maturity, but implementation must allow enough time to generate representative records, conduct internal audits, close findings, and verify effectiveness.

How many days of records should an initial SQF site have?

SQFI recommends a minimum of 90 days of records before the site audit. Some programs may need more history to demonstrate trends, scheduled activities, or annual requirements.

Is a mock SQF audit required?

No. SQFI identifies pre-assessment as optional, but it can provide an independent view of gaps before the certification audit.

What is the difference between documentation and implementation?

Documentation defines what the site says it will do. Implementation is the observable work and retained evidence showing that employees consistently follow those requirements.

Build readiness that lasts beyond audit day

The strongest audit-preparation process leaves the facility with clearer ownership, better records, faster corrective action, and controls that fit real production. Griff Eagle Consulting LLC provides SQF audit preparation, gap assessments, internal audits, corrective-action support, and staff coaching for food and packaging operations.

Authoritative reference: SQFI — Prepare for Your Audit. Requirements vary by certification scope, Code, edition, products, and facility conditions.

Preparing for an SQF audit?

Get a practical readiness review and prioritized action plan.

Request a Consultation