A food business cannot rely on written procedures alone to maintain safe working practices. Managers need to know whether employees follow those procedures, whether controls are effective and whether problems are identified before they affect customers.
An internal food safety audit provides a structured method for checking these areas. It allows a business to examine its own food safety management system, identify weaknesses and establish whether corrective actions are delivering results.
Unlike an informal kitchen inspection, an internal audit follows a planned process. It involves reviewing documentation, observing working practices, interviewing employees and checking records against defined requirements.
For businesses operating in the UK, internal audits can support ongoing compliance with food hygiene responsibilities and HACCP-based food safety management procedures. The Food Standards Agency provides guidance on developing and maintaining these procedures, including verification and record-keeping.
At FooddSure, we believe that effective auditing should lead to measurable improvements. This guide explains how to organise an internal food safety audit from initial planning through to final reporting.
An internal food safety audit is a planned review carried out by or on behalf of a business to determine whether its food safety procedures are suitable and working effectively.
It may cover the entire food safety management system or focus on a particular activity, such as:
The purpose is to identify gaps between expected procedures and actual performance. An audit should also recognise good practices and identify opportunities to improve efficiency.
Before beginning, establish exactly what the audit will examine.
A full-system audit may review all relevant food safety processes. A focused audit may examine a specific department, production line or control measure.
Your scope should identify:
A clearly defined scope prevents the audit from becoming an unstructured inspection.
An internal audit programme should be planned according to the risks associated with the business.
Consider the nature of food products, preparation methods, intended consumers, production volume and previous audit findings.
A risk-based programme should also consider:
There is no single audit frequency suitable for every business. Establish a schedule that provides adequate coverage and increase the frequency where risks or previous findings justify it.
The person conducting the audit should understand food safety principles and have the ability to assess procedures objectively.
Relevant knowledge may include HACCP, food hygiene, allergen management, temperature control, traceability and the business's operational processes.
Where possible, the auditor should not assess their own work. This helps reduce the risk of overlooking problems or accepting unsuitable practices because they are familiar.
In smaller organisations, complete independence may not always be possible. Businesses can use cross-department reviews, management oversight or external audit support to improve objectivity.
Preparation helps the auditor use time effectively and gather relevant evidence.
Review the documents that explain how the business is expected to operate. These may include:
Prepare an audit plan showing the activities to be reviewed, the people to be interviewed and the records to be sampled.
The plan should be practical. It must allow enough time to observe real working practices rather than focusing entirely on paperwork.
Begin with a short discussion involving the relevant manager or supervisor.
Explain the purpose, scope and expected duration of the audit. Confirm which departments will be visited and identify the people who can provide information.
Make it clear that the audit is intended to improve food safety, not to blame employees.
Observation is one of the most important parts of food safety auditing.
Follow the process through the areas included in the audit. Depending on the operation, this may involve deliveries, storage, preparation, cooking, cooling, packing, service or dispatch.
Look for evidence that employees follow the documented procedures.
For example:
Do not assume that a procedure is effective simply because it exists. Watch the activity and compare what happens with the business's written requirements.
Staff interviews help establish whether procedures are understood.
Use open questions rather than questions that can be answered with a simple yes or no.
Examples include:
Compare answers from different employees and shifts. If only supervisors understand a procedure, the business may have a training or communication problem.
The FSA emphasises that food safety procedures should be workable and that staff should receive instruction or training appropriate to their activities.
Records help demonstrate whether monitoring and verification activities are being completed.
Select samples from different dates, shifts and products. Review the information for accuracy and consistency.
Common records include:
Look for missing entries or unusual patterns. If a temperature log shows exactly the same reading every day, it may be worth checking whether the monitoring process is genuine and reliable.
Also review traceability. Select an ingredient or finished product and check whether the business can follow the relevant records to its supplier or customer, as appropriate.
Audit findings should be clear, factual and supported by evidence.
Avoid vague statements such as “the kitchen is not clean”. Instead, explain the actual observation, location and relevant procedure or requirement.
For example:
Businesses may classify findings according to their own documented grading system. The categories should be clearly defined and consistently applied.
Where an immediate food safety risk exists, escalate it promptly.
Finding a problem is only the first stage. The business must understand why it happened and how to prevent recurrence.
Consider whether the issue resulted from:
Separate immediate correction from longer-term corrective action.
Every action should have an owner, deadline and method of verification.
The final report should provide a clear summary of the audit and its findings.
Include:
A report should be detailed enough to support improvement but clear enough for managers and employees to understand.
Closing an action does not automatically mean that the problem has been resolved.
Follow up to establish whether the corrective action has been implemented and whether it is effective. This may involve another inspection, a new record sample or a repeat audit.
Review trends over time. Repeated temperature failures, allergen errors or cleaning problems may indicate a wider weakness in the system.
An effective audit programme should evolve as the business introduces new products, processes, equipment or suppliers.
Managing internal food safety audits alongside daily business responsibilities can be demanding. FooddSure can support businesses with audit planning, food safety system reviews and improvement recommendations.
Whether you need to assess existing procedures or strengthen your internal audit programme, a structured review can help identify practical priorities.