Unannounced IFS, BRCGS and FSSC 22000 Audits: the Rules and How to Stay Ready

The auditor shows up at reception on a Tuesday morning, unannounced. Nightmare scenario? No: the normal regime. The three major GFSI-recognised schemes — IFS Food, BRCGS and FSSC 22000 — have all built the unannounced audit into how they work, each with its own rules. This article reviews them and, above all, explains how to run a site that has nothing to fear from a visit without notice.

Why the schemes went unannounced

The announced audit has a structural weakness: it shows the site on a chosen, prepared, briefed day. The food scandals of the 2010s — horsemeat in lasagne first among them — eroded trust in certifications earned on scheduled audits. Academia was explicit about it: the study by Powell, Erdozain, Dodd and co-authors published in 2013 in Food Control (“Audits and inspections are never enough: A critique to enhance food safety”) documents outbreaks that occurred at manufacturers with good audit scores, and concludes that a point-in-time audit is only worth as much as the living system and shared daily culture behind it (see the study).

The schemes’ answer: make the audit less predictable, so as to audit actual operations rather than the performance staged for the big day.

The rules, scheme by scheme

IFS Food (version 8). The principle is now built into the cycle: at least one audit in three must be unannounced. A site can also opt into the unannounced regime more often — and turn it to advantage: unannounced-audited sites can display a “Star Status”, a trust signal buyers appreciate. Everything else stays the same: same requirements, same scoring, same KO requirements, as we detail in our guide to IFS Food certification.

BRCGS Food Safety (Issue 9). The unannounced programme is a rewarded option: a site enrolled in it sees its grade completed with a “+” (AA+ for instance), displayed on the certificate. Many retailers, notably British ones, explicitly require this regime of their suppliers. The grade otherwise keeps its usual role: top grades maintain an annual audit, low grades shorten the re-audit interval.

FSSC 22000. The ISO-style cycle (three years: initial audit, annual surveillance, recertification) includes a share of unannounced surveillance audits. Version 7.0 of the scheme, published in May 2026, continues in that direction — check with your certification body the exact terms applicable to your cycle and the transition version.

In all three cases, the practicalities (intervention windows, advance declaration of closure days, legitimate grounds for postponement) are governed by each scheme’s rules: ask your certification body for the details rather than relying on hearsay.

What unannounced really changes in your organisation

Nothing in the content, everything in the timing. Concretely, three consequences:

1. Last-minute preparation disappears. Catching up on records the week before the audit, repainting the corridor, briefing the teams the night before: all of that assumes you know the date. Unannounced, the auditor sees the factory of an ordinary Tuesday.
2. Reception becomes a critical link. Who receives the auditor if the quality manager is on leave? Who can access the documents, drawings and records? A site must write down its procedure for hosting an unannounced audit: verifying the auditor’s identity, people to notify, designated deputies.
3. Every day is a potential audit day. Cleaning, temperature and CCP monitoring records must be up to date today — not recoverable tomorrow.

Staying permanently ready: the method

Run the system to the rhythm of production, not of audits. Short regular reviews rather than one big annual review, internal checks spread across the year, surprise traceability tests organised by your own team.

Anchor the reflexes with operators. Unannounced, the shop-floor interview becomes the moment of truth: why this record, what to do when a temperature drifts, who to alert? That is the whole point of food-safety culture, now required by all three schemes. The work of Jespersen, Griffiths and co-authors published in 2016 in Food Control (“Measurement of food safety culture using survey and maturity profiling tools”) shows that this culture can be measured and progresses through maturity stages — so a site can assess and manage it like any other indicator (see the study).

Audit your own site without warning. The best training for an unannounced audit is the unannounced self-inspection: a member of the quality team (or a sister site in the group) walks into production with the scheme’s checklist. Findings raised internally cost nothing; the same findings raised by the certification body cost a grade.

Secure the reception logistics. An audit binder (or digital access) permanently available, an up-to-date list of deputies, written instructions at reception. Also think of the regulatory basics that will be looked at first: personnel hygiene and the sanitary control plan — fundamentals we recap in our article on France’s food-hygiene training and HACCP.

Unannounced as a sales argument

Turn the constraint around: a site that voluntarily opts for the unannounced regime — IFS Star Status, BRCGS “+” grade — sends its customers a strong message: “come whenever you like.” To buyers scarred by past crises, that is a real differentiator at listing time, sometimes worth as much as a price gap. Sites that live comfortably with unannounced audits turn them into an asset; those that endure them turn them into a risk.

Take action

The best test: if an auditor rang the bell tomorrow at 8 a.m., would you be calm? If the answer hesitates, start with an unannounced self-inspection this week. And to place unannounced audits within the whole journey — scheme choice, scoring, certification cycle — read our full guide to the GFSI schemes: IFS Food, BRCGS, FSSC 22000.