An unannounced food safety audit is a certification audit conducted with no advance notice of the date, so the auditor sees the plant as it runs every day rather than after a cleanup. Under GFSI-benchmarked schemes like BRCGS and SQF, part of a site's audit cycle now happens unannounced within a defined window.
The logic is simple. A scheduled audit measures how good your plant looks when it knows you are coming. An unannounced audit measures how your plant actually operates. This post covers why schemes moved this direction, how the window works under BRCGS and SQF, what auditors look for when you can't prepare, and how to make "audit-ready" the normal state of the floor instead of a fire drill.
What is an unannounced audit?
An unannounced audit is a certification audit that arrives without the site knowing the specific date, landing somewhere inside an agreed window rather than on a booked calendar day. The auditor still holds the same scope and checklist as an announced audit against the same standard; the only thing that changes is that you had no chance to stage the plant for the visit.
That single change matters more than it sounds. Most audit non-conformances are not caused by a plant that cannot meet the standard. They are caused by a plant that meets the standard on audit day and drifts the other 364 days. Removing the warning removes the drift's hiding place. It is the difference between a rehearsed performance and an honest look at the running process, which is why every GFSI-benchmarked scheme now builds an unannounced element into its program.
Why are schemes moving to unannounced audits?
Schemes moved to unannounced audits to close the gap between audit-day performance and everyday performance. A well-publicized cluster of recalls and outbreaks over the past decade came from plants that held current, passing certificates, which told buyers and regulators that a clean audit report was not the same as a clean operation. GFSI, the body that benchmarks schemes so that "certified once, accepted everywhere" holds, responded by pushing unannounced elements into the schemes it recognizes.
The move also protects the certificate's value. Retailers and brand owners accept a BRCGS, SQF, or FSSC certificate in place of doing their own supplier audit. That trust only works if the certificate reflects normal conditions. An unannounced program is the scheme's way of telling the market that the badge means the plant runs clean when nobody is watching, not just when the auditor is booked. For a food manufacturer, that raises the stakes of everyday discipline, but it also rewards the plants that were already doing the work.
How does the unannounced option work under BRCGS and SQF?
Both schemes run the unannounced audit inside a defined window and let you block a limited number of legitimate no-go days, but the mechanics differ. BRCGS offers a voluntary unannounced program with two options; SQF requires one unannounced audit somewhere in the three-year certification cycle. The table below lays out the current mechanics.
| Element | BRCGS Food Safety | SQF Food Safety Code |
|---|---|---|
| Status | Voluntary program, two options | Mandatory: one unannounced audit per three-year cycle |
| Option 1 | Fully unannounced single audit | Unannounced recertification audit |
| Option 2 | Two-part: unannounced Part 1 (facility/GMP), announced Part 2 (records/systems) | Not applicable |
| Audit window | Typically the last 4 months of the certification cycle | 60-day window: certification anniversary plus or minus 30 days |
| Blackout days | Up to 10 per year (5 if audited every 6 months), with valid reasons, notified at least 4 weeks ahead | Blackout dates submitted to the certification body 30 days before the window opens |
| Can you decline? | You choose the program; within it you cannot pick the date | No, refusal results in immediate certificate suspension |
Under BRCGS certification the unannounced audit generally lands in the final four months of your cycle and cannot occur after your audit due date. Blackout days are for genuine reasons, a booked customer trial that pulls in your technical staff, a planned shutdown, not for "this week is busy." Under SQF certification a currently certified supplier takes at least one unannounced audit inside the three-year cycle, arriving in a 60-day window around the anniversary date, and the site does not get to opt out. Both approaches are how these schemes meet the GFSI benchmark for unannounced auditing.
What do auditors look for when you can't prepare?
An unannounced auditor looks for the things a rehearsal usually fixes: live sanitation practice, honest records, and whether the people on the floor actually run the system. Because you had no cleanup window, the auditor is reading the plant's real habits, and they go straight to the places habits show.
- Live GMP and hygiene. Are personnel hygiene, protective clothing, and handwashing being followed right now, on an ordinary shift, without a supervisor walking ahead to correct people?
- Records with a pulse. Real-time checks, CCP monitoring, pre-op inspection, metal detector verification, filled in as the work happens, not in one suspicious handwriting the morning of the audit. Gaps, corrections, and follow-through on out-of-spec results tell the true story.
- Housekeeping and maintenance. Standing water, condensate, flaking paint, temporary repairs, and pest activity that a scheduled audit gives you a week to hide.
- People who know the system. Can the operator explain their critical limits and what they do when a reading goes out of spec? Unrehearsed answers reveal whether the food safety culture is real or laminated on the wall.
- Traceability under pressure. A cold-start traceability exercise on whatever lot is running now, with no chance to assemble the paperwork in advance.
None of this is exotic. It is the same content as an announced audit, the auditor has simply removed your ability to stage it. That is exactly why the plants that do well are the ones for whom nothing needed staging.
By the numbers. GFSI-benchmarked schemes now require an unannounced component. BRCGS publishes the mechanics in its Position Statement and Protocol on Unannounced Audits (BRCGS079) which defines Option 1 (fully unannounced) and Option 2 (two-part), the audit window, and the limited blackout allowance. SQF requires at least one unannounced audit in each three-year certification cycle, arriving in a 60-day window around the anniversary date, per the SQF Institute program rules. The FDA's guidance on controlling Listeria monocytogenes in ready-to-eat foods underscores why unstaged conditions matter: environmental harborage is found in running plants, not scrubbed ones.
How do you stay audit-ready every day?
You stay audit-ready by running the plant the same way whether or not an auditor is at the door, which means building the audit's checks into daily operations instead of into a pre-audit sprint. Here is a seven-step way to make everyday-ready the default state.
- Make the pre-op inspection a real gate. A documented, signed pre-operational sanitation check every startup, with the authority to hold the line, means the plant opens each day at the condition an auditor would want to see. Your SSOPs are the backbone of this.
- Close records at the point of work. CCP logs, temperature checks, and verification records completed live, by the person doing the task, kill the single biggest unannounced-audit failure: reconstructed paperwork that does not survive a question.
- Run internal audits like the real thing. Do unannounced internal walks on off-shifts and weekends. If your own team can drop in cold and find the plant clean, an external auditor will too.
- Keep traceability warm. Run a mock recall on a live lot on a random day, timed. A team that can trace one-up and one-back in an hour without notice is ready for a cold-start exercise.
- Fix the recurring finding, not the instance. When the same drain, door, or step keeps failing, treat it as a root-cause problem, not a wipe-it-and-move-on. Verification that a corrective action actually held is where announced-only plants get exposed.
- Keep the document set current. HACCP plan, prerequisite programs, and specifications reflecting how the plant runs today, not last year's layout, so there is never a scramble to reconcile paper with reality.
- Give the floor the answers. Every operator should be able to state their critical limits and corrective actions in their own words. Culture that lives in people, not binders, is what an unannounced auditor is really testing.
Notice that none of these steps is "prepare for the audit." They are all "run the plant well." That is the whole point of the unannounced model, it stops rewarding preparation and starts rewarding operation. Tie the discipline back to your HACCP and GMP foundations and the audit stops being an event.
Why unannounced audits reward connected records
The plants that dread unannounced audits are usually the ones whose records live on paper and in binders, because paper cannot prove it was written in real time and cannot be searched under pressure. When an auditor drops in and asks for three months of metal detector checks, a clipboard system means someone running to a filing cabinet and hoping the pages are there and legible.
Records captured digitally at the point of work carry a timestamp and an author, which is exactly the evidence an unannounced audit is looking for: proof that the check happened when it should have, done by who should have done it. Harmony's connected data model is built so that pre-op checks, CCP monitoring, corrective actions, and traceability data are logged live and stay searchable, the difference between an unannounced audit being a stressful scramble and being an ordinary Tuesday. See how a plant runs quality and downtime on one connected system in our Custom Laboratories case study.
Understanding what an auditor confirms, versus what your controls were proven capable of up front, is a related idea worth getting straight; see verification vs validation in food safety. And a strong environmental monitoring program is one of the clearest signals to an unannounced auditor that your plant hunts for problems rather than hiding them.