FAQ · PUBLICADO 2026-04-28
Updated 2026-04-28
Audit FAQ — Regulator Questions
The most common questions and mistakes around audit, answered from Codex, FDA, FSA, EFSA, MHLW.
Quick AnswerThe most common questions and mistakes around audit, answered from Codex, FDA, FSA, EFSA, MHLW.
📑 Índice
- FAQ — 12 questions operators actually ask
- Q: Is audit mandatory for small businesses?
- Q: How many CCPs should we have?
- Q: Do allergens count as a HACCP hazard?
- Q: What records must we keep?
- Q: How long must we retain records?
- Q: Can a consultant own our HACCP plan?
- Q: Is electronic record-keeping accepted?
- Q: Is HACCP the same as ISO 22000?
- Q: How often should we review the plan?
- Q: Can we copy another company’s plan?
- Q: Do we need certification?
- Q: What does ‘verification’ mean in HACCP?
- Top failure modes (case-study anchored)
- 🇯🇵Japan
- 🇬🇧United Kingdom
- 🇺🇸United States
- 🇪🇺European Union
- 🇨🇦Canada
- Operator dialogue
- 🦉 & 🐣 & 🐮 — A 5-round operator’s dialogue
- Armadilhas comuns (de relatórios de inspeção reais)
- Correções recomendadas pelas autoridades
- Coruja & Pintinho & Vaca — diálogo de operador
- Experimente a árvore de decisão CCP gratuita do MmowW
- Primary sources (national & international authorities)
- Related Articles
- Pronto para automatizar o seu HACCP?
FAQ — 12 questions operators actually ask
Q: Is audit mandatory for small businesses?
Yes — national authorities (FSA, MHLW, FDA) publish simplified routes for small operators, but the underlying obligation applies to every food business[1].
Q: How many CCPs should we have?
Codex Annex II answers this with a 4-question Decision Tree applied to each process step[2]. The number is whatever the tree says — usually 1–3 per signature item.
Q: Do allergens count as a HACCP hazard?
Yes. Codex and FDA Food Code class allergens as a chemical hazard category[2][3].
Q: What records must we keep?
At minimum: hazard analysis worksheet, CCP determination, monitoring records, corrective-action records, and verification records[2].
Q: How long must we retain records?
National authority requirements vary; many regulators set a 1–3 year minimum. Always confirm with your local authority.
Q: Can a consultant own our HACCP plan?
No. Codex and national authorities require operator ownership; consultants may assist with drafting but accountability rests with the operator[2].
Q: Is electronic record-keeping accepted?
Yes — FDA explicitly recommends digital logging[4] and the MHLW expert panel reports 90% time savings[5].
Q: Is HACCP the same as ISO 22000?
No. HACCP is the analytical core; ISO 22000 wraps a management system around it.
Q: How often should we review the plan?
Annually and immediately upon process or supplier change, per Codex CXC 1-1969 Rev.2020 §1.7[2].
Q: Can we copy another company’s plan?
Use authority sector handbooks as a skeleton; never copy another operator’s analysis verbatim — your hazards and equipment are different.
Q: Do we need certification?
Statutory inspection is mandatory; third-party certification (FSSC 22000, BRCGS) is voluntary but commonly required by retail customers.
Q: What does ‘verification’ mean in HACCP?
Periodically confirming that monitoring is happening and that the limits are still scientifically defensible[2].
Top failure modes (case-study anchored)
🇯🇵Japan
Tokyo restaurant HACCP adoption rose from 22% (2018) to 95% (2023) under coordinated MHLW guidance and Tokyo public-health-centre on-site coaching.
Source: Tokyo Metropolitan Government — Status of HACCP Institutionalisation March 2023.
🇬🇧United Kingdom
FSA SFBB and FHRS reduced food-borne illness incidence 27% versus 2010 across 500,000+ premises; 89% now hold a Rating of 4 or higher.
Source: Food Standards Agency (UK) — Annual Report 2024 / SFBB / FHRS.
🇺🇸United States
FDA FSMA Preventive Controls (21 CFR 117) cut U.S. food-recall events 31% and outbreak counts 28% versus the 2016 baseline.
Source: FDA — FSMA Implementation Status Report 2023.
🇪🇺European Union
EC 852/2004 mandates HACCP-based hygiene management for all food-business operators; RASFF early-warning detection grew +52% versus 2010.
Source: European Commission / EFSA — Food Safety in the EU 2023 / Regulation (EC) 852/2004.
🇨🇦Canada
Canada SFCR Preventive Control Plan (2019–) is associated with a 35% reduction in food-related fatalities.
Source: Canadian Food Inspection Agency — SFCR Preventive Control Plan.
Operator dialogue
🦉 & 🐣 & 🐮 — A 5-round operator’s dialogue
🐣
Piyo: Poppo-san, where does audit actually start in a real kitchen?
🦉
Poppo: It starts with reading the authority text once and writing one decision. Codex sets the international baseline; your national regulator binds you to a specific value or method.
🐣
Piyo: What if the staff resist the new rule?
🦉
Poppo: Show them the failure mode it prevents and the time it saves. Authority handbooks (FSA SFBB, MHLW small-business guidance) describe the minimum viable system — you adapt, you don’t reinvent.
🐮
Mou: Strong, kind, beautiful: audit made blissful for everyone in the kitchen.
Armadilhas comuns (de relatórios de inspeção reais)
- Auditor interno também gerente linha, sem independência
- Listas genéricas perdem problemas sítio
- CAPAs formais, causa raiz intacta
- Resultados auditoria não chegam mesa direcção
- Teatro pré-auditoria em vez disciplina diária
Correções recomendadas pelas autoridades
- Auditor interno independente (meio tempo OK)
- Lista personalizada por sector e escala
- App CAPA com modelo RCA obrigatório
- Painel mensal direcção para C-suite
- Padrões diários = padrões auditoria
Coruja & Pintinho & Vaca — diálogo de operador
🐣
Piyo: Auditoria interna vs terceiros?
🦉
Poppo: Interna: independente na empresa. Terceiros: organismo reconhecido GFSI — necessário para certificação.
🦉
Poppo: Acção Correctiva e Preventiva. Encontrar → causa raiz → agir → verificar.
🐮
Mu: Após desvio temp, 5-Why levou a 'frigorífico sob sol directo'. Mudança layout — resolvido.🐮
🐣
Piyo: FSSC 22000 vs ISO 22000?
🦉
Poppo: FSSC agrupa ISO 22000 + ISO/TS 22002 (PRP) + requisitos extra — GFSI reconhece.
🐮
Mu: Forte, gentil, bonito — auditoria é o espelho que pole o quotidiano.🐮
Experimente a árvore de decisão CCP gratuita do MmowW
Identifique os pontos críticos do seu menu em 5 minutos — alinhado com Codex CXC 1-1969 Anexo II, gratuito em 6 idiomas.
Abrir ferramenta gratuita →Pronto para automatizar o seu HACCP?
O MmowW F👀D SaaS regista temperaturas, limpeza e evidências diariamente — um toque. O seu badge de confiança de 4 eixos cresce automaticamente.
Iniciar teste gratuito de 14 dias →Sem cartão de crédito. A partir de $29,99/mês.
Aviso legal importante: MmowW não é um organismo de certificação de segurança alimentar. O conteúdo acima é material educacional de boas práticas extraído de fontes primárias de autoridades nacionais. A responsabilidade final pela conformidade com Codex, FDA, FSA, EFSA, MHLW, CFIA ou qualquer outra exigência nacional cabe ao operador alimentar e à autoridade competente.
🦉
Takayuki Sawai — Gyoseishoshi
Licensed Gyoseishoshi (Administrative Scrivener) and founder of MmowW. Making food safety compliance blissful for businesses worldwide.