EthicalHub

Retailer Audits

How to close out audit findings on time

A day-by-day plan from the closing meeting to accepted evidence, plus what certification bodies reject and how to stop the same finding coming back.

4 min read

The short answer

You usually have about four weeks: SQF Edition 9 gives 30 calendar days to close minor and major findings, and BRCGS generally gives 28 days to submit corrective action evidence. For each finding, contain the problem, find the root cause, fix the cause, and send evidence that the fix worked. Start in the first week. Most late close-outs come from leaving the root cause until the last few days.

The plan

A four-week close-out plan

Based on a 28 to 30-day deadline. Confirm your exact dates with your certification body at the closing meeting.

Day 0

Closing meeting

Write down every finding, its grade, the clause, and the deadline. If you don’t understand a finding, ask now; it’s much harder later.

Days 1–3

Contain and assign

Deal with anything affecting product today. Log every finding in your corrective action register with an owner and a due date well before the deadline.

Days 3–10

Find the root cause

Ask why until you reach something you can change: a procedure, a schedule, a resource, a training gap. Check whether the same gap exists elsewhere on site.

Days 10–21

Fix the cause

Change the procedure, retrain against the new version, repair the equipment, update the form. Keep the old and new versions.

Days 21–25

Collect the evidence

Photos, revised documents, training records, and a run of records showing the fix working since you made it.

By day 25

Submit, with a buffer

Send it a few days early. If the certification body asks for more, you still have time to respond before the deadline.

Root cause

A worked 5 Whys example

Finding: two CCP cooking records in March weren’t verified by a second person.

  • Why? The supervisor who verifies them was on leave.
  • Why did nobody cover? No one else was named as a back-up verifier.
  • Why not? The procedure names one person, not a role with a deputy.
  • Root cause: the verification procedure has no cover arrangement.
  • Fix: name a deputy, train them, update the procedure, and check every other procedure that depends on one person.

Notice the fix isn’t “remind the supervisor”. “Retrained staff” or “human error” on their own rarely satisfy an auditor.

Evidence

Evidence that gets accepted, and evidence that doesn’t

Type of findingEvidence that usually worksEvidence that usually doesn’t
Missing or incomplete recordsRevised form or process, plus completed records since the fixThe missing records filled in after the audit
Procedure gapRevised, approved procedure and training records against itA draft with no approval or training
Facility or equipment issueDated photos of the repair and the maintenance recordA quote or a plan to fix it, with no temporary control
Supplier issueCurrent certificate, updated approval and how expiries are now trackedAn email asking the supplier for a certificate
Training gapTraining records plus a competency checkA sign-in sheet on its own

Can’t finish in time because the fix needs building work or new equipment? Under SQF Edition 9, extra time can be agreed for structural changes, provided you put temporary controls in place. Raise it with your certification body early. Source: SQF Food Safety Code, Edition 9 (section 9.4); BRCGS 28-day guidance via GoAudits.

Next year

Stop the same finding coming back

Auditors usually start by checking last year’s findings. A repeat suggests the fix didn’t work, and it can be graded more seriously the second time.

  • Add each closed finding to your internal audit schedule, and re-check it at three and six months.
  • Trend your corrective actions monthly. Three small findings in the same area usually point to one bigger cause.
  • Review open and closed findings at your management review.
Where EthicalHub fits

Every finding tracked to evidence

EthicalHub’s corrective action workflow records the finding, root cause, owner, due date and evidence, and flags actions before they go overdue. Your consultant can review and sign off remotely, and the closed actions go straight into your audit pack for next year’s auditor.

See the corrective action workflow

A walkthrough using a finding from your last audit.

Book a walkthrough
Questions

Closing out findings: common questions

How long do I have to close out audit findings?
Usually around four weeks. SQF Edition 9 requires minor and major findings to be closed within 30 calendar days, and BRCGS generally gives 28 calendar days to submit corrective action evidence. For FSSC 22000, your certification body sets the deadline under the scheme rules.
What happens if I miss the close-out deadline?
It depends on your scheme and certification body, but missing it can delay or put your certificate at risk. If a fix genuinely needs longer, such as building work, ask your certification body early and put temporary controls in place.
What is a root cause in a corrective action?
The underlying reason the problem happened, which you can change: a missing procedure, an unclear schedule, a resource gap. “Human error” or “retrained staff” on their own are rarely accepted as root causes.
What evidence should I send to close a finding?
Proof that you fixed the cause and that the fix works: a revised and approved procedure, training records, dated photos of repairs, and records completed since the change.

Close findings before they’re due.

See how EthicalHub tracks corrective actions from finding to evidence.

Scroll to Top