BRC Global Standard for Food Safety — Achieving Issue 9 Certification: A Complete Certification Guide
Quick Reference
| Standard / Topic | Latest Version | Published By | Typical Duration | Difficulty Level |
|---|---|---|---|---|
| BRC Global Standard for Food Safety | Issue 9 (effective February 2023) | BRCGS (Brand Reputation Compliance Global Standards) | 6–12 months from gap analysis to certification | Intermediate to Advanced |
1. Introduction
The BRC Global Standard for Food Safety — now formally branded as BRCGS — is one of the world's most recognised benchmarks for food manufacturing safety, quality, and operational management. Originally developed in 1998 by the British Retail Consortium to harmonise supplier standards across UK retailers, it has since evolved into a globally accepted certification scheme used in more than 130 countries and recognised by the Global Food Safety Initiative (GFSI).
For food manufacturers selling to major retailers, foodservice operators, or branded buyers, BRCGS certification is frequently a non-negotiable commercial requirement. The current version, Issue 9, came into force on 1 February 2023 and introduces strengthened requirements around food safety culture, environmental monitoring, food defence, and supplier approval.
This complete certification guide is written for food safety managers, technical directors, quality auditors, and certification candidates preparing for a first-time BRCGS audit or transitioning from Issue 8 to Issue 9. Whether you operate a small bakery, a multi-site dairy group, or a co-manufacturing facility, the principles and pathway covered here apply.
By the end of this article, you will understand the scope and structure of BRCGS Issue 9, the nine fundamental clauses, the certification pathway, the most common pitfalls, and how to position your facility for a successful AA+ grade outcome. We also share practical implementation tools, a fictional case study, and resources from ISO Xpert to accelerate your readiness.
2. Scope & Application
The BRCGS Food Safety Standard applies to any organisation involved in the manufacture, processing, or packaging of food and food ingredients intended for human consumption (and, in some cases, pet food). It is structured to address risks across the entire factory environment, including raw materials, primary processing, packing, storage on-site, and despatch.
Sectors typically covered include:
- Bakery, confectionery, and snacks
- Dairy, eggs, and chilled foods
- Meat, poultry, and seafood processing
- Fruit, vegetables, and prepared salads
- Ambient and canned goods
- Beverages, including bottled water and juices
- Frozen foods and ready meals
- Food ingredients and additives
The standard applies to manufacturing sites only — it does not cover primary agricultural production (covered by GLOBALG.A.P.), brokers and traders (covered by BRCGS Agents & Brokers), storage and distribution (BRCGS S&D), or retail stores (covered by BRCGS Retail).
Geographic application is global. While initially developed in the UK, BRCGS is now demanded by retailers across Europe, North America, the Middle East, Asia-Pacific, and increasingly Latin America. The certificate is recognised by GFSI, which means it is generally accepted as equivalent to other GFSI-benchmarked schemes such as SQF, FSSC 22000, and IFS Food.
The standard is risk-based and scope-specific, meaning your audit duration, requirements, and applicable clauses are tailored to your product categories, processes, and site complexity. A site producing high-risk chilled ready meals will face deeper scrutiny than one producing ambient dry ingredients.
⚠️ Warning: BRCGS certification is granted at the site level, not corporate level. If you operate multiple manufacturing sites, each one must be audited and certified independently — there is no group certificate.
3. Key Requirements / Core Concepts
BRCGS Issue 9 is structured around nine sections of requirements (also known as clauses), eight of which contain "Fundamental" requirements — clauses so critical that a major non-conformance against any of them results in automatic non-certification.
The Nine Sections
- Senior Management Commitment (Fundamental)
- Food Safety Plan – HACCP (Fundamental)
- Food Safety and Quality Management System (Fundamental)
- Site Standards (Fundamental)
- Product Control (Fundamental)
- Process Control (Fundamental)
- Personnel (Fundamental)
- High-Risk, High-Care, and Ambient High-Care Production Risk Zones
- Requirements for Traded Products
Core Concepts You Must Master
Food Safety Culture — Issue 9 strengthens the requirement for a documented, measurable food safety culture plan. Sites must define cultural objectives, measure them via KPIs (e.g., near-miss reporting rates, behavioural audits), and demonstrate continuous improvement.
HACCP Foundation — Your Food Safety Plan must follow the seven Codex Alimentarius HACCP principles, validated by a multidisciplinary team and reviewed at least annually or whenever changes occur.
Environmental Monitoring — For high-risk, high-care, and ambient high-care zones, a risk-based environmental monitoring programme (EMP) is now mandatory. This includes pathogen sampling (e.g., Listeria monocytogenes), trending, and corrective actions.
Food Defence and Food Fraud — Sites must conduct Vulnerability Assessments (VACCP) for fraud and Threat Assessments (TACCP) for intentional contamination, with documented mitigation plans.
Supplier Approval and Performance Monitoring — Raw materials and packaging must be sourced from approved suppliers, with risk-based verification (e.g., GFSI certificates, audits, COAs).
💡 Pro Tip: Don't treat the eight Fundamental clauses as eight separate items — they form an interlocking system. A weakness in Senior Management Commitment (clause 1) almost always cascades into Site Standards (clause 4) and Personnel (clause 7).
💡 Pro Tip: Build your food safety culture plan around four pillars recommended by GFSI: vision and mission, people, consistency, and adaptability. Sites that score AA grade typically demonstrate measurable cultural maturity, not just policy documents.
💡 Pro Tip: For environmental monitoring, work with a competent microbiologist to define your "seek-and-destroy" sampling zones (Zone 1 = food contact, Zone 4 = warehouse). Many sites fail because they over-sample Zone 1 and ignore Zones 2–4.
Documentation Requirements
At a minimum, certified sites must maintain:
- HACCP study and supporting prerequisite programmes (PRPs)
- Quality manual and procedures
- Specifications for raw materials, packaging, and finished products
- Internal audit schedule and records
- Training records and competency matrices
- Calibration, maintenance, and pest control records
- Traceability and recall test records (minimum annual)
4. Certification / Implementation Approach
Implementing BRCGS is not a one-month project. Most facilities require 6 to 12 months of preparation — longer for complex multi-line sites or those without an existing HACCP foundation. The journey can be broken into five phases.
Phase 1 — Gap Analysis (Weeks 1–4)
Conduct a formal gap analysis against all 320+ requirements of Issue 9. This can be done internally using the BRCGS Self-Assessment Tool or — more reliably — by an experienced consultant.
Phase 2 — System Design and Documentation (Weeks 5–16)
Design or update your Food Safety and Quality Management System (FSQMS), including HACCP, PRPs, and Issue 9-specific elements (culture plan, EMP, VACCP/TACCP).
Phase 3 — Implementation and Training (Weeks 12–20)
Roll out documented procedures on the shop floor, train all relevant personnel, and embed verification activities. Allow at least 3 months of operational records before booking the audit.
Phase 4 — Internal Audit and Management Review (Weeks 20–26)
Complete a full-scope internal audit and management review. Close out all non-conformances before scheduling the certification audit.
Phase 5 — Certification Audit (Weeks 26–32)
Engage a BRCGS-licensed certification body for either an announced or unannounced audit (unannounced audits attract a higher grade).
Implementation Roadmap
| Phase | Duration | Key Deliverable | Owner |
|---|---|---|---|
| 1. Gap Analysis | 2–4 weeks | Gap report and remediation plan | Technical Manager |
| 2. System Design | 8–12 weeks | Updated FSQMS, HACCP, PRPs | FSQMS Lead |
| 3. Implementation | 6–8 weeks | Live records, trained staff | Operations & QA |
| 4. Internal Audit | 4–6 weeks | Internal audit report, closed NCs | Lead Internal Auditor |
| 5. Certification Audit | 2–3 days on-site | BRCGS Certificate (Grade AA+ to D) | Certification Body |
✅ Checklist — Pre-Audit Readiness: - HACCP plan signed off and validated - Three months of EMP data trended - Food safety culture KPIs measured - Internal audit cycle complete - Mock recall executed within 4 hours - All staff trained and records on file
📥 Downloadable Checklist: ISO Xpert offers a free 65-point BRCGS Issue 9 Readiness Checklist on our resources portal.
5. Certification / Completion Process
The audit itself takes between 2 and 3 days on-site for most sites, depending on scope, headcount, and number of HACCP studies. The auditor is a BRCGS-registered specialist with sector-specific experience (e.g., dairy, meat, bakery).
The audit follows a vertical approach — the auditor selects a finished product and traces every input, process, and record back through the system. They will also conduct factory walks, document reviews, and staff interviews.
Grading
After the audit, non-conformances are categorised:
- Critical — automatic non-certification
- Major against a Fundamental — automatic non-certification
- Major — must be closed within 28 days
- Minor — must be closed within 28 days
Your grade is determined by the number and severity of non-conformances and whether the audit was announced or unannounced:
| Grade | Announced | Unannounced |
|---|---|---|
| AA+ / AA | 0–5 minors | 0–5 minors |
| A+ / A | 6–10 minors | 6–10 minors |
| B+ / B | 1 major + 6–15 minors | 1 major + 6–15 minors |
| C+ / C | 1 major + 16–24 minors | — |
| D+ / D | 2 majors + minors | — |
Certificates are valid for 12 months. Re-audits occur within a window of 28 days before to 28 days after the anniversary date. Non-certification triggers re-application as a new audit.
6. Common Challenges & Solutions
1. Weak food safety culture evidence - Problem: Sites have a culture policy but no measurable KPIs or improvement plan. - Solution: Adopt the GFSI culture framework, define 4–6 cultural KPIs, and review them quarterly at management review. - Outcome: Tangible culture evidence and a higher audit grade.
2. Environmental monitoring gaps - Problem: Sampling exists but lacks risk-based zoning, trending, or corrective action triggers. - Solution: Develop a documented EMP with zone maps, sampling plans, action limits, and root-cause investigation procedures. - Outcome: Objective evidence of pathogen control in high-risk areas.
3. Inadequate supplier approval - Problem: Suppliers are listed but not properly risk-assessed or verified. - Solution: Implement a tiered approval matrix linked to GFSI status, COAs, and supplier audits. - Outcome: Defensible supply chain with reduced raw material risk.
4. HACCP plans that aren't validated - Problem: Critical Control Points (CCPs) are listed but not scientifically validated. - Solution: Use published validation studies, in-house challenge tests, or expert opinion to validate every CCP. - Outcome: Audit-ready HACCP and reduced risk of recall.
5. Document control chaos - Problem: Multiple versions of SOPs in circulation; obsolete documents on the shop floor. - Solution: Move to a controlled electronic document management system (eDMS) with revision logs and access control. - Outcome: Single source of truth, fewer document non-conformances.
7. Benefits
BRCGS certification delivers strategic, operational, and commercial benefits that extend well beyond passing an audit.
Commercially, it opens doors to global retailers and foodservice giants — many of whom will not engage with a non-GFSI-certified supplier. It de-risks your customer base and creates a defensible position during procurement reviews.
Operationally, the disciplines required for certification — HACCP, traceability, environmental monitoring, internal audit — drive measurable reductions in customer complaints, recalls, and waste. ISO Xpert benchmarking shows that certified sites typically reduce customer complaints by 20–40% within 18 months.
Reputationally, a high BRCGS grade (AA or AA+) signals technical excellence to insurers, lenders, and acquirers — useful in M&A and refinancing scenarios.
Benefits Matrix
| Dimension | Short-Term (0–12 months) | Long-Term (1–3 years) |
|---|---|---|
| Commercial | Access to GFSI-only retailers | Premium pricing, multi-year contracts |
| Operational | Fewer document errors, clearer roles | Lower customer complaint rates, less waste |
| Risk | Stronger HACCP, recall readiness | Reduced insurance premiums, fewer regulatory issues |
| People | Improved training, defined competencies | Stronger food safety culture, lower turnover |
| Brand | Marketing claim "BRCGS Certified" | Positioned as supplier of choice |
8. Tools & Resources
A successful BRCGS programme depends on the right toolkit. At minimum, you should equip your team with:
- HACCP software (e.g., Safefood 360°, Intelex, or SafetyChain) for living plans and verification
- Document management system with revision control and electronic signatures
- CAPA tracking tool for non-conformance management
- Environmental monitoring database with trending dashboards
- Mock recall and traceability simulator
ISO Xpert resources to support your journey: - BRCGS Issue 9 Lead Auditor Training - BRCGS Internal Auditor Training - HACCP Level 3 and Level 4 (Advanced) - Food Safety Culture Workshop - Free 65-point Readiness Checklist (📥 downloadable) - Document templates aligned to Issue 9
External references include the official BRCGS Bookshop (brcgs.com), the GFSI Benchmarking Requirements, and Codex Alimentarius CAC/RCP 1-1969 for HACCP fundamentals.
9. Case Study
Company: "Northstar Bakery Ltd." (fictional, mid-sized UK ambient bakery, 220 employees)
Before: Northstar held a Grade C BRC Issue 8 certificate and faced a major retailer mandate to achieve at least Grade B by the next contract renewal. Their last audit raised 22 minors and 2 majors — primarily around environmental monitoring, document control, and weak food safety culture. Customer complaint rates ran at 240 ppm, and a near-miss foreign body event the previous year had triggered a precautionary withdrawal.
Intervention: Over nine months, Northstar partnered with ISO Xpert to deliver a structured upgrade to Issue 9. Workstreams included: a full gap analysis, redesign of the EMP with new zone maps, deployment of an electronic document management system, a culture programme with monthly behavioural audits, and refresher HACCP training for the technical team. A mock unannounced audit was held at month seven.
After: At the certification audit, Northstar achieved a Grade AA result with only 4 minors. Customer complaint rates dropped to 95 ppm within 12 months. The retailer reinstated full preferred-supplier status, leading to a 15% volume uplift across two product categories.
Key Lessons: 1. Culture is measurable — define KPIs and track them. 2. Document control is the single biggest source of minors. Solve it once, properly. 3. Mock unannounced audits expose more weaknesses than scheduled internal audits.
10. Conclusion
The BRCGS Global Standard for Food Safety Issue 9 is more than a certification — it is an operating model for technically excellent food manufacturing. Achieving and sustaining certification requires senior management commitment, robust HACCP, a measurable food safety culture, and disciplined verification.
The path is well-trodden, but it is not easy. Sites that invest 6–12 months in proper preparation, internal capability building, and cultural change consistently outperform those that treat the audit as a documentation exercise. The reward is access to the world's most demanding retail and foodservice supply chains, lower operational risk, and a brand that buyers trust.
Key Takeaway BRCGS Issue 9 = Eight Fundamentals + Measurable Food Safety Culture + Risk-Based Environmental Monitoring + Validated HACCP — sustained 365 days a year.
Ready to start your BRCGS journey? Explore ISO Xpert's BRCGS training and consulting services at iso-xpert.com and book a complimentary readiness call with a senior consultant today.
11. Frequently Asked Questions
Q1: How long does BRCGS certification take from a standing start? Typically 6–12 months for a site with no existing GFSI scheme, and 3–6 months for a site upgrading from another GFSI standard.
Q2: What is the difference between announced and unannounced audits? Announced audits are scheduled in advance. Unannounced audits occur within a 4-month window without prior notice and earn a "+" suffix on the grade (e.g., AA+).
Q3: How much does BRCGS certification cost? Audit fees typically range from £4,000 to £8,000 depending on site size, plus consulting, training, and remediation costs (often £15,000–£40,000 for first-time certification).
Q4: Is BRCGS recognised in the United States? Yes. BRCGS is GFSI-benchmarked and accepted by US retailers, foodservice operators, and increasingly by FDA inspectors as evidence of preventive controls.
Q5: Can a contract manufacturer be certified? Yes. Co-manufacturers are explicitly within scope, and certification is often required by their brand-owner customers.
Q6: What happens if I fail the audit? A "non-certification" decision means you must re-apply and undergo a new audit. There is no remediation pathway for critical or fundamental majors.
Q7: How does Issue 9 differ from Issue 8? Issue 9 strengthens food safety culture, expands environmental monitoring, refines high-risk/high-care zone definitions, and updates requirements for product authenticity.
Q8: (Advanced) Can I integrate BRCGS with ISO 22000? Yes — many sites maintain both. Use ISO 22000 as the management-system backbone and overlay BRCGS-specific requirements (culture KPIs, EMP, zones).
Q9: (Advanced) How do I justify CCP validation to an auditor? Use a hierarchy: published peer-reviewed studies > regulatory guidance > in-house challenge studies > expert opinion. Document your rationale in the HACCP file.
Q10: Are remote audits permitted? Limited remote audit modules (BRCGS Remote) exist for specific scenarios (e.g., crisis), but full certification audits remain on-site.
12. Glossary
- BRCGS: Brand Reputation Compliance Global Standards — the publisher of the standard.
- CAPA: Corrective and Preventive Action.
- CCP: Critical Control Point — a step where control prevents or eliminates a food safety hazard.
- EMP: Environmental Monitoring Programme.
- Fundamental: A clause whose major non-conformance triggers automatic non-certification.
- GFSI: Global Food Safety Initiative — the body that benchmarks certification schemes.
- HACCP: Hazard Analysis and Critical Control Points.
- High-Risk Zone: Production area for ready-to-eat foods supporting pathogen growth.
- High-Care Zone: Lower-risk RTE area with hygiene controls below high-risk.
- PRP: Prerequisite Programme (e.g., cleaning, pest control).
- TACCP: Threat Assessment Critical Control Point — protection against intentional adulteration.
- Unannounced Audit: Audit performed without prior notice within a defined window.
- VACCP: Vulnerability Assessment Critical Control Point — protection against food fraud.
- Validation: Proving controls are scientifically capable of preventing hazards.
- Verification: Confirming controls are operating as designed.
13. References & Further Reading
External: 1. BRCGS (2022). Global Standard Food Safety Issue 9. London: BRCGS. 2. GFSI (2023). Benchmarking Requirements v2024. The Consumer Goods Forum. 3. Codex Alimentarius (2020). General Principles of Food Hygiene CAC/RCP 1-1969 Rev. 5. 4. FSA UK (latest). Food Safety Culture Toolkit. 5. ISO 22000:2018 — Food safety management systems — Requirements.
ISO Xpert Internal Resources: - BRCGS Issue 9 Lead Auditor Training - Food Safety Culture Workshop - HACCP Level 3 Course
14. Author Bio
Written by ISO Xpert Consultants — a multidisciplinary team of certified Lead Auditors, food technologists, and ex-retailer technical managers with over 200 combined years of experience supporting food manufacturers across 40+ countries to achieve and sustain GFSI-recognised certifications.
15. Related Articles
- SQF (Safe Quality Food) Certification — A Complete Certification Guide
- FSSC 22000 — A Practical Implementation Guide
- IFS Food Standard — Achieving Higher Level Certification
- HACCP Principles and Application — A Practitioner's Handbook
- Food Safety Culture — Measuring What Matters
Ready to take the next step?
Browse 221 toolkits and services, or talk to a lead auditor about certification, gap analysis, internal audit or training.
Share This Article
Found this useful? Share it with your network:
