HACCP training in food production: passing the audit

The audit starts with three names from the floor

Halfway through the morning of a BRCGS or IFS audit, the auditor sits in the office with a list of names taken from the production floor. Not a sample of your permanent operators: the people they saw. The agency worker on the packing line, the contractor on the mixing-room roof, the seasonal worker who started on Monday. The question is always a version of the same one: show me they were trained, show me when, and show me it worked.

Read the training non-conformities written on food production sites and a pattern shows. Almost none say the content was wrong. The hygiene rules were correct, the CCP work instruction matched the HACCP plan, the allergen procedure was written by someone who knew what they were doing. What failed was the delivery around that content: when the training happened, in which language, what got recorded and how often it was repeated. Those are scheduling, translation, record design and arithmetic, and all four are fixable without a new course.

Clause numbers in this guide are as of September 2026: BRCGS Food Safety Issue 9 and IFS Food version 8.

Gate one: the induction dated after the first shift

BRCGS clause 7.1.1 is blunt: "All personnel, including agency-supplied staff, temporary staff and contractors shall be appropriately trained prior to commencing work and adequately supervised throughout their working period." IFS clause 3.3.2 sets the same bar for seasonal and temporary workers and employees of external companies: trained upon employment and before commencing work.

Prior to commencing work is a date comparison, not a judgement. If the record says Wednesday and the first shift was Monday, the auditor does not need an opinion, which is why arguing this one never works.

The cause is structural. A site takes on twenty seasonal workers for a Monday 06:00 start. The agency confirmed names on Friday afternoon, two did not turn up and were replaced by people nobody has named yet. The trainer starts at eight and the room is free on Wednesday. Everyone behaves reasonably and the record says Wednesday.

The fix is to stop treating instruction as an event that needs a trainer and a room. Split the content: a short block before the start and a fuller one in week one.

Two things make that block hold. It has to work without the trainer, delivered by a shift leader or on the worker's own phone at the gate, because the trainer's calendar is the real bottleneck. And completion has to decide access rather than sit next to it: when the list the gate works from is the completion list, the drift disappears. Send the block to the agency the week before and people arrive already done, replacements included.

Gate two: one translated deck is not four languages

IFS clause 3.3.1 lists languages as a required element of a documented training programme, next to content, frequency, the employee's task, a qualified trainer and the evaluation of effectiveness. It is a design parameter, not a footnote. If your line crew reads Polish, Romanian and Portuguese and your work instructions exist only in Dutch, the programme does not meet 3.3.1, however good the content.

The usual answer is a deck translated once plus a bilingual colleague who helps during the session. Both halves fail. A deck translated once is frozen at the version it came from, so the moment the allergen procedure changes you hold one current document and three historic ones. And the helpful colleague is not the qualified trainer 3.3.1 asks for, which shows the moment an auditor asks a Romanian operator, through their own interpreter, what they do when the metal detector rejects a pack.

Treat language as an attribute of the person, not of the document: everyone gets the current version in the language they read, produced from one master so versions cannot drift apart. Then check understanding in that same language. Regulation 852/2004 points the same way: it requires instruction in line with a person's work, and instruction someone cannot follow is hard to defend as in line with anything.

Gate three: attendance is not effectiveness

IFS clause 3.3.3 defines the record: a participant list with signatures, the date, duration, content and the trainer's name, plus a documented procedure that demonstrates effectiveness. Two separate requirements in one clause. BRCGS 7.1.2 goes further for anyone working on critical control points and control measures: a documented competency assessment. An attendance sheet is evidence of attendance, not of training.

The evidence has to be tiered, because the standards tier it. For general food handlers, a short check tied to the content and taken close to the session is proportionate: a few questions the person answers, recorded per person. For CCP operators, 7.1.2 asks for more than a check on the content. How you assess is your choice, and observing the real task is the most defensible option: the operator performs the check, reads the instrument, reacts to a deviation and records it, assessed by a named colleague and dated. Whatever method you pick, write it down as your method and keep the outcome with the training record.

Pick one operator on your most critical CCP. If all you hold is a signature on a list, you have an attendance record and a gap.

Gate four: the interval you set and quietly stopped meeting

Neither BRCGS nor IFS prescribes a refresher interval. No clause says training must be repeated every year, whatever a vendor has told you. IFS 3.3.1 requires your programme to state a frequency, and you are then audited against the frequency you wrote down.

That is the trap. Someone once wrote "annual refresher for all staff" because it sounded defensible. With four hundred people across three shifts, agency crews cycling through and a summer peak, by month fourteen the site is eighty people behind its own rule. The auditor needs no external standard for that: your own document is the standard. A realistic cycle you keep beats an annual one you cannot.

Set intervals by risk instead of one number for everyone, and let changes trigger refreshers. IFS 3.3.4 already expects training content to be reviewed and updated for food safety, product authenticity and food fraud, quality, food defence, legal requirements, product and process changes, and feedback from earlier training.

Then count monthly. An interval you check in audit week is one you have already missed.

Allergens touch everyone

BRCGS clause 7.1.4 requires allergen awareness training and training in the site's allergen procedures for all staff, and names technicians, agency staff and contractors explicitly. Allergen training is not a standalone legal obligation in Belgian or Dutch law; it becomes mandatory through three routes: the duty for allergen information to be correct, the training duty in 852/2004 and, for a certified site, 7.1.4. Regulation 1169/2011, Annex II, lists the 14 allergens this is about.

That framing is more useful for a training plan than a wrong legal claim, because it tells you who needs it: anyone who can contaminate, mislabel or misinform, which is nearly everyone on site. A new ingredient, supplier or changeover rule has to reach every shift that handles the product, with a trace of who received it.

The law under the certificate

The standards are contractual. Underneath them, Regulation (EC) 852/2004, Annex II, Chapter XII, requires food handlers to be supervised and instructed or trained in food hygiene in line with their work, and the people who develop and maintain the HACCP procedure to be trained in applying the HACCP principles. Read the second part carefully: HACCP-principles training is for the people who build and keep the procedure, not for every operator on the line. No course, certificate, duration or interval is named. It is an obligation of result, tied to what the person actually does.

Chapter XIa on food safety culture, inserted by Regulation (EU) 2021/382, makes the four gates management's problem rather than the quality department's: management commitment includes ensuring appropriate training and supervision, awareness among all staff of the hazards and the importance of hygiene, and open communication between everyone in the business.

A worked example shows why the result matters more than the plan. A Dutch production kitchen changes the chill-down step for a soup and updates the plan the same afternoon. The evening shift, half of it agency staff, cooks to the old step because nobody instructed them. The plan is compliant. The operation is not.

How Aristotl handles it

Three of the four gates are delivery problems, and delivery is where Aristotl sits. It takes the documents your site already maintains, the hygiene rules, the allergen procedure, the CCP work instructions and the induction checklist, and turns them into courses of 3-5 minutes done on the worker's own phone. No laptop needed, which is what makes a pre-start block at the gate realistic. Nothing reaches the floor until your quality team reviews and publishes it.

Each course carries a knowledge check, so what you hold per person is a result rather than a signature. Content is translated per worker from one master version, the practical answer to 3.3.1 and to the four-language line. Temps and contractors join through a link or QR code per site or team, without a company email. Completion is viewable per site and version in the platform, so counting against your own interval is a monthly look, and when the auditor names three people you look up those three.

What it does not replace: the competency assessment BRCGS 7.1.2 asks for stays an exercise on the line, and your quality and operations teams remain responsible for the procedure, practical supervision and the criteria for competence.

Take your next intake as the test. Pick the group starting next Monday and one procedure, ideally the allergen one, and check whether you could hand an auditor a record dated before the first shift for those exact names.