SQF Edition 10: what auditors will trace through your plant

SQF Edition 10 asks you to prove that your food safety controls connect, rest on risk and work. Expect auditors to trace one product through your records, and expect new emphasis on a documented food safety culture plan, formal change management, risk-based environmental monitoring, and corrective actions that close with an effectiveness check. SQFI says Edition 9 remains the official Code while GFSI benchmarking is pending, and Cameron Prince recommends finishing your preparation about 90 days before your first Edition 10 audit.

Picture an auditor who picks one product, one code, one line and one day. Then they ask for the receiving records, the sanitation records for that area, the swab results, the training file for the person who ran the line, and every corrective action that touched it.

Cameron Prince of The Acheson Group told FSMA Friday attendees to expect that vertical audit approach under SQF Edition 10. It explains most of what is changing: you have to show that your food safety controls connect to each other, rest on risk and work.

Want the full walkthrough? Watch the FSMA Friday replay.

Auditors will look for links across your hazard analysis, environmental monitoring, sanitation, training, corrective actions, change management and supplier controls, plus evidence of effectiveness such as KPIs. SQFI describes the same aim: evidence that food safety is part of daily work.

Posters, daily huddles and a cafeteria video are good things, but they run ad hoc. Edition 10 asks for a documented food safety culture assessment plan, which DNV’s summary of the changes says should cover communication, training, employee engagement, measurement and continuous improvement.

Expect the question “show me your plan, and show me how you know it’s working,” and expect auditors to talk to people on the floor. The FSMA Friday’s example of a bad answer is a blank stare from an operator asked what food safety culture means in this plant. Your plan needs an objective, the activities you’ll run, the measures you’ll track and a quarterly leadership review of the trend.

The FSMA Friday called change management the biggest shift from Edition 9, which in his words never required you to document it formally. A new formulation, line, ingredient, critical control point or staffing change now needs to be assessed and recorded, and so do temporary and emergency changes.

The recommended sequence: document what is changing, have the HACCP team assess the food safety impact, approve and validate through a cross-functional team, then verify the change worked. Wire it to the events that trigger it so nobody has to remember another form.

Ready to see where you stand? Download the Edition 10 pre-audit checklist.

SQFI says Edition 10 requires a site-specific hazard analysis for pathogen monitoring, and DNV reports that environmental monitoring is now a core clause: revisit your hazard analysis, map the facility, risk rank every swab location, then build the program from that ranking, including who swabs, how often and how you rotate sites. Document what you do when you lose control.

His example: a drain beside a ready-to-eat line gets swabbed more often than forklift wheels, and forklift wheels more often than a dry warehouse wall. A positive result means the program is working, because it shows where a problem comes from before it reaches product.

Auditors will want root cause analysis, documented corrective and preventive actions, and a check on whether the fix worked. The last step gets missed. Management review needs documented decisions with owners and deadlines. When attendees were polled, answers split fairly evenly across the options, from meetings that close with assigned actions to meetings that record discussion without decisions.

The most common gap seen in plants that think they’re ready is recordkeeping: records that are missing, incomplete or filled in ten days after the fact. Edition 10 rests on documentation, so that habit gets expensive.

SQFI says Edition 9 remains the official Code and that Edition 10 audits could begin as early as January 2027, pending the final GFSI benchmarking review. Expect approval by December and said there is no phase-in: a February 2027 audit will be to Edition 10, and a December 2026 audit to Edition 9.

It is recommended to have everything in place about 90 days before your first Edition 10 audit, with records to prove it. In the first poll, most attendees said they know they need a gap assessment and haven’t started. In the last, 64% said an auditor following one product through their system would find it holds up. That number is self-reported by people who came to prepare, so treat it as encouraging and keep checking.

Prince answers audit-date questions live in the Q&A. Watch the FSMA Friday replay to hear them.

Run a high-level gap assessment on culture, change management, environmental monitoring, corrective actions and management review. Then pick one product and run the vertical audit yourself before an auditor does, so you find where the story breaks ahead of time. Brief senior leadership too, so nobody expects the plant to flip a switch in January.

Download the Edition 10 pre-audit checklist to turn that gap assessment into a working list.