An audit is rarely lost on the day the auditor arrives — it's won or lost in the weeks before, in the state of your records. When a food-safety auditor sits down to review training, they aren't testing whether your people are good at their jobs. They're testing whether you can provethat everyone doing a food-safety-critical task was trained to do it, that the training is still current, and that the record hasn't been tidied up after the fact. This guide walks through what SQF, BRCGS and GMP auditors actually ask for, and how to have audit-ready training records waiting before they walk in.
- An audit-ready record answers four questions per required course: who, when completed, when next due, and what evidence.
- Most training findings are boring: a lapsed refresher, a completion with no sign-in sheet, or a new hire with no record yet.
- Auditors trust records more when they're backed by an append-only audit trail — because dates can't be quietly changed.
- Preparation is mostly gap-removal: run the matrix, close what's overdue, attach the missing evidence, and check nothing is a surprise.
What an auditor is really checking
Certification schemes phrase it differently, but the underlying question is the same across SQF, BRCGS, GMP and a HACCP program: can you demonstrate that the right people received the right training, and that you have a system to keep it current? In practice an auditor works from your training matrix outward, picking a few employees or a few required courses and drilling into the underlying record. For each one they expect to find:
- Who was trained— a specific, named employee tied to a specific course or competency, not a vague “the team was briefed.”
- When it was completed— a real completion date, not just an “assigned” date or a plan.
- When it's next due— for anything that recurs or expires, the next due or expiry date, so it's obvious the record is current and not silently lapsed.
- The evidence — a signed sign-in sheet, a certificate, or a competency assessment that shows the training genuinely happened.
- A trustworthy history— assurance that the completion date wasn't back-dated or edited the week before the audit.
The specific clauses and required frequencies depend on the current version of your standard, so always check the exact edition you're certified against — but that five-part expectation is stable, and it's the yardstick to hold your records up to.
Weak record vs. audit-ready record
The gap between a record that raises a finding and one that closes the topic in thirty seconds is usually small. It's the difference between a bare completion date and a complete, evidenced, defensible entry.
| Capability | A weak record shows | An audit-ready record shows |
|---|---|---|
| A course name and a date in a cell | Named employee, course, completion date, and next-due date | |
| No sign of whether it's still current | Recurrence or certificate expiry so lapses are visible | |
| “We trained everyone”, no names | Each attendee individually marked complete | |
| No evidence the session happened | A signed sign-in sheet or certificate attached | |
| A date anyone could have overwritten | An append-only audit trail of who recorded what, when | |
| Nothing for a new hire trained last week | The completion logged the day it happened |
The common findings — and why they happen
Training findings are rarely dramatic. They cluster around a handful of predictable gaps, and every one of them is preventable with a bit of prep:
- The lapsed refresher.A course renewed annually, last done thirteen months ago. On a spreadsheet it sits looking “done” because nobody recalculated the due date. This is the single most common training finding.
- The undocumented completion. The training happened — but the attendance recordor sign-in sheet can't be found, so from the auditor's seat it may as well not have.
- The uncovered new hire.Someone started three weeks ago, is already on the line, and their induction training isn't recorded yet.
- The role-change gap.An operator moved to a food-safety-critical task but the training matrix wasn't updated, so a required course was never assigned.
An audit-prep checklist
Give yourself a week or two of runway and work through this in order. Each step removes a class of surprise:
- 1Confirm the requirements are currentCheck that your list of required courses matches the current version of your standard (SQF, BRCGS or GMP), plus any customer-specific or regulatory requirements. Requirements and frequencies change between editions.
- 2Run the full matrix and read the overdue columnPull up every employee against every required course. Anything overdue or expiring soon is a finding waiting to happen — schedule and complete it now, while you still have time.
- 3Cover every current employee and roleCross-check the roster against the matrix. New hires, transfers, and anyone who changed roles must have their required training assigned and recorded. Include temporary and contract staff if your standard requires it.
- 4Attach the missing evidenceFor each completion, make sure a signed sign-in sheet, certificate, or competency assessment is attached to the record — not sitting in a binder in another building.
- 5Verify the record can be trustedBe able to show how completion dates are captured and that they can't be quietly edited after the fact. An append-only history is what turns “we say so” into evidence.
- 6Do a dry run on a few recordsPick three or four employees the way an auditor would and trace each required course end-to-end: completion date, next due, signed evidence. If any step stalls, fix it before the real audit.
Why the audit trail matters as much as the record
A completion date is only as credible as your ability to show it wasn't changed. If any record could be overwritten with no trace, an auditor is right to be skeptical — a green cell proves nothing on its own. That's why an append-only audit trailis the quiet backbone of audit-ready records: it captures who recorded each completion and when, and it can't be edited after the fact. When the history is tamper-evident, the completion date stops being a claim and becomes evidence.
The same trustworthiness applies when something goes wrong. If a lapse or a nonconformance is raised, a clean history lets you show exactly when the gap appeared, when it was corrected, and who acted — which is often the difference between a minor observation and a major finding.
What to have ready on the day
When the auditor asks for training, you want to be able to produce three things in minutes, not hours:
- The live matrix — every employee against every required course, with nothing overdue in red.
- Individual transcripts — for any employee they name, a clean printout of their completed training, dates, and next-due dates.
- The evidence behind any record — the signed sign-in sheet or certificate, attached to the completion and retrievable on the spot.
None of this requires heroics the night before. If you keep a live training matrix, close overdue items as they surface, and attach evidence as training happens, then “audit prep” is mostly confirmation rather than reconstruction. For the requirement-specific detail behind all of this, work through the SQF training requirements and your HACCP training recordsalongside the matrix you've already built— and remember that the exact clauses depend on the current version of the standard you're certified against.