Guide
BRCGS Food Safety Issue 9: A Practical Path to AA
BRCGS Global Standard for Food Safety Issue 9 (effective 1 February 2023, with Issue 10 in development for 2026) is the GFSI-recognised certification scheme most international food retailers require from their suppliers. It is widely seen as the toughest of the GFSI schemes — eleven Fundamental clauses where a single major nonconformity blocks certification, a structured grading from AA down to D, and unannounced-audit options that retailers increasingly favour. This guide walks through the structure, the Fundamentals, the Issue 9 emphasis on food safety culture and product authenticity, and a practical path to a clean audit with a grade that retailers actually want to see. It is written for QA managers, technical managers, food safety leads, and operations directors at food manufacturers selling into UK and global retail.
Start free trial Free trial, no credit card, onboard in days, not months.
The eleven Fundamental clauses
BRCGS identifies eleven Fundamental clauses where a single major nonconformity blocks certification regardless of how the rest of the audit went: Senior Management Commitment (1.1), Food Safety Plan – HACCP (2), Internal Audit (3.4), Management of Suppliers of Raw Materials and Packaging (3.5.1), Corrective and Preventive Action (3.7), Traceability (3.9), Layout Product Flow and Segregation (4.3), Housekeeping and Hygiene (4.11), Management of Allergens (5.3), Control of Operations (6.1), Labelling and Pack Control (6.2), and Training (7.1). Issue 9 explicitly elevated Senior Management Commitment as the leading Fundamental — the first 30 minutes of the audit go here, and the rest of the audit is calibrated by what the auditor learns about culture and resourcing in that opening conversation.
Food safety culture: from poster to evidence
Issue 9 made food safety culture a Fundamental-adjacent expectation throughout the standard — clause 1.1.2 requires the site to have a plan with defined activities to maintain and develop a positive food safety and quality culture, with documented review of effectiveness. Auditors test this through floor interviews: line operators are asked open questions about what 'good' looks like and what they would do if they saw a problem. A culture programme that exists only as a poster and a quarterly email collapses under that questioning. Issue 9 makes it explicit that the plan must include the four GFSI-recognised dimensions — vision and mission, people, consistency, and adaptability.
Product authenticity, claims and chain of custody
Section 5.4 (product authenticity, claims and chain of custody) is the area Issue 9 tightened most aggressively. The vulnerability assessment for raw materials must be reviewed at minimum annually or when risk changes, must consider historical evidence of substitution or adulteration, economic factors, ease of access, sophistication of routine testing, and the nature of the raw material. Where a product makes a claim (organic, kosher, halal, gluten-free, breed/varietal, geographic origin, GMO-related, animal welfare) the site must maintain documented purchasing specifications, supplier guarantees, and traceability through the process — and have a documented test programme to verify the claim. Auditors increasingly select a claim and test the full chain end-to-end.
Unannounced audit options and grading
Issue 9 retains the three programme options: Announced (Option 1), Unannounced (Option 2 — fully unannounced for the full scope), and Unannounced Blended (Option 3 — Part 1 unannounced operational, Part 2 announced documentation). Retailers increasingly favour Option 2 and Option 3 because they reflect real operational state. Grading runs AA, A, B, C, D, where the number of minor nonconformities, plus the presence of any major or critical, determines the grade. AA in Option 2 (or Option 3) is the grade that retailer technical teams actually screen for in 2026, and the gap between AA and A is often a single Fundamental-adjacent minor.
HACCP, prerequisites and the 'is it really HACCP' test
Section 2 (the food safety plan, HACCP) is the densest Fundamental and the one most often failed by sites with mature-looking but stale plans. Issue 9 expects the HACCP team to be multi-disciplinary, the prerequisite programmes (PRPs) to be formally documented and verified, the hazard analysis to consider biological, chemical (including allergens and radiological), physical hazards plus reasonably foreseeable issues including food fraud and food defence, and the validation of CCPs and oPRPs to be revisited when the process or context changes. Auditors test the plan by asking 'when did you last revalidate this CCP and on what evidence' — the answer is the audit.
A 90-day readiness path
Days 1 to 15: gap assessment against Issue 9 with priority on the eleven Fundamentals; identify any Fundamental at risk of major NC; assess food safety culture evidence depth. Days 16 to 45: close the highest-risk Fundamentals first — typically Allergens (5.3), Traceability (3.9), and Senior Management Commitment (1.1); refresh the HACCP plan with current hazards. Days 46 to 70: vulnerability assessment refresh across all raw materials; claim-chain verification for every retailer-specified claim; internal audit covering all Fundamentals. Days 71 to 90: management review with the internal audit and culture evidence; mock audit in Option 2 / Option 3 mode; pre-audit logistics.
Where this lives in V5 Ultimate
The clauses above aren't theoretical — every one maps to a shipped module and an industry profile. Jump to the parts of the product that turn this guide into evidence on a Monday morning.
Modules that do the work
Food safety QMS
Issue 9 Fundamentals mapped into a single QMS spine.
Audits & CAPA
Internal audit aligned to all eleven Fundamentals.
Document control
HACCP plan, PRPs and vulnerability assessments as live records.
Supplier control
Raw-material approval and claim-chain verification end to end.
Compliance self-assessment
Score readiness against Issue 9 with Fundamentals weighted.
Industries this hits hardest
Frequently asked
Is BRCGS Food Safety mandatory?
It is not a regulatory requirement, but it is a contractual requirement from most UK retailers and many global retailers and brand owners. For suppliers selling into Tesco, Sainsbury's, Marks & Spencer, Morrisons, Asda, Waitrose, and many private-label customers globally, BRCGS or a GFSI-equivalent certificate is a market-access prerequisite, not optional.
When does Issue 10 come into force?
BRCGS publishes new issues approximately every three to four years. Issue 9 became audit-effective on 1 February 2023; Issue 10 is in development with consultation ongoing — when published, expect a 6-9 month transition window before audits switch. Manufacturers should track the BRCGS site for the published audit-effective date.
How long does BRCGS certification last?
A BRCGS certificate is valid for 12 months. The site must be re-audited annually before the certificate expiry date — surveillance audits are not part of the BRCGS model the way they are in some ISO schemes. A late audit means a lapse in certification and loss of market access until re-audit completes.
What's the difference between BRCGS, SQF, FSSC 22000 and IFS?
All four are GFSI-recognised schemes. BRCGS is the UK-origin retail-driven standard with Fundamentals and grading. SQF (Safe Quality Food, US origin) emphasises a levels-based progression. FSSC 22000 is the ISO 22000-based scheme used heavily in food ingredient supply chains. IFS (International Featured Standards) is the Franco-German retail-driven standard. Customers typically dictate which scheme is acceptable; many manufacturers hold multiple certificates for different customer requirements.
See it on your shop floor.
Free trial, no credit card, onboard in days, not months.