ASC Farm Group Certification Requirements for Internal Control Systems

Understanding Group Certification and Central IMS Rationale

Meeting ASC Farm Group Certification Requirements enables organised small-scale producers to achieve collective certification under a single legal entity known as the Group Management Body. The Aquaculture Stewardship Council established this group framework to reduce audit costs while maintaining strict environmental and social compliance across multiple farm sites through a centralized Internal Management System. Under Criterion 1.2 of the ASC Farm Standard, every certified operation must maintain a structured management system appropriate to its scale, but group certification elevates this requirement by holding the central body legally responsible for all member operations.

Under Table 2 of the Certification and Accreditation Requirements and Annex C of the Certification Requirements for Unit of Certification, group certification is divided into Option 1 and Option 2. Option 2 specifically targets small-scale producers who operate individual or multiple small sites within the same or neighbouring jurisdictions sharing common regulations. The Group Management Body functions as the legal entity registered with government authorities, serving as the sole contracting party for the Conformity Assessment Body, the accreditation body Assurance Services International, and the scheme owner.

The rationale behind the group Internal Management System, often termed an internal control system, is to establish shared accountability. Individual farmers sign a legally binding agreement with the central body, agreeing to conform to all standard indicators, accept unannounced internal inspections, and report operational changes. In return, the central management body oversees internal compliance, coordinates technical training, manages product sales, and ensures that non-compliant sites are remediated or removed before external third-party audits take place.

Core Components of a Compliant Internal Management System

To comply with Annex C2.2 of the Certification Requirements for Unit of Certification, the Group Management Body must document, implement, and maintain an Internal Management System that governs ten mandatory operational areas. The central body cannot subcontract its core management functions to external consultancy firms. Management must allocate adequate financial, technical, and human resources, including designating an official certification coordinator and establishing an impartial decision-making committee to handle member compliance and sanctions.

Designing and operating an auditor-ready internal control system requires the central management team to execute five sequential operational steps:

• Maintain an up-to-date Group Sites Register under Annex C1 detailing physical addresses, geographical coordinates, production system types, license numbers, culture areas, and worker numbers for every member site.
• Draft and execute a standardized, legally binding agreement with every group member in a language understood by the farmer, explicitly covering compliance duties, site access rights, non-conformity reporting, and sanction enforcement.
• Formulate an annual internal audit and inspection plan, ensuring that qualified internal inspectors evaluate every member site on-site at least once per year while the farm is in production, including inspecting harvesting activities at least once per certification cycle.
• Establish product traceability protocols under Annex C2.2.3.3 to segregate certified stock from conventional harvests, ensuring that all sales of certified product are commercialized strictly through the central body.
• Conduct an annual management review under Annex C2.2.3.6 to evaluate internal audit findings, complaints, sanction effectiveness, and systemic operational risks across all participating sites.

Audit Assessment Matrix and Evidence Verification

Internal auditors, quality managers, and compliance leads must evaluate both central office documentation and farm-level implementation. The matrix below outlines what third-party auditors verify during external assessments and the specific evidence group managers must maintain ready for review.

Example

During a surveillance audit of a warmwater prawn producer group operating forty small-scale sites, the Conformity Assessment Body auditor reviews the central Internal Management System. Internal inspection logs show that all forty sites received annual internal inspections. However, review of the unannounced inspection log reveals that internal inspectors conducted only three unannounced visits during the preceding twelve months.

Under Annex C2.2.3.2.vi, the central body must conduct at least twenty percent of its annual internal site inspections unannounced, requiring a minimum of eight unannounced visits for a forty-site group. Furthermore, the auditor discovers that one site recorded a major non-conformity regarding pesticide storage during its internal inspection, but central management failed to block the harvest from entering the certified supply chain.

Because the failure to enforce unannounced inspection quotas and execute mandatory product sanctions reflects a breakdown in central oversight, the auditor raises a Group Major Non-Conformity against the Group Management Body under Table 2.2 of the CAR, alongside a site-level non-conformity. The central body must submit a corrective action plan within twenty-eight days and demonstrate full implementation within three months to prevent certificate suspension.

CAB Auditing Rules and Site Sampling Methodologies

Conformity Assessment Bodies evaluate group certification through a dual auditing methodology established in Part B of the CAR. Auditors assess the central Internal Management System against Annex C requirements and audit a calculated sample of member farm sites against the ASC Farm Standard. Under CAR Section 3.24, the external audit of the central management system requires a mandatory minimum duration of 1.5 auditor days.

External site sample sizes are determined using the official ASC Audit Planning Tool. Under CAR Section 3.17 and 3.18, the audit team must select fifty percent of the site sample completely at random, while the remaining fifty percent is selected based on risk factors such as production volume, previous non-conformity history, and geographic complexity. Additionally, CAR Section 3.19 dictates that twenty percent of the external site sample must be audited unannounced with no more than two working days notice.

Under CAR Section 9.7, remote auditing is strictly prohibited for both the Group Management Body management system audit and the selected group sample sites. Furthermore, CAR Section 3.37 mandates that external auditors witness harvesting activities at minimum one selected group site during every routine audit. If member sites source juveniles from pre-grow out suppliers, compliance leads must verify supply chain documentation under Criterion 1.5 and document Appendix 14 conformance for pre-grow out sites to ensure complete seedstock compliance.

When an external auditor detects a non-conformity at a sample site, CAR Section 4.31 requires the auditor to determine whether the finding represents an isolated site failure or a systemic weakness indicating failure of the internal control system. If the non-conformity is systemic, the auditor raises a Group Non-Conformity against the Group Management Body in addition to individual site findings. Under Table 2.2 of the CAR, Group Non-Conformities are graded as Group Minor, Group Major, or Group Critical. A Group Critical Non-Conformity results in immediate suspension of the certificate across all member sites under CAR Section 13.10.

Before your audit

• Verify that the Group Management Body is a legally registered entity with an appointed certification coordinator and an impartial compliance committee.
• Confirm that every group member has signed a legally binding written agreement covering compliance commitments, site access, and sanction enforcement.
• Ensure the Group Sites Register is updated with accurate GPS coordinates, legal permits, and production details for every site.
• Check that annual internal inspections have been completed for one hundred percent of member sites while in production prior to the external audit.
• Verify that at least twenty percent of annual internal site inspections were conducted as unannounced visits with documented arrival logs.
• Review internal non-conformity files to confirm that all raised findings have closed corrective action plans and that product from non-compliant sites was blocked from certified sales.
• Inspect product sales records to confirm that all certified transactions were processed through the Group Management Body and supported by complete transport delivery notes.
• Review minutes and action logs from the annual management review meeting to verify that central management evaluated group performance and resolved systemic issues.

Questions people ask

How many new sites can a Group Management Body add to an ASC group certificate each year?

Within twelve months of certification or a surveillance audit, the Group Management Body may add up to five new sites or a maximum of ten percent of existing group sites, whichever is smaller, without an ad-hoc external audit under Annex C2.2.3.1.iii. Adding sites above this limit requires an ad-hoc on-site audit by the Conformity Assessment Body.

Can individual farmers in an ASC group sell certified seafood directly to buyers?

No, under Annex C7.2 and C7.3, all sales of ASC-certified product must go through the Group Management Body. Group members may sell product directly to third-party buyers, but those direct sales must be sold strictly as non-certified product and reported monthly to the central body.

What happens if an ASC group detects a major non-conformity during an internal inspection?

When a major non-conformity is detected at a member site, Annex C2.2.3.4.ii.c requires the Group Management Body to apply sanctions immediately. Product harvested from the affected site between the detection date and the closeout date must be considered non-certified and blocked from entering the certified supply chain.

Is remote auditing permitted for ASC group certification audits?

No, under Section 9.7 of the Certification and Accreditation Requirements, Conformity Assessment Bodies are explicitly prohibited from conducting remote audits of the Group Management Body Internal Management System or any group sample sites selected for audit.

Reference documents

• ASC Farm Standard, Version V1.0.1A2 (August 2026)
• ASC Farm Standard Interpretation Manual, Version V1.0.1 (September 2025)
• ASC Farm and Feed Certification and Accreditation Requirements (CAR), Version V1.0 (May 2025)
• ASC Certification Requirements for Unit of Certification (RUoC), Version V1.0.1 (July 2023)