On this page
- Mandatory Quotas and Scope of Unannounced Audits
- Scheduling, Logistics, and Notification Constraints
- Risk-Based Site Selection and Expedited Audits
- Client Obligations, Access Rules, and Refusal Sanctions
- Example
- Before your audit
- Questions people ask
- How much advance notice does a farm receive for an ASC unannounced audit?
- What happens if a farm refuses to allow an unannounced audit team on site?
- How do certifiers select which farm sites receive unannounced audits each year?
- Are Group Certification sites subject to unannounced audits?
- Reference documents
The short version
- Conformity Assessment Bodies must conduct annual unannounced audits on at least ten percent of certified farm sites.
- Clients receive a maximum of two working days notice prior to an unannounced audit start date.
- Unannounced site selection relies on a documented risk-based framework evaluating previous non-conformities, production volume, and operational relationship.
- Refusing an unannounced audit without acceptable justification results in immediate certificate suspension until an on-site audit is completed.
Mandatory Quotas and Scope of Unannounced Audits
Third-party certification under the Aquaculture Stewardship Council framework relies on unannounced site assessments to verify daily compliance and eliminate pre-audit manipulation. Unannounced audits provide objective verification that operational practices, social conditions, and environmental management systems conform strictly to ASC requirements outside scheduled surveillance windows. Scheme owner requirements ensure that certified operations maintain continuous audit readiness throughout the three-year certification cycle.
Section 10 of the Certification and Accreditation Requirements mandates that accredited Conformity Assessment Bodies conduct annual unannounced audits on at least ten percent of their ASC certified farm sites, rounded down to the nearest whole number. For single site and multi-site farm certifications, this quota applies across the certifier's total certified site portfolio. An exemption applies under Section 10 of the CAR to certifiers that maintain ten or fewer certified sites within a specific certification programme, relieving them of the mandatory annual quota.
Under Section 3.19 of the CAR, certifiers conducting Group audits must ensure that at least twenty percent of the total site sample selection is performed as unannounced audits. Furthermore, Annex C of the Certification Requirements for Unit of Certification requires the Group Management Body to execute at least twenty percent of its annual internal site inspections on an unannounced basis. In addition to certifier activities, Assurance Services International and the Aquaculture Stewardship Council retain independent rights under Appendix 5 of the CAR to conduct unannounced integrity visits directly on certified farm sites.
Scheduling, Logistics, and Notification Constraints
Section 10 of the CAR and Section 20 of the RUoC restrict advance notification for an unannounced audit to a maximum of two working days, or forty-eight hours, prior to the start date. This tight timeframe ensures that farm sites cannot alter daily records or temporarily modify operational procedures ahead of the audit team's arrival. Under Section 3.42 of the CAR, unannounced audit announcements registered on the ASC database are not published publicly prior to the audit start date.
Section 10 of the CAR provides an explicit exception allowing up to five working days notification for remote sites requiring complex transport logistics. This extended notice applies strictly to operations that require pre-arranged transport, such as chartered boats, helicopters, or fixed-wing aircraft. Certifiers must document the logistical rationale whenever applying this five-day notification window.
Unannounced audits must occur when product is present on site, as mandated by Section 10 of the CAR. Certifiers must review historical production cycles, harvest logs, regulatory filings, and previous audit reports to ensure unannounced visits do not coincide with fallow periods. For Group certification, Group members must grant audit teams full physical access to farm sites within two hours of arrival, as mandated in Annex C of the RUoC.
Risk-Based Site Selection and Expedited Audits
Section 10 of the CAR obliges certifiers to establish a documented, risk-based methodology for selecting which certified sites undergo unannounced audits each year. Rather than relying solely on random sampling, certifiers must evaluate specific risk parameters across their certified client base. Certifiers may increase the total number of unannounced audits above the mandatory ten percent threshold if their risk assessment indicates heightened non-compliance risks across certified units.
Certifiers must evaluate four specific risk factors when categorising sites: the number and severity of non-conformity findings raised during the most recent audit, the length of time the site has been certified within the Unit of Certification, the site's annual production volume, and the operational relationship between the site and the client. Sites operating under sub-contracted or contract farming agreements are evaluated differently from directly owned sites. Certifiers must prioritise high-risk sites for unannounced visits, resorting to random selection only when no high-risk sites are identified.
Unannounced audits can also be triggered outside regular annual schedules in response to specific unforeseen events. Section 10 of the CAR permits certifiers to launch expedited unannounced audits following incident reports from Assurance Services International or verified stakeholder complaints. When an expedited audit is initiated, the certifier must register the announcement on the ASC database within twenty-four hours of making the decision and notify the client no more than two working days in advance.
Client Obligations, Access Rules, and Refusal Sanctions
Under Appendix 5 of the CAR, every client must sign a legally enforceable certification agreement acknowledging the certifier's right to conduct unannounced audits. Farm management must grant auditors unrestricted access to all operational areas, production units, processing lines, feed storage, chemical stores, living quarters, canteens, and sub-contractor facilities. Management representatives must also permit auditors to conduct confidential, private interviews with employees without supervisory personnel present.
If a client refuses an unannounced audit, the certifier must evaluate the justification provided. Under Section 10 of the CAR, acceptable justifications include the absence of responsible personnel due to medical emergencies or severe adverse weather conditions that threaten safety. When an acceptable justification is presented, the certifier must document the rationale and schedule a second unannounced audit attempt.
If a client refuses an unannounced audit without an acceptable justification, or refuses the second unannounced audit attempt, Section 10 of the CAR and Section 20 of the RUoC mandate immediate certificate suspension. To lift the suspension, the farm must undergo a full on-site routine audit at its own expense and close all identified major and critical non-conformities. If suspension causes are not resolved within six months, the certificate is formally withdrawn.
To ensure full readiness for an unannounced audit, quality managers must establish a four-step internal protocol:
- Maintain continuous audit-ready documentation across all operational, environmental, and social indicators.
- Establish a clear site entry protocol authorizing security personnel to verify certifier credentials and grant farm access within two hours.
- Designate secondary management representatives empowered to accompany auditors and facilitate site access if primary managers are off-site.
- Ensure all worker living quarters, canteens, chemical stores, and sub-contractor work areas remain accessible at all times.
Important: Group members must grant auditors site access within two hours of arrival during unannounced visits, as failure to grant access constitutes an audit refusal.
Common finding: Internal auditors frequently observe that sites maintain restricted access or locked gates for employee housing and chemical storage areas, resulting in major non-conformities during unannounced site tours.
Tip: Keep an up-to-date duty roster of designated site managers and backup representatives who are trained to facilitate unannounced audit opening meetings and worker interviews.
Note: Certifiers are not required to notify local stakeholders prior to conducting an unannounced audit, preserving complete operational confidentiality.
Example
During an unannounced surveillance visit to a marine salmon cage facility, an audit team arrives with forty-eight hours advance notice. The farm manager is attending an off-site conference, and the assistant manager initially refuses site entry, claiming that senior management must be present to authorise auditor access.
The lead auditor explains that under Appendix 5 of the CAR, farm sites must provide unrestricted access upon presentation of valid credentials. Recognizing that refusing access without an emergency justification triggers immediate certificate suspension under Section 10 of the CAR, the assistant manager contacts the company compliance lead, who immediately authorises entry.
The audit team completes the site tour, inspects chemical storage units, and conducts confidential worker interviews. By maintaining clear backup delegation procedures, the facility avoids an audit refusal finding, and the certifier logs the successful completion of the unannounced visit in the ASC database.
| Requirement | What the auditor checks | Evidence to have ready |
|---|---|---|
| Section 10 CAR Unannounced Quota | Certifier verification of mandatory annual ten percent site sampling across certified portfolio. | Certified site register, historical audit schedules, and certifier risk assessment records. |
| Section 10 CAR / Section 20 RUoC Forty-Eight Hour Notice | Verification that advance notice did not exceed two working days, or five days for remote logistics. | Official certifier notification email, timestamped site entry logs, and transport arrangement records. |
| Appendix 5 CAR Unrestricted Site Access | Confirmation of immediate access to all production areas, chemical stores, canteens, and worker housing. | Site security entry logs, keys for locked facilities, and designated manager backup authorization lists. |
| Section 4 CAR Confidential Worker Interviews | Inspection of private interview facilities away from supervisory staff and verification of worker selection. | Private meeting room availability, shift rosters, employee registries, and sub-contractor worker lists. |
| Section 10 CAR Refusal Handling | Evaluation of justification rationale if an unannounced audit visit was delayed or rescheduled. | Written emergency logs, adverse weather reports, medical absence records, and certifier correspondence. |
Before your audit
- Confirm that senior management and site security personnel are trained on unannounced audit entry protocols.
- Maintain a designated backup list of authorized management representatives who can lead opening meetings in the primary manager's absence.
- Ensure keys and access codes for all chemical stores, feed storage buildings, employee housing, and canteens are immediately available.
- Verify that worker shift rosters, attendance records, and sub-contractor employee lists are updated weekly.
- Establish a quiet, private area on site for auditors to conduct confidential worker interviews without management presence.
- Maintain continuous calibration logs and daily operational records to ensure complete audit readiness at all times.
- Review the farm's emergency response and adverse weather registers to ensure valid documentation exists if an audit delay occurs.
Questions people ask
How much advance notice does a farm receive for an ASC unannounced audit?
A farm receives a maximum of two working days, or forty-eight hours, advance notice prior to the start of an unannounced audit under Section 10 of the CAR and Section 20 of the RUoC. An exception allows up to five working days notification only when complex transport logistics, such as chartered boats or helicopters, are required to reach remote sites.
What happens if a farm refuses to allow an unannounced audit team on site?
If a farm refuses an unannounced audit without an acceptable justification, such as a medical emergency or extreme weather, the certifier must immediately suspend the certificate under Section 10 of the CAR and Section 20 of the RUoC. To lift the suspension, the farm must undergo a full routine on-site audit and close all identified non-conformities.
How do certifiers select which farm sites receive unannounced audits each year?
Certifiers select sites using a documented risk-based framework under Section 10 of the CAR. Selection evaluates four mandatory risk factors: previous non-conformity history, length of time certified, annual production volume, and the operational relationship between the site and the client.
Are Group Certification sites subject to unannounced audits?
Yes, under Section 3.19 of the CAR, certifiers must select at least twenty percent of their Group site sample as unannounced audits. Additionally, Annex C of the RUoC requires the Group Management Body to conduct at least twenty percent of its annual internal site inspections unannounced.
Reference documents
- ASC Farm Standard, Version V1.0.1A2 (August 2026)
- ASC Farm Standard Interpretation Manual, Version V1.0.1 (September 2025)
- ASC Farm and Feed Certification and Accreditation Requirements (CAR), Version V1.0 (May 2025)
- ASC Farm Requirements for Unit of Certification (RUoC), Version V1.0.1 (July 2023)
Manage this work in 4Auditee
Keep audit plans, problems, corrective actions and document versions in one place. See the records behind each change and decision.
Book a demo