On this page
The short version
- Certification bodies must calculate audit durations using mandatory formulas and variables defined in DS/ISO 22003-1:2022 Annex B.
- Initial audit duration formula combines basic site duration, additional HACCP study days, and full-time equivalent employee counts.
- At least fifty percent of total audit time must focus on operational food safety planning and prerequisite programmes.
- Surveillance audit duration cannot fall below one-third of initial audit time, and recertification requires two-thirds.
Regulatory Context, Audit Time Rationale, and Affected Roles
Under DS/ISO 22003-1:2022 Clause 9.1.4, third-party certification bodies must establish documented procedures to calculate the precise time required for an effective food safety management system (FSMS) audit. Quality managers, compliance leads, and internal auditors often view audit duration as an arbitrary commercial negotiation. In reality, Annex B enforces standardized, normative rules that prevent certification bodies from compromising audit depth or under-resourcing technical assessments.
The systemic rationale for standardized audit time calculation is to guarantee that audit teams possess adequate time to verify operational controls across all shifts, processing lines, and facilities. Understanding these calculations helps organizations plan budget requirements, allocate staff resources, and prepare operational documentation before Stage 1 and Stage 2 certification audits commence.
The Initial Audit Calculation Formula and Key Variables
Clause B.3.2 of Annex B sets the minimum initial certification audit duration (\(D_S\)), expressed in audit days, using the equation \(D_S = T_D + T_H + T_\). In this formula, \(T_D\) represents the basic site audit duration in days for the specific food chain category or subcategory from Table A.1, which inherently includes one Hazard Analysis and Critical Control Point (HACCP) study. \(T_H\) specifies the additional audit time required for each additional HACCP study, while \(T_\) adds audit time based on the effective number of Full-Time Equivalent (FTE) employees.
When calculating FTE headcount under Clause B.3.1, the organization must express workers as full-time equivalents based on main-shift production staff, seasonal workers, and non-production personnel who influence food safety. Where operations involve multiple food chain categories, Clause B.3.2 dictates that \(T_D\) must be taken from the category with the highest base value, while HACCP studies and FTE counts are aggregated across all categories.
| Food Chain Category (Table A.1) | Base Site Duration (\(T_D\)) | Additional HACCP Study (\(T_H\)) | FTE Range & Time Addition (\(T_\)) |
|---|---|---|---|
| Category AI, AII, BI, BII, BIII (Primary Production) | 1.0 audit day | 0.25 audit day | 1–5 FTE = 0.0 days; 6–49 FTE = 0.5 days |
| Category CO, CI, CII, CIII, CIV (Processing) | 2.0 audit days | 0.50 audit day | 50–99 FTE = 1.0 days; 100–199 FTE = 1.5 days |
| Category D, FI, FII (Feed, Retail, Trading) | 1.0 audit day | 0.50 audit day | 200–499 FTE = 2.0 days; 500–999 FTE = 2.5 days |
| Category E, G, H, I, J (Catering, Transport, Packaging) | 1.5 audit days | 0.25–0.50 audit days | > 1,000 FTE = 3.0 days |
| Category K (Chemical & Bio-Chemical) | 2.0 audit days | 0.50 audit day | Full headcount scale applied per Table B.1 |
Operational Time Allocation, Reductions, and Lifecycle Audits
Under Clause B.3.2, a mandatory minimum of 50% of the total audit duration must be spent on site auditing operational food safety planning, prerequisite programmes (PRPs), OPRPs, and Critical Control Points (CCPs). Operational auditing excludes time spent reviewing administrative FSMS documentation, staff training records, internal audits, management reviews, and system improvement activities. Furthermore, Clause B.3.1 explicitly states that total audit duration does not include travel time, audit planning, report writing, translator delays, or post-audit nonconformity follow-up.
Certification bodies may apply adjustments under defined conditions in Clause B.2 and Clause B.3.2. Where an FSMS is integrated with another management system, Clause B.3.2 permits a maximum combined reduction of 20%, depending on the degree of strategic and operational integration. Reductions may also be justified for high automation or prior scheme certification, but deviations must be documented. Under Clause B.3.4, minimum surveillance audit duration must not be less than one-third of the initial certification duration, while recertification audits must not be less than two-thirds, with a strict minimum of one audit day for processing categories.
What to do now
- Calculate your organization's FTE headcount and identify all distinct HACCP studies under Clause B.3.1 to verify audit duration proposals from certification bodies.
- Review processing lines, shift patterns, and product families to ensure food chain categories are correctly classified according to Table A.1.
- Ensure production schedules permit auditors to spend at least 50% of audit time on live operational checks, PRP monitoring, and CCP verification per Clause B.3.2.
- Evaluate management system integration opportunities under Clause B.3.2 to explore up to a 20% reduction in combined audit duration.
- Prepare Stage 1 documentation under Clause 9.3.2 to demonstrate audit readiness and prevent delays before Stage 2 execution.
Reference documents
- DS/EN ISO 22000:2018 Food safety management systems – Requirements for any organization in the food chain
- DS/ISO 22003-1:2022 Food safety – Part 1: Requirements for bodies providing audit and certification of food safety management systems
- DS/ISO 22003-2:2022 Food safety – Part 2: Requirements for bodies providing evaluation and certification of products, processes and services, including an audit of the food safety system
Manage this work in 4Auditee
Keep audit plans, problems, corrective actions and document versions in one place. See the records behind each change and decision.
Book a demo