On this page
The short version
- Trading offices taking legal ownership without physically handling certified products are exempt from mandatory initial on-site internal audits.
- Sites handling certified seafood in sealed containers or handling certified seafood exclusively qualify for internal on-site audit exemptions.
- Group certificate managers must verify new trading sites through remote checks or central management system control before adding them.
- Annual internal audits after certification exclude sites that handle only certified seafood or had clean certification body audits.
Regulatory framework and internal audit rationale for trading operations
The Marine Stewardship Council Chain of Custody framework establishes specific internal controls to guarantee product integrity across diverse supply chain business models. Quality managers, compliance leads, and internal auditors often question whether trading operations that take legal ownership of certified seafood without physical handling must undergo traditional internal audits. The standard differentiates physical handling activities from purely administrative trading to balance audit rigour with operational efficiency.
This distinction is particularly critical under the MSC Chain of Custody Standard: Group Version, where a central office manages compliance across multiple group entities. While physical processing sites present physical substitution risks that require strict on-site verification, purely commercial trading offices present administrative risks managed through documentation and central management systems. Understanding where internal audit mandates apply—and where explicit exemptions exist—prevents redundant auditing while maintaining complete supply chain integrity.
On-site internal audit exemptions for traders and non-handling sites
Under Clause 6.4.1 of the MSC Chain of Custody Standard: Group Version, organisations must conduct an on-site internal audit for each site prior to the initial group certification audit by the Conformity Assessment Body. However, Clause 6.4.1.1 provides explicit exemptions from mandatory on-site internal audits for three distinct operational categories. Specifically, sites do not require an on-site internal audit if they only handle certified products in sealed containers, do not physically handle certified products at all, or handle certified seafood exclusively.
Guidance 6.4.1.1 clarifies that trading offices fall directly under the non-physical handling exemption because their activities are restricted to legal ownership, invoicing, and commercial transactions. Furthermore, Clause 6.2.3 requires organisations to verify that any new site can conform to the standard before adding it to the group certificate. Clause 6.2.3.1 confirms that an internal on-site audit is not required for new sites that meet Clause 6.4.1.1 exemptions, or when all sites operate under a common management system maintained by the central office.
| Operational Profile | Activity Scope | Initial On-Site Audit Requirement | Clause Reference |
|---|---|---|---|
| Pure trading office | Legal ownership only; no physical product handling | Exempt from on-site internal audit | Clause 6.4.1.1 / Clause 6.2.3.1 |
| Sealed container storage | Handles unopened boxes, bags, or sealed pallets | Exempt from on-site internal audit | Clause 6.4.1.1 |
| Exclusive certified handler | Handles physical product, but 100% certified seafood | Exempt from on-site internal audit | Clause 6.4.1.1 / Clause 6.4.5(a) |
| Mixed processing facility | Processes or repacks certified and non-certified seafood | Mandatory on-site internal audit | Clause 6.4.1 / Clause 6.2.3 |
Ongoing internal audit cycles and central office oversight
After initial certification, Clause 6.4.5 mandates that group certificate holders conduct an annual internal audit of all certified sites to verify ongoing conformity. However, Clause 6.4.5 explicitly excludes sites that handle only certified seafood, as well as sites that received a Conformity Assessment Body audit within the preceding twelve months where no non-conformities were identified. Trading offices that do not physically handle products continue to benefit from the Clause 6.4.1.1 exemption during annual review cycles.
When internal audits are required for applicable sites, Clause 6.4.5.1 dictates that internal audit reports must document the audit date, internal auditor name, identified non-conformities, and corrective actions. Under Clause 6.4.6, if an internal audit reveals non-conformity, the central office must enforce strict corrective action timeframes. Corrective actions must be completed within four days for non-conformities involving non-certified product sold as certified, thirty days for risks of non-certified product being sold as certified, and ninety days for all other non-conformities.
Conformity Assessment Body audit planning for pure traders
For single-site and multi-site trading organisations certified against the MSC Chain of Custody Standard: Default Version, internal audits are evaluated as part of overall management system effectiveness under Clause 5.1.1. In addition, the MSC Chain of Custody Certification Requirements v3.2 sets specific audit planning rules for pure trading operations. Under Clause 7.1.6.1, clients whose scope is limited strictly to trading without physical handling or use of subcontractors are eligible for remote initial and re-certification audits by the Conformity Assessment Body.
Furthermore, Clause 11.3.1.a.ii of the Certification Requirements permits an extended eighteen-month surveillance audit frequency for single or multi-site certificate holders that conduct only trading activities directly and do not use non-certified contract processors or packers. Under Clause 11.3.3, surveillance audits for pure traders may also be conducted remotely if the operation is located in a country with a Transparency International Corruption Perception Index score of forty-one or above. These provisions ensure that traders face proportional audit requirements while remaining fully accountable for legal ownership records.
What to do now
- Review the activity scope of every trading site within the certificate to verify whether physical product handling occurs.
- Document formal exemption justifications in the site register for trading offices that take legal ownership without physical handling under Clause 6.4.1.1.
- Conduct remote document checks for new trading sites joining a group certificate to verify administrative procedures prior to site addition under Clause 6.2.3.1.
- Maintain internal audit reports and central office review records for a minimum of three years as required by Clause 5.1.3 and Clause 6.4.5.1.
- Enforce mandatory corrective action closure timelines of four, thirty, or ninety days if administrative non-conformities are identified during internal reviews under Clause 6.4.6.
Reference documents
- MSC Chain of Custody Standard: Group Version v2.1
- MSC Chain of Custody Standard: Default Version v5.1
- MSC Chain of Custody Certification Requirements v3.2
- MSC General Certification Requirements v2.6
Manage this work in 4Auditee
Keep audit plans, problems, corrective actions and document versions in one place. See the records behind each change and decision.
Book a demo