Preparing for MSC Unannounced Audits and DNA Sampling

Unannounced audits and product authentication sampling requirements

Unannounced audits and physical DNA product authentication sampling serve as primary integrity mechanisms within the Marine Stewardship Council certification programme. Quality managers, compliance leads, and internal auditors must understand that third-party oversight extends beyond scheduled surveillance visits. Under Section 11.3.2 of the MSC Chain of Custody Certification Requirements v3.2 and Clause 4.8.7 of the MSC General Certification Requirements v2.6, certification bodies and scheme owners maintain explicit rights to conduct unscheduled on-site inspections and collect physical tissue samples.

These requirements apply to all single-site, multi-site, group, and consumer-facing certificate holders handling certified seafood. While routine surveillance audits allow pre-planned scheduling, unannounced audits evaluate day-to-day operational compliance when facilities have had no specific opportunity to prepare. Understanding the exact regulatory triggers, site entry rules, and sample handling protocols ensures that organisations maintain continuous readiness without risking certificate suspension.

Unannounced audit mechanics and site entry obligations

Under Clause 11.3.2 of the MSC Chain of Custody Certification Requirements v3.2, accredited certification bodies must perform unannounced, on-site surveillance audits on a minimum of one client or one percent of their total client base each year, whichever is greater. Clause 11.3.2.1 dictates that certification bodies must prioritise clients flagged as high risk for product substitution by the Marine Stewardship Council, its assurance provider, or through formal complaints. For organisations holding certification under the ASC Chain of Custody Module v1.1, Clause 11.3.2.6 requires additional unannounced risk-based audits selected via the ASC risk calculator.

To execute an unannounced audit, Clause 11.3.2.4 permits the certification body to notify the certificate holder of a six-month surveillance window, but no advance notice is given for the specific audit date. When the auditor arrives on site, Clause 4.8.7.f.i of the MSC General Certification Requirements v2.6 enforces a strict site access rule. Operating sites must grant the auditor access to the facility within thirty minutes of arrival.

Step-by-step procedure for handling an unannounced audit arrival

When an auditor arrives unannounced at an operating facility, site personnel must follow a standardised operational procedure to ensure full compliance with Clause 4.8.7.f.i. Refusing entry or delaying access beyond the thirty-minute threshold constitutes a contractual breach that can trigger immediate certificate suspension under Section 7.4 of the General Certification Requirements.

1. Verify the auditor's official credentials and accreditation card at the reception desk, immediately logging the exact arrival time.
2. Notify the designated site contact person or back-up quality lead while escorting the auditor to a secure meeting room within the thirty-minute window.
3. Conduct the mandatory opening meeting under Clause 8.2.2 to confirm the audit scope, participant roles, and requested facility access.
4. Provide immediate access to processing areas, storage units, and active production lines as requested by the auditor.
5. Retrieve requested purchase records, receiving notes, and sales invoices within agreed time limits under Clause 5.5.1.1.

DNA sampling protocols and non-conformity investigation procedures

Under Clause 5.5.2 of the MSC Chain of Custody Standard: Default Version v5.1 and Group Version v2.1, certified organisations must allow the Marine Stewardship Council, its designated agents, or the certification body to collect seafood samples from their premises for DNA testing and product authentication. Guidance 4.8.7.g.i of the General Certification Requirements notes that the sample size taken for MSC testing is very small, typically under one hundred grams or a surface swab, whereas ASC sampling under the ASC Module may require up to five hundred grams. Under Clause 4.8.7.g.i, individual test results remain strictly confidential between the client, the certification body, and the scheme owner.

If laboratory DNA testing reveals species substitution, catch area discrepancies, or unverified claims, Clause 5.5.3 defines mandatory client response obligations. The organisation must execute a formal investigation, present findings and a corrective action plan to the certification body, and cooperate with follow-up sampling.

Example

A processing plant handling both certified Atlantic cod (Gadus morhua) and non-certified Pacific cod (Gadus macrocephalus) receives an unannounced surveillance audit. During line inspection, the auditor collects three raw fillet samples for DNA authentication testing under Clause 5.5.2. Two weeks later, laboratory sequencing confirms that one sample labelled as Atlantic cod was Pacific cod. Under Clause 5.5.3, the plant immediately triggers its non-conforming product procedure under Clause 5.4.1, halts certified cod dispatches, conducts a root cause analysis on raw material receiving logs, and submits an updated line clearance corrective action plan to the certification body within two days.

Before your audit

• Establish a reception protocol that identifies unannounced auditors and logs arrival times accurately.
• Appoint and train deputy contact persons at every site to accompany auditors if primary quality leads are absent.
• Maintain up-to-date physical segregation and line clearance logs directly adjacent to processing equipment.
• Store purchase invoices, delivery notes, and certified supplier lists in easily accessible digital folders.
• Verify that all active certified stock is prominently identified with batch tags or colour-coded container labels.
• Train warehouse staff to grant immediate physical access to cold storage rooms and finished goods bays.
• Review non-conforming product protocols to ensure two-day certification body notification rules are understood.

Questions people ask

Can a facility refuse entry to an unannounced auditor if the quality manager is absent?

No, an operating site cannot refuse entry due to the absence of a responsible person. Under Clause 4.8.7.f.i of the MSC General Certification Requirements v2.6, the facility must grant access to operating areas within thirty minutes of the auditor's arrival regardless of personnel availability.

How much seafood is collected during a DNA product authentication test?

Under Guidance 4.8.7.g.i of the General Certification Requirements, the sample volume required for MSC DNA testing is very small, usually less than one hundred grams or a tissue swab. For ASC seafood sampling under the ASC Chain of Custody Module v1.1, sample sizes may reach five hundred grams.

Are DNA product authentication test results made public?

No, individual testing results are not published publicly with company details. Under Clause 4.8.7.g.i of the MSC General Certification Requirements v2.6, test results are confidential between the client, the certification body, and the scheme owner, and are only shared publicly in anonymised and aggregated formats.

What happens if a DNA test identifies a product as mislabelled?

If a DNA test indicates potential mislabelling, the organisation must immediately cease selling the product as certified under Clause 5.4.1(a) and notify its certification body within two calendar days. Under Clause 5.5.3, the organisation must investigate the root cause, present findings and a corrective action plan to the certification body, and cooperate with further sampling.

Reference documents

• MSC Chain of Custody Standard: Default Version v5.1
• MSC Chain of Custody Standard: Group Version v2.1
• MSC Chain of Custody Certification Requirements v3.2
• MSC General Certification Requirements v2.6
• ASC Chain of Custody Module v1.1