How-To Guide

How to Conduct an Internal Food Safety Audit of Your Food Business

Complete guide to planning and conducting internal food safety audits for UK food businesses. Covers audit scope, checklists, walkthrough procedures, documentation review, gap analysis, and improvement planning.

Estimated time: 4 hours

Internal food safety audits are one of the most effective ways to identify and fix compliance gaps before an EHO inspector finds them. During a formal inspection, Environmental Health Officers score your business across three areas: hygienic food handling (including temperature control, cross-contamination prevention, and personal hygiene), structural compliance (condition of premises, facilities, and equipment), and confidence in management (your food safety management system, training, track record, and ability to maintain standards). Each area is scored, and the combined result determines your Food Hygiene Rating from 0 to 5.

EC Regulation 852/2004 requires food business operators to put in place, implement, and maintain procedures based on HACCP principles. Regular internal auditing is a key component of "maintaining" those procedures. The Food Standards Agency recognises internal audits as evidence of proactive management, which directly supports a high confidence-in-management score. Businesses that audit themselves regularly score consistently higher because they catch and fix issues before they become entrenched.

This guide takes you through planning, conducting, and following up on an internal food safety audit using the same criteria an EHO inspector would apply.

Step by Step

6 steps to complete

Plan the audit scope and schedule

Decide what the audit will cover. A comprehensive audit should assess all three EHO scoring areas: hygienic food handling, structural compliance, and confidence in management. For routine audits, you may focus on one area at a time, rotating through them over a quarterly cycle. Set a date and time that allows full access to all areas (avoid peak service times). Decide who will conduct the audit: ideally someone with food safety knowledge who is not directly responsible for the areas being audited, as fresh eyes catch more issues. If your business has multiple locations, schedule audits for each site separately. Inform relevant staff that an audit is happening, but do not give advance warning of the specific areas being checked.

Create a structured audit checklist

Develop a checklist based on the three EHO scoring areas. For hygienic food handling: check temperature monitoring records (fridges between 0 and 5 degrees C, freezers at or below -18 degrees C, cooking to at least 75 degrees C core), cross-contamination controls, personal hygiene practices, food storage and labelling, allergen management, and date rotation. For structural compliance: inspect hand wash basins (hot water, soap, paper towels, accessible), wall and floor condition, ceiling and ventilation maintenance, pest-proofing, lighting, waste management, and equipment condition. For confidence in management: review the SFBB or HACCP documentation, training records, cleaning schedules with sign-offs, temperature logs (check for gaps), supplier records, pest control reports, and incident/complaint records. Use a scoring system (compliant, minor non-conformance, major non-conformance) for each item.

Conduct the physical walkthrough

Walk through every area of your premises systematically, working through your checklist. Start at the delivery entrance and follow the flow of food through your business: goods-in, storage (dry, chilled, frozen), preparation, cooking, hot-holding, service, and waste. At each stage, check that practices match your documented procedures. Open fridges and check temperatures with a calibrated probe (do not rely on the built-in display alone). Check date labels on stored food. Observe staff practices: are they washing hands correctly? Using separate chopping boards? Following the cleaning schedule? Check structural elements: are walls clean and in good repair? Are hand wash basins stocked and accessible? Is pest-proofing intact? Take photographs of any non-conformances as evidence for your audit report.

Review all documentation thoroughly

Sit down with your food safety documentation and review it critically. Check your SFBB or HACCP records: are they completed daily with no gaps? Do the entries look genuine (not all filled in at once)? Review temperature logs for the past three months: are there any missed days, out-of-range readings without corrective actions recorded, or obvious patterns suggesting fabrication? Check training records: does every current staff member have documented allergen training, food hygiene training, and role-specific induction? Are certificates in date? Review cleaning schedule sign-offs: are they completed consistently? Check supplier records: are approved supplier lists current, delivery temperature checks recorded, and allergen specifications on file? Identify any documentation gaps and note them in your audit report.

Identify gaps and assess risk

Compile all findings from the walkthrough and documentation review. Categorise each finding by severity: critical (immediate food safety risk, such as broken cold chain or evidence of pests), major (significant non-compliance likely to be raised by an EHO, such as no hand wash soap or gaps in temperature records), and minor (areas for improvement that are unlikely to be cited but should be addressed, such as a worn floor tile or a slightly disorganised storage area). Prioritise critical and major findings for immediate action. Map your findings against the three EHO scoring areas to estimate what score you would likely receive if inspected today.

Create an improvement plan and follow up

For every non-conformance identified, write a specific corrective action with a responsible person and target completion date. Critical findings should be addressed immediately (same day). Major findings should have a resolution target within two weeks. Minor findings can be scheduled for the next month. Circulate the audit report and improvement plan to all relevant managers and staff. Schedule a follow-up check (typically two to four weeks after the audit) to verify that corrective actions have been completed and are effective. File the audit report, improvement plan, and follow-up verification in your food safety documentation. This trail of audit, action, and verification is precisely the evidence that demonstrates strong management confidence to an EHO inspector.

Expert Advice

Tips for success

Conduct audits at different times of day and days of the week to get an accurate picture of your standards. A Monday morning audit may look very different from a Saturday evening during peak service.

Use the FSA Food Hygiene Rating Scheme Brand Standard guidance document to understand exactly how inspectors score each element. Build your checklist around these criteria for the most realistic self-assessment.

Have a staff member from a different department or location conduct the audit where possible. People who work in an area every day develop blind spots for issues that a fresh pair of eyes will catch immediately.

Treat audit findings as opportunities for improvement, not as disciplinary evidence. If staff fear that audits lead to blame, they will hide problems rather than exposing them. A positive audit culture is more effective than a punitive one.

Share a summary of audit findings (including positives, not just problems) with the whole team. Recognising areas of good practice reinforces the behaviours you want to see more of.

Watch Out

Common mistakes to avoid

Only auditing when an EHO inspection is expected

Inspections are usually unannounced, so audit-cramming is ineffective. Schedule regular audits (at least quarterly) as a standard part of your management routine. Consistent auditing keeps standards high year-round and provides the documentation trail that demonstrates management confidence.

Identifying problems but not following up with corrective actions

An audit report that lists non-conformances but leads to no action is a wasted exercise. Worse, if an inspector sees audit reports that identify recurring issues with no evidence of corrective action, it actively damages your confidence-in-management score. Every finding must have a corrective action, a responsible person, a deadline, and a verification check.

Focusing only on cleanliness and ignoring documentation and management systems

Many operators audit the physical premises thoroughly but skip the documentation review. The confidence-in-management score (which is often the hardest to achieve and the most heavily weighted for borderline ratings) depends on documentation quality: training records, temperature logs, SFBB completion, and cleaning schedule sign-offs. Always audit documentation as thoroughly as you audit the physical premises.

Using a generic checklist that does not reflect your specific business

A downloaded generic checklist may miss areas specific to your operation (such as a sushi bar with raw fish handling, or a bakery with allergen cross-contamination risks). Customise your audit checklist based on your menu, premises, equipment, and the specific risks identified in your HACCP plan.

FAQ

Frequently asked questions

How often should I audit my food business?

Best practice is to conduct a comprehensive audit at least quarterly, covering all three EHO scoring areas over the course of the year. Higher-risk businesses (those with complex menus, large teams, or a history of low scores) should consider monthly audits. In addition, conduct targeted audits whenever you make significant changes (new menu, new equipment, new premises layout, new staff) or after any food safety incident. The key is consistency: a documented trail of regular audits demonstrates proactive management.

Who should conduct the internal audit?

Ideally, the auditor should have food safety knowledge (at minimum, a Level 3 Food Safety qualification or equivalent experience) and should not be directly responsible for the areas being audited. This separation provides objectivity. In multi-site businesses, having managers audit each other's sites is an effective approach. For single-site businesses, consider engaging an external food safety consultant to conduct a periodic independent audit alongside your routine self-audits.

What are the three areas that EHO inspectors score?

EHO inspectors assess three areas when determining your Food Hygiene Rating. First, hygienic food handling: this covers temperature control, cooking, cooling, reheating, cross-contamination prevention, personal hygiene, food storage, and date labelling. Second, structural compliance: the physical condition of premises including walls, floors, ceilings, hand wash facilities, ventilation, lighting, pest-proofing, equipment condition, and waste management. Third, confidence in management: this assesses your food safety management system (SFBB or HACCP), training records, documentation quality, track record, and whether management demonstrates a proactive approach to food safety. Each area is scored from 0 (excellent) to a maximum penalty score, and the combined total determines your rating from 0 to 5.

Can internal audits help me improve my food hygiene rating?

Yes, significantly. Regular internal audits identify and fix the same issues an EHO inspector would cite, which directly improves your scores across all three areas. Beyond fixing problems, the audit trail itself provides evidence of proactive management, which is exactly what inspectors look for in the confidence-in-management assessment. Businesses that can show a history of regular audits with documented corrective actions and follow-up verification consistently score higher in this area.

Ready to simplify compliance?

Paddl automates the processes described in this guide. Digital records, automatic alerts, and complete audit trails for your hospitality business.

Start Free Trial View Features

Full access to all features · Dedicated onboarding support · Cancel anytime