Hi refst,
It is worthwhile stating the purpose of conducting internal audits as it will help you put your questions into context. Internal auditing is a management tool used to objectively identify compliance and non-compliance in your system against a GSFI standard for example or your internal procedures.Using the audit process, evidence can be collected on both good and poor performance/compliance and finally it should stimulate actions designed to maintain standards and gain improvements. So why do we do it? Well it provides management the opportunity to step back, take a deep breath and outside the day-to-day bustle assess the system and its performance. This structured approach is essential for maintaining the efficacy of the system.
In other words, as the person responsible for the foodsafety system, internal auditing can be your best friend. The objective should not be to get it done with the least pain possible but rather to set it up according to your needs consistent with the requirements of the BRC standard.Give it the time it desires and look forward to the benefits.
Looking at your questions…
The audit program does not have to be spread throughout the year but IMO it should be. Not just for practical reasons. Your food operation and its management do not occur in one or two days each year. It is usually year round and the management process of internal auditing should reflect this. By conducting it once per year you are denying yourself the opportunity to detect emerging issues and correct them.
The typical way of doing this may include: Making a listof all aspects of the system that should be audited
Review each one and determine their significance based onrisk. For example
HACCP/CCP’s may be audited more frequently. Fundamental requirements may also receive more attention and this can be conducted several times over the year. Why? Because if they fail there is a high probability that problems will arise.
Other areas on your list which you have determined not to be significant can be audited less frequently and indeed you may decide to cover these off in a single audit event in the year.
Remember there are limited resources. Risk assessment of each area allows you to apply these resources to the most important ones.
It is not unreasonable to use the BRC/SQF as an internal audit checklist. I have done this over many years. I recall one occasion where a BRCauditor pointed out that my transposed checklist was copyrighted. But no roadblocks appeared on my drive home afterwards.
In short, do what suits your local needs and resources.Take your time, risk assess and focus on those areas of greatest importance.
George