2 replies to this topic

[Doug K]

For ongoing monitoring, at what frequency should third party audits from a supplier be updated?

The BRC Standard says that if approval is based on questionnaires, they need to be reissued at least every 3 years. Can the same be said when requesting third party audits from suppliers?

[Ames]

Based on The Standard, you don't even have to get 3rd party audits from your supplier if you're auditing them yourself and/or sending a questionnaire. However, I think frequencies not specified by The Standard should be based on risk, size of company, output, product being produced, etc. If you're basing it all on 3rd party audits, it may be different for different types of a supplier. If you're making a food product, you may require a 3rd party audit annually from your raw material suppliers while your packaging suppliers you may just require one every 3 years.

I find when writing programs for supplier approval (or anything for that matter really), it's easier to leave things open. Maybe you have a supplier who doesn't have a full 3rd party audit conducted for one reason or another. Or if you say you're going to visit all your suppliers, maybe travel plans don't work out and you can't get everywhere within your time frame. Giving yourself options that still comply with The Standard makes things much easier since there are so many elements to the BRC.

[Tony-C]

For ongoing monitoring, at what frequency should third party audits from a supplier be updated?

The BRC Standard says that if approval is based on questionnaires, they need to be reissued at least every 3 years. Can the same be said when requesting third party audits from suppliers?

Hi Doug,



Frequency and monitoring should be based on your product and supplier risk.

When going through the supplier approval process I would keep a copy of third party certificates and note expiry dates in an approved supplier spreadsheet. As a minimum then I would get an update from the supplier before their certificate expires to make sure they have maintained certification.

Kind regards,

Tony