Supply Chain Controls in a Food Safety Plan

Hello, a non conformance we got was our food safety plan did not identify supply chain controls. I am looking for clarification on exactly what that means. We have a robust supplier approval program separate from our food safety plans for each individual supplier and ingredient go through an approval process but I am just not sure what needs to be included on the food safety plan.

Thank you.

Would definitely recommend to ask auditor, if possible.

My guess would be that you are missing supply chain controls in your hazard analysis.

Not sure what your supplier approval program details are, but this could be that items coming in from supplier can be contaminated (physical, chemical, biological). For us, we require COAs for high-risk ingredients and we ensure that packaging is intact upon arrival. 

Not sure if this is helpful in any way, we will need more details about your current procedures to really know what is missing.

NSF Auditors during our SQF audit wrote the following non conformance

"2.4.3.17 (minor) The facility is required to comply with an FDA FSMA Preventive Controls Plan. The Food Safety Plans do not identify all the preventive controls required by the FDS's Preventive Controls Legislation. For example, the food safety plans do not identify Supply Chain Controls"  

So then what are your procedures for "controlling" the supply chain? Supplier approval is great but you have to talk about that in your Preventive Controls and how your supplier approval will prevent from possible issues caused by the supply chain.

First step would be to identify the most likely problems to occur. 

Would this include hazards such as food fraud, undeclared allergens, and microbial contamination(COA's)? 

I understand, thank you everyone for your help.