We just finished our SQF Audit and received an excellent. However our auditor was perplexed that I had identified so many preventative controls in a low risk dry blending small facility. I was told that large companies "best practice" has been to remove/ not identify the controls that I have in place as "preventaive" because this sets me up for legal exposure on the FDA side. That I can justify my controls as just controls ( based on a risk analysis) - eliminating all the FDA legality.
What are your thoughts on this? How & why does your company do theirs.