BRCGSBrand Reputation Compliance Global Standards

BRCGS (Brand Reputation Compliance Global Standards) is the rebranded BRC — originally developed by the British Retail Consortium in 1998 in response to the UK Food Safety Act 1990 and now owned by BRCGS Ltd. The flagship standard is BRCGS Food Safety, currently at Issue 9 (effective for audits from 1 February 2023). Other BRCGS standards cover packaging materials, storage and distribution, agents and brokers, consumer products, retail, ethical trade, plant-based, gluten-free, and pet food.

BRCGS Food Safety is the most-required GFSI scheme across UK and Irish retail, and dominant across continental European retail outside Germany (where IFS dominates). Most UK private-label suppliers must hold BRCGS; many manufacturers selling to UK retailers from outside the UK do too. The scheme is operated through a global network of accredited certification bodies and is benchmarked against the GFSI Benchmarking Requirements.

Each standard has its own audit cycle and clause structure, but they share a common philosophy: senior-management commitment, a HACCP-based food/product-safety plan, prerequisite programmes, process control, and continual improvement evidence.

BRCGS Food Safety Issue 9 is structured around eleven fundamental clauses (departure from which precludes certification) and detailed clause-by-clause requirements across nine sections. The full standard runs to roughly 350 detailed requirements.

The eleven fundamental clauses are:

• Senior management commitment and continual improvement (clause 1.1)
• The Food Safety Plan — HACCP (clause 2)
• Internal audit (clause 3.4)
• Management of suppliers of raw materials and packaging (clause 3.5.1)
• Corrective and preventive action (clause 3.7)
• Traceability (clause 3.9)
• Layout, product flow and segregation (clause 4.3)
• Housekeeping and hygiene (clause 4.11)
• Management of allergens (clause 5.3)
• Control of operations (clause 6.1)
• Training: raw material handling, preparation, processing, packing and storage areas (clause 7.1)

1. Senior management commitment — policy, KPIs, food-safety culture plan, management review.
2. The Food Safety Plan — HACCP, prerequisite programmes, validation, verification.
3. Food safety and quality management system — documentation, internal audit, supplier approval, traceability, complaint handling, incident management, withdrawal and recall.
4. Site standards — exterior, fabric, utilities, equipment, maintenance, staff facilities, chemical control, waste, pest management.
5. Product control — design, allergen management, provenance and authenticity, label and packaging control, foreign-body, intended-use claims.
6. Process control — control of operations, weight/volume/number, calibration, validation, in-line control.
7. Personnel — training, hygiene, medical screening, PPE.
8. High-risk, high-care and ambient high-care production zones — additional segregation, environmental monitoring, hygienic design.
9. Requirements for traded products — relevant where the site sells products it did not manufacture.

BRCGS audits are graded based on the number and type of non-conformities found:

Unannounced audits add a + to the grade (AA+, A+, B+ and so on). Retailers commonly prefer + grades because they evidence operational discipline every day, not just on audit day. Some retailers now require unannounced participation as a contractual term.

All non-conformities must be closed within 28 calendar days of the audit, with documented objective evidence. Closure is reviewed by the auditor before the certificate is issued. Late or weak closure leads to a downgrade or, in extreme cases, no certificate.

BRCGS offers two audit programmes: a standard announced audit (full audit, scheduled with the site), and a fully unannounced programme (the site nominates a 16-week window in which the audit will happen, with no further notice). The site cannot refuse access on the day the auditor arrives; if they do, certification is suspended.

Unannounced audits earn a + grade and are commonly preferred by retailers who want assurance the site is in operational shape every day, not just on audit day. A blended programme also exists, where some sections are announced and others unannounced.

1. Senior-management commitment — visible, with measurable food-safety culture indicators that have moved over the year.
2. HACCP plan complete, current, validated by qualified personnel, with documented verification on at least an annual basis.
3. Site standards — building, equipment, environmental zoning, segregation, pest controls, drainage, foreign-body management.
4. Product control — design, allergen, claims, packaging, foreign-body, pet-food/animal-byproduct controls where applicable, anti-fraud and provenance.
5. Process control — recipe control, weight, labelling, temperature, traceability with bi-directional mass-balance reconciliation.
6. Personnel — training, hygiene, PPE, medical screening, visitor and contractor controls.
7. Supplier control — risk-based approval, monitoring, supplier audits or third-party certificates as appropriate.
8. Internal audit — every fundamental annually, all clauses across the cycle (commonly three years), evidenced.
9. Complaint handling — every complaint trended, root-caused, fed back into HACCP review.
10. Mock recall and crisis-management exercises annually, with both forward and back trace.

• Food-safety culture programme — policy in place but no measurable progress indicators over the year.
• Foreign-body control — metal-detector verification frequency not justified by a documented risk assessment.
• Allergen validation — last validated years ago, not re-run after a process change.
• Internal audit programme — schedule slipped or fundamentals not all covered in the year.
• Complaint root-cause — closed at "informed staff" without effectiveness check.
• Supplier risk assessment — done once at onboarding, not periodically reviewed.
• Mock recall — completed but trace direction (forward and back) not exercised both ways.
• Training effectiveness — attendance recorded but no competency check.
• Document control — superseded SOPs found on the line.
• Calibration — overdue items in use; certificates missing for the previous cycle.
• Environmental monitoring (high care) — programme run, results not trended, no action on trends.
• Authenticity / provenance — vulnerability assessment not refreshed after a market change (e.g. ingredient shortage).

• Food-safety culture clauses strengthened — a measurable plan, not a poster.
• New clauses on pet food and animal by-products for sites that handle them.
• Expanded high-risk / high-care / ambient high-care zone requirements.
• Strengthened product-design and authenticity (food-fraud) requirements.
• Stronger emphasis on equipment hygienic design.
• Updated allergen management (separation, validation, changeover).
• Clearer expectations on internal audit programme and effectiveness.
• New clause numbering and re-organisation; many requirements moved between sections.
• Explicit recognition of remote / hybrid auditing in defined circumstances (post-pandemic adjustments retained selectively).

Sites transitioning from Issue 8 should not assume their existing documentation maps one-to-one. A gap analysis against the Issue 9 clause list is mandatory before the first Issue 9 audit.

1. Opening meeting: scope confirmed, exclusions confirmed, audit plan agreed.
2. Document review: HACCP, prerequisite programmes, training matrix, internal audit reports, complaint log, recall record, calibration record, supplier files.
3. Site tour: full walk in production order; auditor will ask operators what they are doing and why.
4. Vertical audits: traceability exercises forwards (raw material to finished product) and backwards (finished product to all ingredients), within four-hour window.
5. Closing meeting: findings issued; classification (critical / major / minor) confirmed; 28-day closeout clock starts.

• BRCGS Food Safety Issue 9, effective February 2023.
• Eleven fundamental clauses — major against any one means no certificate.
• Grades AA / A / B / C / D / not graded; unannounced adds a +.
• Non-conformities critical, major, minor; all close in 28 days with objective evidence.
• Re-audit annually; certificate valid 12 months.
• GFSI-benchmarked; widely required by UK and EU retail private label.
• Common findings cluster around culture KPIs, allergen validation, internal audit schedule, and mock-recall completeness.

Issue 9 strengthened the food-safety culture clauses to make them measurable rather than aspirational. The site must have a documented plan, baseline indicators, periodic measurement, and demonstrable year-on-year movement (or a credible explanation if the trend is flat). The auditor will pull the plan, the surveys, the supporting data and the actions taken on weak indicators, and will speak to operators to gauge whether the culture exists on the floor or only on the wall.

The trap most sites fall into is running a survey, publishing scores, and doing nothing with them. The auditor wants the action plan that flowed from the lowest-scoring questions, the actions completed, and evidence that the next survey moved the needle. A flat trend over three years with no action recorded is a major non-conformity against fundamental 1.1.

The 30 days before a scheduled BRCGS audit (or any time during an unannounced window) are when sites either consolidate evidence or scramble. The pattern that lands AA grades reliably:

1. Pull the prior audit's findings register and verify every action is closed with effectiveness evidence — not just "completed".
2. Run an internal audit against the eleven fundamental clauses in the last 90 days. Anything weak there will be weak when the external auditor lands.
3. Verify the HACCP plan was reviewed by the food-safety team within the last 12 months, with documented sign-off; refresh if any process or ingredient changed.
4. Confirm allergen changeover validation is current — re-run if a process change or formulation change has occurred since the last validation.
5. Run the mock-recall both directions (forward from raw to FG, back from FG to raw) within the four-hour expectation; document the trace.
6. Verify metal-detector verification frequency aligns with the documented risk assessment; refresh the assessment if production volume or product mix has shifted.
7. Walk the floor with a foreign-body lens: damaged conveyor belts, missing equipment guards, broken tile, blue-only plasters compliance.
8. Verify supplier risk assessments are current; any new supplier added in the last 12 months should have full qualification on file.
9. Verify training matrix is complete; any role-change or new-hire should have role-specific training signed off.
10. Pre-stage the audit room with the document set the auditor will request first: HACCP plan, prerequisite programme index, training matrix, internal audit reports, complaint log, mock-recall report, calibration register, supplier list, change log.

The single highest-leverage activity is the internal audit against the fundamentals — if the internal audit programme is working, audit-day surprises are rare. Sites that skip internal audits and rely on the external auditor to find issues consistently grade lower.

BRCGS does not offer the group / multi-site sampling pattern that FSSC 22000 does — every site is audited individually for BRCGS Food Safety. Multi-site cost-control is therefore a matter of audit-day discipline (lower audit days through clean prior records, blended unannounced + announced patterns to avoid redundant on-site time) rather than statistical sampling.

Multi-category certification — where one site produces products falling in different BRCGS product categories (ambient, chilled, high-care, ambient high-care) — adds complexity. Each category in scope drives additional audit time, additional clause coverage, and additional segregation expectations. Sites adding a new category mid-cycle need a scope extension audit before the new category can be shipped under the BRCGS certificate.

Sites considering BRCGS alongside FSSC 22000 (common in groups serving both UK retail and continental brand-owners) should expect about 60–70% documentation overlap and roughly 80% PRP overlap. The audit days do not collapse, but the implementation effort for the second scheme is typically a third of the first.