Shilux is a South African food safety consultancy delivering auditing, consulting, and accredited training for the food, beverage, and agri-processing industries. We also provide QMSure, our paperless quality management system, to help clients run their food safety programmes digitally.

Where are you based and which regions do you service?

Our head office is in Century City, Cape Town. We service clients across South Africa and SADC, including on-site work, remote consulting, and online training.

How do I get a quote for your services?

Use the contact form on our Contact page or email info@shilux.co.za with a short brief — site location, scope (audit, consulting, or training), and timelines. We typically respond within one business day.

Comparing R.638 Personnel Requirements and FSSC 22000 internal auditor training

Compare South Africa's R.638 personnel requirements with FSSC 22000 internal auditor training. Ensure your team is compliant with DOH and GFSI standards.

Understanding the Divide: Regulatory Compliance vs. International Excellence

In the South African food landscape, every operator must navigate two distinct worlds. On one hand, you have the Department of Health’s Regulations Governing General Hygiene Requirements for Food Premises, the Transport of Food and Related Matters (R.638). On the other, you have global benchmarks like FSSC 22000. While both aim to protect the consumer, their expectations regarding staff training and internal verification are worlds apart.

For a Quality Assurance lead, confusing these two can lead to catastrophic audit failures. While R.638 demands basic hygiene knowledge for a 'Person in Charge,' the path to FSSC 22000 internal auditor training requires a much deeper dive into management systems, risk assessment, and the ISO 19011 auditing framework.

This article explores the fundamental differences between meeting the minimum legal requirements in South Africa and achieving the level of competence required for a GFSI-recognised food safety management system (FSMS).

The Legal Baseline: R.638 Personnel Requirements

Regulation R.638 is the law. If you operate a food business in South Africa, you cannot legally trade without a Certificate of Acceptability (CoA). One of the pillars of maintaining this certificate is the competence of the "Person in Charge."

According to Regulation 5, the person in charge must be properly trained in food hygiene and the principles of food safety relevant to their operation. This usually covers:

Personal hygiene and protective clothing.
Prevention of cross-contamination.
Pest control and waste management.
Temperature control during storage and transport.

While this is essential for a Basic Food Safety Course, it does not address the systematic verification of a full FSMS. R.638 is a set of rules; it is not a management system. Consequently, the "auditing" mentioned in a regulatory context is often just a checklist exercise for a health inspector.

The Global Standard: FSSC 22000 Internal Auditor Training

When a facility moves toward FSSC 22000 certification, the stakes change. FSSC 22000 is based on ISO 22000 and the relevant sector-specific Prerequisite Programmes (PRPs). It requires that internal audits be conducted by personnel who are not only competent in hygiene but also in auditing methodology.

FSSC 22000 internal auditor training is built on the foundation of ISO 19011:2018. This international standard provides the guidelines for auditing management systems. An internal auditor in this context isn't just checking if hairnets are worn; they are looking for effectiveness, evidence of validation and verification, and the resilience of the HACCP plan.

"Compliance with R.638 keeps you out of court; FSSC 22000 keeps you in the global market. You cannot audit the latter with the mindset of the former."

Comparison: R.638 vs. FSSC 22000 Internal Audit Requirements

Feature	R.638 Requirements	FSSC 22000 (Internal Audit)
Legal Status	Mandatory (South African Law)	Voluntary (Client/Market Driven)
Focus Area	Basic Hygiene (GMPs)	Management System Effectiveness
Training Foundation	Hygiene Awareness	ISO 19011:2018 Guidelines
Auditor Independence	Not specifically defined	Mandatory; auditors cannot audit own work
Verification of HACCP	Basic oversight of records	In-depth HACCP Implementation review

Why R.638 Training Isn't Enough for FSSC 22000 Audits

A common mistake in South African food factories is assuming that a manager who has passed an R.638 training course can conduct the internal audits for FSSC 22000. This is a recipe for a Major Non-Conformance during a certification audit for several reasons:

1. Lack of Management System Understanding

R.638 focuses on the "what" (e.g., wash your hands). FSSC 22000 focuses on the "why" and the system (e.g., how do we know our handwashing training is effective?). Without Introduction to Internal Auditing, an auditor will fail to identify systemic gaps, such as a lack of root cause analysis when a hygiene failure occurs.

2. Missing ISO 19011 Principles

Internal auditing is a skill. It involves interview techniques, evidence sampling, and documenting findings. FSSC 22000 internal auditor training teaches staff how to write a non-conformance that actually helps the business improve. A simple R.638 checklist doesn't teach someone how to trace a product back through three days of production logs.

3. The PRP Foundation

FSSC 22000 requires specific technical specifications for PRPs (like ISO/TS 22002-1). While R.638 touches on PRPs, it doesn't reach the level of detail required for international standards. Training like Understanding & Implementing PRPs is vital before an internal auditor can even begin to evaluate a facility fairly.

Deep Dive: The Role of ISO 19011:2018

Any credible FSSC 22000 internal auditor training must be based on ISO 19011. This standard outlines seven principles of auditing, including integrity, confidentiality, and an evidence-based approach. For South African businesses, moving from the tick-box culture of municipal health inspections to the evidence-based approach of ISO 19011 is the most significant hurdle. It requires shifting from being a "food safety policeman" to a "food safety professional."

Bridging the South African Gap

In practice, your facility must satisfy both. Your Environmental Health Practitioner (EHP) will look at your CoA and R.638 compliance, while your FSSC auditor will look at your internal audit schedule and competence records. To bridge this gap, your training strategy should be tiered:

Level 1: All staff receive Basic Food Safety for R.638 and PRP compliance.
Level 2: Supervisors attend HACCP for Supervisors to understand the critical control points.
Level 3: The audit team completes Introduction to Internal Auditing or Advanced Internal Auditing to satisfy FSSC 22000 Clause 9.2.

The Importance of Effective Root Cause Analysis

A major difference between R.638 and FSSC 22000 is what happens when things go wrong. In R.638, you fix the immediate problem. Under FSSC 22000, your internal auditors must be able to verify that the cause of the problem was found. This is where Root Cause Analysis Masterclass training becomes an essential companion to your auditing skills. Without it, your internal audits will merely document the same hygiene failures month after month.

Conclusion

Securing a Certificate of Acceptability via R.638 is your licence to operate, but FSSC 22000 internal auditor training is your licence to grow. Ensuring your staff understand the nuance between legal compliance and system verification is the difference between an audit-ready facility and one that is constantly reactive.

Ready to elevate your team's auditing capabilities? Book a consultation with Shilux today to discuss our tailored training programmes that bridge the gap between South African regulations and global food safety excellence.