Auditors expect senior management to demonstrate active, measurable commitment to the Food Safety Management System (FSMS) through the provision of adequate resources, the establishment of clear food safety objectives, and the promotion of a positive food safety culture. Beyond merely signing a policy, leadership must prove they are accountable for the effectiveness of the system by participating in management reviews and ensuring that food safety is never compromised by commercial pressures.
Key Takeaways
- Resource Allocation: Auditors look for physical evidence that money and time are allocated to maintenance, training, and infrastructure.
- Communication: Management must ensure that food safety updates reach the factory floor and that staff feel empowered to report issues.
- Accountability: The 'Top Management' must be present during audits and demonstrate an understanding of their site's specific risks.
- Regulatory Compliance: In South Africa, this starts with mandatory adherence to the Foodstuffs, Cosmetics and Disinfectants Act and R.638 hygiene requirements.
- Culture: GFSI-benchmarked standards now require a documented plan to improve food safety behaviours across the entire organisation.
The Shift from Documentation to Demonstration
For decades, many South African food manufacturers treated senior management commitment as a "paperwork exercise." A signed Food Safety Policy hanging in the boardroom was often enough to satisfy a basic checklist. However, under modern GFSI-benchmarked standards like FSSC 22000 and BRCGS, the auditor's focus has shifted significantly toward demonstration.
An auditor will no longer take your word for it. They will look at the state of your facility, the turnover rate of your staff, and the backlog of your maintenance tasks to determine if senior management is truly committed. If a QA Manager is constantly begging for a budget to repair a leaking roof or replace a rusted conveyor, the auditor will likely issue a nonconformity against Clause 5 (Leadership) of ISO 22000 or Section 1 of BRCGS.
Common failure modes in South Africa often involve the "silo effect," where food safety is viewed strictly as a laboratory or quality department function. When an auditor sees a production manager overriding a quality hold to meet a delivery deadline, it signals a terminal failure in leadership in food safety. To fix this, leadership must integrate food safety KPIs into the performance bonuses of production and operations managers, ensuring shared accountability.
Legal Foundations: R.638 and the Person in Charge
In South Africa, management commitment isn't just a certification requirement; it is a legal mandate. The Regulations Governing General Hygiene Requirements for Food Premises, the Storage, Preparation and Display of Food (Government Notice R.638 of 2018), specifically defines the responsibilities of the "person in charge."
Under R.638, the person in charge must ensure that all food handlers are trained in food hygiene and that the food premises requirements South Africa mandates are met at all times. If an auditor or an Environmental Health Practitioner (EHP) finds that basic hygiene is failing, the legal liability rests squarely on the shoulders of the senior-most person at that site. This includes maintaining a valid Certificate of Acceptability (CoA), which serves as the foundational license to operate.
Operational reality dictates that the "person in charge" must be physically present and have the authority to halt production. During an inspection by an environmental health practitioner, the inability of the site lead to produce a valid CoA or training records for seasonal casual staff is a frequent cause of legal non-compliance. This often stems from poor supplier management when labour brokers are used without verifying the hygiene training of the workers provided.
4 Pillars of Auditor Focus for Management
1. The Provision of Resources
This is the most tangible way an auditor assesses leadership. Resources include more than just money; they include time, people, and equipment. When conducting hygiene audits or full food safety audits, an auditor will cross-reference the following:
- Maintenance Logs: Are repairs being done properly, or are there "temporary" fixes (like duct tape on a food-contact surface) that have lasted for months? Auditors look for a Capex budget that reflects actual facility needs.
- Staffing Levels: Is the Food Safety Team Leader overwhelmed with other roles, such as HR or Health and Safety, leading to a breakdown in system updates?
- Training Budgets: Is there evidence of food safety culture training, or is training the first thing cut when margins are tight?
A practical example of resource failure is the lack of backup power or water in the South African context. Management must provide resources for contingency plans (e.g., generators or JOJO tanks) to ensure prerequisite programmes remain functional during municipal outages. Failure to fund these contingencies demonstrates a lack of commitment to maintaining a stable FSMS.
2. Management Review Effectiveness
Auditors view the Management Review Meeting (MRM) as the pulse of the organisation. They are not looking for a list of topics discussed; they are looking for decisions made. A generic meeting minute that says "all okay" is a red flag. A high-quality management review should include:
| Input Category | What Auditors Look For | Evidence of Commitment |
|---|---|---|
| Internal Audit Results | Evidence that management interrogated why internal audits are finding repeat issues. | Allocation of budget or personnel to fix the root cause. |
| Customer Complaints | Direct management oversight of trends and the cost of poor quality. | Revised SOPs or equipment upgrades to prevent recurrence. |
| Resource Needs | Action items where management approved spend to mitigate a high-risk hazard. | Signed purchase orders following the meeting. |
| System Performance | A discussion on whether the HACCP plan is actually working. | Review of HACCP verification and validation data. |
3. Food Safety Culture and Communication
Perhaps the biggest change in recent years is the requirement for food safety culture. Auditors now interview operators on the line. They might ask a packer: "What would you do if you saw a supervisor skip the hand-washing station?" If the packer is afraid to answer, it indicates a failure of management to foster a culture of transparency.
Senior management must have a documented food safety culture plan. This plan should include measurable goals, such as reducing internal non-conformances or increasing the number of staff-led safety suggestions. Auditors look for "closed-loop" communication, where an employee reports a broken floor tile and management provides feedback once it is fixed. This builds trust and encourages further reporting.
4. Response to Non-Conformities and Recalls
How management reacts to a crisis tells an auditor everything they need to know about commitment. If a major vs minor nonconformity is raised, does management drive the root cause analysis, or do they leave it entirely to the QA department? Auditors expect management to provide the authority required to close out CAPA effectively.
In a food recall procedure, management's role is to lead the recall team, manage communication, and ensure the food recall risk assessment is performed without bias. If a mock recall fails due to poor data from a supplier, management must hold that supplier accountable through a formal supplier re-evaluation.
In-Depth: The Root Cause of Management Failure
When audit findings and nonconformities recur, the root cause is often linked to "Management Oversight." For example, if a facility consistently fails on pest control, the technical fix is more bait stations. However, the management fix is investigating why the pest control contractor is not being supervised or why the structural repairs allowing pest entry were never funded. Management must use tools like the 5 Whys explained to dig deeper than the surface-level symptom. If the "Why" ends with "No budget was approved," the failure is explicitly one of senior management commitment.
Leadership Checklist for Audit Readiness
To ensure your leadership team is prepared for a GFSI or regulatory audit, use the following checklist to verify active involvement:
- Daily Presence: Does senior management perform regular "Gemba walks" to observe hygiene practices?
- Objective Setting: Are food safety KPIs included in the annual performance reviews of all senior managers?
- Reporting Lines: Does the Food Safety Team Leader have a direct line to the CEO?
- Whistleblowing: Is there a confidential way for employees to report concerns? See food safety culture problems for common barriers.
- Regulatory Awareness: Can the site manager explain the basics of the R638 regulations?
- Traceability: Does management understand the mass balance explained concept and its importance in fraud prevention?
- Food Defence: Has management approved the food defence plan and provided resources for site security?
Operational Detail: The Interview Process
During a FSSC 22000 certification South Africa audit, the auditor will typically spend at least 30 to 60 minutes in a formal interview with Top Management. In this session, leadership should avoid technical jargon and focus on how food safety integrates with business strategy.
"An auditor isn't checking if a CEO knows the exact temperature of a pasteuriser; they are checking if the CEO knows why that temperature is a Critical Control Point (CCP) and what happens to the business if it isn't met."
Practical questions often include:
- How do you ensure that food safety isn't sacrificed when you have a large, urgent order to ship?
- How do you stay informed about new South African food safety regulations?
- What was the last major investment you made in the facility to improve food safety?
- How do you monitor the performance of your approved supplier list to ensure they aren't introducing risks?
Management's Role in Food Fraud and Defence
Leadership commitment extends to protecting the brand from intentional harm. This involves a shift from HACCP (accidental) to food defence TACCP and food fraud VACCP. Management must provide the resources for a food fraud vulnerability assessment and a food defence threat assessment. Auditors will look for evidence that management has considered economically motivated adulteration in their supply chain, particularly for high-value ingredients like spices or oils common in South African manufacturing. If management hasn't authorised the budget for analytical testing to verify food authenticity, they are failing their commitment to product integrity.
The Role of Digital Systems in Management Oversight
One of the greatest challenges for senior management in South Africa is the visibility of data. In a paper-based system, a Managing Director might only see a food safety report once a month. This delay makes proactive leadership impossible. Transitioning to a digital food safety system allows management to see real-time dashboards of CCP compliance, training gaps, and maintenance delays.
For example, using digital food traceability tools allows management to verify a traceability exercise checklist in minutes rather than hours. This level of oversight is highly regarded by auditors as it proves that management has their finger on the pulse of the operation every day, not just during audit week. It also facilitates easier supplier performance management by centralising audit reports and COAs.
Documentation and Audit Practice
To pass a readiness audit, management must ensure that the following documents are not only present but actively used:
- The Food Safety Policy: Must be appropriate to the purpose of the organisation and include a commitment to satisfy applicable requirements.
- Meeting Minutes: Must show that management reviewed the audit programme and allocated resources for its execution.
- Resource Requests: A log of requested vs. approved food safety spend provides a paper trail of commitment.
- Culture Survey Results: Data from a food safety culture questionnaire showing that management is listening to staff concerns.
Conclusion and Next Steps
Auditors are no longer satisfied with leadership that sits in the boardroom. They expect a visible, vocal, and financially supportive senior management team that treats food safety as a core business value rather than a compliance hurdle. By understanding the legal requirements of R.638 and the cultural expectations of GFSI standards, manufacturers can build systems that are truly sustainable and ready for GMP audits or international certification.
Shilux provides specialised senior management awareness training and consulting to help leadership teams navigate their specific roles in the audit process. Whether you need a gap audit to identify gaps in leadership commitment or a transition to our software for better data visibility, we support South African manufacturers in achieving and maintaining world-class certification status through rigorous quality management and regulatory compliance support.