A routine supplier audit identified something that had not been flagged in two consecutive certification audits. Here is what that situation showed.

Supplier audits and certification audits serve different purposes. A certification audit assesses a supplier’s system against a defined standard. A supplier audit, conducted by or on behalf of a buyer, evaluates whether that supplier relationship presents specific risks relevant to a particular product or process.

The following reflects a general pattern observed across multiple audit engagements. No company or individual is identified.

A food manufacturer had an approved supplier with a valid third-party certificate, renewed twice without major findings. During a supplier audit focused on a specific raw material category, gaps were identified in allergen segregation practices directly relevant to the manufacturer’s products. The area was not prominently assessed during standard certification because it fell within accepted operational parameters for that standard.

The finding was not a certification failure. It was a supply chain risk specific to the buyer’s context, and one that certification alone had not surfaced.

What comes in the way of identifying buyer-specific supplier risks

  • Reliance on certificate status without buyer-specific risk evaluation
  • Certificate scope that does not align with all buyer-relevant risk areas
  • Approved supplier lists reviewed by certificate validity rather than risk profile
  • Limited communication between buyers and suppliers on product-specific requirements
  • Supplier audits conducted infrequently or only following incidents

Audit-focused insights

From an audit perspective, supplier management effectiveness is not measured by certificate collection. It is assessed through the quality of risk-based decision-making behind supplier approval, monitoring, and review processes. The depth of that decision-making becomes visible when buyer-specific risks are evaluated rather than standard scope alone.

Certima’s Mission

As an impartial certification body, Certima assesses compliance with international food safety measures. Certification enables businesses to demonstrate that they meet regulatory and client requirements for food safety and quality through rigorous compliance.

While Certima does not provide operational guidance, audits serve as a valuable tool for businesses to strengthen transparency and trust in the delivery of safe food products, while evaluating their fraud prevention strategies and supply chain integrity.