The IFS Food doctrine: the rules you are audited against but have probably not read

Most sites certified to IFS Food know the standard well. Far fewer have read the doctrine, the short companion document IFS publishes to answer technical questions and correct the standard. That matters because the doctrine is not guidance. IFS describes its doctrines as normative documents that certified companies, auditors and certification bodies are all expected to know.

IFS published version 5 of the Food 8 doctrine on 23 April 2026. The doctrine's own foreword says new or changed rules apply two months after publication unless stated otherwise, so everything in it has applied since 23 June 2026. If you have had an IFS Food audit since then, it was against this document.

IFS says the update was needed to meet the Global Food Safety Initiative (GFSI) 2024 benchmarking requirements, ahead of its recognition application. That explains the shape of the changes: they tighten notification, reporting and definitions, which are exactly the areas the benchmark scrutinises.

The source is the IFS Food 8 doctrine version 5, free to download, English only.

How to read the references

The doctrine numbers each topic by the part of the standard and the chapter it clarifies. Doctrine 1-4.2.1 means part 1 of the standard, chapter 4.2.1. Doctrine 2-1.2 means part 2, the audit checklist, chapter 1.2. Every section below gives the doctrine number, so you can go straight to it.

What is marked new or updated

The doctrine does not publish a separate list of changes. Instead, its contents table flags each topic that is new or updated in this version. Six topics carry a flag. Five of them affect certified sites, and the sixth, doctrine 3-2.6, is about training for certification body auditors and reviewers, so it is not covered here.

Recall notification in three working days

Doctrine reference: 2-1.2, requirement 1.2.6*, marked new as an erratum and clarification.

This is the one to act on first.

Senior management must keep the certification body informed of anything that could affect the site's ability to meet certification requirements. At a minimum that includes a change of legal entity name or a change of production site location.

On top of that, the site has three working days to tell the certification body about:

1. any product recall for food safety or food fraud reasons
2. any visit from the authorities that results in mandatory action because the product presents a food safety hazard

Read the erratum on the page, not as extracted text, because the changes are shown as strikethrough. It deletes the old catch-all line for any product recall, and it deletes withdrawals decided by the authorities. It also narrows the authority visit trigger: the old wording covered mandatory action connected to food safety or food fraud, and the new wording covers mandatory action because the product presents a food safety hazard.

Where an authority-ordered recall involves illness, injury, hospitalisation or a death, the certification body then has three working days to answer the question in the IFS Database. That note sits under the same doctrine topic.

A separate topic, doctrine 4-4 part I, which is not flagged as changed, sets out what the certification body has to record in the database when it logs one of these events: the company, the product including any private label or brand, the date of the recall or withdrawal, the batches involved, and the reason. Ten working days after that first entry, it has to add the cause, the corrections and corrective actions the site has taken, and what the certification body has done about the certificate.

The certification body can only enter what you give it. In practice, that means your recall procedure needs to produce all of that information inside ten working days, and your notification step needs to happen inside three.

Food safety culture now has a definition

Doctrine reference: Annex 12, glossary, marked new.

The glossary gains a definition of food safety culture. A food safety culture has to be established and maintained, and five elements are to be considered:

1. demonstrable commitment from management and all staff to producing and handling safe food
2. leadership that sets direction and engages everyone in food safety practice
3. awareness among all staff of why food hygiene matters to the business
4. open, clear communication, including communicating deviations and expectations
5. enough resources for the food hygiene system to work effectively

If your culture plan was built around a survey and an annual action list, check it against these five. The fifth, resourcing, is the one most plans say least about.

Cancelled audits have hard consequences

Doctrine reference: 1-4.2.1, situations where an audit is considered cancelled, marked updated.

An audit counts as cancelled if it stops before the audit checklist is complete. When that happens:

1. the current certificate is withdrawn within two working days
2. no new certificate is issued
3. the audit does not count towards the rule that one audit in every three must be unannounced
4. a new initial audit cannot happen until at least six weeks after the last day of the stopped audit

The report is still completed up to the point the audit stopped, reviewed and uploaded. Any deviations or non-conformities already scored in it are reviewed by the auditor before the next audit.

The practical reading is that stopping an audit, whether because production is down or the day is going badly, is not a pause button. It costs you the certificate and at least six weeks.

Exceptional circumstances

Doctrine reference: 4-4 part II, marked new.

A company that wants to keep its certificate visible in the IFS Database and let retailers know what is happening can select an exceptional circumstance: pandemic, political conflict, natural disaster, or other. Whether the situation affects the certificate's validity is the certification body's call, not the site's.

Changing address or legal entity

Doctrine reference: 4-2.1 part II, when a new COID shall be created, marked updated.

The COID is the company's ID in the IFS Database. A site that moves to a new address gets a new COID and an initial audit. A change of legal entity may or may not trigger a new COID and initial audit, depending on whether the new entity is entitled to take over the old one's data. If it is not, the certification history becomes invisible and access to previous reports and action plans does not transfer.

If an acquisition, restructure or site move is anywhere on your horizon, raise it with your certification body before it happens, not after.

Clarifications worth knowing that were already there

These topics are not flagged as changed in version 5, but they are easy to miss.

Allergen labelling. Doctrine 2-4.19, requirement 4.19.3. Precautionary labelling for adventitious or technically unavoidable presence has to be based on risk, and that risk assessment has to cover allergens arriving in raw materials as well as allergens handled on site.

Purchasing. Doctrine 2-4.4, requirement 4.4.1*. Animals, fish and seafood subject to controls on prohibited substances, such as veterinary medicines, heavy metals and pesticides, need specific procurement procedures.

Traceability at slaughter. Doctrine 2-4.18, requirement 4.18.1*. At slaughtering sites, traceability starts for all edible parts of the carcass, including blood, before they are deemed fit for human consumption.

Food defence. Doctrine 2-4.21, requirement 4.21.2. The part about managing external food defence inspections only applies if your country has food defence legislation requiring them, or you export to the US and are subject to US Food and Drug Administration food defence inspection. Ordinary food safety inspections by the authorities are not what it covers.

Follow-up audits. Doctrine 1-2.3.3 parts I and II. A certification body can run a follow-up audit remotely, or as early as two weeks after the main audit, but only with a documented risk assessment.

Interpreters. Doctrine 1-2.1 part I. An audit at a site whose working language is English, German, French, Chinese, Italian or Spanish cannot use an interpreter. Spanish-speaking sites in Central and South America are exempt.

Monday morning list

1. Download the doctrine version 5 and file it with your copy of the IFS Food standard, marked as normative.
2. Check your recall procedure names the certification body as a party to notify within three working days of any recall for food safety or food fraud reasons, alongside the authorities and customers.
3. Add authority visits that end in mandatory action because product presents a food safety hazard to that same notification trigger.
4. Make sure your recall records capture product, brand or private label, dates, batches, reason, cause and corrective actions, and can do so within ten working days.
5. Map your food safety culture plan against the five elements in the new definition, and note where resourcing is covered.
6. Brief whoever hosts the auditor that a stopped audit means withdrawal of the certificate and at least six weeks before a new one.
7. Tell your certification body early about any planned site move or change of legal entity.
8. Review your precautionary allergen labelling risk assessment to confirm it covers allergens coming in on raw materials.

I work in quality in UK food manufacturing. This is information, not advice. Always check the source document before making decisions that matter.