BRCGS Consumer Products Issue 5 Transition Plan: A Month by Month Route to Audit

By Robert Low, Lead Management System Specialist and BRCGS Approved Trainer

Issue 5 was released on 13 October 2026 and certification audits against it commence on 1 June 2027. That is about seven and a half months. It sounds like plenty. It is not, because the part that takes the time is not reading the standard, it is generating evidence that the new system has been running. Here is my BRCGS Consumer Products Issue 5 transition plan, written in plain English. It is my own interpretation of the published standard, so always check the official text and confirm your audit date with your certification body.

Start With Your Own Dates

The plan only works if you know where your audit falls. Work out your audit due date and your audit window from your current certificate, then check whether the audit lands before or after 1 June 2027. Before that date it is an Issue 4 audit. After it, Issue 5. If you are close to the line, get the answer in writing from your certification body. My Issue 5 hub page has a free checker to help you test it, and the audit protocol post explains how the windows work.

Do Not Wait for Training

I run Issue 5 training from January 2027, and it will help. But training should not be where you start. By January you should already know your gaps. Training then becomes the place you sharpen a plan you have started, not the place you discover you need one.

The Runway, Month by Month

October and November: find the gaps. Get the standard, read it end to end and compare it with your system clause by clause. Remember that clauses have moved and been reworded, so a quick skim of the contents page is not a gap analysis. Write down every gap, however small, and note who owns it.

December and January: decide and design. Sort the gaps by size. Some are a wording change in a procedure. Some are new activities, such as the product risk assessment for every product, a HARA that works without critical control points, a product defence plan or the confidential reporting route. Plan the large ones first because they need people and time.

February and March: implement and run. This is the important stage. A new procedure that starts running in May has two weeks of records by the audit. One that starts in February has months. Auditors do not fail you for being new. They fail you for having nothing to show.

April: audit yourself. Run a full internal audit and inspection against Issue 5 in good time, because they have to be complete before your audit date. Treat the findings as you would an auditor’s.

May: close and rehearse. Close out what the April audit found, brief the people who will meet the auditor and check your evidence is where you say it is.

My Model: CAPAVA, to Close Every Gap So It Stays Closed

For every gap, and every internal audit finding along the way, I use the same loop. I call it CAPAVA.

Corrective action. Fix the gap in front of you. Write the missing procedure, run the missing check, assign the missing owner.

Root cause. Ask why the gap existed. A missing record on one line might mean nobody owned it, nobody was trained or the form did not fit the job.

Preventive action. Change something so the same gap cannot open again, for example a revised form, a training update or a trigger in your change control.

Verification action. Go back after a few weeks and check it worked, with evidence. This is the step most sites skip, and it is the one that closes the loop.

The standard asks for the same thinking when you deal with non-conformities and corrective actions. If you build the habit during the transition, you will be using it naturally when the auditor arrives. Picture a site that adds a new training record in February. If it never verifies that the form is being completed, it will find out in the audit.

The Phased Dates Belong in the Plan Too

A few requirements are not auditable on day one. The culture action plan and the product defence plan review are due from 1 June 2028, and so is the supply chain vulnerability assessment. The effectiveness review of the culture plan follows from 1 June 2029. Put these in the plan as later work, so they arrive as planned tasks. See the main changes post for the full list.

Where Sites Get Caught Out

The biggest mistake is spending the first four months on documents and the last three on panic. The second is treating the gap analysis as a one person job when the HARA, the management system and the product defence work all need other people involved. The third is leaving the verification step out of the loop, so problems are closed on paper only.

Other posts in this series cover the HARA and the management system in more detail. If you want someone to run the gap analysis with you and build the plan around your audit date, that is exactly what my remote gap analysis and consultancy are for.