From Recalls to Resilience: Internal Risk Audit in a Food Company

A large food production company specialising in chilled ready meals had recently experienced two costly product recalls linked to labelling errors and potential contamination. Retail customers demanded assurances, and food safety authorities increased inspection frequency. The leadership team realised that incremental fixes would not be enough. A comprehensive internal risk audit and regulatory compliance review was commissioned, with Radner’s team tasked to examine not only factory operations but also supplier management, logistics and product development.

The engagement began with a narrative mapping of how a product idea became a finished meal on a supermarket shelf. Radner’s team followed this journey from recipe development through ingredient sourcing, production, packaging, storage and distribution. At each stage, potential failure points were identified, along with applicable food safety and labelling regulations. This storytelling approach helped non‑technical stakeholders visualise where controls should exist and how they interacted. The internal risk audit and regulatory compliance work thus created a shared mental model before diving into detailed testing.

In the factories, Radner’s team conducted structured hygiene and process audits. Temperature control, cleaning regimes, allergen segregation, traceability and foreign body prevention were examined in depth. Observations were compared with documented procedures and certification standards. While the company held several recognised food safety certifications, the internal risk audit and regulatory compliance review revealed that day‑to‑day practices sometimes drifted, especially during peak production periods. Shortcuts in cleaning between product changeovers and inconsistent recording of critical control point checks were among the recurring themes.

Supplier management emerged as a critical risk area. The company sourced ingredients from dozens of suppliers across multiple countries, including high‑risk items such as spices and nuts. Radner’s team reviewed supplier approval processes, audit reports, certificates of analysis and incident histories. It became apparent that the depth of scrutiny varied widely, with some long‑standing suppliers effectively grandfathered in without periodic reassessment. The internal risk audit and regulatory compliance findings highlighted the need for a more systematic, risk‑based supplier assurance programme, especially for ingredients with allergen or contamination potential.

Traceability testing formed a key component of the audit. Radner’s team selected several finished products and attempted to trace every ingredient back to its origin, using production records, batch codes and supplier documentation. In most cases, traceability worked, but there were gaps when ingredients were repacked or when substitutions occurred at short notice. These gaps could significantly complicate recall management. The internal risk audit and regulatory compliance review recommended enhancements to batch coding logic and real‑time recording of substitutions, ensuring that the company could rapidly identify affected products in the event of an incident.

Labelling controls were scrutinised in response to previous recall experiences. Radner’s team examined how ingredient lists, allergen declarations, nutritional information and storage instructions were generated, approved and updated. The process involved multiple handovers between product development, regulatory affairs, marketing and packaging suppliers. In some cases, last‑minute recipe changes were not fully reflected in labels, creating a risk of inaccurate information. The internal risk audit and regulatory compliance work proposed a more integrated workflow, with a single source of truth for product specifications and automated checks to detect inconsistencies.

Cold chain integrity was another focus area. The company relied on a mix of owned and third‑party logistics providers to deliver chilled products to retailers. Temperature monitoring systems existed, but data was not always analysed proactively. Radner’s team reviewed transport logs, alarm records and corrective actions. Instances of temperature excursions were sometimes recorded but not investigated in depth. The internal risk audit and regulatory compliance review recommended clearer escalation criteria, trend analysis of temperature data and contractual requirements for logistics partners to share detailed records.

Beyond operational controls, governance and culture were assessed. Interviews with managers and line workers revealed a strong commitment to food safety in principle, but also pressure to meet tight delivery windows and promotional campaigns. When conflicts arose, commercial priorities sometimes overshadowed caution. Radner’s team facilitated workshops where real incidents were reconstructed, and participants discussed decision points and trade‑offs. The internal risk audit and regulatory compliance process thus served as a mirror, showing how organisational narratives about being "customer‑focused" could unintentionally encourage risk‑taking.

One of the most impactful elements of the engagement was the development of a consolidated food safety risk register. Previously, risks were documented in different formats by quality, operations and procurement teams. Radner’s team worked with stakeholders to identify key hazards, assess likelihood and impact, and define existing and planned controls. This register became a living document, reviewed regularly by senior management. The internal risk audit and regulatory compliance work ensured that it was not just a list, but a tool for prioritising investments and monitoring progress.

Training and competence were examined with equal rigour. The company had mandatory training modules, but records showed variable completion rates and limited assessment of understanding. Radner’s team observed training sessions and interviewed participants about how they applied knowledge on the line. The internal risk audit and regulatory compliance review recommended more practical, scenario‑based training, particularly around allergen management, personal hygiene and response to deviations. Refresher training intervals were adjusted based on risk, and supervisors were given clearer responsibilities for coaching and reinforcement.

As findings were consolidated, Radner’s team worked with the company to design a phased improvement plan. Immediate actions targeted high‑risk gaps, such as strengthening allergen changeover procedures, tightening supplier approval for high‑risk ingredients and enhancing label approval workflows. Medium‑term initiatives focused on system integration, including linking recipe management, labelling and production planning systems. Longer‑term projects addressed culture, leadership and continuous improvement mechanisms. The internal risk audit and regulatory compliance engagement thus provided both quick wins and a roadmap for sustained change.

Retail customers were kept informed. With the company’s agreement, Radner’s team helped prepare concise summaries of the audit approach, key themes and planned improvements, tailored to the needs of major supermarket chains. This transparency helped rebuild trust and demonstrated that the company was taking a proactive stance. The internal risk audit and regulatory compliance work became a differentiator in commercial discussions, showing that the producer was serious about managing risk and protecting consumers.

Regulatory interactions also improved. During subsequent inspections, authorities noted the structured risk register, enhanced traceability tests and more robust supplier oversight. When minor non‑conformities were identified, the company could show how they fit into a broader improvement plan, reducing the likelihood of escalated enforcement. The internal risk audit and regulatory compliance engagement had effectively aligned internal practices with external expectations, reducing uncertainty and surprise.

Operational benefits emerged as well. Better planning of cleaning and changeovers reduced downtime and waste. Fewer labelling errors meant less rework and fewer write‑offs. Enhanced supplier assurance reduced the frequency of ingredient‑related issues, stabilising production schedules. The internal risk audit and regulatory compliance analysis helped quantify these gains, demonstrating that robust controls could support efficiency rather than hinder it.

Perhaps most importantly, the company’s internal narrative shifted. Instead of viewing food safety and compliance as obligations imposed from outside, teams began to see them as integral to brand value and long‑term relationships with retailers and consumers. Line workers took pride in passing unannounced audits, and managers used the risk register to guide discussions about investments and innovation. The internal risk audit and regulatory compliance engagement had provided the structure and external perspective needed to catalyse this change.

In the years following the engagement, the company avoided major recalls and strengthened its position in key categories. New product launches incorporated risk considerations from the outset, and supplier partnerships were managed with greater transparency and rigour. Radner’s team had helped transform a period of crisis into an opportunity to build resilience. The internal risk audit and regulatory compliance process proved that in the food industry, disciplined risk management is not just about avoiding harm; it is a foundation for sustainable growth and trust.