Most importers feel confident in their Foreign Supplier Verification Program (FSVP) until the Food and Drug Administration issues a notice of inspection. What surprises companies isn’t the inspection itself, but the speed, precision and thoroughness with which investigators assess whether an FSVP is in place, implemented correctly, and accurately reflects the supply chain risks.

FSVP audits are among the most unforgiving reviews that FDA conducts. They’re designed to expose gaps quickly and hold the U.S. importer accountable, even when the foreign supplier’s systems appear strong. But many importers think they’re prepared when they aren’t.

Most regulatory audits allow for conversation, clarification, or corrective demonstrations. FSVP is different. Almost every conclusion the FDA reaches is based on whether your records match the hazards associated with your products, the controls implemented by your foreign supplier, and the risk-based verification activities you selected.

If these three elements don’t align, investigators deem the program inadequate. It’s common for importers to discover during the audit that their written procedures don’t match the actual actions of their personnel, one of the most frequent reasons for enforcement. 

For importers wanting to revisit their foundational documents before an audit, start with these FSVP verification essentials:

• Step 1: Gather and maintain required FSVP records.
• Step 2: Conduct or obtain a hazard analysis.
• Step 3: Evaluate and approve your foreign supplier.
• Step 4: Determine appropriate verification activities.
• Step 5: Maintain ongoing monitoring and reassessment.
• Step 6: Align your program with upstream safety controls.

FSVP audits may occur as routine FSMA surveillance, following import entry reviews, after significant supplier incidents, or in response to consumer complaints or outbreak investigations.

Most companies receive no advance notice beyond Form 482, the standard notification of inspection. From that moment, the clock starts.

The First Minutes of an FSVP Audit

Once the investigator arrives, they will immediately request your written FSVP, hazard analyses, supplier evaluations and approval rationale, verification activity records, and evidence of reanalysis.

Unlike facility inspections, the FDA doesn’t tour your operations or observe production. The audit is almost entirely a document-for-document evaluation. If your records are incomplete, inconsistent or not readily retrievable, the investigator writes the deficiency into the file. 

Investigators focus on five areas because they reveal the strength or failure of an FSVP:

• Hazard analysis quality. Is the hazard analysis product-specific, risk-based, and reviewed by a qualified individual? Does it identify who controls each hazard? If your analysis is generic or outdated, the FDA notes it immediately.
• Supplier approval decision. Does your supplier’s performance justify approval? Many importers list a supplier as “approved” with no written rationale, no historical review, and no evaluation of corrective actions.
• Verification activities. Were the activities selected appropriate for the hazards? For example, testing alone rarely satisfies verification for high-risk suppliers. The FDA expects logic, not convenience.
• Alignment between records and reality. Do your written procedures match your actual practices? If the investigator interviews staff and hears a different process than what appears in your FSVP, this misalignment is cited.
• Qualified individual involvement. Was a properly trained individual involved in the evaluation and approval process? Lack of PCQI or FSVP training is one of the most consistent findings across warning letters. Importers who want clarity on common qualified-individual pitfalls often refer to audit risks PCQIs can prevent.

Where Importers Most Frequently Get Caught

Certain mistakes appear so consistently that investigators expect to find them. These include:

• Missing or boilerplate hazard analyses. These signal to FDA that the importer has not evaluated the supplier’s actual process. This often leads investigators to review multiple product lines.
• Supplier approval without documentation. “Approved” means nothing if the rationale isn’t recorded. FDA will consider the supplier effectively “not evaluated” if documents aren’t present.
• Incomplete or inappropriate verification activities. When importers choose minimal verification activities or choose them for convenience, investigators note the gap immediately.
• Failure to reassess suppliers. This is required at least every three years. Many companies fail to document this step, even if their supplier has not changed.
• Broken internal communication. When procurement, quality assurance and leadership aren’t aligned, the FSVP falls apart under audit pressure. FDA expects that all responsible parties can explain the program.
• Lack of alignment with HACCP or preventive controls.

If supplier controls do not logically align with the hazards in your analysis, FDA views the entire program as structurally weak. 

When FDA Finds a Deficiency

FDA’s findings range from informal investigator notes to formal citations. They include verbal or written feedback during the audit, form FDA-483a (inspectional observations), warning letters published publicly, and potential import holds.

If a deficiency appears, FDA expects prompt corrective action.

FSVP is a regulation built on interpretation, and interpretation requires training. The most consistently cited deficiencies are tied to misunderstandings of what FDA considers a risk-based verification.

Companies with formally trained FSVP personnel are significantly more likely to produce records that meet FDA expectations, demonstrate appropriate hazard evaluations, justify supplier approval decisions, and prepare corrective actions when needed.

An FSVP audit goes beyond merely confirming the existence of your program. It delves into its accuracy, logic and implementation. If your team is uncertain about evaluating hazards, justifying supplier approval or selecting verification activities with FDA-level reasoning, formal FSVP training offers immediate alignment and clarity.

Fabiola Negrón is director of food safety at Registrar Corp.