The SQF Practitioner: who they are and what they must do
SQF makes you designate a Practitioner to own your food-safety system — here is what that person must be, who should run your internal audits, and why the Practitioner is not your PCQI.
Chef Diego runs a real food plant. If this page didn't get you there, tell us — a person reads every message.
After this lesson you can name your SQF Practitioner and confirm — on paper, against
the code — that the person you named actually qualifies. SQF does not leave this role
vague. It names a person, spells out what they must be, and expects them to hold the
food-safety system together in the long stretch between audits.
SQF names a person, not just a program
Most food-safety requirements describe things — a plan, a procedure, a record. The
SQF Food Safety Code does that too, but it also does something the other schemes are
quieter about: it makes senior site management designate a specific human being to
own the system. Under SQF Edition 9 — the edition in effect for certification as of
July 2026, though you should
confirm the current edition
before you build to it — that person is the
.
The code, in clause 2.1.1.4, requires senior management to designate not one
Practitioner but two: a primary and a substitute. That is deliberate. The system
cannot go dark because one person is on vacation, out sick, or gone. Both carry the
same authority — to oversee the system's development and upkeep, to act to protect
its integrity, and to pass on the information everyone needs to keep it running.
Notice who the code puts in charge of naming them: senior site management. Owning the
food-safety system is not a job someone drifts into from the floor. Leadership
assigns it, on the record, to a named primary and a named substitute.
What the Practitioner must be
The code does not let you hand the title to whoever is available. Clause 2.1.1.5 sets
five requirements, and both the primary and the substitute have to meet every one.
1
Employed by the site
The Practitioner is on your payroll, at the site being certified. Not a
contractor, not a corporate resource who visits — employed by the site.
2
In a position of responsibility over the system
They hold a role with real authority related to managing the site's SQF System.
The title has to come with the standing to actually change how the site works.
3
Trained in HACCP
They have completed a course in
. SQF's own guidance describes this as a course of at least
two days that is assessed — not an afternoon webinar you click through.
4
Competent with HACCP-based food safety plans
Beyond holding the certificate, they can actually build and maintain the food
safety plans the system runs on.
5
Fluent in the code for your scope
They understand the SQF Food Safety Code for your sector and what it takes to
implement and maintain the system across your scope of certification.
The SQF course itself is recommended, not required
SQF offers an "Implementing SQF Systems" course, and it is worth taking. But the
code does not require it — what it requires is the HACCP training above. If a vendor
tells you the SQF course is mandatory before you can name a Practitioner, they are
overstating it: SQF's own guidance calls that course strongly recommended, not
mandatory.
The consultant trap
A common first-timer move is to hire a consultant to be the Practitioner. It feels
efficient — the consultant knows SQF cold, you do not, so let them hold the role.
The code closes that door. The Practitioner must be employed by the site. A consultant
you retain is not employed by the site, so they cannot be your designated
Practitioner, however good they are.
That does not make consultants useless. A good one is among the fastest ways to stand
a system up, and they can train the employee who will hold the role. But the name on
the designation has to be someone on your payroll. Plan for the consultant to work
themselves out of the seat, not into it.
Can the CEO run the internal audits?
This is the question that trips up small operations, and the answer lives in a
different clause than people expect.
An is
mandatory under the code. Clause 2.5.4.1 requires internal audits conducted in full
and at least annually, against the SQF audit checklist or a similar tool, with
objective evidence recorded and corrective actions taken on whatever they surface.
The independence question sits in the next clause. Clause 2.5.4.2 says the staff
conducting internal audits must be trained and competent — and, "where practical,"
independent of the function being audited. Read that carefully, because it is
narrower than "the CEO can't audit." The code bans no particular person by title. It
asks that the person auditing a function not be the person who runs it.
That is why the Practitioner auditing their own system is the thing to avoid. If the
Practitioner built the food safety plans and owns the SQF System, having them audit
that same system defeats the purpose — they are checking their own work. The
independence is about the function, not the job title.
"Where practical" is the code admitting reality: in a very small shop, one person may
run nearly everything, and perfect independence is not always possible. But "where
practical" is a ceiling to reach for, not an excuse to skip. In practice:
Have each function audited by someone who does not run it — production audits the
warehouse's area, the warehouse lead audits production's, and so on.
For the areas the Practitioner personally owns, bring in a second trained internal
auditor, or an external one, so the review stays honest.
Whoever audits has to be trained and competent in internal-audit procedures. The
code requires that regardless of independence.
So can the CEO run the internal audits? They can audit functions they do not
personally run. They should not be the one auditing their own decisions — and neither
should the Practitioner.
The Practitioner is not the PCQI
The second thing first-timers merge is the SQF Practitioner and the PCQI. They sound
like the same "food safety person," and one human often fills both. But they come from
two different worlds, and neither requirement satisfies the other.
The is a creature of federal law. FSMA's Preventive Controls
for Human Food rule defines the PCQI as a qualified individual who has completed
training in risk-based preventive controls at least equivalent to a standardized
curriculum FDA recognizes as adequate, or is otherwise qualified through job
experience. Under 21 CFR 117.3, that person is not even required to be an employee of
the establishment.
The SQF Practitioner is a creature of a certification scheme. It exists because the
SQF code creates it, and — as above — it must be employed by the site and trained in
HACCP.
Line the two up and the difference is clear:
The PCQI answers to FDA law and the Food Safety Plan. The Practitioner answers to
the SQF code and the SQF System.
FDA does not care whether you hold an SQF certificate; SQF does not require you to
have a PCQI.
The PCQI need not be your employee; the Practitioner must be.
One capable person can wear both hats, and in many small plants they do. Just name
each role on purpose, and confirm the person you named meets each role's separate
requirements — do not assume that qualifying as one makes you the other. The PCQI
carries its own requirements under FSMA; here you only need to see that it is a
different seat than the Practitioner.
What the Practitioner owns between audits
The audit is one day a year. The Practitioner's real job is the other 364. A few
recurring duties the code pins on the role or its system:
Keep leadership informed. Clause 2.1.2.2 requires the Practitioner to update
senior management at least monthly on anything affecting the SQF System, with the
updates and the responses documented.
Run the internal audits. In full, at least annually, per clause 2.5.4.1 —
arranged for independence as above.
Test the recall. Clause 2.6.3.2 requires the product withdrawal and recall
system to be tested and verified as effective at least annually, tracing incoming
materials one step back and finished product one step forward. This is the mock
recall, and it is the Practitioner's to schedule and prove. The lessons on
why you run a mock recall
and
running one step by step
walk through the exercise.
None of this is dramatic. It is a person, employed at your site, trained in HACCP,
keeping a system honest month after month — so the audit becomes a confirmation
rather than a scramble.
The Practitioner's first real test is usually the SOPs they own: whether the
procedures on paper are specific enough to survive an auditor reading them against
what the floor actually does. That is the next thing to get right.