The manufacturer best prepared for an unannounced JAKIM surveillance visit is not the one that prepared for that specific visit. It is the one whose compliance system operates the same way every day — with or without an audit scheduled.

This is the operational reality of halal certification management in Malaysia in 2026. JAKIM's MPPHM 2020 surveillance audit framework and MYeHALAL's digital submission requirements together mean the compliance timeline is no longer cyclical. Audit readiness is a continuous operational standard, not a pre-audit preparation exercise.

This checklist covers every area JAKIM evaluates under MHMS 2020. Use it not just before an audit — use it to establish the standard your team maintains every day.

Before You Begin: What JAKIM Is Actually Assessing

JAKIM auditors evaluate compliance against the MHMS 2020 framework — and specifically, whether your organisation has a functioning Halal Assurance System (HAS) that operates continuously, not one assembled for the audit.

A system that genuinely runs every day and one assembled for the visit do not leave the same trace, and the difference is legible in the records themselves. What separates them:

Record dates that cluster around the audit period — monitoring logs, training records, and NCRs that all appear in the weeks before the audit
NCRs raised and closed in the same short window — suggesting retrospective documentation rather than real-time tracking
HCP monitoring logs with suspiciously uniform entries — identical times, identical readings, suggesting the records were filled in after the fact
JKHD minutes with no evidence of actual deliberation — minutes that read as post-hoc records rather than genuine governance discussions
Staff who cannot explain their own procedures — a Halal Executive who needs to look up the current HCP list during the audit has not been managing it continuously

Everything in this checklist should reflect an ongoing practice. If any item currently requires a preparation effort to satisfy, that is the gap to close.

Section 1 — Organisational Readiness (JKHD)

Your Jawatankuasa Halal Dalaman (JKHD — Internal Halal Committee) is typically the first area auditors examine. A JKHD that is formally constituted and actively functioning signals that the organisation takes its halal obligations as a governance matter, not a documentation exercise.

Documents to verify:

JKHD composition formally documented — names, designations, roles, and appointment dates recorded
Halal Executive appointment letter on file — qualifications verified against MHMS 2020 requirements
JKHD meeting minutes complete — all meetings from the past 12 months present, signed, dated, and filed in a shared, accessible system
Meeting frequency compliant — intervals between sessions do not exceed the MHMS 2020 minimum requirement
Halal policy current — reviewed and re-signed by top management within the current certification period
Organisational chart current — reflects actual reporting structure, consistent with JKHD documentation
JAKIM contact details updated — Halal Executive's registered contact information current in JAKIM's MYeHALAL records

MYeHALAL readiness:

All JKHD documentation is in digital format, accessible for portal submission
JKHD records are stored in a shared system — not on an individual's personal device or local drive

Common failure: JKHD minutes that are present but unsigned, undated, stored only on the Halal Executive's laptop, or produced in batches shortly before the audit rather than at intervals through the year. Auditors will check file creation dates.

Section 2 — HAS Documentation and Version Control

Your Halal Assurance System documentation must be comprehensive, version-controlled, and retrievable within minutes — not within hours. Auditors will request specific documents on the spot and expect immediate access.

Documentation checklist:

HAS manual current — latest version with full revision history, distributed to all relevant departments
SOPs complete for all halal-critical processes — procurement, production, storage, distribution, cleaning, and Sertu procedures
IHCS documentation complete — all internal controls documented and mapped to HCPs (IHCS vs HAS guide here)
Document register maintained — all documents logged with version number, effective date, and document owner
Controlled copies confirmed — relevant departments hold current versions only; superseded versions removed from circulation
Bilingual alignment verified — where English and Bahasa Melayu versions coexist, content is consistent between both

What auditors look for beyond the obvious: They will request specific SOPs for processes they have just observed on the production floor — and check whether the written procedure matches what they saw. SOPs that describe ideal practice rather than actual practice are among the most cited non-conformances in JAKIM audit reports.

Section 3 — Halal Control Points (HCP) Verification

HCP documentation must demonstrate active, ongoing monitoring — not just that HCPs have been identified and documented. Auditors will compare your HCP monitoring records against actual production schedules to verify that records reflect real activity, not reconstructed entries.

HCP checklist:

HCP register complete — all HCPs identified and documented across every active production line
Each HCP has a defined monitoring procedure — frequency, responsible person, acceptance criteria, and corrective action protocol
Monitoring records current — HCP logs covering the full certification period with no unexplained gaps
Responsible persons named for every HCP — accountability documented and current
Cross-contamination controls verified — physical separation, scheduling protocols, or validated cleaning SOPs documented and current
HCP register updated after process changes — if production processes were modified since the last audit, the HCP register reflects the current state

Practical tip: Prepare a single-page HCP summary table — HCP identifier, process stage, risk type, monitoring method, responsible person, monitoring frequency. An auditor who can review this clearly at the start of the facility walkthrough will spend less time interrogating the HCP section and reach faster confidence in your compliance posture.

Section 4 — Supplier and Raw Material Compliance

Supplier certificate currency is a recurring weak point. Each certifying body sets its own validity period, so every certificate falls due on its own schedule — and a spreadsheet does not raise its hand when one lapses. Manual tracking lets expiry risk accumulate quietly, which is exactly the shape of failure an auditor finds by sampling.

Core supplier checklist:

Supplier list current — reflects all active suppliers, not the list from the previous audit cycle
All halal certificates on file — physical or digital copies for every halal-critical supplier
No expired certificates — verify against original documents today, not from memory or a spreadsheet that may not be current
Certificate-issuing bodies verified — all certificates are from JAKIM-recognised certifying bodies
Raw material register updated — every ingredient, additive, flavouring, and processing aid cross-referenced to a valid halal certificate
New supplier onboarding records complete — halal verification documented before first material use, not added retrospectively
Certificate renewal tracking active — upcoming renewals identified, chase process initiated before expiry

For higher-risk ingredient categories:

Flavourings and flavour enhancers verified separately — a compound flavouring carries its own ingredient list, and the halal status of the carrier is not covered by the certificate of the food it goes into
Processing aids and release agents reviewed — halal status verified even for indirect food contact materials
Packaging materials reviewed — where packaging has halal implications (e.g., animal-derived inks or adhesives), certificates verified

Critical note: A single unverified or expired supplier certificate for an actively used ingredient can result in a major NCR — and under MPPHM 2020 (Pindaan 2026), a BESAR (Major) non-conformance means the SPHM is suspended immediately. Do not assume certificates collected at onboarding remain valid — verify current status against original documents.

Section 5 — Internal Audit Records

MHMS 2020 requires structured internal audits, not informal compliance reviews. Auditors assess both the quality of your internal audit programme and whether its outputs demonstrate a genuinely functioning IHCS.

Internal audit checklist:

Audit schedule followed as planned — audits conducted on schedule, not deferred without documented rationale
Auditors were independent — internal auditors did not assess areas for which they are personally responsible
Internal audit reports are structured — findings recorded against specific MHMS 2020 criteria, not as freeform observations
All NCRs formally logged — with date raised, non-conformance description, MHMS reference, root cause assessment, and assigned owner
Corrective actions have implementation evidence — not just documented plans, but proof of action taken
NCR closure requires verification — someone other than the NCR owner confirmed the corrective action was effective before closure
Previous JAKIM external audit NCRs fully closed — every item from the last JAKIM inspection resolved with documented evidence
NCR patterns reviewed — recurring non-conformances with the same root cause identified and addressed at system level

What auditors find most revealing: NCR records where all items were raised and closed in the weeks just before the external audit — not distributed across the full certification period — signal that the internal audit programme is not genuinely functioning. Real operational systems generate NCRs throughout the year.

Section 6 — Staff Training and Competency Records

Training records must demonstrate ongoing, role-linked halal education — not one-time orientation events. Auditors cross-reference training records against the HCP register to verify that every person operating an HCP has current documented training for that role.

Training records checklist:

Training register current — all staff in halal-sensitive roles listed with training dates and content description
Training linked to specific roles and HCPs — records show that training matched each individual's actual function
Refresher training completed — evidence that training recurs on schedule, not limited to initial onboarding
New staff records present — documentation for all staff hired since the previous audit
Halal Executive CPD current — professional development records available and reflecting current competency
Training effectiveness assessed — competency verification beyond attendance records, even if informal

Section 7 — Facility and Physical Compliance

Physical conditions in your facility must match what your documentation describes. During the facility walkthrough, auditors compare actual conditions against your SOPs — discrepancies between written procedures and observed practice are a significant finding category.

Physical compliance checklist:

Facility zoning consistent with IHCS — halal and non-halal zones clearly demarcated with visible, current signage
Sertu records available — ritual purification procedures documented and records current for any areas requiring them
Equipment status matches documentation — shared equipment protocols align with written procedures; dedicated equipment is physically identifiable and labelled
Storage segregation confirmed — halal and non-halal materials stored, labelled, and accessed separately
Pest control records valid — service provider holds a current halal-compliant certification; treatment records available
Cleaning schedule records complete — logs covering the full period since the last audit, not just recent weeks

Section 8 — MYeHALAL Portal Readiness (Pre-Audit Digital Check)

Applications for the SPHM are made online through the MYeHALAL system, so preparation for a physical audit includes ensuring digital submission records are complete, current, and in a format the portal accepts. Auditors may cross-reference physical documentation against portal records — and discrepancies between the two are increasingly cited as findings.

Core MYeHALAL checklist:

Company registration current in MYeHALAL — legal entity details, facility address, and scope of certification accurate
Halal Executive contact details updated in the portal — phone number and email current
Product list current — certified product scope reflects actual current production, with no unlisted products in production
Previous audit correspondence archived — all JAKIM communications through the portal documented and accessible
Documentation export-ready — supplier list, training register, and NCR log exportable as digital documents ready for upload to the portal
Outstanding portal notifications resolved — no unresponded JAKIM queries or information requests pending

Pre-audit digital check — items now systematically verified by JAKIM auditors:

All HAS documents are uploaded and accessible in the company file — HAS Manual, SOPs, JKHD constitution, internal audit reports
Supplier halal certificates are current — no certificate within 30 days of expiry visible in the portal supplier register
Product formulations recorded in MYeHALAL match current formulations — no divergence introduced by undocumented post-certification reformulations
The company account has at least 2 active users — Halal Executive plus a documented back-up to prevent single-point-of-failure access loss
Any change in formulation, raw material, or process since the last audit has been notified to JAKIM through the portal
All training certificates uploaded reference HPB JAKIM-registered providers — non-registered provider certificates removed or replaced before audit

Common Pitfall: Some manufacturers maintain their HAS Manual offline as a master version and only upload an outdated copy to MYeHALAL. JAKIM auditors now cross-check both — discrepancies trigger automatic NCRs because the portal version is treated as the legally submitted record. The same risk applies to the supplier register, the HCP list, and the JKHD composition: if the portal version lags the operational version by more than one cycle, expect a finding. Establish a single source of truth and synchronise it to MYeHALAL on every change, not just before audits.

Section 9 — Final Pre-Audit Readiness Review

In the week before a scheduled audit, complete this final confirmation:

Compile audit evidence folder — physical or digital, organised by MHMS 2020 requirement
Brief all JKHD members — roles during the audit, documents each member is responsible for, escalation procedures
Walk the full production floor — compare current conditions against documentation; close any visible gaps before audit day
Test document retrieval — verify any requested document can be located and presented within two minutes
Confirm all open NCR status — no outstanding non-conformance without a documented status update
MYeHALAL portal check — confirm all submissions are current and no pending items require action

After the Audit: Managing NCRs Effectively

When JAKIM raises an NCR, it is information — not just a compliance penalty. How your organisation responds determines your audit outcome and your readiness for the next cycle.

For every NCR received:

Recommended NCR Management Workflow

1
Identify & Document
Record the non-conformance using exact wording. Log it in the NCR register immediately — never leave it in an email thread.
2
Root Cause Analysis
Identify the system failure behind the finding — not just the surface symptom. Assign to a named owner with a deadline.
3
Define Corrective & Preventive Action
Document both the corrective action (fix the finding) and the preventive action (prevent recurrence). Assign responsibility.
4
Implement & Gather Evidence
Execute the action. Collect proof: updated SOPs, re-training records, process photos, management sign-offs.
5
Verify Effectiveness
An independent reviewer confirms the root cause is resolved — not just the observable symptom. This step is mandatory before closure.
6
Close NCR
NCR formally closed with documented confirmation. Send the answer to the inspecting officer if externally raised by JAKIM.

Under MHMS 2020, NCRs must be tracked to verified closure — not just to action. Unresolved NCRs are a finding at the next audit.

Record the finding verbatim — use JAKIM's exact wording in your NCR log; do not paraphrase
Assign root cause analysis to a named owner with a defined deadline — not the symptom, but the system failure that caused it
Document both corrective and preventive actions — correct the specific finding and address the system gap that allowed it
Gather implementation evidence — updated procedures, sign-off records, photos, re-training logs as appropriate
Submit the answer to the inspecting officer — within the period set, in writing, with supporting documents and photographic evidence
Verify effectiveness before closure — confirm the corrective action resolved the root cause, not just the observable symptom

NCRs that persist across audit cycles — or where the same root cause generates a new finding — signal to JAKIM that your IHCS is not functioning effectively. This pattern escalates the risk classification and scrutiny level for your next audit.

The status of each NCR is recorded in MYeHALAL. The answer itself goes to the inspecting officer: MPPHM 2020 (Pindaan 2026) requires it within the period set, in writing, directly and specifically addressing the corrective action taken, with supporting documents and photographic evidence. It is the officer who then reports the NCR status through the MYeHALAL system. A late answer is not a formality: the officer may recommend that the application be rejected. For the full lifecycle from detection to closure, read our dedicated NCR Management for Halal Certification guide.

How TAQYID Eliminates the Pre-Audit Sprint

The scenario most Halal Executives want to avoid: a JAKIM audit notification triggers an intensive effort to locate, compile, and verify documentation that should already be in continuous order.

TAQYID replaces that sprint with a compliance posture that is continuously maintained. Supplier certificate expiry is tracked automatically — every certificate, every supplier, with configurable alerts at 180/90/30/7 days. Internal audits are conducted through MHMS 2020-aligned checklists with NCR workflows built in. Every NCR is tracked from identification through root cause to verified closure in a single system. The compliance dashboard shows current status across every MHMS 2020 requirement at any point.

Audit day should be the moment you confirm what you already know about your compliance status. If you are currently in preparation mode, read our analysis of the hidden cost of managing compliance manually.

Explore TAQYID's Audit Management features →

Your Team Is Audited Before Your Paperwork Is

An audit is not only a document review. It is conducted by someone who talks to your people, and the conversation starts before the first folder is opened.

A Halal Executive who can confidently explain their role without consulting notes, describe the last NCR identified in the most recent internal audit and its resolution, and point to the active HCP for the current production run — demonstrates something no binder can: that the system is operated, not merely documented.

Conversely, a Halal Executive who reaches for documentation to answer basic questions about their own operation, or who needs to check with colleagues about current supplier certificate status, signals that the HAS exists as documentation but not as a genuinely embedded system.

Prepare your team's knowledge and confidence, not just your paperwork. The audit begins the moment the auditor walks through the door — before a single document is opened.

Conclusion

JAKIM audit preparation in 2026 is not a cyclical exercise triggered by an audit notice. MPPHM 2020 surveillance audits and MYeHALAL digital submissions have changed the timeline of halal compliance. Audit readiness is the continuous operational standard.

Key takeaways:

MPPHM 2020 surveillance audits can be unannounced — manufacturers with manual, reactive compliance systems have materially higher exposure than those operating continuous, documented controls
Supplier certificate management is the highest-risk audit section — verify currency today, not the week before the audit
JKHD minutes, NCR records, and training logs must show continuous activity throughout the year — not concentrated pre-audit bursts
MYeHALAL portal readiness is now a mandatory dimension of audit preparation
How you respond to NCRs matters as much as receiving none — root cause resolution, not symptom correction

Start your 14-day free TAQYID trial — no credit card →

Frequently Asked Questions

How much notice does JAKIM typically give before a halal certification audit?

MPPHM 2020 (Pindaan 2026) requires the authority to notify you of the field-audit date (Bahagian VI, PEMAKLUMAN) but fixes no notice period — and it explicitly bars the company from amending that date once set. Separately, inspecting officers are entitled to carry out surveillance monitoring with no prior notice at all, independent of the renewal cycle, to verify that compliance is sustained between audits. Manufacturers should maintain continuous audit readiness rather than treating compliance as a cyclical preparation exercise. Under MHMS 2020, continuous compliance is the standard — not the ideal.

What are the most common reasons Malaysian manufacturers receive NCRs during JAKIM audits?

Five NCR categories each map to a specific MHMS 2020 requirement, which is what makes them checkable before an audit rather than after: (1) expired or unverified supplier halal certificates for active ingredients; (2) incomplete or missing staff training records, particularly for personnel at HCPs; (3) internal audit NCRs not tracked through to formal verified closure; (4) JKHD meeting records that are unsigned, undated, or not stored in a retrievable shared system; and (5) HCP monitoring records that are incomplete or show inconsistent coverage across production lines. The common root cause across all five is a compliance system that relies on individual memory and informal practices rather than systematic, documented controls.

Can the same compliance documentation be used for both JAKIM and GCC halal standards?

Yes, with careful scoping. The HAS documentation required by MHMS 2020 shares significant structural overlap with GCC halal standards under ESMA (Emirates Authority for Standardisation and Metrology) and SMIIC (Standards and Metrology Institute for the OIC countries). Supplier certificate records, internal audit reports, training logs, and NCR management processes apply across both frameworks. The key differences lie in jurisdiction-specific halal criteria, certifying body recognition lists, and labelling requirements. A robust MHMS 2020 HAS is the strongest foundation for GCC multi-standard certification.

What happens if a major NCR from a JAKIM audit is not resolved within the required timeframe?

In an audit, MPPHM 2020 (Pindaan 2026) requires NCR answers to reach the inspecting officer within the period set — in writing, directly and specifically addressing the corrective action taken, with supporting documents and photographic evidence. If they do not, the officer may recommend that the application be rejected. For a certificate holder, a BESAR (Major) non-conformance suspends the SPHM immediately, and failing to comply with the corrective action ordered for it is itself listed as a SERIUS non-conformance, for which the SPHM is withdrawn immediately.

How should NCR responses be submitted to JAKIM after an external audit?

NCR answers for externally raised findings are submitted to the inspecting officer within the period set. The response must be documented in writing, specific and direct about the corrective action taken, and include supporting documents (schedules, receipts, halal certificates, invoices) and photographic evidence. A response that does not specifically and directly address the corrective action taken has not met the requirement, and the NCR stays open until one does.

JAKIM audithalal certificationaudit checklistMHMS 2020MYeHALALMPPHM 2020HAS

JAKIM Halal Audit Checklist 2026: Prepare Your Factory for MHMS 2020