What Is a Halal Assurance System (HAS)? Complete 2026 Guide

A Penang food processor received a major NCR at their JAKIM renewal audit. The finding was not a missing document or an expired certificate. It was something more fundamental: their Halal Assurance System manual was comprehensive, well-written, and extensively cross-referenced to MHMS 2020. It described exactly what should happen at every stage of production.

The problem was that what the manual described and what the auditor observed on the production floor were two different things. The HAS existed as documentation. It did not exist as a functioning system.

This is the most common — and most consequential — failure mode in MHMS 2020 compliance. And it is what this guide is designed to help you avoid.

A Halal Assurance System is not a document. Understanding that distinction, and building a system that genuinely reflects how your organisation operates, is what HAS compliance actually requires.

---

What Is a Halal Assurance System?

A Halal Assurance System (HAS) — or Sistem Jaminan Halal (SJH) in Bahasa Melayu — is a documented management system that governs how an organisation controls, monitors, and maintains the halal integrity of its products and operations. Under MHMS 2020, every medium and large organisation seeking JAKIM certification (SPHM — Sijil Pengesahan Halal Malaysia) must establish and maintain a functioning HAS.

The core principle of HAS is continuous assurance — not periodic demonstration. Your HAS must be operational every day, generating records that prove it, not assembled ahead of a scheduled inspection.

The closest analogues in adjacent management disciplines help clarify what "management system" means in practice:

Like each of these, HAS is a system standard — the framework demands not just that you do the right things, but that you can demonstrate, through documented records, that the right things are done consistently. It requires organisational structure, defined responsibilities, documented procedures, active monitoring, and management oversight.

Micro and small enterprises may implement a simplified framework called the IHCS (Internal Halal Control System — Sistem Kawalan Halal Dalaman / SKHD) in place of full HAS. See our IHCS vs HAS comparison guide to determine which applies to your organisation.

---

Why JAKIM Requires a HAS — The Regulatory Rationale

MHMS 2020 introduced the HAS requirement to address a structural problem that had developed under earlier frameworks. Point-in-time compliance — where manufacturers prepared documentation for audit day and relaxed standards afterward — was undermining the credibility of Malaysia's halal certification internationally.

JAKIM's objectives with HAS were explicit:

• Continuous compliance: Halal integrity must be maintained and demonstrable at any point in time, not reconstructed before inspections
• Accountability: Named individuals and committees must own halal decisions, with documented authority and verified competency
• Traceability: Every ingredient, supplier, process, and control must be traceable through documentation
• International credibility: Malaysia's SPHM is recognised across GCC countries, ASEAN, and increasingly in European markets — HAS provides the management system rigour these markets expect

Since 2025, the operational meaning of HAS has been extended further by two JAKIM developments. The MYeHALAL portal requires digital, structured record submissions for all certification management. The MPPHM 2020 surveillance audit framework allows JAKIM to conduct unannounced post-certification inspections between scheduled audits. A HAS that operates continuously generates the transparent digital audit trail these processes expect. A HAS that only activates before audits exposes the manufacturer to surveillance findings.

---

HAS vs ISO 9001 vs HACCP: Understanding the Overlap

For manufacturers already operating under quality or food safety management frameworks, understanding how HAS relates to — and differs from — existing systems prevents duplication and clarifies the gap.

HAS is not a replacement for ISO 9001 or HACCP — it is a parallel, domain-specific management system. Manufacturers with functioning ISO 9001 systems have strong foundations for HAS: established document control, internal audit processes, and management review structures are directly transferable. The halal-specific components — JKHD, HCPs, halal-specific supplier verification, Sertu procedures — must be built as an additional layer.

---

The 9 Core Components of a Halal Assurance System

A complete HAS under MHMS 2020 must address the following components. Each is assessed independently during a JAKIM audit.

1. Halal Policy

A formal, written halal policy — approved and signed by top management — that commits the organisation to halal integrity and defines the governing principles. Auditors verify two things: that all employees in halal-sensitive positions are aware of the policy, and that management decisions actually reflect its intent. A policy displayed on a wall but disconnected from operational decisions is a finding.

2. Organisational Structure and JKHD

The HAS must formally document:

• Top management — ultimate accountability for halal commitment and resource allocation
• Halal Executive (Eksekutif Halal) — the designated individual responsible for day-to-day halal management, with formal appointment letter and verified competency against MHMS 2020 requirements
• JKHD (Jawatankuasa Halal Dalaman) — the Internal Halal Committee responsible for halal governance decisions, supplier approvals, NCR oversight, and management reviews

The Halal Executive cannot be assigned casually as a secondary responsibility. MHMS 2020 specifies competency requirements, and auditors will check the appointment letter and qualifications.

3. Raw Material Control and Supplier Management

Every ingredient, additive, processing aid, and packaging material with halal implications must be verified against a valid halal certificate from a JAKIM-recognised certifying body. The HAS supplier management component requires:

• A documented supplier qualification procedure
• An approved supplier list with valid certificate status and expiry tracking
• A process for monitoring certificate renewals — not just at onboarding but continuously
• A procedure for handling expired or unverified certificates before they become audit findings

This is consistently the highest-frequency source of major NCRs in JAKIM audits. With 50-200 suppliers typical for a mid-sized food manufacturer, and each certificate on a different renewal cycle, manual tracking creates systematic expiry risk.

4. Halal Control Points (HCP)

HCPs (Titik Kawalan Halal) are the specific stages in your production process where halal integrity is at risk. Each HCP must have a documented monitoring procedure, acceptance criteria, corrective action protocol, and ongoing monitoring records — dated, timed, and signed by responsible personnel.

For food manufacturers, typical HCPs include: raw material receiving, ingredient storage, pre-processing preparation, mixing and formulation, production, packaging, and dispatch. The HCP register is typically one of the first documents an auditor requests.

5. Processing, Handling, and Storage Controls

The HAS must document how halal products are handled, processed, and stored to prevent cross-contamination:

• Equipment and line segregation protocols
• Cleaning and sanitation procedures, including Sertu (ritual purification) requirements where exposure to najis has occurred
• Storage area segregation, labelling, and access controls
• Distribution and logistics controls for halal product integrity in transit

6. Training and Competency

A documented training programme with individual records linked to each employee in a halal-sensitive role:

• Initial halal training covering MHMS 2020 requirements and role-specific procedures
• Refresher training on a defined schedule — not a one-time onboarding event
• Competency assessments to verify understanding, not just attendance
• Records that can be cross-referenced against the HCP register by name and role

7. Internal Audit Programme

A structured internal audit programme covering the full MHMS 2020 scope, conducted by trained and independent auditors. Internal audits must produce formal audit reports, NCRs for any non-conformities found, and corrective action records tracked to verified closure. For a full walkthrough of what JAKIM auditors expect, see our JAKIM Audit Checklist 2026.

8. NCR and Corrective Action Management

A defined process for managing non-conformities — whether raised internally or by JAKIM — from identification to verified closure:

NCR Management Workflow — MHMS 2020

1

Identify & Document

Record the non-conformity using exact wording. Log it in the NCR register immediately — never leave it in an email thread.

2

Root Cause Analysis

Identify the system failure behind the finding — not just the surface symptom. Assign to a named owner with a deadline.

3

Define Corrective & Preventive Action

Document both the corrective action (fix the finding) and the preventive action (prevent recurrence). Assign responsibility.

4

Implement & Gather Evidence

Execute the action. Collect proof: updated SOPs, re-training records, process photos, management sign-offs.

5

Verify Effectiveness

An independent reviewer confirms the root cause is resolved — not just the observable symptom. This step is mandatory before closure.

6

Close NCR

NCR formally closed with documented confirmation. Submit through MYeHALAL if externally raised by JAKIM.

1. Identify and document the non-conformity with full description
2. Conduct root cause analysis — the system failure, not just the symptom
3. Define corrective and preventive action with a named owner and deadline
4. Implement and gather evidence of completion
5. Verify effectiveness — confirm the root cause is resolved, not just the symptom
6. Close the NCR with documented confirmation

Auditors review NCR patterns, not just individual records. Recurring non-conformities with the same root cause signal that the corrective actions are treating symptoms, and that the underlying system failure has not been addressed.

9. Management Review

Periodic top management reviews of HAS effectiveness with documented outputs:

• Compliance status and audit results assessment
• NCR trends and corrective action effectiveness review
• Resource adequacy decisions
• Improvement actions assigned to responsible individuals with target dates

Management review records are where the halal policy commitment must be demonstrated through decisions and resources, not just stated intent.

---

The HAS Maturity Model: Three Levels of Implementation

Not all HAS implementations are equal. Practitioners consistently describe three levels of HAS maturity across Malaysian manufacturers:

HAS Maturity Model — MHMS 2020

Level 1

Documented

Policies & procedures exist

HAS manual covers all MHMS 2020 pillars. SOPs are written, version-controlled, and retrievable on demand.

• Policies filed
• Procedures written
• Audit-ready on paper

Where most manufacturers are

Level 2

Implemented

Practice matches documentation

What is documented reflects actual operations. Records are generated in real time; HCPs are actively monitored every shift.

• Records generated live
• Staff follow procedures
• Auditor finds evidence

JAKIM compliance baseline

Level 3

Effective

System prevents failures

Compliance gaps are caught before audits. Certificate expiry is never a surprise. NCR trends decline year over year.

• Proactive detection
• NCR trends declining
• Zero audit surprises

Competitive export advantage

Level 1 — Documented The HAS exists as a complete set of policies and procedures. Documentation covers all MHMS 2020 pillars, is version-controlled, and is retrievable. An auditor will find the documents.

Level 2 — Implemented What is documented reflects what actually happens. Staff follow the procedures, records are generated in practice, and HCPs are actively monitored. An auditor will find the documents and the evidence.

Level 3 — Effective The system prevents and detects halal integrity issues before they reach an audit. NCR trends are declining. Certificate issues are caught by the system before becoming audit findings. Internal audits identify and close gaps proactively. An auditor finds neither significant documentation gaps nor significant operational failures.

Most organisations that struggle with JAKIM audits are at Level 1. They have invested in documentation but not in the infrastructure to ensure documentation reflects operational reality. The Penang processor in the opening scenario had a Level 1 HAS — thorough on paper, absent in practice.

---

HAS Maturity Assessment: 2026 Industry Benchmark

The three-level model above describes the path of HAS maturity, but operational benchmarking of Malaysian manufacturers in 2026 reveals a more granular reality. Practitioners working across multiple JAKIM-certified sites consistently describe four distinguishable maturity tiers, with concrete observable criteria at each step:

Two practical implications matter for 2026. First, JAKIM auditors are increasingly examining operational maturity, not just documentary existence. A complete HAS Manual no longer satisfies an auditor who cannot find evidence of the system in motion across the past 12 months. Second, the Pindaan 2026 amendments (effective 1 April 2026) — particularly the codification of IHCS as three explicit elements and the mandatory training timelines — implicitly raise the floor: organisations operating below the Operational tier will struggle to meet the new evidentiary expectations.

The Foundational and Operational tiers are stable equilibria that organisations remain in for years if no infrastructure investment occurs. Reaching Managed and Optimized requires removing the administrative overhead that consumes the Halal Executive's time — which is the structural reason most Malaysian manufacturers stay below Managed despite wanting to move beyond it.

---

How JAKIM Audits Your HAS

During a JAKIM audit, your HAS is assessed across four dimensions:

• Is it documented? Policies, procedures, and records exist, are current, and are version-controlled.
• Is it implemented? What is documented matches what happens in practice on the production floor.
• Is it maintained? Records are current — certificates monitored, NCRs tracked, training up to date.
• Is it effective? The system prevents and detects halal integrity failures before they reach the customer.

The most common audit finding is a gap between Level 1 (documented) and Level 2 (implemented). Auditors are trained to identify documentation that was written for the audit rather than for operational use. The signals they look for include: record dates that cluster around the audit period, NCRs raised and closed in the same short window, training records with attendance signatures but no competency verification, and HCP monitoring logs that describe ideal practice but show no operational variation.

---

MYeHALAL and the Digital HAS Requirement

JAKIM's MYeHALAL portal, launched in 2025, has extended the operational requirements of HAS management. All certification applications, renewals, audit documentation, and NCR responses are now submitted through the portal — and the portal requires structured, digital records.

HAS Documentation Through MYeHALAL. Since May 2025, every artefact described in this guide — the HAS Manual, JKHD constitution, supplier list, HCP register, internal audit reports, NCR records, training logs, management review minutes — must be uploadable in a digital format compatible with MYeHALAL fields and document categories. The HAS Manual remains the cornerstone of the system, but it must now exist as a controlled digital file accessible to JAKIM at any submission cycle, not as a paper binder retrieved before each audit. JAKIM has publicly stated a target of 10,000 manufacturers actively trained on the digital MHMS 2020 workflow by end-2026, signalling that the migration is not optional and that surveillance audits will increasingly cross-check what is in the portal against what is observed on the production floor.

Manufacturers with paper-based or spreadsheet-managed HAS documentation face an additional burden with every submission cycle: converting records into MYeHALAL-compatible formats. Purpose-built compliance platforms designed around MHMS 2020 eliminate this conversion step — records are structured for digital submission from the point of creation.

For manufacturers targeting GCC export markets under ESMA or SMIIC standards, a digitally-managed, MYeHALAL-aligned HAS also provides the documentation architecture that multi-standard certification requires.

---

How TAQYID Supports Your Halal Assurance System

The operational demands of a functioning HAS — documentation control, supplier certificate monitoring, NCR tracking, audit scheduling, training records, management review outputs — create a significant administrative load. For organisations managing 100+ suppliers, multiple product lines, or multi-site operations, this load routinely overwhelms general-purpose tools.

TAQYID is built around the HAS structure of MHMS 2020 — every module maps to a HAS component:

• Certificate Monitor — automated expiry alerts at 60/30/7 days, applied to every supplier certificate with renewal tracking
• Audit Module — structured internal audits against MHMS 2020 pillars with NCR workflows built in
• NCR Tracker — full workflow from identification through root cause to verified closure, with evidence attachment and escalation
• JKHD Dashboard — meeting records, action items, and compliance status visible to all committee members
• Training Register — individual records linked to HCPs, with refresher scheduling and competency tracking
• Compliance Dashboard — real-time status across every MHMS pillar, with MYeHALAL-ready export formats

Explore how TAQYID supports your Halal Assurance System →

---

Expert Insight: The Documentation-Implementation Gap Is a Management Problem

Here is what most HAS guides will not articulate clearly: the gap between a well-documented HAS and a well-implemented one is not a documentation problem. It is a management problem.

When a Halal Executive spends 60-70% of their time on administrative tasks — updating spreadsheets, chasing supplier certificates, compiling reports — they have no capacity left to actually manage the system. The procedures exist, but no one has time to verify they are followed. Training records are generated but no one reviews whether the trained behaviour is maintained on the production floor.

The solution is not writing better procedures. It is removing the administrative burden so that compliance professionals can do governance instead of administration. The shift from administration to governance is what moves an organisation from Level 1 to Level 3 HAS maturity. And it is why infrastructure — not intent — is the decisive variable in MHMS 2020 compliance.

---

Conclusion

A Halal Assurance System is not a document. It is the operational infrastructure of your halal commitment — and it is only effective when what is documented genuinely reflects what happens every day.

Key takeaways:

• HAS is a management system standard requiring continuous implementation across 9 components — not periodic demonstration
• The three maturity levels are Documented, Implemented, and Effective — most audit failures occur at Level 1
• JAKIM audits the gap between documentation and practice — this is where most NCRs originate
• MYeHALAL requires digital-ready HAS records; analogue systems now carry a double burden
• The path to HAS maturity is removing administrative barriers so Halal Executives can govern, not administer

Explore how TAQYID helps you build and maintain a Level 3 HAS →

---

Frequently Asked Questions

What is the difference between HAS and IHCS under MHMS 2020?

HAS (Halal Assurance System) and IHCS (Internal Halal Control System) are both MHMS 2020 frameworks for halal compliance management, but they differ in scope and applicability. HAS is the full management system required by medium and large organisations — it includes a formal JKHD structure, comprehensive documented procedures, management review requirements, and the full internal audit cycle. IHCS is a simplified framework for micro and small enterprises, covering core internal controls without the full management system requirements. The underlying principle — systematic, documented, continuous compliance — is identical in both. See our IHCS vs HAS comparison to determine which applies.

How long does it take to build a compliant HAS from scratch?

For a mid-sized food manufacturer building a HAS for the first time, reaching Level 2 maturity — fully documented and implemented — typically takes 4 to 8 months. This assumes dedicated resource allocation from the Halal Executive and engagement from top management. Reaching Level 3 maturity — demonstrably effective across a full audit cycle — requires an additional 6-12 months of operational experience with the system. Organisations with existing ISO 9001 or HACCP systems typically complete implementation faster, as document control, internal audit, and management review foundations already exist.

Does having ISO 9001 or HACCP mean my organisation already has a HAS?

No. ISO 9001 and HACCP address quality and food safety respectively — they do not address halal-specific requirements. However, an organisation with a functioning ISO 9001 system has strong foundations for HAS implementation: document control structures, internal audit processes, and management review mechanisms are directly transferable. The halal-specific components — JKHD composition, HCPs, halal supplier certificate verification, and Sertu procedures — must be built as an additional layer on top of existing quality management infrastructure.

Can the Halal Executive role be shared with another position or outsourced?

MHMS 2020 requires the Halal Executive to be an employee of the certified organisation with formal authority, verified competency, and an official appointment letter. The role cannot be outsourced to an external consultant, though consultants can support the HAS implementation process. The Halal Executive may hold other responsibilities within the organisation, but MHMS 2020 requires that sufficient time and authority are genuinely allocated to the halal management function. Nominal assignments that do not reflect actual authority or time are a finding during audit.

What records does JAKIM expect to see during a HAS audit?

JAKIM auditors will typically request: the HAS manual and all referenced SOPs (current versions with revision history); JKHD appointment letters, meeting minutes, and attendance records; the approved supplier list with valid halal certificate copies and expiry tracking; HCP monitoring records for the full certification period; training records linked to individual employees by role and HCP; internal audit reports and NCR logs with corrective action closure evidence; and management review minutes. All records should be retrievable within minutes — auditors will test this in practice.