What Is a Halal Assurance System (HAS)? Complete 2026 Guide

MHMS 2020 defines a halal management system in three verbs, not one. The standard's own definition — carried word for word into MPPHM 2020 (Pindaan 2026) — calls it an integrated management system dibangun, dilaksana dan dikekalkan: developed, implemented and maintained. A manual completes the first verb. It says nothing about the other two.

The standard also names who tests the difference, and how often. Article 5(10) requires a written HAS Review procedure and fixes its scope: the effectiveness of the HAS that was developed, and the capability and effectiveness of the appointed JKHD members. It must be carried out at least once a year, by the JKHD with top management involved, and confirmed in writing by top management.

Neither requirement is met by a well-written manual, and neither is visible in one.

A Halal Assurance System is not a document. Understanding that distinction, and building a system that genuinely reflects how your organisation operates, is what HAS compliance actually requires.

---

What Is a Halal Assurance System?

A Halal Assurance System (HAS) — or Sistem Jaminan Halal in Bahasa Melayu — is a documented management system that governs how an organisation controls, monitors, and maintains the halal integrity of its products and operations. Under MHMS 2020, every medium and large organisation seeking JAKIM certification (SPHM — Sijil Pengesahan Halal Malaysia) must establish and maintain a functioning HAS.

The core principle of HAS is continuous assurance — not periodic demonstration. Your HAS must be operational every day, generating records that prove it, not assembled ahead of a scheduled inspection.

The closest analogues in adjacent management disciplines help clarify what "management system" means in practice:

Like each of these, HAS is a system standard — the framework demands not just that you do the right things, but that you can demonstrate, through documented records, that the right things are done consistently. It requires organisational structure, defined responsibilities, documented procedures, active monitoring, and management oversight.

Micro and small enterprises may implement a simplified framework called the IHCS (Internal Halal Control System — Sistem Kawalan Halal Dalaman) in place of full HAS. See our IHCS vs HAS comparison guide to determine which applies to your organisation.

---

Why JAKIM Requires a HAS — The Regulatory Rationale

MHMS 2020 introduced the HAS requirement to address a structural problem that had developed under earlier frameworks. Point-in-time compliance — where manufacturers prepared documentation for audit day and relaxed standards afterward — was undermining the credibility of Malaysia's halal certification internationally.

JAKIM's objectives with HAS were explicit:

• Continuous compliance: Halal integrity must be maintained and demonstrable at any point in time, not reconstructed before inspections
• Accountability: Named individuals and committees must own halal decisions, with documented authority and verified competency
• Traceability: Every ingredient, supplier, process, and control must be traceable through documentation
• International credibility: Malaysia's SPHM is recognised across GCC countries, ASEAN, and increasingly in European markets — HAS provides the management system rigour these markets expect

Since 2025, the operational meaning of HAS has been extended further by two JAKIM developments. The MYeHALAL portal requires digital, structured record submissions for all certification management. The MPPHM 2020 surveillance audit framework allows JAKIM to conduct unannounced post-certification inspections between scheduled audits. A HAS that operates continuously generates the transparent digital audit trail these processes expect. A HAS that only activates before audits exposes the manufacturer to surveillance findings.

---

HAS vs ISO 9001 vs HACCP: Understanding the Overlap

For manufacturers already operating under quality or food safety management frameworks, understanding how HAS relates to — and differs from — existing systems prevents duplication and clarifies the gap.

HAS is not a replacement for ISO 9001 or HACCP — it is a parallel, domain-specific management system. Manufacturers with functioning ISO 9001 systems have strong foundations for HAS: established document control, internal audit processes, and management review structures are directly transferable. The halal-specific components — JKHD, HCPs, halal-specific supplier verification, Sertu procedures — must be built as an additional layer.

---

The 13 General Requirements of a Halal Assurance System

Article 5 of MHMS 2020 — Keperluan Umum Sistem Jaminan Halal — enumerates thirteen general requirements. A company implementing HAS must develop and comply with all of them, and each is assessed during a JAKIM audit.

One thing to know before reading the list: the standard itself carries two breakdowns. The diagram in its opening pages presents HAS as ten elements, omitting the HAS Manual, the Halal Executive, and Documentation and Records — all three of which appear as numbered requirements in Article 5. The thirteen below follow Article 5, which is the operative text. Where a summary elsewhere gives you ten, that is where the difference comes from.

1. HAS Manual

The manual is the system's own documentation, and it must match what the company actually does rather than describe an intended state. MHMS 2020 requires it to be developed and documented separately from other management and certification systems, updated whenever HAS implementation changes, and approved by top management.

At minimum it contains the company profile, objectives and scope, the halal policy, the JKHD, and standard operating procedures for internal halal audit, halal risk control, raw material control, halal training, traceability, HAS review, laboratory analysis, and sertu. Every procedure inside it must state its effective date, its revision date, who prepared it, and who approved it.

2. Halal Policy

A clear written policy stating the organisation's commitment to producing halal products or services and to complying with Malaysian halal certification requirements as a whole. It must be displayed, announced, and disseminated to the organisation and its stakeholders.

Auditors verify two things: that employees in halal-sensitive positions know the policy exists and what it says, and that management decisions reflect it. A policy on a wall, disconnected from operational decisions, is a finding.

3. Halal Executive

A specific role with specific criteria. The Halal Executive must be Muslim, a Malaysian citizen (subject to the relevant MPPHM), in a permanent position, and hold either a minimum Diploma in Halal Management or an equivalent qualification, or at least five years' experience in halal management. They must also hold a Halal Executive certificate from a training provider registered under HPB.

The appointment is formal, made by top management from permanent staff. The standard is explicit that this is a dedicated position whose core duty is halal management, and that outside assignments must not compromise it. The Halal Executive may chair the JKHD where needed.

4. Internal Halal Committee (JKHD)

Top management appoints each member formally and in writing, with a job description and an organisation chart, and provides enough people with a workload that allows the HAS to be planned, implemented, and evaluated continuously.

The committee has at least four members — Article 5(4)(f): a chair, the Halal Executive, a representative from purchasing or procurement, and a representative from processing. Chair and members must be permanent staff; the chair must hold a position equal to or higher than the Halal Executive and be competent in Malaysian halal certification; preference for the chair goes to a Muslim. A branch with different operational management needs its own JKHD. The committee meets at least twice a year with a halal agenda — Article 5(4)(l) — holds decision-making authority over the company's halal management, and keeps its records available for inspection.

5. Internal Halal Audit

A documented procedure, and an audit conducted at least once a year at every branch or premises in the network. Internal auditors must hold an Internal Halal Auditing certificate or a Halal Executive certificate from an HPB-registered training provider, and be formally appointed by the JKHD. A third party may be engaged to audit on the company's behalf, under the same certificate requirement.

The audit covers compliance with Malaysian halal certification procedures and with the HCPs. Non-conformity findings and their corrective actions are to be handled immediately and confirmed by the JKHD, which also receives the audit report and checklist, and evaluates the effectiveness and frequency of the audit programme so that the same non-conformities do not recur.

Recommended NCR Management Workflow

1

Identify & Document

Record the non-conformity using exact wording. Log it in the NCR register immediately — never leave it in an email thread.

2

Root Cause Analysis

Identify the system failure behind the finding — not just the surface symptom. Assign to a named owner with a deadline.

3

Define Corrective & Preventive Action

Document both the corrective action (fix the finding) and the preventive action (prevent recurrence). Assign responsibility.

4

Implement & Gather Evidence

Execute the action. Collect proof: updated SOPs, re-training records, process photos, management sign-offs.

5

Verify Effectiveness

An independent reviewer confirms the root cause is resolved — not just the observable symptom. This step is mandatory before closure.

6

Close NCR

NCR formally closed with documented confirmation. Submit through MYeHALAL if externally raised by JAKIM.

That last clause is where NCR management lives in the standard. In practice the lifecycle runs: identify and document the finding, analyse the root cause rather than the symptom, define corrective and preventive action with a named owner and a deadline, implement and gather evidence, verify that the root cause is resolved, then close with documented confirmation. Auditors read patterns across cycles, not individual records — the same root cause recurring is the signal that corrective actions are treating symptoms. Our NCR management guide covers the full lifecycle, and the JAKIM Audit Checklist 2026 covers what external auditors ask for.

6. Halal Risk Control

A written procedure covering research and development, products, menus and services, processing, premises and equipment, workers, packaging, storage, and transport. MHMS 2020 requires it to be built specifically for halal risk determination and kept separate from HACCP, GMP, MeSTI, BeSS, VHM and other certification systems — a shared risk register does not satisfy this. Logistics providers holding an SPHM are to be given priority so the halal supply chain stays intact.

Two sub-requirements sit underneath. Halal Control Point determination must be based on both the processing flow and the floor plan; a register derived from the process alone answers half the question, since the floor plan is where a shared corridor or one receiving point serving two lines becomes visible. The Halal Risk Management Plan is then built from the HCPs identified, and records for each: the HCP, the halal risk, the control mechanism (method, frequency, who), the corrective action, and the record. See our guide to setting up Halal Control Points for the mechanics.

7. Raw Material Control

A written procedure covering purchase, receipt, and storage, with records that can be reviewed. It must ensure that no raw material of doubtful halal status is used or stored, that the use and any change of raw material is declared to the competent authority, and that materials comply with applicable legislation.

The centrepiece is the Raw Material Masterlist, which must carry at minimum: material name; scientific name, code, or trade name; source; manufacturer name and address; declaration status with the competent authority; halal certificate details including certifying body and expiry date; supporting documents evidencing the source where a material has no halal certificate; and remarks. It covers every material including processing aids, is updated whenever any detail changes, and must be readily accessible whether digital or printed.

Certificate currency is where this requirement usually fails in practice. Every supplier sits on its own renewal cycle, each renewal is somebody's job to chase, and nothing in a spreadsheet signals a lapse on the day it happens.

8. Halal Training

A written procedure covering both halal awareness and halal competency.

Awareness training must be run by an individual or organisation registered under HPB, given to new employees within three months of appointment, and repeated at least once every three years for all employees involved in processing or services. Understanding must be evaluated, not just attendance.

Competency training for JKHD members is delivered by an HPB-registered provider or the competent authority, at least once every three years, covering shariah and fatwa understanding, Malaysian Standards, MPPHM, MHMS, halal legislation, and critical ingredients where relevant. Top management must fund it. The company maintains a Training Operation Plan recording training type, participants, frequency, proposed dates, trainers, and records.

9. Traceability

A written traceability procedure that makes product withdrawal or recall possible if halal non-conformity or contamination is found in what has already been produced. It may be combined with other tracking systems. Companies required to implement HAS must run a mock recall at least once a year, and keep the records of both traceability and any withdrawal or recall.

10. HAS Review

A procedure for reviewing the system itself, covering the effectiveness of the HAS as built and the capability and effectiveness of the appointed JKHD members. The review is conducted at least once a year by the JKHD with top management involved, confirmed in writing by top management, and recorded.

This is where the halal policy commitment has to show up as decisions and resources rather than stated intent.

11. Laboratory Analysis

A written procedure where relevant, prioritising products containing halal-critical materials. Analysis must be carried out at the Malaysia Halal Analysis Centre (MyHAC), the Department of Chemistry Malaysia, or an appointed Halal Panel laboratory — JAKIM publishes the panel list on the Halal Malaysia portal.

Scope may cover meat speciation (DNA), alcohol content, physical examination for skin and hair, protein profiling and source determination, fat and oil profiling and source determination, or any other scope the competent authority specifies.

12. Sertu

A written sertu procedure, prepared in advance against the possibility of contamination or a non-conformity requiring ritual purification. It must align with JAKIM's Garis Panduan Sertu Menurut Perspektif Islam and with the rules set by the state religious authorities (MAIN/JAIN). Records are kept.

Having the procedure before it is needed is the requirement. Writing one during an incident is how a contamination event becomes a certification event.

13. Documentation and Records

Records must be kept current, complete, and easy to reference during inspection, and retained for at least three years. A new certification application must have at least three months of records available for the audit. Supporting documents held in separate files need a reference number and orderly recording.

---

How JAKIM Grades Your HAS: A, B, C, D

Not all HAS implementations are equal, and MHMS 2020 does not leave that assessment informal. Under Section 8, JAKIM's authority grades every certified organisation at inspection against four bands, based on percentage compliance with MHMS 2020 and the Halal Certification Procedure:

The grade is not a one-time label — it is reassessed at every JAKIM inspection, and it directly affects how your organisation is treated: certification validity length, eligibility for fast-track renewal, and Whitelist consideration all follow from it.

Read down the criteria column and the dividing line is visible. D is the band defined by the absence of documentation. C is the band where documentation exists and internal halal control is merely less effective. Building the manual moves an organisation off D — and stops there. What separates C from A is not more paper; it is whether the control the paper describes is effective in practice.

---

How JAKIM Audits Your HAS

During a JAKIM audit, your HAS is assessed across four dimensions:

• Is it documented? Policies, procedures, and records exist, are current, and are version-controlled.
• Is it implemented? What is documented matches what happens in practice on the production floor.
• Is it maintained? Records are current — certificates monitored, NCRs tracked, training up to date.
• Is it effective? The system prevents and detects halal integrity failures before they reach the customer.

A recurring audit finding is the gap between what is documented and what is actually practiced. Documentation written for the audit rather than for operational use carries its own signature, and it is visible in the records: dates that cluster around the audit period, NCRs raised and closed in the same short window, training records with attendance signatures but no competency verification, and HCP monitoring logs that describe ideal practice but show no operational variation.

---

MYeHALAL and the Digital HAS Requirement

JAKIM's MYeHALAL portal, launched in 2025, has extended the operational requirements of HAS management. All certification applications, renewals, audit documentation, and NCR responses are now submitted through the portal — and the portal requires structured, digital records.

HAS Documentation Through MYeHALAL. Since May 2025, every artefact described in this guide — the HAS Manual, JKHD constitution, supplier list, HCP register, internal audit reports, NCR records, training logs, management review minutes — must be uploadable in a digital format compatible with MYeHALAL fields and document categories. The HAS Manual remains the cornerstone of the system, but it must now exist as a controlled digital file accessible to JAKIM at any submission cycle, not as a paper binder retrieved before each audit. JAKIM has publicly stated a target of 10,000 manufacturers actively trained on the digital MHMS 2020 workflow by end-2026, signalling that the migration is not optional and that surveillance audits will increasingly cross-check what is in the portal against what is observed on the production floor.

Manufacturers with paper-based or spreadsheet-managed HAS documentation face an additional burden with every submission cycle: converting records into MYeHALAL-compatible formats. Purpose-built compliance platforms designed around MHMS 2020 eliminate this conversion step — records are structured for digital submission from the point of creation.

For manufacturers targeting GCC export markets under ESMA or SMIIC standards, a digitally-managed, MYeHALAL-aligned HAS also provides the documentation architecture that multi-standard certification requires.

---

How TAQYID Supports Your Halal Assurance System

The operational demands of a functioning HAS — documentation control, supplier certificate monitoring, NCR tracking, audit scheduling, training records, management review outputs — create a significant administrative load. For organisations managing 100+ suppliers, multiple product lines, or multi-site operations, this load exceeds what a general-purpose tool is built to track — nothing in a spreadsheet knows that a date has passed.

TAQYID is built around the HAS structure of MHMS 2020 — every module maps to a HAS component:

• Certificate Monitor — automated expiry alerts at 60/30/7 days, applied to every supplier certificate with renewal tracking
• Audit Module — structured internal audits against the MHMS 2020 general requirements with NCR workflows built in
• NCR Tracker — full workflow from identification through root cause to verified closure, with evidence attachment and escalation
• JKHD Dashboard — meeting records, action items, and compliance status visible to all committee members
• Training Register — individual records linked to HCPs, with refresher scheduling and competency tracking
• Compliance Dashboard — real-time status across every MHMS 2020 requirement, with MYeHALAL-ready export formats

Explore how TAQYID supports your Halal Assurance System

---

Expert Insight: The Documentation-Implementation Gap Is a Management Problem

Here is what most HAS guides will not articulate clearly: the gap between a well-documented HAS and a well-implemented one is not a documentation problem. It is a management problem.

When a Halal Executive's week is dominated by administrative tasks — updating spreadsheets, chasing supplier certificates, compiling reports — they have no capacity left to actually manage the system. The procedures exist, but no one has time to verify they are followed. Training records are generated but no one reviews whether the trained behaviour is maintained on the production floor.

The solution is not writing better procedures. It is removing the administrative burden so that compliance professionals can do governance instead of administration. The shift from administration to governance is what moves an organisation toward a higher JAKIM grade. And it is why infrastructure — not intent — is the decisive variable in MHMS 2020 compliance.

---

Conclusion

A Halal Assurance System is not a document. It is the operational infrastructure of your halal commitment — and it is only effective when what is documented genuinely reflects what happens every day.

Key takeaways:

• HAS is a management system standard requiring continuous implementation across the 13 general requirements of Article 5 — not periodic demonstration
• JAKIM grades certified organisations A to D under MHMS 2020 Section 8, based on percentage compliance — most audit failures cluster in the C/D band
• JAKIM audits the gap between documentation and practice — this is where most NCRs originate
• MYeHALAL requires digital-ready HAS records; analogue systems now carry a double burden
• Moving toward the A band means removing administrative barriers so Halal Executives can govern, not administer

Explore how TAQYID helps you build and maintain a high-graded HAS

---

Frequently Asked Questions

What is the difference between HAS and IHCS under MHMS 2020?

HAS (Halal Assurance System) and IHCS (Internal Halal Control System) are both MHMS 2020 frameworks for halal compliance management, but they differ in scope and applicability. HAS is the full management system required by medium and large organisations — it includes a formal JKHD structure, comprehensive documented procedures, management review requirements, and the full internal audit cycle. IHCS is a simplified framework for micro and small enterprises, covering core internal controls without the full management system requirements. The underlying principle — systematic, documented, continuous compliance — is identical in both. See our IHCS vs HAS comparison to determine which applies.

How long does it take to build a compliant HAS from scratch?

For a mid-sized food manufacturer building a HAS for the first time, reaching a fully documented and implemented state takes meaningful dedicated effort — sustained resource allocation from the Halal Executive and engagement from top management. Demonstrating that the system is effective across a full audit cycle, and earning a higher JAKIM grade as a result, takes longer still and depends on sustained operational experience with the system. Organisations with existing ISO 9001 or HACCP systems typically complete implementation faster, as document control, internal audit, and management review foundations already exist.

Does having ISO 9001 or HACCP mean my organisation already has a HAS?

No. ISO 9001 and HACCP address quality and food safety respectively — they do not address halal-specific requirements. However, an organisation with a functioning ISO 9001 system has strong foundations for HAS implementation: document control structures, internal audit processes, and management review mechanisms are directly transferable. The halal-specific components — JKHD composition, HCPs, halal supplier certificate verification, and Sertu procedures — must be built as an additional layer on top of existing quality management infrastructure.

Can the Halal Executive role be shared with another position or outsourced?

MHMS 2020 requires the Halal Executive to be an employee of the certified organisation with formal authority, verified competency, and an official appointment letter. The role cannot be outsourced to an external consultant, though consultants can support the HAS implementation process. The Halal Executive may hold other responsibilities within the organisation, but MHMS 2020 requires that sufficient time and authority are genuinely allocated to the halal management function. Nominal assignments that do not reflect actual authority or time are a finding during audit.

What records does JAKIM expect to see during a HAS audit?

JAKIM auditors will typically request: the HAS manual and all referenced SOPs (current versions with revision history); JKHD appointment letters, meeting minutes, and attendance records; the approved supplier list with valid halal certificate copies and expiry tracking; HCP monitoring records for the full certification period; training records linked to individual employees by role and HCP; internal audit reports and NCR logs with corrective action closure evidence; and management review minutes. All records should be retrievable within minutes — auditors will test this in practice.