Quick Guide · Internal audit

Extract previous audit findings for internal audits using Copilot

Internal audits lose value when limited preparation time prevents a thorough review of historic non-conformances. Learn how to export previous audit reports into Microsoft Copilot Chat to draft focused inspection questions for specific facility areas.

16 Oct 2026 · 38 sec · Copilot Chat (Copilot Chat, no licence needed)

The scenario

Site
Ambient commercial bakery producing wrapped sliced bread and morning goods
Who
QA Technologist and internal auditor
Trigger
Scheduled internal audit of goods-in and raw material storage due next week
Why it matters
Shallow, tick-box audits fail to detect recurring supplier non-conformances, leaving unresolved raw material risks on the factory floor and exposing the site to audit non-conformances under fundamental requirements.

BRCGS context

ClauseWhat the Standard expectsSensible practiceWhere technology helps
3.4
Internal audits
A risk-based internal audit programme verifies that systems are implemented and effective.Sensible industry practice is to review previous audit findings, open corrective actions and recent intake rejections beforehand to focus the audit scope on live risks rather than relying on generic question templates.Copilot Chat rapidly analyses exported historical text, cross-references logs and drafts targeted interview prompts. It cannot walk the warehouse, check actual pallet physical condition, or evaluate operator competence; the auditor must carry out the physical audit.

Clause intent in plain English, not the Standard's wording. Check requirements against your own licensed copy of BRCGS Food Safety Issue 9.

The approach, step by step

  1. 01

    Upload previous audit report and extract open or recurring themes

    Here is our 2025 internal audit report for goods-in. List all non-conformances and observations, their root causes if stated, and specify which areas require verification during this year's visit.

    You check: Verify that all findings from the original 2025 document were captured and no findings were omitted or misclassified.

  2. 02

    Cross-reference with open CAPA tracker

    Upload open CAPA tracker. Compare with the previous audit summary. Which actions relevant to goods-in and storage remain open or overdue, and who is accountable?

    You check: Check internal QMS to confirm whether overdue actions were formally extended or closed out since the last export.

  3. 03

    Analyse intake rejections to identify operational failure patterns

    Upload Q1 rejection log. Identify the top three recurring causes of rejection and any supplier-specific trends that should be checked during live intake inspection.

    You check: Ensure intake figures align with technical site experience and that supplier details match the current approved supplier register.

  4. 04

    Draft targeted risk-based audit checklist and sampling guide

    Draft an audit checklist for goods-in focusing on intake documentation, allergen segregation, and temperature monitoring. Include 6 direct questions and objective evidence to review.

    You check: Review the drafted questions against the site's written intake procedures and amend the sampling depth based on current production volumes.

Takeaways

  • Export historical audit reports into Copilot Chat to extract relevant non-conformances for a specific department quickly.
  • Use AI-generated summaries to formulate targeted, risk-based inspection questions rather than relying on generic checklists.
  • Always cross-check the drafted questions and references against original documentation before beginning physical floor verification.

Limitations and risks

  • Copilot Chat cannot connect directly to ERP, warehouse management systems (WMS) or LIMS; records must be manually exported and uploaded.
  • Under the Copilot Chat tier, Copilot cannot automatically search SharePoint or Graph to find historical reports; files must be provided directly in the session.
  • Copilot cannot determine whether an overdue action represents an active site risk; the technologist must exercise professional judgement.
  • Uploading sensitive site or supplier records to unapproved, non-work consumer accounts without enterprise data protection.
  • Auditor over-reliance on AI-drafted checklists leading to confirmation bias and neglecting unprompted, visual hygiene or GMP issues on the floor.
  • Hallucinated detail or misinterpretation of technical acceptance limits in raw material specifications.

Sources

TFCD content is general guidance, not professional advice for your site. Always check requirements against your own licensed copy of the BRCGS Standard and your customers' codes of practice. Narrated with an AI voice clone of the presenter; Copilot screens are illustrative recreations with dummy data.