JAKIM Halal Audit Checklist 2026: Prepare Your Factory for MHMS 2020

In Q1 2026, three Selangor-based food manufacturers received unannounced JAKIM surveillance visits — not scheduled certification audits, but NurAI-triggered inspections based on AI-detected risk signals in their supply chain data. Two received major NCRs on the day. One had all documentation in order, was audited in under two hours, and received zero findings.

The difference was not that the third manufacturer had prepared for that specific visit. It was that their compliance system operated the same way every day — with or without an audit scheduled.

This is the new reality of halal certification management in Malaysia. JAKIM's NurAI monitoring initiative and MYeHALAL's digital submission requirements have permanently changed the compliance timeline. Audit readiness is no longer a cyclical preparation exercise — it is a continuous operational standard.

This checklist covers every area JAKIM evaluates under MHMS 2020. Use it not just before an audit — use it to establish the standard your team maintains every day.

---

Before You Begin: What JAKIM Is Actually Assessing

JAKIM auditors evaluate compliance against the MHMS 2020 framework — and specifically, whether your organisation has a functioning Halal Assurance System (HAS) that operates continuously, not one assembled for the audit.

Experienced auditors are trained to distinguish between a system that genuinely runs every day and documentation that was organised specifically for their visit. The signals they look for:

• Record dates that cluster around the audit period — monitoring logs, training records, and NCRs that all appear in the weeks before the audit
• NCRs raised and closed in the same short window — suggesting retrospective documentation rather than real-time tracking
• HCP monitoring logs with suspiciously uniform entries — identical times, identical readings, suggesting the records were filled in after the fact
• JKHD minutes with no evidence of actual deliberation — minutes that read as post-hoc records rather than genuine governance discussions
• Staff who cannot explain their own procedures — a Halal Executive who needs to look up the current HCP list during the audit has not been managing it continuously

Everything in this checklist should reflect an ongoing practice. If any item currently requires a preparation effort to satisfy, that is the gap to close.

---

Section 1 — Organisational Readiness (JKHD)

Your Jawatankuasa Halal Dalaman (JKHD — Internal Halal Committee) is typically the first area auditors examine. A JKHD that is formally constituted and actively functioning signals that the organisation takes its halal obligations as a governance matter, not a documentation exercise.

Documents to verify:

• JKHD composition formally documented — names, designations, roles, and appointment dates recorded
• Halal Executive appointment letter on file — qualifications verified against MHMS 2020 requirements
• JKHD meeting minutes complete — all meetings from the past 12 months present, signed, dated, and filed in a shared, accessible system
• Meeting frequency compliant — intervals between sessions do not exceed the MHMS 2020 minimum requirement
• Halal policy current — reviewed and re-signed by top management within the current certification period
• Organisational chart current — reflects actual reporting structure, consistent with JKHD documentation
• JAKIM contact details updated — Halal Executive's registered contact information current in JAKIM's MYeHALAL records

MYeHALAL readiness:

• All JKHD documentation is in digital format, accessible for portal submission
• JKHD records are stored in a shared system — not on an individual's personal device or local drive

Common failure: JKHD minutes are often present but unsigned, undated, stored only on the Halal Executive's laptop, or show a pattern of having been produced in batches shortly before the audit rather than at regular intervals throughout the year. Auditors will check file creation dates.

---

Section 2 — HAS Documentation and Version Control

Your Halal Assurance System documentation must be comprehensive, version-controlled, and retrievable within minutes — not within hours. Auditors will request specific documents on the spot and expect immediate access.

Documentation checklist:

• HAS manual current — latest version with full revision history, distributed to all relevant departments
• SOPs complete for all halal-critical processes — procurement, production, storage, distribution, cleaning, and Sertu procedures
• IHCS documentation complete — all internal controls documented and mapped to HCPs (IHCS vs HAS guide here)
• Document register maintained — all documents logged with version number, effective date, and document owner
• Controlled copies confirmed — relevant departments hold current versions only; superseded versions removed from circulation
• Bilingual alignment verified — where English and Bahasa Melayu versions coexist, content is consistent between both

What auditors look for beyond the obvious: They will request specific SOPs for processes they have just observed on the production floor — and check whether the written procedure matches what they saw. SOPs that describe ideal practice rather than actual practice are among the most cited non-conformities in JAKIM audit reports.

---

Section 3 — Halal Control Points (HCP) Verification

HCP documentation must demonstrate active, ongoing monitoring — not just that HCPs have been identified and documented. Auditors will compare your HCP monitoring records against actual production schedules to verify that records reflect real activity, not reconstructed entries.

HCP checklist:

• HCP register complete — all HCPs identified and documented across every active production line
• Each HCP has a defined monitoring procedure — frequency, responsible person, acceptance criteria, and corrective action protocol
• Monitoring records current — HCP logs covering the full certification period with no unexplained gaps
• Responsible persons named for every HCP — accountability documented and current
• Cross-contamination controls verified — physical separation, scheduling protocols, or validated cleaning SOPs documented and current
• HCP register updated after process changes — if production processes were modified since the last audit, the HCP register reflects the current state

Practical tip: Prepare a single-page HCP summary table — HCP identifier, process stage, risk type, monitoring method, responsible person, monitoring frequency. An auditor who can review this clearly at the start of the facility walkthrough will spend less time interrogating the HCP section and reach faster confidence in your compliance posture.

---

Section 4 — Supplier and Raw Material Compliance

This is consistently the highest-risk section of any JAKIM audit and the most frequent source of major NCRs. With certificate renewal cycles varying between one and three years across multiple certifying bodies, manual tracking of 50-200 supplier certificates creates systematic expiry risk.

Core supplier checklist:

• Supplier list current — reflects all active suppliers, not the list from the previous audit cycle
• All halal certificates on file — physical or digital copies for every halal-critical supplier
• No expired certificates — verify against original documents today, not from memory or a spreadsheet that may not be current
• Certificate-issuing bodies verified — all certificates are from JAKIM-recognised certifying bodies
• Raw material register updated — every ingredient, additive, flavouring, and processing aid cross-referenced to a valid halal certificate
• New supplier onboarding records complete — halal verification documented before first material use, not added retrospectively
• Certificate renewal tracking active — upcoming renewals identified, chase process initiated before expiry

For higher-risk ingredient categories:

• Flavourings and flavour enhancers verified separately — these are the most frequently missed category
• Processing aids and release agents reviewed — halal status verified even for indirect food contact materials
• Packaging materials reviewed — where packaging has halal implications (e.g., animal-derived inks or adhesives), certificates verified

Critical note: A single unverified or expired supplier certificate for an actively used ingredient can result in a major NCR that delays the entire renewal process. Do not assume certificates collected at onboarding remain valid — verify current status against original documents.

---

Section 5 — Internal Audit Records

MHMS 2020 requires structured internal audits, not informal compliance reviews. Auditors assess both the quality of your internal audit programme and whether its outputs demonstrate a genuinely functioning IHCS.

Internal audit checklist:

• Audit schedule followed as planned — audits conducted on schedule, not deferred without documented rationale
• Auditors were independent — internal auditors did not assess areas for which they are personally responsible
• Internal audit reports are structured — findings recorded against specific MHMS 2020 criteria, not as freeform observations
• All NCRs formally logged — with date raised, non-conformity description, MHMS reference, root cause assessment, and assigned owner
• Corrective actions have implementation evidence — not just documented plans, but proof of action taken
• NCR closure requires verification — someone other than the NCR owner confirmed the corrective action was effective before closure
• Previous JAKIM external audit NCRs fully closed — every item from the last JAKIM inspection resolved with documented evidence
• NCR patterns reviewed — recurring non-conformities with the same root cause identified and addressed at system level

What auditors find most revealing: NCR records where all items were raised and closed within the two to four weeks before the external audit — not distributed across the full certification period — signal that the internal audit programme is not genuinely functioning. Real operational systems generate NCRs throughout the year.

---

Section 6 — Staff Training and Competency Records

Training records must demonstrate ongoing, role-linked halal education — not one-time orientation events. Auditors cross-reference training records against the HCP register to verify that every person operating an HCP has current documented training for that role.

Training records checklist:

• Training register current — all staff in halal-sensitive roles listed with training dates and content description
• Training linked to specific roles and HCPs — records show that training matched each individual's actual function
• Refresher training completed — evidence that training recurs on schedule, not limited to initial onboarding
• New staff records present — documentation for all staff hired since the previous audit
• Halal Executive CPD current — professional development records available and reflecting current competency
• Training effectiveness assessed — competency verification beyond attendance records, even if informal

---

Section 7 — Facility and Physical Compliance

Physical conditions in your facility must match what your documentation describes. During the facility walkthrough, auditors compare actual conditions against your SOPs — discrepancies between written procedures and observed practice are a significant finding category.

Physical compliance checklist:

• Facility zoning consistent with IHCS — halal and non-halal zones clearly demarcated with visible, current signage
• Sertu records available — ritual purification procedures documented and records current for any areas requiring them
• Equipment status matches documentation — shared equipment protocols align with written procedures; dedicated equipment is physically identifiable and labelled
• Storage segregation confirmed — halal and non-halal materials stored, labelled, and accessed separately
• Pest control records valid — service provider holds a current halal-compliant certification; treatment records available
• Cleaning schedule records complete — logs covering the full period since the last audit, not just recent weeks

---

Section 8 — MYeHALAL Portal Readiness

Since JAKIM migrated all certification management to the MYeHALAL portal in 2025, preparation for a physical audit now includes ensuring digital submission records are complete, current, and in a format the portal accepts. Auditors may cross-reference physical documentation against portal records.

MYeHALAL checklist:

• Company registration current in MYeHALAL — legal entity details, facility address, and scope of certification accurate
• Halal Executive contact details updated in the portal — phone number and email current
• Product list current — certified product scope reflects actual current production, with no unlisted products in production
• Previous audit correspondence archived — all JAKIM communications through the portal documented and accessible
• Documentation export-ready — supplier list, training register, and NCR log exportable in a MYeHALAL-compatible format
• Outstanding portal notifications resolved — no unresponded JAKIM queries or information requests pending

---

Section 9 — Final Pre-Audit Readiness Review

In the week before a scheduled audit, complete this final confirmation:

• Compile audit evidence folder — physical or digital, organised by MHMS 2020 pillar
• Brief all JKHD members — roles during the audit, documents each member is responsible for, escalation procedures
• Walk the full production floor — compare current conditions against documentation; close any visible gaps before audit day
• Test document retrieval — verify any requested document can be located and presented within two minutes
• Confirm all open NCR status — no outstanding non-conformity without a documented status update
• MYeHALAL portal check — confirm all submissions are current and no pending items require action

---

After the Audit: Managing NCRs Effectively

When JAKIM raises an NCR, it is information — not just a compliance penalty. How your organisation responds determines your audit outcome and your readiness for the next cycle.

For every NCR received:

NCR Management Workflow — MHMS 2020

1

Identify & Document

Record the non-conformity using exact wording. Log it in the NCR register immediately — never leave it in an email thread.

2

Root Cause Analysis

Identify the system failure behind the finding — not just the surface symptom. Assign to a named owner with a deadline.

3

Define Corrective & Preventive Action

Document both the corrective action (fix the finding) and the preventive action (prevent recurrence). Assign responsibility.

4

Implement & Gather Evidence

Execute the action. Collect proof: updated SOPs, re-training records, process photos, management sign-offs.

5

Verify Effectiveness

An independent reviewer confirms the root cause is resolved — not just the observable symptom. This step is mandatory before closure.

6

Close NCR

NCR formally closed with documented confirmation. Submit through MYeHALAL if externally raised by JAKIM.

1. Record the finding verbatim — use JAKIM's exact wording in your NCR log; do not paraphrase
2. Assign root cause analysis to a named owner with a defined deadline — not the symptom, but the system failure that caused it
3. Document both corrective and preventive actions — correct the specific finding and address the system gap that allowed it
4. Gather implementation evidence — updated procedures, sign-off records, photos, re-training logs as appropriate
5. Submit through MYeHALAL — all NCR responses for externally raised findings must be formally submitted through the portal with supporting documentation
6. Verify effectiveness before closure — confirm the corrective action resolved the root cause, not just the observable symptom

NCRs that persist across audit cycles — or where the same root cause generates a new finding — signal to JAKIM that your IHCS is not functioning effectively. This pattern escalates the risk classification and scrutiny level for your next audit.

---

How TAQYID Eliminates the Pre-Audit Sprint

The scenario most Halal Executives want to avoid: a JAKIM audit notification triggers a two to four week intensive effort to locate, compile, and verify documentation that should already be in continuous order.

TAQYID replaces that sprint with a compliance posture that is continuously maintained. Supplier certificate expiry is tracked automatically — every certificate, every supplier, with configurable alerts at 60/30/7 days. Internal audits are conducted through MHMS 2020-aligned checklists with NCR workflows built in. Every NCR is tracked from identification through root cause to verified closure in a single system. The compliance dashboard shows current status across every MHMS pillar at any point.

Audit day should be the moment you confirm what you already know about your compliance status. If you are currently in preparation mode, read our analysis of the hidden cost of managing compliance manually.

Explore TAQYID's Audit Management features →

---

Expert Insight: What Experienced JAKIM Auditors Look For First

Every experienced JAKIM auditor has a first-minute assessment approach that most manufacturers do not anticipate: they do not start with the documentation folder. They start with the people.

A Halal Executive who can confidently explain their role without consulting notes, describe the last NCR identified in the most recent internal audit and its resolution, and point to the active HCP for the current production run — tells an auditor more about the organisation's compliance maturity than any binder of documents.

Conversely, a Halal Executive who reaches for documentation to answer basic questions about their own operation, or who needs to check with colleagues about current supplier certificate status, signals that the HAS exists as documentation but not as a genuinely embedded system.

Prepare your team's knowledge and confidence, not just your paperwork. The audit begins the moment the auditor walks through the door — before a single document is opened.

---

Conclusion

JAKIM audit preparation in 2026 is not a cyclical exercise triggered by an audit notice. NurAI monitoring and MYeHALAL digital submissions have permanently changed the timeline of halal compliance. Audit readiness is the continuous operational standard.

Key takeaways:

• NurAI enables unannounced surveillance — manufacturers with manual, reactive compliance systems have materially higher exposure
• Supplier certificate management is the highest-risk audit section — verify currency today, not the week before the audit
• JKHD minutes, NCR records, and training logs must show continuous activity throughout the year — not concentrated pre-audit bursts
• MYeHALAL portal readiness is now a mandatory dimension of audit preparation
• How you respond to NCRs matters as much as receiving none — root cause resolution, not symptom correction

Start your free TAQYID compliance readiness review →

---

Frequently Asked Questions

How much notice does JAKIM typically give before a halal certification audit?

JAKIM typically provides 7 to 14 days notice for scheduled certification and renewal audits. However, under the NurAI monitoring initiative deployed progressively since 2024, JAKIM has expanded capacity for unannounced or short-notice surveillance inspections triggered by AI-identified risk signals in supply chain and certification data. Manufacturers should maintain continuous audit readiness rather than treating compliance as a cyclical preparation exercise. Under MHMS 2020, continuous compliance is the standard — not the ideal.

What are the most common reasons Malaysian manufacturers receive NCRs during JAKIM audits?

The five most frequently cited NCR categories in JAKIM audits are: (1) expired or unverified supplier halal certificates for active ingredients; (2) incomplete or missing staff training records, particularly for personnel at HCPs; (3) internal audit NCRs not tracked through to formal verified closure; (4) JKHD meeting records that are unsigned, undated, or not stored in a retrievable shared system; and (5) HCP monitoring records that are incomplete or show inconsistent coverage across production lines. The common root cause across all five is a compliance system that relies on individual memory and informal practices rather than systematic, documented controls.

Can the same compliance documentation be used for both JAKIM and GCC halal standards?

Yes, with careful scoping. The HAS documentation required by MHMS 2020 shares significant structural overlap with GCC halal standards under ESMA (Emirates Authority for Standardisation and Metrology) and SMIIC (Standards and Metrology Institute for the OIC countries). Supplier certificate records, internal audit reports, training logs, and NCR management processes apply across both frameworks. The key differences lie in jurisdiction-specific halal criteria, certifying body recognition lists, and labelling requirements. A robust MHMS 2020 HAS is the strongest foundation for GCC multi-standard certification.

What happens if a major NCR from a JAKIM audit is not resolved within the required timeframe?

If a major NCR is not resolved within the timeframe specified by JAKIM following a certification audit, JAKIM may defer the renewal of the SPHM pending full corrective action verification. All NCR responses — including root cause analysis, corrective action evidence, and effectiveness verification — must be submitted through MYeHALAL. In cases where the NCR relates to a systematic halal integrity failure, JAKIM may initiate suspension of the SPHM pending investigation. The commercial consequences of a certification delay — including lost export contracts and customer penalties — typically far exceed the cost of proactive compliance management.

How should NCR responses be submitted to JAKIM after an external audit?

All NCR responses for externally raised findings must be submitted through the MYeHALAL portal. Each submission should include: the full root cause analysis; the corrective and preventive actions taken; evidence of implementation (updated procedures, training records, process changes, photos where relevant); the completion date; and confirmation of effectiveness verification by a person other than the NCR owner. JAKIM reviewers assess whether the response addresses the root cause or only the symptom — responses that close the immediate finding without resolving the underlying system gap are frequently rejected or escalated.