“Are We Actually FSVP Compliant?” The Question Behind Every Gap Assessment

There is a question importers often ask quietly.

Not during a meeting.

Not in a formal compliance review.

Usually, it comes up when someone opens the FSVP folder and starts looking around.

“Are we actually FSVP compliant?”

The question sounds simple.

The answer usually isn't.

The importer may have:

• An FSVP document
• Supplier records
• Certifications
• Audit reports
• Product information
• Verification records
• A supplier questionnaire
• A compliance consultant
• A spreadsheet
• A folder full of documents

Everything looks organized.

But then comes the uncomfortable follow-up:

“How do we know?”

That's the question behind a real FSVP gap assessment.

---

Having an FSVP is not the same as knowing your FSVP is working

An importer may say:

“We have an FSVP.”

That's a good starting point.

But a gap assessment asks more detailed questions.

Is the FSVP current?

Does it cover the foods actually being imported?

Does it identify the correct foreign suppliers?

Are the supplier evaluations supported?

Are verification activities appropriate and documented?

Are required records maintained?

Have changes been addressed?

Can the importer demonstrate what it has done?

The goal isn't to make the importer nervous.

The goal is to replace uncertainty with evidence.

---

The importer who thought everything was fine

Imagine a growing importer.

They have been importing food for several years.

Their FSVP was created when the business was smaller.

Since then, the company has added:

New products

New suppliers

New facilities

New customers

More shipments

The original FSVP is still in the compliance folder.

Nobody intentionally ignored it.

It simply hasn't kept pace with the business.

Then someone asks:

“Does our current FSVP cover everything we're importing today?”

And suddenly, the answer isn't obvious.

---

This is where a gap assessment becomes useful

A gap assessment is essentially a structured reality check.

It compares:

What the importer should have

against:

What the importer actually has

and then identifies:

What is missing

What is outdated

What is inconsistent

What needs clarification

What needs correction

What appears adequate

That gives the importer a roadmap.

---

A gap assessment isn't automatically an FDA inspection

This distinction is important.

An internal FSVP readiness assessment is designed to help an importer understand its current compliance position.

It isn't the same thing as an FDA inspection.

The purpose is not to simulate enforcement theatrically.

The purpose is to identify weaknesses while the importer still has time to address them.

---

The first question: Who is the FSVP importer?

This sounds basic.

But it can become surprisingly complicated.

The business may have:

• A U.S. buyer
• A customs broker
• A freight forwarder
• A foreign supplier
• A distributor
• A U.S. entity
• A marketplace account
• An FSVP Agent

Everyone may have a role.

But who is responsible for the FSVP?

The answer needs to be clear based on the applicable circumstances.

A gap assessment should confirm that the importer identification and FSVP responsibility are properly established.

---

The second question: What foods are actually covered?

An importer may believe:

“Our FSVP covers all of our products.”

But when the product list is compared with the FSVP records, several products may be missing.

Maybe the company added:

Two new SKUs

A new flavor

A private-label product

A new supplier

Those products may have entered the business without entering the compliance process.

That is a classic gap.

---

The third question: Are the foreign suppliers correctly identified?

Supplier names can be confusing.

A company may have:

Parent company

Manufacturing entity

Exporter

Distributor

Brand owner

Contract manufacturer

The FSVP needs to accurately identify the relevant foreign supplier relationship.

A gap assessment can uncover situations where the name in the FSVP doesn't clearly correspond to the entity actually supplying the food.

---

The fourth question: Is the facility information current?

The supplier may have changed:

• Address
• Manufacturing location
• Production facility
• Ownership
• Contract manufacturing arrangements

The importer may still have the original information.

Again, the supplier may not have done anything wrong.

The FSVP simply needs to reflect reality.

---

The fifth question: Has the food been properly evaluated?

FSVP is not simply a supplier approval program.

The food itself matters.

The importer needs to consider the applicable food safety hazards and the supplier's ability to control those hazards in accordance with the applicable requirements.

A gap assessment asks whether the current program demonstrates that this evaluation has been performed appropriately.

---

The sixth question: Where is the hazard analysis?

This can be a major point of confusion.

An importer may have:

HACCP plan

Supplier audit

Certification

Product specification

But those documents aren't automatically the same thing as the importer's required FSVP hazard evaluation.

The importer needs to understand what information supports its FSVP determination.

---

The seventh question: What verification activities were performed?

This is where many files become uncertain.

The importer may say:

“We have a supplier audit.”

But:

Was the audit appropriate?

Who performed it?

What did it cover?

When was it performed?

What findings were identified?

Were corrective actions completed?

How does it support the FSVP?

Verification is not simply a document-collection exercise.

---

The eighth question: Are the verification activities current?

A document can be perfectly legitimate and still be outdated.

For example:

2022 audit

2023 certification

2024 supplier questionnaire

If it is now 2026, someone needs to determine whether the available information remains appropriate.

A gap assessment looks at the currency and relevance of the evidence.

---

The ninth question: What happened when something went wrong?

A mature FSVP should not assume that every supplier will have a perfect history.

Instead, it should have a way to respond when something changes.

For example:

Audit finding

Recall

Complaint

Regulatory action

Supplier change

Food safety incident

The question becomes:

What did the importer do when it learned about the issue?

---

The tenth question: Are reevaluations documented?

New information can affect an existing FSVP.

FDA's FSVP framework includes reevaluation requirements when applicable new information or significant changes could affect the adequacy of the FSVP.

A gap assessment can therefore ask:

“When something changed, where is the evidence that the importer evaluated the change?”

That record can be just as important as the original evaluation.

---

The eleventh question: Are records actually usable?

This is where compliance becomes operational.

A record may technically exist.

But can someone find it?

Can someone understand it?

Can someone determine:

What was done?

When was it done?

Who performed it?

What was concluded?

FSVP recordkeeping requirements are intended to document applicable FSVP activities and determinations.

A gap assessment should look at whether the records tell a coherent story.

---

The file can be full and still have gaps

This is one of the most important lessons.

Imagine a folder with:

35 documents

It looks impressive.

But the review discovers:

• Five are outdated
• Three belong to another facility
• Two relate to products no longer imported
• One certification is expired
• The current supplier evaluation isn't documented
• Verification records are incomplete
• The latest product isn't included

The folder is full.

The FSVP still has gaps.

---

A gap assessment is about relationships between documents

This is where a fresh review can be extremely valuable.

A reviewer doesn't just ask:

“Do you have a certificate?”

They ask:

“Does this certificate relate to the supplier and facility identified in the FSVP?”

They don't just ask:

“Do you have a product specification?”

They ask:

“Does it represent the food you're currently importing?”

They don't just ask:

“Do you have an audit?”

They ask:

“What does the audit establish, and how does it support your verification activity?”

That is the difference between document review and compliance assessment.

---

The importer who had never looked at the FSVP as a whole

This happens frequently.

One employee manages supplier documents.

Another manages shipments.

Another handles regulatory questions.

Another maintains the FSVP.

Everyone is doing their part.

But nobody has recently stepped back and asked:

“Does the entire system still work together?”

A gap assessment provides that outside perspective.

---

The business may have outgrown the original program

This is especially common with growing importers.

The FSVP was created when the business had:

1 supplier

1 product

10 shipments

Now it has:

12 suppliers

35 products

Multiple facilities

Hundreds of shipments

The original structure may no longer be practical.

The importer may need better:

Supplier management

Product mapping

Document control

Verification tracking

Review scheduling

The problem isn't necessarily that the original FSVP was wrong.

The business changed.

---

Growth creates invisible gaps

Every new product creates a question:

Is it covered?

Every new supplier:

Has the supplier been evaluated?

Every new facility:

Does the current verification information still apply?

Every new product formulation:

Does the existing assessment still reflect the food?

Every significant supplier event:

Does the FSVP need reevaluation?

If those questions aren't part of the workflow, gaps can accumulate quietly.

---

The gap assessment can reveal what you don't know

Sometimes the most important finding isn't:

“This document is missing.”

It's:

“We don't know.”

For example:

“We don't know when this supplier was last reassessed.”

“We don't know whether this facility is still producing the product.”

“We don't know what verification activity supports this conclusion.”

“We don't know whether this product was added to the FSVP.”

Those statements identify areas where the importer needs to investigate.

---

“I think we're compliant” isn't the same as “we know”

This is the emotional core of the gap assessment.

The importer doesn't necessarily want to hear:

“You're wrong.”

They want to know:

“Where do we stand?”

A good assessment answers that question objectively.

Maybe the program is strong.

Maybe there are several gaps.

Maybe there are a few documentation updates.

Maybe the importer needs a more structured system.

The assessment tells you which.

---

Not every gap is equally serious

This is critical.

A gap assessment shouldn't produce a giant list of problems without context.

A useful assessment distinguishes between:

Administrative gaps

For example, outdated contact information.

Documentation gaps

For example, missing current records.

Process gaps

For example, no defined review process.

Verification gaps

For example, insufficient or undocumented applicable verification activity.

Program gaps

For example, an FSVP that does not accurately cover the current importing operation.

The appropriate response depends on the nature of the gap.

---

A gap assessment should prioritize

Imagine receiving a report with:

47 findings

No prioritization.

No explanation.

No action plan.

That's not very helpful.

Instead, the importer should understand:

What should be fixed immediately?

What should be addressed soon?

What can be improved as part of normal maintenance?

Now the assessment becomes a management tool.

---

The gap report should answer “What do we do now?”

That's one of the most important outcomes.

For every significant finding, there should be a practical direction.

For example:

Finding: Current certification unavailable.

Action: Obtain current certification and evaluate its applicability.

---

Finding: New manufacturing facility identified.

Action: Confirm facility information and evaluate whether existing supplier verification remains appropriate.

---

Finding: New product not represented in current FSVP.

Action: Review product coverage and complete applicable FSVP activities.

The exact corrective action depends on the facts.

---

The importer may discover that its system is actually strong

This deserves emphasis.

A gap assessment isn't designed to manufacture problems.

Sometimes the outcome is:

Current

Complete

Appropriate

Well documented

That's a successful result.

The importer gains confidence because someone actually checked.

---

The value of independent eyes

An internal employee may know the system too well.

They know why something is missing.

They know where the document is.

They know what happened three years ago.

They fill in the gaps mentally.

An outside reviewer doesn't have that institutional memory.

They ask:

“Where is it?”

That can be extremely useful.

---

“We can explain it” isn't always enough

During an internal discussion, someone might say:

“I can explain why we approved this supplier.”

That's helpful.

But what if that person leaves?

What if someone else reviews the file?

What if the company is asked to produce records?

A strong compliance system doesn't depend entirely on verbal explanations.

The record should support the conclusion.

---

The gap assessment can turn knowledge into documentation

Maybe the importer already did the right thing.

They simply didn't document it properly.

That's good news.

The assessment can identify:

“The process exists, but the record needs improvement.”

That's different from:

“The process doesn't exist.”

The solution can therefore be much simpler.

---

What does an FSVP readiness assessment actually look at?

A practical assessment can examine:

Importer identification

Who is responsible for the FSVP?

Foreign suppliers

Are the correct suppliers identified?

Foods

Are the imported foods accurately covered?

Hazard evaluation

Are applicable hazards addressed?

Supplier evaluation

Is the foreign supplier appropriately evaluated?

Verification

Are applicable verification activities performed and documented?

Corrective actions

Are significant issues addressed?

Reevaluation

Are changes and new information evaluated?

Records

Are required records maintained?

Ongoing maintenance

Is the program kept current?

The assessment should be tailored to the specific importing operation and applicable requirements.

---

The most useful question is often the simplest

At the end of the review, ask:

“If FDA asked us to demonstrate our FSVP process, could we explain it clearly and produce the supporting records?”

If yes, that's encouraging.

If the answer is:

“Probably.”

or:

“I think so.”

or:

“It depends who you ask.”

then there may be an opportunity for improvement.

---

Don't wait until an FDA inspection

This is one of the strongest reasons to conduct a readiness assessment.

You don't want the first serious review of your FSVP to happen when someone external is already asking questions.

Internal assessment allows you to identify:

Gaps

Inconsistencies

Missing evidence

Outdated information

before they become more difficult to manage.

---

Don't wait until the shipment is moving

The same principle applies to imports.

If a new product is already at the port when someone asks:

“Is the FSVP ready for this product?”

that's late.

A gap assessment can help identify weaknesses before they affect active shipments.

---

The emotional journey of a gap assessment

At the beginning:

“I hope everything is okay.”

Then:

“Okay, we have a few things to update.”

Then:

“We didn't realize this product wasn't properly mapped.”

Then:

“We need to clarify the supplier facility.”

Then:

“Now we know exactly what needs to happen.”

And finally:

Relief.

Not because everything was perfect.

Because uncertainty has been replaced by a plan.

---

You don't need to know everything before starting

Some importers postpone a gap assessment because they're embarrassed.

They think:

“We should fix everything before someone reviews it.”

That defeats the purpose.

A readiness assessment is supposed to tell you what needs improvement.

You don't have to prepare a perfect program before asking:

“Where are our gaps?”

---

Finding a gap is not failure

This is worth saying directly.

A gap is information.

If you identify:

Missing document

you can obtain it.

If you identify:

Outdated record

you can update it.

If you identify:

Unclear process

you can define it.

If you identify:

Program weakness

you can address it.

The real problem is not knowing that the gap exists.

---

The cost of waiting can increase

A small gap today may become a larger cleanup project later.

For example:

One missing supplier record

can become:

Five missing supplier records

which can become:

An incomplete annual review

which can become:

A major compliance reconstruction project.

Early assessment gives you a chance to intervene sooner.

---

A gap assessment creates a roadmap

The best outcome isn't simply:

“Here are your problems.”

It's:

“Here is where you are, here are the gaps, here is what matters most, and here is how to move forward.”

That is what makes a readiness assessment useful to management.

---

What happens after the gap assessment?

There are several possibilities.

You fix the gaps internally

If your team has the resources, the assessment gives them a roadmap.

You receive implementation support

A compliance professional helps close the identified gaps.

You improve the system

You move from scattered documents to structured FSVP management.

You establish ongoing maintenance

You prevent the same gaps from returning.

Often, the best approach combines all four.

---

The goal isn't permanent dependence

A good compliance partner shouldn't make the importer feel incapable of managing its own program.

The objective should be to help the importer understand:

What is required

What is currently happening

Where the gaps are

How to maintain the system

That creates long-term capability.

---

When a gap assessment becomes a business decision

Sometimes the assessment reveals:

“We can manage this internally.”

Great.

Other times:

“This is taking too much internal time.”

Then outsourcing may make sense.

Or:

“We need a compliance system.”

Then FSVPQI implementation may be appropriate.

Or:

“We have a technical regulatory question.”

Then advisory support may be the right solution.

The assessment helps identify which problem you're actually solving.

---

You don't have to guess

That's ultimately what the question:

“Are we actually FSVP compliant?”

is really asking.

Not:

“Can someone reassure me?”

But:

“Can someone help me determine where we actually stand?”

That's a much better question.

---

A practical self-check before requesting an assessment

Ask your team:

Can we identify every foreign supplier?

Can we identify every food covered by the FSVP?

Can we explain how each supplier was evaluated?

Can we identify applicable verification activities?

Can we show the supporting records?

Can we demonstrate that current information was considered?

Can we explain how significant changes are handled?

Can we identify when each supplier was last reviewed?

Can we locate the records without searching through individual inboxes?

Can someone other than the person who created the FSVP understand the program?

If several answers are uncertain, a gap assessment could be useful.

---

The best time to ask the question

Not after a problem.

Not after a shipment is held.

Not after an FDA inspection begins.

Not after a customer asks for documentation.

The best time to ask:

“Are we actually FSVP compliant?”

is while you still have time to improve the answer.

---