· Codemax · 7 min read
Internal halal audit: a year-end checklist before 2027
Under JAKIM's MHMS 2020, a business on a Halal Assurance System must audit every premises at least once a year. What to check, who can audit, what the report needs and why to finish before 2027.
TL;DR
An internal halal audit is a planned check a company runs on itself against Malaysian halal certification requirements. Under JAKIM's MHMS 2020, businesses on a Halal Assurance System, including chains of three or more outlets, must audit every premises at least once a year, with a certified auditor appointed by the Internal Halal Committee, and present the report and corrective actions to that committee.
- Under MHMS 2020, a Halal Assurance System business must audit every premises at least once a year.
- JAKIM's sample procedure audits every six months; the Internal Halal Committee judges whether the frequency is enough.
- Auditors need a certificate from an HPB-registered training provider and a formal committee appointment.
- The report and checklist go to the committee, which verifies every corrective action.
- Finishing before year-end leaves early-2027 renewal windows for submission, not catch-up.
An internal halal audit is a check your own team runs against Malaysian halal certification requirements, before JAKIM or a state religious authority does. Under JAKIM’s Malaysian Halal Management System (MHMS) 2020, a business running a Halal Assurance System must carry one out at least once a year at every premises, including every outlet of a chain. If any outlet hasn’t had its 2026 audit yet, the seven weeks to 31 December are enough to run it, close the findings and put the evidence on file.
Finishing now also helps with renewals. Renewals go in between six and three months before a certificate expires, so certificates expiring in mid-2027 open their windows around the turn of the year.
What is an internal halal audit?
An internal halal audit (audit halal dalaman) is a planned inspection that a company carries out on itself to confirm it meets Malaysian halal certification requirements. It covers the paperwork and the floor: the halal file, and what happens in the kitchen, store and receiving bay.
It is a requirement of the Halal Assurance System (HAS), the control system for medium and large businesses. Under the food premises scheme, that includes hotels, large caterers and chains, which JAKIM’s certification manual defines as three or more outlets under one brand with a central kitchen, central purchasing or other standard practice. For chains, MHMS 2020 says the internal halal audit must reach every outlet, not only the central kitchen.
Micro and small businesses, and most single restaurants and cafés, run the simpler Internal Halal Control System (IHCS) instead: a halal policy, raw-material control and traceability. IHCS has no formal internal audit element, though a self-check before renewal costs little. Which system applies to whom is set out in our guide to getting certified and staying audit-ready.
How often must an internal halal audit be done?
The question people search most, audit halal dalaman berapa kali setahun, has a short answer: at least once a year at every branch or chain premises. That is clause 5(5)(b) of MHMS 2020, with two details behind it.
- The sample procedure uses six months. Appendix D of MHMS 2020, JAKIM’s example audit procedure, says “at least once every six months”. The appendices are for reference, so the firm minimum is annual.
- The committee owns the frequency. The Internal Halal Committee (Jawatankuasa Halal Dalaman) must judge whether audits are effective and frequent enough to stop non-compliance recurring. An outlet with repeat findings may need more than one visit a year.
Who can audit. The auditor must hold an Internal Halal Auditing certificate or a Halal Executive certificate from a halal training provider registered with the Halal Professional Board (HPB), and must be formally appointed by the Internal Halal Committee. The sample procedure draws auditors from different departments, so nobody audits their own area. A certified third-party auditor is also allowed.
The wider annual rhythm. Under HAS, the committee also meets at least twice a year, top management signs off an annual HAS review, and a mock recall runs at least once a year. Year-end is a good point to check all four.
This summarises JAKIM’s published documents and is not legal or certification advice. Check your scheme’s current requirements with JAKIM or your state religious authority.
A year-end internal halal audit checklist
JAKIM’s own internal halal audit checklist (senarai semak audit halal dalaman), Appendix E of MHMS 2020, is grouped into eight areas. The table follows it, with the items most likely to have slipped in a busy final quarter.
| Area | What the auditor checks | Year-end watch-point |
|---|---|---|
| Documentation | Halal file and HAS manual current; ingredient certificates valid and recognised; purchase invoices; training and sertu records | Certificates that expired since the last audit; invoices for items not on the raw-material list |
| Staff | Halal Executive recognised by HPB; enough Muslim workers on each kitchen shift; a Muslim supervisor at each restaurant; halal training up to date | December leave rosters that leave a shift short; new hires past three months without awareness training |
| Building and facilities | Pest and pet control in place; no prohibited material brought onto the premises | Pest-control visits missed in busy weeks |
| Raw materials | Recognised, valid certificates; materials match what was declared; manufacturer identifiable; changes recorded | Substitutes bought during a shortage; new ingredients for festive menus |
| Processing | Halal products only; areas free of najis; no ingredients of doubtful status | Temporary production set-ups for catering orders |
| Equipment | Used for halal products only; brushes of known source and status | Borrowed or hired equipment for events |
| Packaging and labels | Names and claims not synonymous with non-halal terms; label names match the certified names | New year-end menu names, gift packs and seasonal packaging |
| Storage | No mixing with non-halal or doubtful items; raw materials, finished goods, R&D and trading items kept apart | Overflow stock in temporary storage |
Each item is marked compliant or not, with a note. The sample procedure combines document review, interviews, cross-checks between departments and observation. Cross-checks find most gaps: the purchasing list names one supplier, the receiving log another. Give raw materials extra time, because manufacturer certificates lapse quietly.
What goes in the internal halal audit report?
MHMS 2020 asks for the audit findings report, with the completed checklist, to be recorded and presented to the Internal Halal Committee. A usable internal halal audit report (laporan audit halal dalaman) has five parts.
- Scope. The premises or outlets covered, the dates and the departments audited.
- Auditors. Names, certificates and the committee’s letter of appointment.
- The checklist. Every item marked, with notes, photos and document references.
- Non-conformances. Each finding with its severity, owner and due date.
- Closure evidence. What was done, the proof and the committee’s verification.
Corrective actions must be carried out promptly and verified by the committee. JAKIM’s sample procedure allows 14 days, or a period the auditor and auditee agree. Keep audit records for at least three years, filed so they can be found during an inspection.
A finding that keeps coming back calls for a change to the procedure, the training or the audit frequency, not the same ticket closed again.
Why finish before 2027
Renewal windows open early in the year. Under JAKIM’s Pekeliling Pensijilan Halal Malaysia Bil. 1 Tahun 2026, in force since 1 April 2026, renewals are submitted between six and three months before expiry. A certificate expiring on 30 June 2027 opens its window on 31 December 2026. With the audit done and findings closed, the renewal file is a review rather than a rebuild.
Inspections grade the system. MHMS 2020 has the authority rate a company’s HAS during inspection. Grade A (86–100%) means full compliance and no NCRs; such companies can be recommended for fast track and the whitelist, and offered certification for up to five years. Grade B (66–85%) can be considered for both. We covered what JAKIM’s whitelist means for approval speed last week.
The year closes cleanly. One audit per premises, findings closed, a committee meeting, then the HAS review. That fits into seven weeks if it starts now.
Where HalalSuite fits
HalalSuite is a halal compliance platform from Codemax, built around JAKIM’s MPPHM 2020, MHMS 2020 and MS1500. Its HalalMaintain module covers the audit and the work between audits.
- Internal audits. Risk-based checklists, with findings recorded against the right premises, so a chain sees every outlet in one place.
- Daily checklists. Mobile checklists pushed to outlets, where a “No” raises a non-conformance automatically, so issues surface before the audit does.
- Corrective actions. A non-conformance closes only with photo evidence and a superior’s approval, which gives the committee something to verify.
- Committee and records. Internal Halal Committee meetings and actions, training and health records, and the pest control schedule.
- The dossier. An always-ready audit dossier across premises for when the inspection comes.
The boundaries matter as much. HalalSuite does not issue halal certification; JAKIM and the state religious authorities do, and applications and renewals are still submitted through MYeHALAL. It doesn’t run the audit either. The AI reads, classifies, flags and drafts; your auditors and committee decide.
Questions worth asking this week
- Has every premises, not only the central kitchen, had an internal halal audit in 2026?
- Is each auditor certified by an HPB-registered provider and appointed in writing by the committee?
- Are all findings from the last audit closed, with evidence the committee has verified?
- Has the committee met twice this year, and is the HAS review booked with top management?
- Has a mock recall been run in 2026?
- Which certificates expire in the first half of 2027, and whose calendar holds their renewal windows?
If the answer to the first question is no, start with the outlet you have visited least.
Frequently asked questions
How often is an internal halal audit required in Malaysia?
An internal halal audit is required at least once a year at every branch or chain premises under JAKIM's Malaysian Halal Management System (MHMS) 2020, for businesses that run a Halal Assurance System. JAKIM's sample audit procedure in the same document uses every six months, and the Internal Halal Committee must judge whether the frequency is enough. Check your scheme's requirements with JAKIM or your state religious authority.
Who can conduct an internal halal audit?
An internal halal audit is conducted by an auditor formally appointed by the company's Internal Halal Committee. Under MHMS 2020, the auditor must hold an Internal Halal Auditing certificate or a Halal Executive certificate from a halal training provider registered with the Halal Professional Board (HPB). A company may appoint a third-party auditor instead, who must hold an Internal Halal Auditing certificate.
What should an internal halal audit checklist cover?
An internal halal audit checklist should cover the eight areas in JAKIM's sample checklist in MHMS 2020: documentation, staff, building and facilities, raw materials, processing, equipment, packaging and labels, and storage. Each item is marked compliant or not, with notes. Typical checks include valid, recognised ingredient certificates, enough Muslim workers on each kitchen shift and clear segregation in storage.
Do small restaurants need an internal halal audit?
Small restaurants usually have no formal internal halal audit requirement. Under MHMS 2020, micro and small businesses and most single restaurants and cafés run an Internal Halal Control System (IHCS), which requires a halal policy, raw-material control and traceability. A chain of three or more outlets under one brand runs a Halal Assurance System and must audit every outlet at least once a year.
What happens to findings from an internal halal audit?
Findings from an internal halal audit are recorded in a report with the completed checklist and presented to the Internal Halal Committee. Under MHMS 2020, corrective actions must be carried out promptly and verified by the committee; JAKIM's sample procedure allows 14 days or an agreed period. Audit records must be kept for at least three years and be easy to find during inspection.
Can HalalSuite carry out an internal halal audit for us?
No. HalalSuite does not carry out audits or issue halal certification; people run the audit, and JAKIM and the state religious authorities certify. HalalSuite's HalalMaintain module records internal audit checklists and findings by premises, tracks corrective actions with photo evidence and a superior's approval, and keeps the audit dossier ready. Applications and renewals are still submitted through MYeHALAL.
Run the audit once a year. Keep the evidence every day.
See how HalalSuite records internal audit findings by premises, closes corrective actions with evidence and keeps the audit dossier ready for inspection.
Sources
- Sistem Pengurusan Halal Malaysia (Malaysian Halal Management System, MHMS) 2020 — JAKIM, 2020
- Manual Prosedur Pensijilan Halal Malaysia (Domestik) 2020 — JAKIM, 2020
- Pekeliling Pensijilan Halal Malaysia Bil. 1 Tahun 2026 — JAKIM, 12 Feb 2026
Related reading
- JAKIM's whitelist: why a clean halal record speeds up approval JAKIM says highly committed firms with no past issues can have halal certification approved within about a week. What a clean record looks like, and how to keep your file ready on any day.
- After MIHAS: halal certification is one job, staying audit-ready another MIHAS week sends plenty of operators home planning a halal application. What JAKIM asks for, who you need in place, and the work that keeps a certificate ready for audit.
- After the Certificate Arrives: The Halal Work That Happens Every Day Getting halal certified is a project with an end date. Staying certified is not. For most operators, the daily work of maintenance — checks, records, corrective actions, committee minutes — is the harder half.