Absolutely not. FSMA specifically states that the regulations to be developed by FDA “shall not require a facility
to hire a consultant or other third party to identify, implement, certify, or audit preventive controls, except in the
case of negotiated enforcement resolutions that may require such a consultant or third party.”