Food Safety Management Systems

Everything else in the syllabus is a rule. This topic is the machinery that makes rules happen on a Saturday night when the manager is not standing there.

What is a food safety management system?

A food safety management system is the specific set of actions that management and employees take to control the risks and hazards running through the flow of food that can cause foodborne illness. It is not a binder and it is not a certificate. It is a working system with three parts, and removing any one of them stops it being a system at all.

1. Written policies and procedures. Established, and put on paper.
2. Employee training on those policies and procedures.
3. Monitoring to confirm employees are actually following them.

Procedures nobody was trained on are a filing exercise. Training that is never monitored is an assumption.

When a documented system is required

The 2022 Food Code Supplement did more than define the term. It established that a food establishment must put the system in writing, and that what is written must be:

• Developed and maintained, meaning written down and kept current
• Implemented during all hours of operation, not only when a manager is on shift
• Available to the regulatory authority upon request

There is one carve-out. A regulatory authority that judges an establishment to pose minimal risk may not require the documented system. Two things drive that judgment: the kind of operation, and how much food preparation happens there. The exemption belongs to the regulator to grant, never to the operator to assume.

The middle requirement gets tested sideways. Cooling logs complete on the day shift and blank overnight describe a system that is not implemented during all hours of operation.

Prerequisite programs

A management system is not built on nothing. It sits on top of prerequisite programs, the foundations that must already be running before anything as structured as HACCP can work.

The practical point: an operation that writes a HACCP plan without these underneath produces a document nobody can execute. The critical limits will be correct and the monitoring will not happen, because there are no procedures to hang the monitoring on.

Active Managerial Control

Active Managerial Control is the purposeful incorporation of specific actions or procedures by management to gain control over the foodborne illness risk factors in an operation. The word doing the work is purposeful. It is not the accumulated effect of a conscientious manager. It is deliberate installation of controls aimed at named risks.

Those risks are the five CDC risk factors:

1. Purchasing food from unsafe sources
2. Failing to cook food adequately
3. Holding food at improper temperatures
4. Using contaminated equipment
5. Practicing poor personal hygiene

The 9th Edition characterizes Active Managerial Control three ways, and the third is the newly emphasized one:

• Proactive. Anticipate where food is likely to be abused and build controls there in advance.
• Reactive. When a problem is found, correct it. Not note it. Correct it.
• Adaptive. Feed the corrective action back into the written policy so the same failure cannot recur.

A manager who fixes the same violation every week without changing the procedure is being reactive and not adaptive, and that is not Active Managerial Control.

The six steps

Those steps deliberately mirror HACCP: find hazards, monitor, correct, verify, reassess, applied to the whole operation rather than to specific control points.

HACCP: the seven principles

HACCP stands for Hazard Analysis Critical Control Point. It is one comprehensive way of achieving Active Managerial Control, not a separate philosophy.

A critical control point is a step where a control can be applied to prevent, eliminate, or reduce a hazard to an acceptable level. Not every step is one. Cooking, cooling, reheating, and holding are the common CCPs in a foodservice kitchen.

A critical limit is the measurable boundary at that point: 165F (74C) for 15 seconds for poultry, 41F (5C) maximum for cold holding, 135F to 70F within 2 hours for stage one cooling. An operating limit is a stricter internal target that buys margin.

A corrective action must address two things: what happens to the food that missed the limit, and what changes so the deviation does not recur. Discarding the food and doing nothing else is half an answer.

Verification should be done by someone other than the person doing the daily monitoring. Calibrating thermometers, reviewing logs, and observing staff all count.

When a HACCP plan is actually required

Most operations never need one. That sentence is worth memorizing, because a common exam trap offers an answer asserting every operation must have a HACCP plan. What every operation needs is Active Managerial Control and, separately, a documented food safety management system.

A HACCP plan may be required when an operation requests a variance from a regulatory requirement, or uses a specialized food processing method. In practice the triggers include:

• Smoking food as a method of preservation, and curing food
• Using food additives or components such as vinegar to render food non-TCS
• Custom-processing animals
• Packaging food using reduced oxygen packaging
• Sprouting seeds or beans
• Offering live shellfish from a display tank

When one of these applies, the plan is written, submitted to the regulatory authority for approval, and its records maintained.

Food Handler versus Manager: how deep to go

Food Handler candidates need very little of this. Know that the operation has written procedures, that following them is part of the job, that a manager monitors and corrects, and that reporting a problem is expected. The Food Handler exam does not test HACCP principles.

Manager candidates own this material outright: the definition and its three documentation requirements, the prerequisite programs, the Active Managerial Control definition with its proactive, reactive, and adaptive framing, the six implementation steps, the five CDC risk factors, all seven HACCP principles in order, critical limit versus operating limit, and the circumstances that require a HACCP plan. The Manager exam is 80 scored questions and passes at 70%, or at least 56 correct.

Practice set

1. What is a food safety management system? A. A binder of inspection reports B. The set of actions management and employees take to control hazards in the flow of food C. A certificate held by the person in charge D. The health department's inspection form

2. Which three elements make up a food safety management system? A. Policies, training, and monitoring B. Cooking, cooling, and holding C. Cleaning, sanitizing, and disinfecting D. Permits, inspections, and appeals

3. A documented food safety management system must be implemented: A. During the manager's shift B. During all hours of operation C. Only when an inspector is present D. During peak service only

4. What is Active Managerial Control? A. Correcting violations after an inspection B. The purposeful incorporation of actions and procedures by management to control foodborne illness risk factors C. A HACCP plan D. Supervising the dish pit

5. Which describes the adaptive element of Active Managerial Control? A. Anticipating risks before they cause problems B. Correcting a problem when it is found C. Feeding corrective actions back into policy so the failure cannot recur D. Training new hires on arrival

6. What is a critical control point? A. Any step in the flow of food B. A step where a control can be applied to prevent, eliminate, or reduce a hazard to an acceptable level C. The temperature a food must reach D. The record that proves monitoring happened

7. Which is a critical limit rather than a critical control point? A. Cooking B. Cooling C. 165F for 15 seconds D. Receiving

8. Which operation most likely needs a written HACCP plan? A. A sandwich shop slicing deli meat to order B. An operation smoking fish for preservation C. A coffee bar selling packaged pastries D. A pizzeria baking to order

9. A corrective action must address: A. Only the unsafe food B. Only the failed process C. Both the unsafe food and the process that failed D. Neither, if the food was discarded

10. Which is a prerequisite program? A. The HACCP plan itself B. The cleaning and sanitation program C. The health inspection D. The consumer advisory

Answers

1. B. It is a working set of actions across the flow of food. A, C, and D are documents or credentials, not systems.

2. A. Written policies and procedures, training on them, and monitoring that they are followed. B are stages in the flow of food. C are cleaning processes. D are regulatory items.

3. B. All hours of operation. A and D describe exactly the partial implementation the requirement exists to prevent. C describes preparing for an inspection rather than running a system.

4. B. The definition turns on the word purposeful. A is reactive only and misses the proactive and adaptive parts. C is one tool for achieving it, not the thing itself. D is supervision of a single station.

5. C. Adaptive means the correction changes the policy. A is proactive. B is reactive. D is training, which supports the system but is not the adaptive element.

6. B. A CCP is where control is essential and losing it would likely produce unsafe food. A is false, most steps are not CCPs. C is a critical limit. D is a record.

7. C. A critical limit is the measurable boundary. A, B, and D are steps in the process and are common critical control points, not limits.

8. B. Smoking food for preservation is a specialized processing method that triggers the requirement. A, C, and D are ordinary operations that need Active Managerial Control and a documented system, not a HACCP plan.

9. C. Both: what happens to the food, and what changes so it does not happen again. A and B are each half the answer. D removes the requirement entirely.

10. B. Cleaning and sanitation is one of the foundational programs a management system rests on. A sits on top of the prerequisites. C is an external check. D is a menu disclosure requirement.

This hub is study material for candidates preparing for ServSafe certification exams. It is not affiliated with, endorsed by, or connected to the National Restaurant Association Educational Foundation, and it does not certify anyone. Certification is issued only by the exam provider.