Browse all questions

Cold wells only chill product below the fill line; overfilled pans leave the top layers at room temperature. Piece size does not change that, and the well is not too cold — it simply cannot reach product stacked above the line. Cut melon is a TCS food, so the manager must fix the fill level and evaluate the out-of-temperature product based on how long it was above 41°F.

Only a direct internal measurement with a calibrated, sanitized probe confirms the food itself is at 135°F or above. A hot pan tells you about the pan, equipment gauges measure the water or air around the food, and visual cues such as steam can appear well below safe holding temperatures.

Exposed, unpackaged items like open butter pats cannot be re-served, so the answer is not "nothing." The sealed jam packet qualifies for re-service as an unopened prepackaged item, so it is not discarded and the answer is not "all three." A condiment squeeze bottle is a serving container that stays in table service and is cleaned and refilled by the operation, not re-served food in itself.

Food that sat on a self-service buffet has faced hours of temperature stress and potential guest contamination, and the caterer cannot control how it will be handled afterward. A responsible policy is to discard displayed food; never blend served food back with unserved reserves, do not hand off the risk by calling it the client's problem, and do not promise a shelf life for food whose exposure you cannot document.

Unlike plates, beverage cups may generally be refilled in self-service settings when the dispensing setup keeps the used cup rim from touching the equipment. This is why soda nozzles are mounted above the cup position rather than requiring contact. A rinse station is not the condition the rule turns on, the allowance is not limited to particular drinks, and the refill does not have to be done by an employee into a new cup.

Time as a public health control is a one-way commitment: the food gave up temperature control, so bacteria may have begun growing, and returning it to the cooler does not reverse that growth. A reading below 70°F does not buy the cheese back into temperature control, freezing holds bacteria rather than removing them, and the clock cannot be carried to another day. The marked discard time stands, and unsold cheese must be thrown out when it expires.

The Food Code includes a specific allowance: roasts cooked under the roast cooking standards, such as 145°F for 4 minutes, may be held at 130°F or above instead of the usual 135°F. There is no 15-minute carving window, and cooking does not make a roast immune to later pathogen growth. The manager should confirm the roast qualifies and document the holding practice; all other hot TCS foods still require 135°F.

Roasts cooked to a temperature and for a time under the whole-roast chart, or reheated under the same parameters, may be held at 130°F or above. Every other TCS food held hot uses 135°F, and no food may be hot held at 120°F or 125°F.

Eggs that have not been treated to destroy all viable Salmonellae must be stored in refrigerated equipment that maintains an ambient air temperature of 45°F or less. That is a specific allowance for shell eggs; other cold TCS food is held at 41°F or below measured in the food itself.

Written procedures must be prepared in advance, maintained in the food establishment, and made available to the regulatory authority on request, spelling out how the operation will meet the four-hour or six-hour requirements. Time as a public health control needs no variance and no HACCP plan, but it is not legal without those written procedures.

Under the four-hour option the food is marked to indicate the time that is four hours past the point when it was removed from temperature control, or four hours past the point a cut fruit became TCS food. Food in unmarked containers, or marked past the four-hour limit, must be discarded.

Under the six-hour option the food starts at 41°F or less and must be monitored so the warmest portion never exceeds 70°F, unless an ambient air temperature is maintained that guarantees the same thing. If the food does exceed 70°F it must be discarded, even if six hours have not passed.

The marking must show the time the food was removed from 41°F or less cold holding control and the time that is six hours past that point. The four-hour option requires only the ending time, which is one of the small differences that separates the two procedures.

An operation serving a highly susceptible population may not use time as a public health control for raw eggs at all, under any of the four-hour or six-hour options. That kitchen is separately required to substitute pasteurized eggs for raw eggs in the dishes the Food Code names.

Food that is not TCS may be re-served only if it is in an unopened original package in sound condition, such as crackers, salt, or pepper, or if it is dispensed from a closed container such as a narrow-neck bottle. Rolls, butter ramekins, and chip bowls have all been in the possession of a consumer in open containers, so they are discarded.

Raw, unpackaged animal food such as beef, lamb, pork, poultry, and fish may not be offered for consumer self-service, apart from a few listed exceptions like ready-to-cook individual portions for immediate cooking on the premises, raw frozen shell-on shrimp, and ready-to-eat buffet items such as sushi. Guards, tongs, and cold holding do not change that.

Consumer self-service operations such as buffets and salad bars must be monitored by food employees trained in safe operating procedures, which is how a guest reusing a plate, double-dipping a ladle, or reaching under a guard actually gets caught. Restocking schedules and photo records are management choices, not Code requirements.

Self-service consumers may not use soiled tableware, including single-service articles, to obtain additional food from the display and serving equipment. The one exception is a drinking cup or container that is refilled without the pouring utensil touching the lip-contact area.

Nuts in the shell and whole, raw fruits and vegetables intended for hulling, peeling, or washing by the consumer are excepted from the display protection requirement, because the guest removes the outer layer before eating. Sliced meat, shredded cheese, and cut melon are all exposed ready-to-eat food and must be protected.

Condiments must be protected by dispensers designed to provide protection, protected food displays with proper utensils, original containers designed for dispensing, or individual packages and portions. Open ramekins and shared bowls invite hand and sneeze contact, and topping off a bottle mixes old product into new.

Transport does not suspend the holding rules: hot TCS food stays at 135°F or above and cold TCS food at 41°F or below unless the operation is running written time-as-a-control procedures. Insulated carriers must be preheated or prechilled, and the crew probes the food on arrival rather than assuming the trip was short enough.

Equipment thermometers report the temperature of the water, air, or unit, not the food, and a pan sitting above a hot well can easily be below 135°F in its center. Holding temperatures are verified by probing the thickest part of the food itself with a clean, sanitized, calibrated thermometer.

Reheating is an option only when the operation knows the food has been out of temperature for two hours or less. With no time record, the manager cannot show the stew has not been in the danger zone long enough to grow pathogens or form toxin, so it is discarded.

Drinking cups and containers may be reused by self-service consumers if refilling is a contamination-free process, meaning the delivery tube, chute, or orifice never contacts the lip-contact area of the cup. Wiping a rim, handing the cup over, or using a house cup does not address the contact point the rule is about.

TCS food in a homogenous liquid form may be held outside the usual temperature requirements only while it is inside specially designed equipment that complies with the Food Code's dispensing-equipment requirements. Pasteurization, quick turnover, and being a dairy product do not by themselves create that allowance.

Smoking or curing food to preserve it, rather than only to add flavor, is a specialized process: the operator must obtain a variance from the regulatory authority and keep an approved HACCP plan that identifies the hazards and controls specific to that process. Note the scope word in the stem, preserve for retail sale, which is what triggers the requirement. A labeling exemption answers a different requirement, a supplier's written approval carries no regulatory weight for an in-house process, and a certified food protection manager is a separate staffing rule that does not authorize the process.

HACCP follows a fixed sequence: Principle 1 is conducting a hazard analysis, Principle 2 is determining critical control points, and Principle 3 is establishing critical limits. The order matters because you cannot set a limit for a control point you have not yet identified, and you cannot identify control points without first analyzing the hazards.

A sewage backup into the kitchen is an imminent health hazard. The Food Code requires the operation to cease food operations immediately and notify the regulatory authority; service may resume only after the hazard is corrected and, where required, the authority approves reopening. Finishing the tickets already fired, relocating prep to the dining room, and disinfecting the floor with bleach before resuming service all keep food being handled inside a contaminated facility, and foot traffic and aerosols carry contamination well past the wet floor.

Active managerial control means the operation deliberately builds systems to control the CDC's five foodborne-illness risk factors, which are unsafe sources, undercooking, wrong holding temperatures, contaminated equipment, and poor personal hygiene, before problems occur. Its tools are standard operating procedures, training, monitoring, and corrective action. Dropping the cleaning schedule removes one of those controls, fixing only what an inspector cites is reactive rather than proactive, and responsibility for food safety decisions stays with management instead of moving to whoever is running a station.

Reduced-oxygen packaging is one of the specialized processes the Food Code lists as requiring a variance and a HACCP plan, because the low-oxygen environment can favor the growth of anaerobic pathogens such as Clostridium botulinum. The other three describe standard practices being done correctly: grilling to order, hot holding at 135°F, and the first stage of cooling from 135°F to 70°F in shallow pans. Correct routine practice does not trigger a variance, so the option that does is the one naming a specialized process.

The Food Code requires operators to allow the regulatory authority access to the establishment and to any records the authority is entitled to inspect during normal operating hours. An unannounced visit during service is normal practice, so limiting the inspector to the dining room, asking for a delay until the rush ends, and demanding the owner or an appointment first are all refusals or delays of entry, which can themselves be violations. The manager should cooperate, accompany the inspector, and answer questions truthfully.

Measuring the temperature of each batch to confirm the 165°F critical limit is met is monitoring, which is HACCP Principle 4, the planned sequence of observations or measurements used to assess whether a critical control point is under control. Principle 1 is finding where hazards can enter the process, Principle 2 is deciding that cooking is the critical control point, and Principle 7 is writing those readings down and keeping the log. The stem asks about the act of checking the temperature, not about recording it afterward.

When monitoring shows a critical limit was not met, staff follow the pre-planned corrective action, which is HACCP Principle 5. For chicken that reached only 150°F, the corrective action is typically to keep cooking until it reaches 165°F and to document the deviation. Principle 3 is what set the 165°F limit in the first place, Principle 1 identified the hazard before the plan was written, and Principle 6 verification is the later review that confirms the whole system works. The stem asks what governs the cook's next action at the moment of the deviation.

Verification is HACCP Principle 6: activities, other than monitoring, that confirm the plan is valid and operating effectively. Weekly log review, thermometer calibration, and confirming the plan works as intended are classic verification tasks. Principle 4 monitoring is the real-time check on each batch as it is cooked, Principle 5 corrective action is what staff do when a batch misses its limit, and Principle 2 is identifying which steps are critical control points while the plan is being written.

In a suspected foodborne-illness outbreak, the manager should cooperate fully with the regulatory authority, set aside and label any suspect food so it can be tested, and preserve production and employee-health records. Denying a connection before the records have been reviewed states a conclusion the operation has not yet earned, discarding the suspect food and the logs destroys the evidence the investigation depends on, and silencing staff while the same menu keeps going out leaves the public exposed. Early, honest cooperation protects the public and the business.

When a product is recalled, the operation should stop using it immediately, physically separate it from usable food, and mark it so no one uses it while the operation follows the vendor's or regulator's return or disposal instructions. Waiting for the next delivery while the cases sit unlabeled beside usable beef is exactly the segregation failure the recall procedure exists to prevent, donating it moves the hazard to another population rather than removing it, and cooking does not clear a recall: even at the correct 155°F for 17 seconds for ground meat, cooking does not remove a toxin, an allergen, or a physical contaminant.

A certified food protection manager has passed a food safety exam from an accredited program, demonstrating the knowledge needed to run a safe operation. The Food Code treats that certification as evidence that the person in charge understands foodborne-illness prevention. Years of service, a CPR and first-aid card, and owning the establishment or its operating permit are all real things an operator may have, but none of them is the accredited food safety examination the rule requires.

An interruption of the potable water supply is an imminent health hazard because staff cannot wash hands, clean, or sanitize properly, so the Food Code requires the operation to stop food operations and notify the regulatory authority. Running water is needed far beyond the dishroom, for handwashing sinks and for cleaning food-contact surfaces, so closing only warewashing does not cover it; single-use service still leaves staff without handwashing or surface cleaning; and bottled water is not plumbed to the handwashing sinks the Code requires. Operations may resume only after water service is restored and, where required, the authority approves reopening.

Management is responsible for training staff on the food safety practices their jobs require, and for verifying that training before employees handle food unsupervised. Ongoing, job-specific training is a core part of active managerial control. Learning by watching experienced cooks transfers whatever bad habits are already on the line, an inspector verifies compliance and does not train the staff, and treating raw poultry handling as common sense is exactly the assumption that produces cross-contamination. Note the timing in the stem: the training must exist before that shift, not afterward.

A HACCP plan submitted for a specialized process must describe the food and the process, typically with a flow diagram, identify the critical control points and their critical limits, and describe monitoring, corrective actions, and record-keeping. Those elements let the regulatory authority judge whether the hazards are controlled. A customer list is traceability information a recall might use, not part of the plan, and marketing budgets and competitor lists are business information that says nothing about hazard control.

A fire that disables essential equipment or damages the facility is an imminent health hazard, because it can compromise safe food handling and the safety of the premises; the manager must stop affected operations and notify the regulatory authority. The other three are routine operating problems the Food Code handles through ordinary correction: a single dead bulb in a lit storeroom is a maintenance item, a short-staffed floor is a scheduling problem rather than a food safety hazard, and a late delivery accepted at the correct temperature has not put the food at risk.

Sprouting seeds or beans is one of the specialized processes the Food Code lists as requiring a variance, because the warm, moist growing conditions readily support pathogen growth and sprouts have caused multiple outbreaks. The operation must obtain the variance and typically maintain a HACCP plan. Rinsing and a washing log do not reach pathogens that grow inside the sprouting seed, sprouts are not treated as ordinary raw produce for this reason, and the Code regulates the process rather than banning the finished product from the salad case.

When an operation ceases because of an imminent health hazard, it generally may not resume until the hazard is eliminated and the regulatory authority approves reopening where that approval is required. This ensures the underlying problem, such as a sewage backup or a loss of potable water, is truly resolved. Cleaning up the visible mess does not establish that, announcing the reopening notifies customers rather than the authority, and the owner and the insurance carrier have no authority to lift a health-based closure.

For a critical violation such as an unsafe hot-holding temperature, the manager corrects it immediately, typically by reheating the food to 165°F within the allowed time or discarding it, and then fixes the reason it happened, such as a steam table set too low. At 118°F the gravy sits inside the 41°F to 135°F danger zone, not a safe margin below the minimum, so leaving it in the well keeps pathogens growing. Reheating for hot holding must reach 165°F, and a steam table is holding equipment, not reheating equipment, so bringing it back to 135°F on the table is not an adequate correction either.

A regulatory authority can suspend a permit and close an operation when conditions present an imminent health hazard, such as an active infestation, a lack of hot water for cleaning and sanitizing, and sewage contamination occurring together. Those conditions make safe food handling impossible. A cracked tile is a maintenance repair, a watch on the line is a hygiene violation the manager corrects on the spot, and dried spices past a best-by date are a quality issue rather than a safety hazard; all three are handled through routine correction and follow-up, not closure.

Reduced-oxygen packaging of food that supports pathogen growth requires an approved HACCP plan or must meet specific Food Code control criteria, because the anaerobic environment can allow C. botulinum to produce toxin if temperature control fails. Vacuum sealing removes oxygen but does not kill spores, and it removes the competing spoilage organisms that would otherwise warn a cook that something is wrong, so a sealed soup is not shelf-stable. The Code regulates ROP rather than prohibiting it, and its ROP provisions apply to the food's ability to support pathogen growth, not to whether the soup happens to contain meat.

Active managerial control is sustained through written standard operating procedures, documented training, and routine monitoring logs, so every shift follows the same safe practices and problems can be caught and traced. Written systems outlast staff turnover and memory. What the owner remembers, a single reminder taped to a door, and instructions spoken once at hire and never written down all record nothing about how food was actually handled on a given shift.

The inspection report is the official record of what was found; the manager should review it with the inspector, acknowledge receipt (signing generally means receipt, not agreement, so a signature concedes no legal fault), and then correct each violation within the timeframe the report specifies. Following up and documenting corrections is central to the manager's post-inspection role. The department's archived duplicate is not a substitute for acting on the copy handed to you, and hanging that copy up and waiting for the next routine visit leaves the cited violations uncorrected.

Simply slicing deli meats to order is a routine operation that does not require a variance, although the sliced ready-to-eat food must still be date marked. In contrast, holding live molluscan shellfish in a display tank, acidifying rice so it can be held without refrigeration, and sprouting seeds or beans are all specialized processes the Food Code flags as needing a variance and often a HACCP plan.

During a power loss, the manager should keep doors closed, track how long food is above 41°F, and check product temperatures; TCS food that has exceeded safe temperature or time limits must be discarded. A prolonged outage can itself be an imminent health hazard requiring the operation to stop service and contact the regulatory authority. A closed door is not evidence that the food stayed at or below 41°F; 70°F is a cooling checkpoint, not a safe cold-holding temperature, so it cannot be used to decide what to keep; refreezing does not undo pathogen growth in food that already warmed; and dining room tables are warmer than the walk-in, which speeds that growth.