Browse all questions

Smoking or curing food to preserve it, rather than only to add flavor, is a specialized process: the operator must obtain a variance from the regulatory authority and keep an approved HACCP plan that identifies the hazards and controls specific to that process. Note the scope word in the stem, preserve for retail sale, which is what triggers the requirement. A labeling exemption answers a different requirement, a supplier's written approval carries no regulatory weight for an in-house process, and a certified food protection manager is a separate staffing rule that does not authorize the process.

HACCP follows a fixed sequence: Principle 1 is conducting a hazard analysis, Principle 2 is determining critical control points, and Principle 3 is establishing critical limits. The order matters because you cannot set a limit for a control point you have not yet identified, and you cannot identify control points without first analyzing the hazards.

A sewage backup into the kitchen is an imminent health hazard. The Food Code requires the operation to cease food operations immediately and notify the regulatory authority; service may resume only after the hazard is corrected and, where required, the authority approves reopening. Finishing the tickets already fired, relocating prep to the dining room, and disinfecting the floor with bleach before resuming service all keep food being handled inside a contaminated facility, and foot traffic and aerosols carry contamination well past the wet floor.

Active managerial control means the operation deliberately builds systems to control the CDC's five foodborne-illness risk factors, which are unsafe sources, undercooking, wrong holding temperatures, contaminated equipment, and poor personal hygiene, before problems occur. Its tools are standard operating procedures, training, monitoring, and corrective action. Dropping the cleaning schedule removes one of those controls, fixing only what an inspector cites is reactive rather than proactive, and responsibility for food safety decisions stays with management instead of moving to whoever is running a station.

Reduced-oxygen packaging is one of the specialized processes the Food Code lists as requiring a variance and a HACCP plan, because the low-oxygen environment can favor the growth of anaerobic pathogens such as Clostridium botulinum. The other three describe standard practices being done correctly: grilling to order, hot holding at 135°F, and the first stage of cooling from 135°F to 70°F in shallow pans. Correct routine practice does not trigger a variance, so the option that does is the one naming a specialized process.

The Food Code requires operators to allow the regulatory authority access to the establishment and to any records the authority is entitled to inspect during normal operating hours. An unannounced visit during service is normal practice, so limiting the inspector to the dining room, asking for a delay until the rush ends, and demanding the owner or an appointment first are all refusals or delays of entry, which can themselves be violations. The manager should cooperate, accompany the inspector, and answer questions truthfully.

Measuring the temperature of each batch to confirm the 165°F critical limit is met is monitoring, which is HACCP Principle 4, the planned sequence of observations or measurements used to assess whether a critical control point is under control. Principle 1 is finding where hazards can enter the process, Principle 2 is deciding that cooking is the critical control point, and Principle 7 is writing those readings down and keeping the log. The stem asks about the act of checking the temperature, not about recording it afterward.

When monitoring shows a critical limit was not met, staff follow the pre-planned corrective action, which is HACCP Principle 5. For chicken that reached only 150°F, the corrective action is typically to keep cooking until it reaches 165°F and to document the deviation. Principle 3 is what set the 165°F limit in the first place, Principle 1 identified the hazard before the plan was written, and Principle 6 verification is the later review that confirms the whole system works. The stem asks what governs the cook's next action at the moment of the deviation.

Verification is HACCP Principle 6: activities, other than monitoring, that confirm the plan is valid and operating effectively. Weekly log review, thermometer calibration, and confirming the plan works as intended are classic verification tasks. Principle 4 monitoring is the real-time check on each batch as it is cooked, Principle 5 corrective action is what staff do when a batch misses its limit, and Principle 2 is identifying which steps are critical control points while the plan is being written.

In a suspected foodborne-illness outbreak, the manager should cooperate fully with the regulatory authority, set aside and label any suspect food so it can be tested, and preserve production and employee-health records. Denying a connection before the records have been reviewed states a conclusion the operation has not yet earned, discarding the suspect food and the logs destroys the evidence the investigation depends on, and silencing staff while the same menu keeps going out leaves the public exposed. Early, honest cooperation protects the public and the business.

When a product is recalled, the operation should stop using it immediately, physically separate it from usable food, and mark it so no one uses it while the operation follows the vendor's or regulator's return or disposal instructions. Waiting for the next delivery while the cases sit unlabeled beside usable beef is exactly the segregation failure the recall procedure exists to prevent, donating it moves the hazard to another population rather than removing it, and cooking does not clear a recall: even at the correct 155°F for 17 seconds for ground meat, cooking does not remove a toxin, an allergen, or a physical contaminant.

A certified food protection manager has passed a food safety exam from an accredited program, demonstrating the knowledge needed to run a safe operation. The Food Code treats that certification as evidence that the person in charge understands foodborne-illness prevention. Years of service, a CPR and first-aid card, and owning the establishment or its operating permit are all real things an operator may have, but none of them is the accredited food safety examination the rule requires.

An interruption of the potable water supply is an imminent health hazard because staff cannot wash hands, clean, or sanitize properly, so the Food Code requires the operation to stop food operations and notify the regulatory authority. Running water is needed far beyond the dishroom, for handwashing sinks and for cleaning food-contact surfaces, so closing only warewashing does not cover it; single-use service still leaves staff without handwashing or surface cleaning; and bottled water is not plumbed to the handwashing sinks the Code requires. Operations may resume only after water service is restored and, where required, the authority approves reopening.

Management is responsible for training staff on the food safety practices their jobs require, and for verifying that training before employees handle food unsupervised. Ongoing, job-specific training is a core part of active managerial control. Learning by watching experienced cooks transfers whatever bad habits are already on the line, an inspector verifies compliance and does not train the staff, and treating raw poultry handling as common sense is exactly the assumption that produces cross-contamination. Note the timing in the stem: the training must exist before that shift, not afterward.

A HACCP plan submitted for a specialized process must describe the food and the process, typically with a flow diagram, identify the critical control points and their critical limits, and describe monitoring, corrective actions, and record-keeping. Those elements let the regulatory authority judge whether the hazards are controlled. A customer list is traceability information a recall might use, not part of the plan, and marketing budgets and competitor lists are business information that says nothing about hazard control.

A fire that disables essential equipment or damages the facility is an imminent health hazard, because it can compromise safe food handling and the safety of the premises; the manager must stop affected operations and notify the regulatory authority. The other three are routine operating problems the Food Code handles through ordinary correction: a single dead bulb in a lit storeroom is a maintenance item, a short-staffed floor is a scheduling problem rather than a food safety hazard, and a late delivery accepted at the correct temperature has not put the food at risk.

Sprouting seeds or beans is one of the specialized processes the Food Code lists as requiring a variance, because the warm, moist growing conditions readily support pathogen growth and sprouts have caused multiple outbreaks. The operation must obtain the variance and typically maintain a HACCP plan. Rinsing and a washing log do not reach pathogens that grow inside the sprouting seed, sprouts are not treated as ordinary raw produce for this reason, and the Code regulates the process rather than banning the finished product from the salad case.

When an operation ceases because of an imminent health hazard, it generally may not resume until the hazard is eliminated and the regulatory authority approves reopening where that approval is required. This ensures the underlying problem, such as a sewage backup or a loss of potable water, is truly resolved. Cleaning up the visible mess does not establish that, announcing the reopening notifies customers rather than the authority, and the owner and the insurance carrier have no authority to lift a health-based closure.

For a critical violation such as an unsafe hot-holding temperature, the manager corrects it immediately, typically by reheating the food to 165°F within the allowed time or discarding it, and then fixes the reason it happened, such as a steam table set too low. At 118°F the gravy sits inside the 41°F to 135°F danger zone, not a safe margin below the minimum, so leaving it in the well keeps pathogens growing. Reheating for hot holding must reach 165°F, and a steam table is holding equipment, not reheating equipment, so bringing it back to 135°F on the table is not an adequate correction either.

A regulatory authority can suspend a permit and close an operation when conditions present an imminent health hazard, such as an active infestation, a lack of hot water for cleaning and sanitizing, and sewage contamination occurring together. Those conditions make safe food handling impossible. A cracked tile is a maintenance repair, a watch on the line is a hygiene violation the manager corrects on the spot, and dried spices past a best-by date are a quality issue rather than a safety hazard; all three are handled through routine correction and follow-up, not closure.

Reduced-oxygen packaging of food that supports pathogen growth requires an approved HACCP plan or must meet specific Food Code control criteria, because the anaerobic environment can allow C. botulinum to produce toxin if temperature control fails. Vacuum sealing removes oxygen but does not kill spores, and it removes the competing spoilage organisms that would otherwise warn a cook that something is wrong, so a sealed soup is not shelf-stable. The Code regulates ROP rather than prohibiting it, and its ROP provisions apply to the food's ability to support pathogen growth, not to whether the soup happens to contain meat.

Active managerial control is sustained through written standard operating procedures, documented training, and routine monitoring logs, so every shift follows the same safe practices and problems can be caught and traced. Written systems outlast staff turnover and memory. What the owner remembers, a single reminder taped to a door, and instructions spoken once at hire and never written down all record nothing about how food was actually handled on a given shift.

The inspection report is the official record of what was found; the manager should review it with the inspector, acknowledge receipt (signing generally means receipt, not agreement, so a signature concedes no legal fault), and then correct each violation within the timeframe the report specifies. Following up and documenting corrections is central to the manager's post-inspection role. The department's archived duplicate is not a substitute for acting on the copy handed to you, and hanging that copy up and waiting for the next routine visit leaves the cited violations uncorrected.

Simply slicing deli meats to order is a routine operation that does not require a variance, although the sliced ready-to-eat food must still be date marked. In contrast, holding live molluscan shellfish in a display tank, acidifying rice so it can be held without refrigeration, and sprouting seeds or beans are all specialized processes the Food Code flags as needing a variance and often a HACCP plan.

During a power loss, the manager should keep doors closed, track how long food is above 41°F, and check product temperatures; TCS food that has exceeded safe temperature or time limits must be discarded. A prolonged outage can itself be an imminent health hazard requiring the operation to stop service and contact the regulatory authority. A closed door is not evidence that the food stayed at or below 41°F; 70°F is a cooling checkpoint, not a safe cold-holding temperature, so it cannot be used to decide what to keep; refreezing does not undo pathogen growth in food that already warmed; and dining room tables are warmer than the walk-in, which speeds that growth.

A critical control point is a step where control is essential and can be applied to prevent, eliminate, or reduce a food safety hazard to an acceptable level, such as a cook step that destroys pathogens. Note the scope word 'Any': bare-hand contact is controlled by the hygiene rules that run underneath HACCP, including the no-bare-hand-contact rule for ready-to-eat food, so not every step a hand touches is a CCP. Ingredient cost and how many covers a station turns describe the business, not a point where losing control would let a hazard reach the customer.

The person in charge must actively ensure that employees follow required food safety practices, such as proper handwashing, cooking, and cooling, and must know when to restrict or exclude an ill employee. The PIC's job is oversight of food safety, not doing production work personally; cooking every ticket would pull the PIC away from that oversight. Running the cash drawer and approving advertising are business duties the Food Code does not assign to the PIC.

Shiga toxin-producing E. coli is one of the reportable 'Big Six' pathogens; an employee diagnosed with it must be excluded from the food establishment, not merely restricted to warewashing or other non-food duties, and the regulatory authority must be notified. The employee generally may not return until cleared under the Food Code's reinstatement criteria, so the end of symptoms alone does not earn a return to work. Gloves do not stop an infected worker from shedding this pathogen.

When taking a complaint, the manager should stay calm and record what the person ate, the date and time, the symptoms and when they began, and how to reach the person, while showing concern and not admitting fault. This information helps the operation and the health department investigate a possible outbreak. Negotiating a settlement, refusing to talk, or collecting payment details gathers nothing an investigation can actually use.

The Food Code allows an inspector to assess the person in charge's demonstration of knowledge by asking about hazards and controls, such as which pathogen is a concern in a given food and how it is controlled. Correct answers, holding a valid manager certification, or compliance with the Code can satisfy this. Menu prices, length of service, and plating speed are not what the Code asks the PIC to demonstrate.

A food safety management system aims to control the CDC's five identified risk factors: food from unsafe sources, inadequate cooking, improper holding temperatures, contaminated equipment, and poor personal hygiene. Building procedures around these risk factors targets the actual causes of foodborne illness. Parking, seating, server sections, and the specials rotation are business decisions that control none of those five factors.

Record-keeping documents that monitoring occurred and critical limits were met, giving the operation evidence of control that supports verification and, if an illness is reported, an investigation. Good records also reveal trends before they become problems. A log filled in ahead of the check records nothing that happened, a signature is not a substitute for training, and records must be kept continuously rather than produced only when an inspection is due.

Flooding is an imminent health hazard: floodwater can carry sewage and chemicals that contaminate food and surfaces. The operation must cease operations, discard food and packaging contaminated by the water, and notify the regulatory authority, resuming only when the hazard is corrected and, where required, reopening is approved. Oven-drying saturated sacks does not remove sewage or chemical residue, and squeegeeing, mopping, or working around the water leaves the hazard in place — the kitchen floor was flooded too, not just dry storage.

The last stage of crisis response is learning from the event: analyzing the root cause and revising standard operating procedures, training, and monitoring so the same breakdown cannot recur. This continuous-improvement step turns a crisis into a stronger food safety system. Reviewing an outbreak does not exempt the operation from routine inspection, does not close the health department's file, and is not about pinning the failure on one worker.

For a specialized process like cook-chill with reduced-oxygen packaging, the manager must first secure any required variance and an approved HACCP plan, then train staff to follow it, before the process begins. Doing the paperwork after the fact leaves the operation running an unapproved, higher-risk process. New equipment and use-by labels are part of the plan but do not replace the approval, and the regulatory authority, not the supplier, is the body that grants it.

Organized invoices and lot or code information let a manager quickly determine whether the recalled lot is in the building and remove it before it can be served. Speed matters in a recall, especially a Class I recall involving a serious health risk. Suppliers do not require handwritten duplicates of invoices, and neither office decor nor tip accounting helps anyone find an affected lot.

Critical limits must be measurable values, such as a temperature, time, or concentration, so that anyone monitoring the step can objectively decide whether the critical control point is under control. Vague limits like 'cook until done' cannot be verified, and a limit that changes with whichever cook is on shift is not a limit at all. Measurable limits make monitoring, corrective action, and verification possible; how the menu looks and what guests enjoy seeing are beside the point.

A boil-water advisory means the tap water may be unsafe, so the operation must switch to bottled or treated water for drinking, ice, and food preparation, or cease operations if it cannot operate safely, following the regulatory authority's instructions. Untreated tap water can carry pathogens even when it runs clear and odorless, and an ice machine filter is not a treatment device — freezing does not kill what is in the water. The advisory takes effect when the authority issues it to the public; no individual phone call to the restaurant is coming, and waiting for one means serving unsafe water in the meantime. This may function as an imminent health hazard requiring notification.

Active managerial control means treating a recurring gap as a signal to find and fix the root cause, whether that is understaffing, unclear duties, or a training issue, so the monitoring step is consistently completed. Waiting for an inspector to raise it, removing the log so the gap cannot be seen, and writing up a shift without changing anything all hide the problem instead of solving it. The goal is a system that catches and corrects itself.

Operating a molluscan shellfish life-support display tank is a specialized process the Food Code lists as requiring a variance and a HACCP plan, because the tank water and holding conditions can affect the safety of filter-feeding shellfish. The plan must address water treatment, monitoring, and records. Note the scope word 'Only': a consumer advisory is separately required wherever raw shellfish is offered, but it does not satisfy the variance requirement on its own. The routine establishment permit does not cover the tank, and the approval comes from the regulatory health authority, not a wildlife agency.

Active managerial control is the purposeful incorporation of specific actions or procedures by management into the operation of the business to attain control over foodborne illness risk factors, and it embodies a preventive rather than a reactive approach through continuous monitoring and verification. Fixing what an inspector finds is the reactive posture the definition is written against.

A food safety management system is the specific set of actions taken to prevent foodborne illness risk factors for that operation's food and preparation, and it includes written procedures, training plans, and monitoring records that control the operational steps contributing to illness. Menus, permits, and supplier lists are business documents, not the system itself.

The Supplement added food defense to the list of subjects a person in charge must be able to demonstrate knowledge of during an inspection, and separately added a duty to train employees on food defense. The other subjects matter to running a business but are not part of the demonstration of knowledge.

The new section requires a written food safety management system to be developed and maintained, implemented in the establishment during all hours of operation, and made available to the regulatory authority on request, within four years of the jurisdiction adopting the Code. Certain low-risk operations may be exempted by the regulatory authority.

The seven principles run in order: conduct a hazard analysis, determine critical control points, establish critical limits, establish monitoring procedures, identify corrective actions, verify that the system works, and keep records. A team cannot decide where the control points are until it knows what hazards the process actually carries.

A critical limit is the measurable boundary that separates safe from unsafe at a critical control point, stated as a number a cook can check with a thermometer and a clock. Corrective action is what happens when the limit is missed, and verification is the periodic review that confirms the whole plan works.

The plan must contain a flow diagram or chart for each specific food or category that identifies each step in the process and which of those steps are critical control points. Staffing, supplier, and equipment details appear elsewhere in the submission but are not what the flow diagram is for.

For each critical control point the plan identifies the significant hazards, the critical limits, the method and frequency of monitoring by the designated employee or person in charge, the action to take if a limit is not met, how the person in charge verifies the procedures are followed, and the records kept. Price, brand, and output are not part of that summary.

Using food additives or components such as vinegar to render a food so it is not time/temperature control for safety requires a variance from the regulatory authority. A pH meter and trained staff are how the operation then proves it hits its critical limits, but they do not substitute for the variance itself.

Operating a molluscan shellfish life-support system display tank used to store or display shellfish offered for human consumption requires a variance, as do smoking for preservation, curing, using additives to preserve or render food non-TCS, most reduced-oxygen packaging, custom processing animals for personal use, and sprouting seeds or beans. Buying cured product, posting an advisory, and cooling in an ice bath are ordinary operations.