Food safety at a handler's station comes down to two jobs: keep hazards out of food, and keep the germs already in it from multiplying or making toxin. Almost every rule you will meet serves one of them. Clean hands and sick-worker policies keep germs out; time and temperature limits starve the ones that got in. The chapters run from what makes food unsafe, through germs and allergens, to hygiene, the path food takes through a kitchen, temperature control, cleaning, and the systems a manager runs. Orientation for study, not legal advice, and not affiliated with the Food and Drug Administration (FDA). Numbers here are FDA Food Code 2022 model values, which each state adopts in its own way; this is no substitute for your local food code, so check it before acting on a number.
Each chapter opens with the short version. Tap one to read the detail.
Three kinds of hazard, and the foods that need watching
~2 min
A hazard is biological, chemical or physical, and you classify it by what the harmful thing is. Food that can grow pathogens is time/temperature control for safety (TCS) food, and food eaten without further cooking has no later step to rescue it.
Start every incident with one question: what is the harmful thing? A living germ, such as Salmonella or norovirus, is a biological hazard. A substance is chemical: a sanitizer splashed into soup, a pesticide, histamine in mishandled tuna, the proteins behind food allergies. An object is physical: a glass shard, a metal fragment, a bandage that slipped off a finger.
Next, ask whether the food in front of you can let a germ multiply. The Food Code calls that time/temperature control for safety (TCS) food: raw or cooked animal foods, cooked plant foods, raw sprouts, cut melons, cut leafy greens, cut tomatoes and garlic-in-oil. Acidity and available water settle most borderline cases. A heat-treated, packaged food at pH 4.6 or below, or at water activity 0.92 or below, needs no temperature control.
Ready-to-eat food, such as a salad or a sliced roast, will not be cooked again, so nothing destroys what lands on it. Keep it away from your bare hands and from raw meat juices.
FDA notes that outbreak data keep pointing to five risk factors: food from unsafe sources, inadequate cooking, improper holding temperatures, contaminated equipment and poor personal hygiene. Nearly every rule that follows controls one of them.
Suppose a guest's tuna steak brings tingling lips and a rash. Bacteria made the histamine, yet the hazard is chemical, because the harm comes from a substance that cooking cannot remove.
The trap is filing allergens and fish toxins as biological because living things were involved. The Food Code lists both as chemical, and the label changes the control: you cannot cook a chemical away.
Rule: name the harmful thing. A germ is biological, a substance chemical, an object physical, and only the first can be cooked away, and not always even then.
Germs and toxins: which control stops which
~2 min
Bacteria multiply in food, so time and temperature control them. Viruses and parasites do not grow in food and are stopped by clean hands, sick-worker policies, good sources, and cooking or freezing. A toxin that has already formed usually survives cooking, so it has to be prevented.
Sort organisms by what they can do in your food, because that decides the control.
Bacteria multiply: held warm too long, a few cells become many. Some, including Clostridium perfringens and Bacillus cereus, form spores that survive cooking and then germinate as food cools slowly, so a correct cook does not end your job.
Viruses and parasites do not grow in food. Norovirus and hepatitis A often arrive on the hands of an infected worker, very little norovirus is enough to make someone sick, and alcohol hand gels do not protect against it. You stop them with handwashing, by keeping bare hands off ready-to-eat food, and by sending sick workers home. Parasites such as Anisakis worms in fish die with cooking, or with freezing for fish served raw: under the Food Code model, -4 degrees F or below for 7 days is one option.
Toxins are the hard case. Staphylococcus aureus, carried on the skin and in the noses of many healthy people, can make a toxin in handled food left warm, and reheating may not destroy it. Histamine in temperature-abused tuna and ciguatoxin in large reef fish survive both heat and freezing, so the controls are keeping such fish cold and buying from approved sources.
Onset gives a clue. Bacillus cereus vomiting toxin can act within half an hour, while norovirus illness usually starts a day or two after exposure.
Picture rice cooked in the morning and left on the counter until a lunch reheat. The reheat may kill the bacteria, but the vomiting toxin they made while the rice sat warm can remain.
The trap is believing that cooking or reheating rescues abused food. Heat kills living cells; it does not undo toxin that is already there.
Rule: ask whether the hazard grows in the food, rides in on a person or a source, or is already made, then answer with time and temperature, hygiene and sourcing, or prevention.
Allergens: a protein you cannot cook away
~2 min
US law names nine major food allergens, and sesame is the newest. Allergen transfer, called cross-contact, cannot be fixed by cooking or sanitizing, so your only defenses are keeping the allergen out and telling the guest the truth.
Nine foods are major allergens under US law: milk, eggs, fish, crustacean shellfish, peanuts, tree nuts, wheat, soybeans and sesame. Sesame joined the list through a 2021 law that took effect on January 1, 2023. More than 160 foods are known to cause food allergies, so a guest's allergy may not be one of the nine.
Cross-contact is an allergen getting into food that should not contain it, such as a spoon carrying peanut sauce into a salad. An allergen is a protein, and heat does not reliably destroy it. Sanitizer does not help either, since a sanitizer is defined by the microbes it kills. The residue has to be physically removed. School food allergy guidance from the Centers for Disease Control and Prevention calls for soap and water or a cleaner, because water alone will not remove allergens, and notes that hand sanitizer does not take them off hands.
Packaged food must name each major allergen's source, either in the ingredient list, like "whey (milk)", or in a "Contains" statement. The same CDC guidance warns that labels often change, so read them every time a product arrives. The 2022 Food Code model also asks establishments to tell customers in writing when a major allergen is an ingredient in unpackaged food.
Reactions usually start within minutes to a few hours: hives, swelling of the lips or tongue, vomiting, trouble breathing.
Suppose you sanitize the board used for sesame-crusted fish, then slice bread on it for a guest with a sesame allergy: the board is sanitized and still carries sesame.
The trap is treating an allergen like a germ, something to cook off or wipe with sanitizer. If you cannot confirm what is in a dish, say so; a guess hands the guest a false assurance.
Rule: remove allergens by washing, keep them out by separation, and never answer an allergy question from memory.
Hands, gloves and sick workers
~2 min
Handwashing is a 20-second procedure, and hand antiseptic and gloves only add to it. A worker with vomiting, diarrhea, jaundice, sore throat with fever or an infected wound tells the person in charge, who decides whether that worker is excluded or restricted.
Sick workers and unwashed hands carry viruses like norovirus into food, so your hygiene is a control, not etiquette.
Under the Food Code model, handwashing takes at least 20 seconds, of which 10 to 15 are vigorous rubbing with soap, under the nails, between the fingers and over the fingertips. The handwashing sink supplies water of at least 85 degrees F in the 2022 model, and it is the only sink you wash hands in. Wash before starting food work, after the toilet, after touching your body, after eating, drinking or smoking, when switching between raw and ready-to-eat food, and before gloving.
You use hand antiseptic only on washed hands. Gloves are single-use: wash, glove, and change them when they tear, get soiled, or when you switch tasks. Your bare hands may not touch exposed ready-to-eat food; use tongs, deli tissue, gloves or a spatula.
Illness has its own rules. You report vomiting, diarrhea, jaundice, sore throat with fever, or a pus-filled wound that is open or draining and not covered. Report a diagnosis of norovirus, hepatitis A, Shigella, Shiga toxin-producing E. coli, typhoid fever or nontyphoidal Salmonella even without symptoms. Exclusion keeps a worker out of the establishment; restriction keeps them working, but away from exposed food, clean equipment, utensils and linens. Vomiting or diarrhea means exclusion.
Say a line cook had diarrhea at 2 a.m. and feels fine for a 7 a.m. shift. With no diagnosis, the model lets that cook return only after 24 hours without symptoms, or with a note that the cause is not infectious.
The trap is using gloves in place of washing. A glove pulled over dirty hands carries the contamination with it.
Rule: wash first, glove second, and tell the person in charge about symptoms before the shift starts.
From the delivery door to the cooked plate
~2 min
Food is checked at receiving, stored so raw juices can only drip onto food cooked hotter, thawed by an approved method, and cooked to a temperature held for a set time. A thermometer in the thickest part is the proof.
Follow food through the kitchen and one idea repeats: at each step, stop contamination and give survivors no time to grow.
At receiving, you check that cold TCS food arrives at 41 degrees F or below, hot food at 135 or above, frozen food still frozen. Refuse swollen or leaking cans, and frozen food that arrives thawed.
In storage, raw animal foods are separated from ready-to-eat food and from each other by cooking temperature. On one set of shelves, that puts ready-to-eat food on top, then fish and whole cuts (145 degrees F), then ground meats (155), with raw poultry (165) at the bottom. Any drip lands on food that will be cooked hotter than its source. Store chemicals apart from food and never above it, and date-mark ready-to-eat TCS food held more than 24 hours: at most 7 days at 41 or below, counting the prep day as day 1.
Thaw in the refrigerator, under running water at 70 degrees F or below, in a microwave right before cooking, or as part of cooking. The counter is not on the list.
Cooking is time at temperature: 145 degrees F for 15 seconds for fish and intact meats, 155 for 17 seconds for ground meats, 165 instantly for poultry and stuffed foods. You read it at the geometric center or thickest part; an infrared thermometer reads only the surface.
Picture a walk-in where raw chicken sits above a tray of sliced tomatoes. One leak puts poultry juice on food that will never be cooked.
The trap is treating every cooking temperature as a number to touch for an instant. Of the three standard rules, only poultry's 165 is instantaneous; ground beef at 155 needs 17 seconds.
Rule: store by how hot each food must be cooked, and prove every cook with a probe in the thickest part.
Time and temperature: cooling, holding and reheating
~2 min
The Food Code model's danger zone runs from 41 to 135 degrees F. Cooked food must drop from 135 to 70 within 2 hours and reach 41 within 6 hours total; hot food is held at 135 or above, cold food at 41 or below.
Between 41 and 135 degrees F, the Food Code model's danger zone, bacteria can multiply. Department of Agriculture consumer advice uses 40 and 140 instead, so check which set a question uses. Holding limits sit on the edges: hot food at 135 or above, cold food at 41 or below.
Cooling is where spores get their chance: cooking leaves them alive, and they grow while food passes slowly through the warm range. The model sets two checkpoints: from 135 to 70 degrees F within 2 hours, and to 41 or below within 6 hours total. Time saved in the first stage carries forward, so food at 70 after 1 hour has 5 hours left. Under FDA's inspection guidance, food still above 70 more than 2 hours in, or above 41 more than 6 hours in, is discarded.
Speed comes from surface and movement: shallow pans, smaller portions, an ice-water bath with stirring, ice as an ingredient, a blast chiller. A holding refrigerator is built to keep cold food cold, not to cool a hot stockpot.
When you reheat food cooked and cooled on site for hot holding, it must reach 165 degrees F for 15 seconds within 2 hours.
Time can replace temperature under written procedures. Food taken from 41 or below, or 135 or above, is marked, then cooked and served, served, or discarded within 4 hours; a separate 6-hour option covers cold food that stays at 70 or below.
Suppose your chili still reads 95 degrees F two and a half hours after it came off the stove. It is discarded, even if it would be cold by hour 6. Caught above 70 while still inside the first 2 hours, it could instead be reheated to 165 degrees F for 15 seconds and cooled again by a faster method.
The trap is reading the 6-hour total as permission to skip the 2-hour checkpoint.
Rule: take the food's own temperature before each deadline, not after it; food past a deadline is discarded, not rescued by the next one.
Clean, then sanitize, then let it dry
~2 min
Cleaning removes the soil a sanitizer cannot get through, and sanitizing then cuts pathogens to a safe level. Sanitizing works only at the right strength, temperature and contact time, so you measure it instead of guessing.
Cleaning and sanitizing are two steps in a fixed order. Cleaning removes food residue so a surface is clean to sight and touch. Sanitizing then uses heat or chemicals to cut representative pathogens by 99.999 percent. Soil left behind shields microbes and weakens the sanitizer, so the order never reverses.
At a three-compartment sink, wash in detergent at 110 degrees F or the label temperature, rinse, sanitize, then air-dry; a towel can put microbes back on a clean surface. Hot-water sanitizing means immersion at 171 degrees F or hotter for at least 30 seconds. A hot-water dish machine's final rinse reaches at least 180 degrees F at the manifold, or 165 for a stationary-rack, single-temperature machine, and no more than 194.
Chemical sanitizers such as chlorine, iodine and quaternary ammonium each work only within their own range of strength, water temperature and pH. They also need contact time: at least 10 seconds for chlorine (7 under set conditions) and 30 seconds for the others, matched to the label. Measure strength with a test kit, and change a bucket that has filled with food residue, since soil uses up the sanitizer.
You clean surfaces that touch TCS food at least every 4 hours, and whenever you switch from raw to ready-to-eat food.
The building is part of the system. An air gap at least twice the water inlet's diameter, and never under 1 inch, keeps dirty water from being siphoned back into the drinking supply. Droppings and gnaw marks are two signs that rodents are present.
Picture doubling the sanitizer to be safe. FDA treats an over-strength solution as a toxic-substance violation, because it leaves harmful residue on food-contact surfaces.
The trap is thinking that stronger sanitizer means safer.
Rule: clean before you sanitize, mix to the label, measure, and let it air-dry.
HACCP, inspections, and who is in charge
~2 min
The Food Code is a model that each state or local authority adopts in its own form, and that authority inspects and enforces. Inside the kitchen, Hazard Analysis and Critical Control Point (HACCP) builds controls in advance: find the hazards, pick the steps where control is essential, set limits, and check them.
Active managerial control is FDA's name for building food safety into your daily routine, preventive rather than reactive, aimed at the five risk factors. The model expects the person in charge to be a certified food protection manager, though each jurisdiction decides who must be certified.
Hazard Analysis and Critical Control Point (HACCP) is the structured version, seven principles that build on each other. Conduct a hazard analysis. Determine the critical control points (CCPs), the steps where losing control could create an unacceptable risk, such as cooking or cooling. Set a critical limit for each, a measurable value such as cooking chicken to 165 degrees F. Monitor it. Plan corrective actions in advance. Verify that the system works. Keep records.
Monitoring and verification are different jobs. Monitoring is the check itself, such as probing chicken pieces right after cooking. Verification checks the system around it: reviewing the logs, watching that monitoring happens as planned, confirming corrective actions, calibrating thermometers. A corrective action deals with the food first. FDA's example is to keep cooking hamburgers that missed their temperature until they reach it. First-in, first-out rotation protects quality and is not a CCP.
The Food Code is not federal law for restaurants; your state or local authority adopts its own version, issues permits and inspects. Priority and priority foundation violations are corrected during the inspection, unless the regulator allows up to 72 hours for a priority item or 10 days for a priority foundation item; core items get up to 90 days. Fire, flood, a sewage backup or an apparent outbreak can be an imminent health hazard that stops operation until the authority approves reopening.
The trap is treating a filled-in log as the control. A record nobody reviews verifies nothing.
Rule: give every step where losing control could make someone sick a limit, a check and a planned response.
Written by Keentune. We are not affiliated with or endorsed by the organizations whose documentation informs this guide, and any linked sources belong to their respective owners.
All exam, test, and product names and trademarks are the property of their respective owners and are used here for identification and reference only. Keentune is independent study practice — not affiliated with, authorized, or endorsed by any of these organizations.