Food Safety Management, oriented

Do not assume a time/temperature control for safety (TCS) food is just a perishable one. The Code defines it by growth: a food that needs time and temperature control to limit pathogen growth or toxin formation. Raw and heat-treated animal foods qualify outright, as do heat-treated plant foods and a short list of raw ones. Cut a melon and it joins that list beside cut leafy greens and seed sprouts, because cutting exposes fluids the whole fruit kept sealed. Two tables sort the rest by pH and water activity. A food heat-treated and then packaged is non-TCS at a pH of 4.6 or below or a water activity of 0.92 or below. A raw or unpackaged food needs a pH under 4.2 or a water activity under 0.88, because vegetative cells survive alongside spores.

Ready-to-eat food is edible without a further step for safety. A highly susceptible population needs both halves of its definition: people who are immunocompromised, preschool-age or older, getting their food from custodial care, health care or a senior center. Priority items control a hazard directly (cooking), priority foundation items support them (training), and core items are general sanitation.

Hazards are biological, chemical or physical. Cooking kills bacteria's vegetative cells, but spores of Bacillus cereus and Clostridium perfringens survive to germinate in food cooled or held badly. The toxins of B. cereus and Staphylococcus aureus may survive reheating. Viruses such as norovirus do not multiply in food; they arrive from human feces, cooking may not remove them, and your controls are hands, a health policy and approved sources. Chemical hazards include allergens, histamine formed in tuna left warm after capture, and ciguatoxin in large reef predators, controlled only by where the fish was caught.

Rule: ask two questions of any food: can something grow in it, which decides temperature control, and what could already be in it, which decides source, hands and cooking.

The person in charge is a presence, not a title. One must be there during all hours of operation, and on inspection shows knowledge in one of three ways: no priority-item violations that day, a manager certificate from an accredited program, or correct answers to the inspector's questions. If that is you, your duties are monitoring: handwashing, cooking temperatures, cooling, holding and sanitizer strength. You also inform every food employee, verifiably, of the duty to report their health.

That duty covers five symptoms (vomiting, diarrhea, jaundice, sore throat with fever, and an uncovered infected lesion) and six diagnoses: norovirus, hepatitis A, Shigella, Shiga toxin-producing E. coli (STEC), typhoid fever and nontyphoidal Salmonella. Exclusion keeps someone from working or entering as an employee; restriction keeps them from exposed food, clean equipment and utensils. Vomiting or diarrhea excludes, with return after 24 symptom-free hours. Jaundice or hepatitis A excludes until the regulatory authority approves a return. An asymptomatic norovirus, Shigella or STEC diagnosis excludes where a highly susceptible population is served and restricts elsewhere. Suppose a cook reports diarrhea before a shift: out that day, back after a symptom-free day. With a norovirus diagnosis, the same cook waits 48 hours past the last symptom and needs approval.

Wash your hands for at least 20 seconds, with 10 to 15 seconds of rubbing, in a handwashing sink, never a prep, warewashing or mop sink. Wash before food work, after the toilet, when moving from raw to ready-to-eat food, before gloves, and after anything else that soils them. Your bare hands never touch exposed ready-to-eat food, and a glove serves one task, discarded when soiled or interrupted. Gloves do not replace washing, as many assume; putting them on is itself a moment to wash.

Rule: report a symptom before a shift instead of explaining it after one, and wash at a handwashing sink after touching anything else, before you touch food.

Approved source is a legal test, not a quality one: food comes from sources that comply with law, never a private home. Milk and egg products are pasteurized. Molluscan shellfish come from the interstate certified shippers list, never from recreational harvest, and wild mushrooms only where approved. At the dock you check temperature and condition: refrigerated TCS food at 41°F or below, raw shell eggs in air at 45°F or below, food received hot at 135°F or above, and every package intact without signs of earlier temperature abuse. The dock matters because you cannot fix some hazards inside. Histamine already formed in warm tuna does not cook away, so the receiving temperature is the control.

Shellstock arrive tagged with their source. The tag stays on until the container is empty, takes the date the last shellfish was sold, and is kept 90 days in order. Fish served raw have been frozen to destroy parasites, at -4°F for 7 days or at -31°F until solid and held 15 hours, with records kept 90 days or a supplier's written statement.

After receipt, protection is arrangement. Keep raw animal foods apart from ready-to-eat food and unwashed produce, and apart from each other by type. Store chicken below pork and beef, so the higher cooking temperature sits lower down; the misconception is to sort the cooler by weight. Store food covered, 6 inches off the floor, never in toilet or garbage rooms or under leaking lines. Wash produce before you cut it. In-use utensils rest in the food with handles up, in running water, or in water held at 135°F. Never re-serve returned food unless it is non-TCS in an unopened package.

Rule: reject at the dock what you cannot fix inside, and arrange the cooler so nothing raw can drip onto anything that will not be cooked.

Every number here was set against an organism, and the cooking parameters target Salmonella. Poultry carries more, and more varied, pathogens than other raw animal foods, so it needs 165°F. Ground meats mix surface contamination through the mass, so they need 155°F for 17 seconds. Whole fish, intact meat and an egg cooked to order need 145°F for 15 seconds. A whole-muscle intact steak can be served rare once both surfaces are seared, because its pathogens are on the outside. Raw or undercooked animal food is served on request only outside a highly susceptible population, and only with a written advisory that discloses the item and reminds the reader of the risk.

Cooling has two clocks, and the misconception is that only the second matters. Cool cooked food from 135°F to 70°F within 2 hours, and to 41°F within 6 hours in total. The first clock is critical: 70°F to 125°F is the band where the survivors of cooking, spores of Clostridium perfringens and Bacillus cereus, germinate fastest. If you reach 41°F in 6 hours but took 3 hours to reach 70°F, you failed. Use shallow pans, smaller portions or an ice bath; a refrigerator holds cold food but cannot cool a stockpot.

Hold hot at 135°F or above, because C. perfringens has been reported growing up to 126°F. Hold cold at 41°F or below, because Listeria monocytogenes slows but does not stop in refrigeration; a risk assessment projected listeriosis cases falling from a median of 656 at a 45°F ceiling to 28 at 41°F. Reheat for hot holding to 165°F within 2 hours. Mark ready-to-eat TCS food held longer than 24 hours with the day it must be used or discarded: at most 7 days at 41°F, counting the day of preparation as day 1. Time may replace temperature only under written procedures made in advance: 4 hours with the discard time marked, or 6 hours from 41°F if the food never passes 70°F.

Rule: when a case is not in the table, ask which organism the nearest rule was written for, and keep to the clock that organism sets.

Sanitization has a definition: heat or chemicals applied to a cleaned food-contact surface, enough to cut representative disease organisms by 5 logs, which is 99.999 percent. The word cleaned does the work. Cleaning removes soil by detergent, heat and friction, and soil shields microbes from a sanitizer applied over it. So the sequence is wash, rinse, sanitize, air-dry, and never sanitize first. A second misconception is that sanitizer strength is set once; even for a bucket you mixed at opening, the Code requires a test kit.

Food-contact surfaces are safe, durable, corrosion-resistant, nonabsorbent and smooth, free of open seams and crevices, and reachable for cleaning with ordinary hand tools. Copper never touches food with a pH below 6, such as vinegar or juice, and wood is allowed only as hard maple for cutting boards. A food thermometer reads within 2°F. Keep a thin probe on hand for patties and fillets, because a thick stem misreads thin food.

Warewashing needs a three-compartment sink big enough to immerse the largest item, never used for handwashing. Manual wash water is at least 110°F, and a distinct rinse follows. Sanitize with hot water (immersion at 171°F for 30 seconds, or a machine final rinse that brings the utensil surface to 160°F) or with a chemical used by its registered label. Chlorine follows a chart of concentration, temperature and pH; quaternary ammonium needs water above 75°F and no harder than 500 parts per million. Most chemicals need 30 seconds of contact, chlorine 10. Then air-dry, because cloth drying recontaminates. Clean surfaces between raw animal foods of different types, at every change from raw to ready-to-eat, and whenever contamination may have happened. In continuous use with TCS food, the interval is 4 hours.

Rule: clean first, then sanitize, then let the air do the drying, and never trust a sanitizer you have not tested.

Water is trustworthy at the tap only if nothing can push back into it. Drinking water comes from a public system, or from a nonpublic one built to law and sampled at least yearly. Backflow (contaminated liquid or gas driven back into the supply) is prevented at every point of use, such as a hose bibb once you attach a hose, by an air gap or an approved device. The air gap is a physical break between the supply inlet and the flood rim, at least twice the inlet's diameter and never less than an inch, with no moving part to fail. Drains run the other way. A drain from equipment that holds food or utensils may not connect directly to the sewage system, and a sewage backup is an imminent health hazard that stops the operation.

The handwashing sink has one job. It sits where employees in preparation, dispensing and warewashing areas can reach it, and in or next to toilet rooms, delivering water at 85°F or above with soap, a drying method and a sign. Do not use it for dumping or thawing; the misconception is that the nearest basin will do. Mop water goes to a service sink or a curbed floor drain, never a toilet or a food sink.

Floors, walls and ceilings are smooth, durable and easily cleanable, nonabsorbent where there is moisture, with the floor-wall junction coved. Light reaches 10 foot-candles in walk-ins and dry storage, 20 in handwashing and toilet rooms, and 50 where someone works with food or a slicer. Bulbs are shatter-resistant wherever food is exposed. Protect outer openings with filled gaps, tight windows and solid self-closing doors, or 16-mesh screens where they stay open. Control pests by inspecting shipments and the premises, trapping, and removing harborage: the unused equipment and litter a premises must be free of.

Rule: put a gap or a device at every connection to the water supply, and keep every sink to its one job.

The Code sorts poisonous or toxic materials into five kinds: cleaners and sanitizers; pesticides; substances needed to run the place; substances kept only for retail sale; and restricted-use pesticides, applied only by or under a certified applicator. Apart from packaged retail stock, only materials required for operation and maintenance (cleaning, sanitizing, insect and rodent control) may be on hand. Every container bears a legible manufacturer's label. Every working container filled from a bulk supply is individually marked with the common name of what it holds. The misconception is that a spray bottle everyone recognizes needs no mark. The Code's exemption for a recognizable unlabeled container exists for dry pasta, not for quaternary ammonium.

Storage is spatial. Keep chemicals apart by spacing or a partition, and never above food, equipment, utensils, linens or single-service articles. Never reuse a container that once held a toxic material for food. Use follows law, the Code and the label; for a pesticide, that means a label allowing use in a food establishment. Apply so that nothing is contaminated by drip, fog, splash or spray: remove or cover items, and clean and sanitize equipment afterward. Rodent bait sits in covered, tamper-resistant stations. Inspectors add three checks: mop water goes down a service sink, delivery trucks are looked at for chemical contact, and food that has touched a chemical is discarded.

Rule: if a chemical could reach food by falling, dripping or being mistaken, it is stored wrong; label everything, store it low and apart, and use it exactly as the label says.

A permit is the condition of everything else. You apply 30 days before opening, post it where customers see it, and cannot transfer it; plan review comes before construction, conversion or remodeling. Keeping it means complying with the Code and any variance, reporting an employee's reportable illness at once, stopping and notifying when an imminent health hazard may exist, allowing access, and meeting correction deadlines.

Inspection is at least every 6 months, and more often as risk rises: past priority violations, valid complaints, the numbers served, and whether a highly susceptible population is served. Once the inspector shows credentials and states the purpose, you owe access, inspection and records; a refusal is documented and an inspection order sought. Priority and priority foundation items are corrected at the time of inspection. By agreement, a priority item may take up to 72 hours and a priority foundation item 10 calendar days. Core items get an agreed date no later than 90 days.

An imminent health hazard is a threat serious enough to require immediate correction or cessation: a fire, a flood, an extended loss of power or water, a sewage backup, misuse of toxic materials, the apparent onset of an outbreak, or a gross insanitary occurrence. Suppose sewage backs up in the dish pit. As permit holder, you stop, notify, keep running only unaffected areas, and reopen only with approval.

Your inspector is really assessing active managerial control: procedures that keep in check the five risk factors named by the Centers for Disease Control and Prevention (CDC), namely unsafe sources, inadequate cooking, improper holding, contaminated equipment and poor hygiene. An empty violation column does not prove they are controlled. The annex notes that a snapshot depends on the hour, so inspectors ask what is cooling now, review the menu, and want on-site correction plus a long-term fix such as a risk control plan.

Rule: correct the priority item while the inspector is standing there, and treat a utility failure, a backup or a cluster of sick customers as a stop-and-call event, not a judgment call.

The seven principles form a sequence. A hazard analysis lists the biological, chemical and physical hazards a food could carry and rates each by severity and likelihood; a hazard not reasonably likely to occur is left out. A critical control point (CCP) is a point where loss of control may result in an unacceptable health risk, usually cooking, cooling or holding; it concerns safety only, so rotating stock for quality is not one. A critical limit is the measurable value that separates safe from unsafe there, such as 165°F for chicken or a pH below 4.2 for acidified sushi rice. Monitoring is observing or measuring to see the limit is met. A corrective action is decided in advance for the day the limit is missed: discard, or keep cooking the hamburgers that have not reached 155°F. Verification shows the system runs to plan, and validation, part of it, is the scientific evidence that the plan can control the hazards at all.

The plan sits on prerequisite programs that handle basic sanitation, so it can concentrate on the food. Nor is the plan just paperwork: the inspection annex calls monitoring by far the most important step and notes that formal records are rarely required at retail. You need a written plan only for specialized processes: reduced oxygen packaging, sous vide, curing, acidifying a food to make it non-TCS, and sprouting seeds.

The process approach groups foods by how many times they pass through the danger zone between 41°F and 135°F. A no-cook process passes through it zero times, same-day service once, and complex preparation that cooks, cools and reheats twice or more. Allergens are a chemical hazard. The nine major allergens are declared on packaged food and disclosed in writing for unpackaged food. In preparation, the Code's table lists one control: a sanitation regime that prevents cross contact.

Rule: a control point is critical only if losing it makes the food unsafe; give each one a number you can measure, a person who measures it, and a written answer for the day the number is wrong.