Food safety management system: what sits around the HACCP plan

A food safety management system is the complete set of procedures, records, responsibilities and checks by which a business keeps its food safe and can demonstrate it. It contains the HACCP plan, but it is larger: the prerequisite programmes underneath, the documents that describe them, the training that makes people capable of following them, and the review that catches drift before an inspector does.

The distinction matters because businesses that treat the HACCP plan as the whole system end up with a controlled cooking step and an uncontrolled everything else. The hazard analysis assumes the prerequisites are in place. If they are not, the analysis is describing a different kitchen than the one you have.

What a food safety management system contains beyond HACCP

• Cleaning and disinfection, with a schedule and a record that it happened.
• Personal hygiene, including fitness-to-work reporting and what happens when someone reports illness.
• Supplier approval and incoming goods checks, with specifications and the documents that come with each delivery.
• Pest control, whether contracted or in-house, and the record of findings and actions.
• Maintenance and calibration, particularly of anything used to measure a critical limit.
• Allergen management: separation, labelling and the information given to customers.
• Waste handling and drainage.
• Traceability: being able to say, in a defined time, which batch went where.
• Training and competence, per person and per task, with dates.
• Recall and withdrawal procedure, tested rather than merely written.

Traceability is tested when it is worst

Every system claims traceability. Very few can produce, within an hour and on a bad day, the list of customers who received a specific batch. That is the exercise worth running once a year as a mock recall, because it exposes the two failures that only show up under pressure: batch codes recorded as "as per delivery" rather than as an actual code, and outbound records that identify the product but not the batch. A traceability drill costs an afternoon and is the cheapest insurance in the system.

The system is judged on whether it is followed, not on whether it exists. A folder of unread procedures with complete signatures is a familiar and bad sign: it means the records are being produced for the folder rather than the process, and an experienced auditor will find the gap in under an hour.

Certification is a separate decision

Having a food safety management system and being certified to a standard are different things. Certification — ISO 22000, or a scheme recognised by the Global Food Safety Initiative such as BRCGS, FSSC or SQF — is usually driven by a customer requirement rather than by law, and it adds requirements around management commitment, internal audit and continual improvement on top of the food safety content. If no customer is asking, an uncertified system that is genuinely followed serves you better than a certified one you cannot sustain.

Where the records live

Most of the system is, in practice, a set of recurring checks and the evidence they were done. Ettex Forms collects them at the point of work — cleaning sign-offs, delivery checks, temperature rounds — so the record is made once by the person who did the task; Ettex Records keeps the supplier documents, training matrix and corrective actions per site; and Ettex Docs holds the procedures themselves with version history. The plan at the centre of it is covered in haccp plan.

Plainly: this is documents, forms and records, not a food safety platform. There is no sensor integration, no audit scheme content and no compliance guarantee. What your system must contain is set by your jurisdiction and your customers, and for certification the scheme owner is the authority, not us.