The Chiller That Ran Warm Overnight
A catering kitchen supplying a school holds cooked chicken and rice in a walk-in chiller. The data logger shows the chiller air temperature rose from 3°C to 11°C between 23:40 and 06:10 after a door seal failed; it returned to 4°C by 07:00. At 07:30 the chef finds 40 kg of cooked chicken (cooked at 18:00, blast-chilled to 4°C by 19:30) and 25 kg of cooked rice (cooked 17:00, chilled to 4°C by 18:15). The chef wants to reheat the chicken for lunch service and discard only the rice, arguing rice is 'riskier'. The school opens at 12:00. No product temperature records exist for the overnight period.
1. Was the chef's decision to keep the chicken and discard the rice defensible? Justify using hazard characteristics and time-temperature exposure.
Read the worked answer
The chef's split is not defensible on the stated reasoning, though the outcome may partly align by accident.
- Chicken is a low-acid, high-moisture protein food that supports growth of Salmonella, Campylobacter and, critically, spore-formers such as Clostridium perfringens and Bacillus cereus. It spent roughly 6.5 hours between 4°C and 11°C. Above about 5–8°C, C. perfringens can multiply; the danger zone is conventionally 5–63°C, and time above 8°C is the practical concern.
- Rice carries B. cereus spores that survive cooking; the classic risk is cooked rice held at ambient or warm temperatures. It also spent the same window in the chiller.
- The chef's premise ('rice is riskier') confuses the source of hazard with the exposure. Both products experienced essentially the same time-temperature abuse; the rice was chilled earlier and had a longer cold-storage period before the fault, but both were above 8°C for hours.
- Reheating chicken to 75°C kills vegetative cells but does not reliably destroy pre-formed C. perfringens enterotoxin or B. cereus emetic toxin. Reheating is therefore not a valid corrective action for toxin risk.
- Conclusion: without product temperature data, the conservative and defensible action is to treat both as potentially unsafe and discard, or at minimum to make a documented risk decision based on the maximum credible product temperature. Retaining chicken while discarding rice is inconsistent and would not withstand audit scrutiny.
2. What should the food safety manager do now, and what systemic fixes should follow?
Read the worked answer
Immediate actions
- Segregate and hold the affected product; do not serve it pending a documented decision.
- Apply the decision rule in the food safety management system: if product temperature cannot be demonstrated to have stayed ≤8°C (or the site's validated limit), treat as unsafe. Discard and record the disposal (weights, reason, signature).
- If any product was served before discovery, assess whether an incident/withdrawal is triggered and notify the competent authority per the site's notification procedure.
- Check the seal, repair, verify the chiller returns to and holds ≤5°C, and confirm with an independent thermometer before restocking.
Systemic fixes
- Add an alarm on the logger with escalation to an on-call manager, not just a data trail.
- Add a product temperature probe point (e.g., a sacrificial simulant or probe in a representative pack) so product, not just air, is monitored.
- Move to a preventive maintenance schedule for door seals and gaskets with recorded checks.
- Review the corrective action procedure so staff know the discard rule before a chef has to improvise at 07:30.
- Retrain staff on the danger zone and on why reheating is not a fix for toxin-forming hazards.
- Trend logger data weekly to catch drifting performance before failure.