Metal Detector Bypass and an Inadequate Corrective Action
At a ready-to-eat meal plant, the metal detector is a CCP for ferrous 1.5 mm, non-ferrous 2.0 mm, and stainless steel 2.5 mm. During a shift, the operator ran three consecutive reject tests; each test piece failed to trigger rejection. The operator switched the detector to 'simulate' mode, completed the production run, and recorded pass checkmarks on the CCP record. About six hours of production and 1,200 cases were affected. Maintenance later found the test mode selector had been left in simulate and the reject arm was sticky. The proposed corrective action is 'retrain the operator and re-test the detector.' The auditor must evaluate the adequacy of the corrective action and the report.
1. Evaluate the root cause and adequacy of the proposed corrective action.
Read the worked answer
The root cause is not simply operator error. The detector was left in simulate mode, the reject arm was sticky, and the operator recorded pass checkmarks after three failed reject tests. That points to equipment design and maintenance, access control to test modes, CCP verification, record review, and supervision. Retraining the operator and re-testing the detector would not prevent a repeat because the simulate mode remained available and the sticky arm was a mechanical defect. I would require a formal root-cause analysis, repair and validation of the reject mechanism, a fail-safe design that prevents production in simulate mode, restricted access, automatic alarms, and a verification step that confirms each test piece is actually rejected. I would also review prior CCP records to see whether the problem existed before this shift. The record falsification must be addressed separately.
2. What product disposition and traceability actions would you require for the 1,200 cases?
Read the worked answer
All 1,200 cases should be placed on hold. Trace the affected product by lot, production time, and distribution. Because the CCP failed and the detector was in simulate mode, the product cannot be released without evidence that it is free of metal at the specified sizes. Options include 100% re-inspection with a validated metal detection or X-ray system, destructive testing, or rejection. The re-inspection system must be challenged with test pieces at the same or greater sensitivity. If product has been distributed, a withdrawal or recall assessment should be initiated. I would also check whether other lots ran on the line since the last successful verification. Document the disposition decision and notify customers as required.
3. Draft the audit report classification and follow-up verification, including what evidence would close the finding.
Read the worked answer
I would classify this as a critical or major nonconformity because a CCP was not operational, the bypass was deliberate, and the monitoring records were inaccurate. The report should state the objective evidence: three failed reject tests, simulate mode, the sticky reject arm, six hours of production, 1,200 cases, and pass checkmarks on the CCP record. It should cite the CCP monitoring, corrective action, and record-keeping requirements and explain the consumer risk. Follow-up should require repair records, validation of the reject system, a review of 30 days of CCP records, observation of three successful reject tests, confirmation of product disposition, and evidence that simulate mode is locked out. A 30-day follow-up audit with independent verification would be appropriate; the finding should not close on a retraining certificate.