Spice Supplier COA and Salmonella Control in RTE Hummus
A processor makes ready-to-eat hummus. The process includes soaking, grinding, blending, filling, and refrigeration; there is no kill step for the spice ingredients. The hazard analysis identifies Salmonella in ground cumin as a significant hazard because cumin is added after any heating step. The cumin supplier is a small importer that provides a certificate of analysis (COA) for each lot showing 'Salmonella negative' using a 25-g sample tested by an outside laboratory. The firm has no audit report and has not conducted supplier sampling. The COA for the latest lot is dated three months before shipment and does not list a lot code that matches the supplier's shipping documents. The firm's supply-chain program consists of a one-page supplier approval letter and a file of COAs. Production wants to use the lot because the COA is negative and the product will be refrigerated, which they believe prevents Salmonella growth.
1. Is the COA alone sufficient verification for the Salmonella hazard? What supply-chain program elements are missing?
Read the worked answer
No. A COA is only as good as the sampling plan, the laboratory method, and the traceability of the lot. A 25-g sample has low sensitivity for Salmonella; a negative result does not prove the lot is free of the pathogen. The COA is dated three months before shipment and lacks a matching lot code, so it may not even represent the delivered lot.
The supply-chain program is missing written procedures, risk-based supplier approval, verification activities, corrective actions for supplier failures, and reanalysis. The one-page approval letter does not show that the supplier has a controlled process. Refrigeration is not a control for Salmonella in the hummus because the hazard is present before refrigeration and refrigeration does not eliminate it. The firm needs either a validated kill step, a robust supply-chain control with meaningful verification, or a different supplier or ingredient.
2. How would you evaluate and approve this supplier? What verification activities would you require before first use and ongoing?
Read the worked answer
Approve the supplier only after a risk-based evaluation. That evaluation should include the supplier's food safety plan or HACCP, regulatory inspection history, process controls for Salmonella such as irradiation or steam treatment, laboratory accreditation, sampling plan, and lot traceability.
Because Salmonella in an RTE product with no kill step is a severe hazard, an onsite audit is the typical verification activity. If an audit is not feasible, the firm must document why and use a combination of increased lot sampling and testing, records review, and COAs. Before first use, require a statistically valid sampling plan and testing by an accredited laboratory, with lot-specific results linked to shipping documents.
Ongoing verification frequency should be risk-based-more frequent sampling for a new or higher-risk supplier, less for a supplier with a strong audit and history. The firm should also verify that the supplier's process is validated and that corrective actions are taken when a lot is positive.
3. A later lot tests positive for Salmonella. What corrective actions, supplier actions, and product disposition are required?
Read the worked answer
Immediately segregate and hold all product made with that lot, including finished product and work-in-progress. Assess distribution and initiate a recall if the product reached consumers. Notify the supplier and require a root-cause investigation and corrective action; do not use the supplier until the corrective action is verified. Review all lots from that supplier and consider whether the supply-chain program failed.
The firm should also evaluate whether its own sampling and verification were adequate and reanalyze the food safety plan and supply-chain program. Records of the positive result, affected product, disposition, supplier corrective action, and reanalysis are required. If the product is still in the plant, do not rework it unless a validated process eliminates the hazard; otherwise destroy it.