FSMA PCQI common mistakes
FSMA PCQI · Understand the traps and how to avoid them.
Treating every significant hazard as requiring a process preventive control, and writing process controls into the plan where a sanitation, allergen, or supplier control is the correct control type.
Candidates memorize the four control categories as a list but never learn the decision rule: the control type follows the nature of the hazard and where it can be prevented, eliminated, or reduced to an acceptable level. Process controls get over-applied because they are the most familiar.
What to do instead
For each significant hazard, write one sentence stating the hazard, the step where control is applied, and the control type, then justify why the other three types are not appropriate at that step. Practice classifying a set of hazards (pathogen in a ready-to-eat step, allergen cross-contact from shared equipment, undeclared allergen in a received ingredient, environmental pathogen in a high-care area) and defend each classification in writing.
Performing a hazard analysis only at the ingredient level, missing process-step hazards such as environmental pathogens introduced after a kill step, recontamination from water or equipment, and allergen cross-contact from scheduling or shared lines.
Candidates default to the recipe as the hazard list because ingredients are tangible and easy to enumerate. Step-level and facility-level hazards require walking the process flow, which is more cognitive work and is often skipped under time pressure.
What to do instead
Build the hazard analysis from the process flow diagram first, not the formula. At each step, ask what biological, chemical (including radiological), and physical hazards can be introduced, survive, or be amplified there. Add a separate pass for facility-wide hazards: water, air, employee practices, pests, maintenance, and allergen cross-contact from changeover.
Writing critical limits that are not measurable parameters with a stated value, such as "cook thoroughly" or "sanitizer at proper strength," rather than a specific temperature, time, concentration, or other objective measure.
Candidates confuse a control measure (what you do) with a critical limit (the value that separates acceptable from unacceptable). Without a defined measurement, the limit cannot be monitored or verified, which is exactly what the exam tests.
What to do instead
For every critical limit, state the parameter, the numeric value or range, and the unit, plus the basis for it. If the basis is a scientific reference, a validation study, or a regulatory standard, note it. Test each limit by asking whether a monitor could record a pass or fail with no judgment call.
Confusing monitoring with verification: describing the operator's check of a critical limit as verification, or describing the records review as monitoring.
Both involve checking, so the words blur. The distinction is who acts, when, and what happens with the result: monitoring is the real-time observation that triggers corrective action on deviation; verification confirms the system worked after the fact.
What to do instead
Anchor the definitions with a concrete example you can reproduce: the oven operator recording belt speed and temperature every 30 minutes is monitoring; the supervisor reviewing those records weekly and the annual calibration check are verification. For each control, name the monitor, the frequency, the record, and separately the verifier, the review frequency, and the verification record.
Describing corrective action as "retrain the employee" or "fix the problem" without addressing the affected product, the root cause, and the status of the product produced during the deviation.
Retraining is a common reflex and feels like a complete answer. The exam expects the full sequence: correct the deviation, evaluate the product for safety, determine disposition, identify and correct the cause, and reassess the food safety plan if needed.
What to do instead
Write corrective actions as a fixed sequence: (1) bring the process back into control, (2) identify and segregate all product made during the deviation, (3) evaluate it for safety and decide disposition, (4) determine root cause, (5) act on the cause, (6) reassess the plan and records. Practice applying all six steps to a missed sanitizer concentration and to a failed metal detector check.
Treating supplier approval as a one-time purchasing decision and omitting ongoing verification activities, or accepting a supplier's letter of guarantee as sufficient without documented approval and verification records.
Candidates equate the supply-chain program with vendor selection. The program is a continuing cycle of approval, verification activities, and corrective action for suppliers that fail, and the exam probes the verification half.
What to do instead
For each ingredient requiring a supply-chain control, document the approval basis, the verification activity chosen (audit, sampling and testing, records review, or another appropriate method), the frequency, who performs it, and what happens when a supplier is out of compliance. Be able to justify why a particular verification activity fits the ingredient's risk.
Assuming a supply-chain program is always required for raw agricultural commodities, or conversely assuming it is never required because the ingredient has a letter of guarantee.
The hazard analysis determines whether a supply-chain control is needed, and the rule includes specific provisions for raw agricultural commodities and for ingredients that the receiving facility or its customer will control. Candidates apply a blanket rule instead of the hazard-analysis-driven decision.
What to do instead
Work through the decision explicitly: is there a hazard in the ingredient that the receiving facility or its customer will not control, and is a supply-chain control therefore needed? If yes, apply the program. If the hazard is controlled downstream or by the customer, document that determination in the hazard analysis.
Writing a food safety plan that is a policy binder: mission statements, generic good manufacturing practice language, and no hazard analysis, no critical limits, and no monitoring records tied to specific controls.
Candidates model the plan on quality manuals they have seen. The exam expects a plan built from the hazard analysis, with controls, limits, monitoring, corrective actions, verification, and validation traceable to identified hazards.
What to do instead
Structure the plan in the order the rule expects: hazard analysis, preventive controls, supply-chain program if applicable, recall plan, and the procedures for monitoring, corrective actions, verification, and validation. For every control in the plan, confirm a reader can find the hazard it addresses, its limit, its monitor, its corrective action, and its verification record.
Treating the recall plan as a document that exists rather than a set of procedures that must be written, assign responsibility, and describe notification, effectiveness checks, and disposition of recalled product.
Candidates check the box for "recall plan present" and stop. The exam tests the content and the operational elements, including who does what and how the recall is verified as effective.
What to do instead
Memorize the required elements: procedures for notifying direct consignees, procedures for notifying the public where appropriate, procedures for conducting effectiveness checks, and procedures for disposition of recalled product. Assign named roles, and be ready to describe how a mock recall exercise tests the plan and what records it produces.
Mixing up record types and retention expectations, such as treating monitoring records as exempt from review, or assuming all records have the same retention period, and failing to connect records to the specific control they verify.
Records feel administrative and are studied last. The exam tests that records must be made at the time of the activity, reviewed within a defined period, and retained for the applicable period, with the food safety plan and its supporting records treated distinctly.
What to do instead
Build a one-page record map: record name, who creates it, when, who reviews it, review timeframe, retention period, and the control or verification activity it supports. Include the food safety plan itself, monitoring records, corrective action records, verification records, validation records, supply-chain records, and training records, and note which must be reviewed and signed.