Line Start After a Night of Failed Prerequisites
A chilled ready-to-eat salad facility packs about 12,000 tubs per shift, running 06:00 to 14:00. Production is due to start in 40 minutes. The pre-shift walk-through finds three things. (1) The chiller door seal is torn and condensation is dripping from a ceiling-mounted conveyor onto the open hopper that feeds the salad filler. (2) Two food-contact conveyors were cleaned at 16:00 yesterday but were never sanitized, because the sanitizer dosing pump failed at 22:00 and was repaired at 04:00; no sanitizer concentration has been verified since the repair. (3) Wash-water is pooling beside the sink and a floor drain is backing up slowly. The line manager says none of these is a critical control point, so the line should start on time and the issues can go on the maintenance list for Friday.
1. Decide whether to start the line at 06:00. For each of the three findings, state whether it is a prerequisite program deviation, a hazard requiring critical-control-point-level control, or both, and justify your reasoning.
Read the worked answer
Do not start. The decisive argument is not "is it a CCP" but whether the assumptions the hazard analysis made about the environment still hold.
Condensation drip onto the open hopper. This is a prerequisite program failure with an immediate product-contact consequence. A drip from a ceiling-mounted conveyor can carry environmental pathogens (Listeria in a wet RTE room is the classic case) directly into product. Because the exposed hopper cannot be protected by any downstream step, the hazard analysis' assumption that environmental contamination is controlled by prerequisites has failed. Correct it before the hopper is filled: stop the drip at source, engineer a shield, and clean and sanitize the hopper and any tubs already filled. Not a CCP, but it does block start-up.
Cleaned-but-not-sanitized conveyors. A prerequisite failure on a food-contact surface. The correct chain is clean, then sanitize at a validated concentration and contact time, then verify. Until that is done and verified, the surfaces are not in a state the hazard analysis assumed. This alone justifies delaying by the estimated time needed.
Standing water and slow drain. A PRP/hygiene-and-maintenance deviation. It is a harbourage and cross-flow risk, especially in a wet RTE room, but it does not by itself put product at immediate risk. It can be corrected in parallel and must be logged, with a decision recorded if the drain cannot be cleared before start-up.
The manager's logic inverts the relationship: prerequisites are what make a short CCP list defensible. When they are not functioning, the plan's assumptions are void and the line should hold.
2. What is the minimum acceptable disposition of the two conveyors before they contact food, and what evidence would you require before signing off?
Read the worked answer
A minimum sequence, in order:
- Confirm the pump repair delivers the correct concentration. Titrate or test-strip the made-up sanitizer at the point of use, not at the drum, and record the reading and contact time against the label or the validated procedure.
- Apply sanitizer to the whole food-contact surface, including the parts that are awkward to reach, using a method that matches the validated procedure (foam, flood, or spray).
- Allow the full contact time. Do not wipe dry.
- Verify. At minimum, record concentration, contact time, who did it, and when. For high-care conveyors, add a rapid verification such as an ATP swab at defined sites, and note that ATP is a cleanliness indicator only, not a pathogen test.
- If sanitizer cannot be verified (for example, if the repaired pump cannot reach the target concentration), do not run that line. Use an alternative validated method or hold production.
The judgment point: the pump was repaired at 04:00 and nobody verified concentration, so the 16:00 clean is stale in the sense that the sanitize step never happened at all. This is not "cleaned well enough to skip." Record the deviation, the corrective action, and the verification result, and note that the line was delayed because prerequisites were not met, not because a CCP failed.
3. The line manager says to run and log the problems. Write the argument you would make to management and list the records you would create today.
Read the worked answer
The argument to management:
- The HACCP plan's hazard analysis assumed that condensation, cleaning and sanitizing, and drainage are controlled by prerequisite programs. That assumption is the justification for having only three CCPs on a raw-to-RTE line. If the prerequisites fail, the rationale for the CCP list fails with them, and the plant cannot claim the plan is being followed.
- The risk is concrete, not theoretical: exposed RTE product plus water plus an environmental pathogen is the exact route that produces a recall. The cost of a 40-minute delay is trivial compared with that.
- Running while logging converts a controlled deviation into an uncontrolled one. A deviation record created while product is being exposed is documentation of a decision to accept risk, which is not what corrective action records are for.
Records to create today:
- A deviation/nonconformance entry for each finding, with the time found, the condition, and who found it.
- The corrective action taken for each, including sanitizer concentration and contact time and who verified it, plus the drip repair or temporary shield.
- A maintenance work order for the door seal and drain, with a target date and interim control.
- A verification entry confirming the hopper and conveyors were cleaned and sanitized before use.
- A short reassessment note stating that the prerequisites are back in control, so the hazard analysis remains valid.