Six Weeks to ISO 22000: Sorting Real Hazards from Paper Controls at a Spice Unit
A spice grinding unit processes 2 tonnes a day of chilli, coriander and black pepper, and sells part of the black pepper as ready-to-eat table pepper. It is six weeks from its first ISO 22000:2018 certification audit. The internal audit finds: Salmonella in 3 of 10 black pepper lots (the pepper is only sieved and packed); borewell water used for washing showing E. coli at 12 per 100 ml with no treatment other than a storage tank; no pest-control records for eight months, although rodent droppings were seen in the chilli store; a 'roasting' step for coriander set at 110°C with no validated time, no cold-spot measurement and no monitoring records; bare glass bulbs above the packing line; and a masala mix containing mustard flour with no allergen declaration. The manual describes PRPs only in general terms and lists 'metal detection' as the sole CCP.
1. Classify each finding as a PRP failure, an OPRP, or a CCP failure, and state which are major nonconformities.
Read the worked answer
PRP failures: pest control (eight months without records, with droppings in the store - a direct contamination route and a documented-evidence failure); water quality (water used on food contact surfaces must be potable; E. coli at 12/100 ml means the water is not fit for that use); brittle-material control (bare glass bulbs over an open packing line); allergen control (mustard flour in a mix without declaration - a labelling and prerequisite failure with a real risk to mustard-allergic consumers).
CCP issues: the coriander roasting step is intended as a lethality step but has no validated time-temperature and no cold-spot monitoring, so the CCP is unvalidated and unmonitored. Metal detection is a legitimate CCP only if metal is a significant hazard identified by the hazard analysis - it cannot be the sole CCP while a microbiological hazard is uncontrolled.
Missing hazard control: ready-to-eat black pepper with Salmonella in 3 of 10 lots and no kill step means the significant hazard has no control measure at all. Either a validated lethality step is introduced, or the product is re-positioned as 'cook before use' with a specification change.
Major nonconformities: the Salmonella/RTE gap, the unvalidated roasting CCP, non-potable water, pest-control breakdown, and the undeclared allergen. Glass bulbs are major if the line is unprotected. Certification six weeks out is not realistic unless these close with evidence.
2. Write the CCP for the roasting step: hazard, critical limits, monitoring, corrective action, verification and records.
Read the worked answer
Hazard: Salmonella (and, for pepper, other vegetative pathogens) surviving on the spice; the roasting step is the only lethality step before packing of the coriander line.
Critical limit: a time-temperature combination validated for the actual equipment to deliver at least a 5-log reduction of Salmonella at the cold spot - for example a defined belt speed giving a stated minimum residence time at a stated minimum product temperature, with the limit set on the measured cold-spot value and not on the oven set-point.
Monitoring: continuous product-temperature recording at the cold spot, belt-speed check at fixed intervals, and a check on load depth/bed thickness. Each check is signed by the operator and verified by the shift supervisor before release.
Corrective action: hold all product since the last acceptable check; re-roast to the validated process or reject; investigate the cause; record the disposition and the quantity affected.
Verification: initial validation by heat-penetration and a challenge test using an appropriate surrogate, annual revalidation, monthly review of CCP records, and environmental/end-product testing for Salmonella.
Records: validation report, calibration certificates, monitoring charts, corrective-action log, verification results. For pepper, the equivalent validated step (steam treatment or an approved irradiation dose) should be established before RTE sale resumes.
3. What is your disposition of the three Salmonella-positive black pepper lots, and what must change upstream?
Read the worked answer
Disposition. Because the pepper is sold ready-to-eat, the three lots are unsafe food and cannot be released, blended down or 'diluted' into other products. They must be held under seal, and any quantity already distributed must be withdrawn and recalled; the distributor and the certifying body must be notified in writing, and the recall records retained. If a customer uses the pepper only as an ingredient in a product with a validated kill step, the lot may be transferred solely against a written specification stating 'not ready-to-eat - cook before use', with a documented risk assessment and the customer's written acceptance; otherwise destroy it.
Upstream changes. (i) Supplier approval and a raw-material specification with a Salmonella limit for RTE pepper; (ii) a validated lethality step or a change of product claim; (iii) segregation and dust control at sieving so that positive material does not cross-contaminate clean lines; (iv) an OPRP for wash water - chlorination to a measured free residual at the point of use, with E. coli absent in 100 ml and periodic testing, plus filtration or UV as backup; (v) allergen control from intake to label, with a documented change-control step before any new ingredient such as mustard flour enters a recipe. Present these as corrective action with owners and dates, not as intentions.