ISO 22000 clause 7.1.5: adapt external FSMS material to your operation

What clause 7.1.5 requires in practice

Clause 7.1.5 applies whenever an organisation builds or runs its food safety management system with help from material written elsewhere. The standard gives prerequisite programmes, hazard analysis work and the hazard control plan as examples, but the principle covers any externally developed element: a parent company's package, a consultant's plan, a customer's template or software-supplied content.

The organisation has to be able to show five things about that material. It was developed in line with the standard. It suits the sites, processes and products actually in scope. The food safety team has specifically adapted it to those processes and products. It is implemented, maintained and updated as the standard expects. And it is kept as documented information.

The output is therefore not the borrowed document itself but the local decision trail around it: what was received, who on the team judged it, what was changed, and how it now operates on the floor.

Check what the supplied material assumes

Identify its intended products, processes and production sites. Compare those assumptions with the organisation's actual materials, equipment, layout, operating conditions and distribution arrangements. A document can look professionally prepared while describing an entirely different operation.

Check the basis and limitations of its technical decisions. Where a supplied plan relies on particular process characteristics or control performance, determine whether those conditions exist locally. Do not treat the supplier's reputation as evidence that every conclusion transfers unchanged.

External material also needs to align with applicable requirements and the organisation's own FSMS. A customer template may capture the customer's preferred format without providing all the analysis the operation needs. Conversely, a detailed template can contain irrelevant controls that obscure the significant decisions.

Make adaptation a food safety team activity

The standard specifically places adaptation with the food safety team. Engage personnel who know the products, processes and hazards rather than asking a document administrator to replace company names. Record the important differences identified and the decisions made to address them.

For a hazard-control plan, adaptation may require checking preliminary information, reviewing the hazard analysis and confirming the control measures' capability through the applicable validation arrangements. Changing the wording of a limit is not a substitute for establishing its technical basis.

Once adapted, implement the elements in practice and maintain and update them. Define who receives changes from the external source and who determines whether they matter locally. Retain documented information demonstrating the arrangements. The external version and the approved local version should not become indistinguishable.

Why adapting external material matters to the business

Borrowed plans are attractive because they save time, and in a group or a franchise they bring useful consistency. The risk is that a plan written for another kitchen, line or warehouse quietly describes hazards and controls that do not exist at your site, while missing those that do. A customer who investigates an incident, or an auditor who walks the process, will quickly see the gap between paper and practice.

Showing genuine adaptation protects the business in three ways. It reduces the chance of a control being relied on that was never suited to the operation. It keeps a consultant or head-office contribution valuable instead of decorative. And it lets management say plainly who owns the plan, which matters when a complaint, a recall decision or a customer review puts the system under pressure.

How to implement clause 7.1.5

Treat every external element as a draft that the food safety team must earn the right to rely on. One way Sterling's teams approach it is as a short, repeatable review.

1. List the external elements in use, such as supplied prerequisite programme content, a group hazard analysis or a customer plan, and name an internal owner for each.
2. Confirm with the supplier or author what products, processes and sites the material was written for, and what it assumes about equipment and control performance.
3. Hold a working session with the food safety team, including people from production and quality, to compare those assumptions with your real operation.
4. Change, remove or add content where the comparison shows differences, and re-check the hazard analysis and control decisions that depend on it.
5. Approve the adapted version as local documented information, keeping it distinguishable from the original source so nobody mistakes one for the other.
6. Put the adapted elements into routine use and agree how updates from the external source are received, judged and either adopted or declined.
7. Revisit the adaptation whenever your products, layout or customers change.

Illustrative food-group example

Illustrative contract-catering example

A caterer purchases a generic food safety package. Its actual operation includes off-site transport and service at a construction camp, whereas the package assumes immediate service at the preparation site. The food safety team adds the missing process stages and evaluates the relevant hazards and control needs.

The team also checks responsibilities at the handover between preparation and service. It does not assume that using the consultant's forms establishes control throughout the food chain.

Evidence that shows genuine adaptation

Common nonconformities with clause 7.1.5

Findings here usually show that material was accepted rather than adapted. Typical examples include:

• A supplied hazard control plan in use with no record that the food safety team reviewed it against the real process.
• Control criteria or flow diagrams that clearly belong to another site, product or customer.
• A group master template revised centrally while the site keeps operating from an older local copy.
• Adaptation carried out by an administrator replacing names and logos rather than by team members who know the hazards.