ISO 22000 clause 8.1: turn food safety plans into controlled operations
ISO 22000 clause 8.1 requires the organisation to plan, implement, control, maintain and update the processes needed for safe products and the actions determined under clause 6.1. It brings planning into daily operation. The organisation must establish process criteria, operate according to them and keep enough documented information to demonstrate that work was carried out as planned.
What clause 8.1 requires in practice
Clause 8.1 is the general rule for turning plans into controlled operations. The organisation plans, implements, controls, maintains and updates the processes needed to produce safe products and to carry out the actions it decided on under risk and opportunity planning. It does this by setting criteria for the processes, controlling them in line with those criteria, and keeping enough documented information to be confident, and to show, that work was carried out as planned.
Two further expectations sit alongside. Planned changes are controlled, and the consequences of unintended changes are reviewed, with action taken to reduce harmful effects where needed. And outsourced processes are controlled through the provider arrangements of clause 7.1.6.
The clause is deliberately general. The detailed technical requirements for prerequisite programmes, traceability, emergencies and hazard control follow in the later parts of clause 8, but this opening part establishes the discipline that holds them together.
Define what controlled operation means
Identify the relevant process and the conditions for its acceptable operation. Criteria need to be sufficiently clear for the people performing and checking the work. They may draw on specifications, prerequisite programmes, hazard-control decisions and other relevant requirements.
Distinguish process criteria from assumptions. If a plan depends on a particular material, equipment capability or external service, make that dependency visible. Otherwise, personnel may continue applying an instruction after the conditions supporting it have changed.
Connect actions addressing organisational risks and opportunities with operation where relevant. For example, an action to improve availability of competent cover needs to become an actual staffing arrangement. This does not replace the separate technical hazard analysis required for food safety.
Why operational control matters to the business
Plans that exist only on paper do not protect food. Real operations involve rushed shifts, equipment problems, substitute materials and sudden customer demands. Operational control is the habit of deciding in advance what acceptable operation looks like and checking that practice matches it, so that deviations are noticed rather than normalised.
For the business this reduces rework, waste and complaints, because drift is caught early. It also provides a sound basis for change. When a line schedule, supplier or process is altered, a team that knows its criteria can judge the effect quickly. Outsourcing carries the same logic: handing a task to another company does not hand over accountability, so the business needs enough control to stand behind the result.
How to implement clause 8.1
Start with the processes that matter most to safe product and make their expected conditions explicit. The steps below suit most operations.
- Identify the processes that create or protect food safety, including those carried out by contractors.
- Define acceptance criteria for each, drawing on specifications, prerequisite programmes and hazard control decisions, in terms the operators can apply.
- Make dependencies visible, such as particular materials, equipment capability or services on which the criteria rely.
- Decide what evidence is needed to show the process ran as planned, choosing the few records that capture the conditions that matter.
- Set up a change route so planned changes are assessed before use, and unplanned ones are reviewed afterwards for effects on product made in the meantime.
- Agree with outsourced providers what must be controlled and how you will know it is.
- Check periodically by observing work against the criteria and by following lots from start to finish.
Apply controls and keep useful evidence
Provide the resources, information and responsibilities needed to meet the criteria. Check whether the planned sequence is practical under representative conditions, including relevant shifts or product changes. A process that works only when the author of the procedure is present needs further attention.
Keep documented information to the extent necessary to have confidence that the process was carried out as planned. Select evidence that addresses the important decisions and controls. More entries do not automatically provide better evidence if the records omit the condition that actually matters.
Maintenance and updating are part of this requirement. Review information after relevant changes, problems and learning. A process can gradually diverge from its original design through a series of small adjustments that nobody evaluates together.
Control change and outsourced processes
Control planned changes and examine the consequences of unintended changes, taking appropriate action to reduce adverse effects. Identify affected products and activities where necessary. Restoring a process does not automatically resolve the status of product made while conditions differed from the plan.
Outsourced processes must also be controlled. Use external-provider arrangements to define requirements and appropriate oversight. A signed service contract alone does not establish that an externally performed activity meets the relevant process criteria.
Illustrative food-manufacturing example
A manufacturer schedules a product on a different line to meet demand. Before the change, the team evaluates whether the alternative arrangement supports the relevant criteria, instructions and control measures. It identifies any additional checks and approvals needed before use.
If an unplanned equipment problem then changes the sequence, the organisation evaluates the consequences rather than assuming the earlier change review covered every later variation.
Illustrative outsourced-storage example
A food producer uses an external warehouse for part of its stock. It communicates relevant product-handling and status requirements and determines how evidence of suitable operation will be obtained. The parties clarify what happens when a condition cannot be maintained or a product is placed on hold.
A practical review follows one lot through receipt, storage and dispatch. This exposes a handover weakness that would not be visible from the supplier approval record alone.
Evidence and common mistakes
Follow a process from its criteria to completed work and resulting records. Look for alignment between the current plan, actual conditions and evidence. Include changes and external interfaces in the sample.
Frequent weaknesses are criteria too vague to apply, evidence collected after the event from memory, and temporary workarounds that become normal practice. Another is treating outsourcing as a reason to remove the activity from FSMS consideration. See the operation overview for the connected technical requirements.
Frequently asked questions
Does every operational activity need a separate procedure?
No particular document structure is prescribed. Information and controls must be adequate for the process and the standard's specific requirements.
Can a process change proceed without updating documents?
Only if the existing information remains suitable. Evaluate the change and update affected information where necessary before relying on it.
Does supplier approval control every outsourced process?
Approval is only one element. Communicated requirements, monitoring and appropriate evaluation of actual provision also matter.
Connect one operating plan with its evidence
Discuss an operational process review with Sterling, covering criteria, changes and external interfaces. Support can include implementation, learning and appropriate Effivity ISO & GRC automation software arrangements. Explore ISO 22000 Food Safety Awareness and the requirements hub to plan the next step.