ISO 22000 clause 8.8.1: verify that PRPs and hazard controls work

What clause 8.8.1 requires in practice

Under clause 8.8.1 the organisation establishes, implements and maintains verification activities. The plan for those activities sets out their purpose, methods, frequencies and responsibilities. What they confirm is specific: that PRPs are in place and effective, that the hazard control plan is in place and effective, that hazard levels sit within the acceptable levels, that the inputs to hazard analysis are up to date, and that other chosen actions are carried out and effective. A firm rule applies to independence: the person responsible for monitoring an activity does not verify the same activity. Results are retained and communicated. Where test samples of end product or process show a hazard level beyond the acceptable level, the affected lots are treated as potentially unsafe and corrective action follows.

Define the question before choosing the method

Verification planning must specify purpose, methods, frequency and responsibilities. Decide what confidence the activity is intended to provide. A record review, direct observation and a technically appropriate test can answer different questions.

For a PRP, the question may concern whether the programme is applied effectively under actual conditions. For a hazard-control plan, it may concern whether monitoring and response arrangements operate as intended. Also examine whether information feeding the analysis remains current.

Choose methods capable of detecting relevant weaknesses. An activity that repeatedly confirms only easy administrative details can leave significant operational questions unanswered. Frequency should suit the purpose, operation and relevant evidence rather than being copied without consideration.

Keep verification separate from the same monitoring responsibility

The person responsible for monitoring an activity must not carry out its verification. This separation helps provide a different check on the activity. It does not necessarily require an external consultant, but it needs a workable assignment of competent personnel.

Distinguish verification from validation and routine monitoring. Validation establishes capability; monitoring checks operation against criteria; verification confirms implementation and effectiveness through planned activities.

Communicate verification results and retain them as documented information. Significant findings need to reach people who can act, including the food safety team for subsequent analysis.

Respond appropriately to adverse sample results

Where verification uses end-product or direct process samples and results show nonconformity with the acceptable hazard level, the affected lots must be handled as potentially unsafe through the relevant disposition arrangements. Corrective action also applies.

A test programme therefore needs a defined link to product identification, evaluation and authority. Do not create a testing schedule without deciding how an adverse result will be handled or which product it concerns.

Use competent technical input for sampling, methods and interpretation. This guide does not prescribe a universal sample size or claim that negative samples demonstrate absence of every hazard.

Why clause 8.8.1 matters to the business

Verification gives the business evidence, not assurance by assertion. It tells management whether controls work in the plant as well as on paper, and it gives customers a basis for trust. Independence matters because people rarely find faults in their own routines. Linking adverse results to product decisions protects consumers and avoids the worst outcome, where a failed test is filed away while product is shipped. When verification has a purpose and a method, it also stops being a ritual and becomes a way to learn where the system needs attention.

How to implement clause 8.8.1

Design each verification activity around a question and an independent person. Where resources are small, independence can be arranged by swapping verifiers between areas or shifts, so the arrangement does not have to depend on an outside party.

1. Write the question each activity answers, for example whether a cleaning programme works at all locations.
2. Pick a method that can answer it: direct observation of work, review of records with checks against reality, or testing with a sound sampling approach.
3. Set frequency from risk, past performance and change, and adjust it when evidence changes.
4. Assign verifiers who are competent in the method and independent of the monitoring of that activity.
5. Decide in advance what happens when a sample result is unacceptable: which lots are held, who evaluates them, and how corrective action starts.
6. Communicate results to the people who can act, and retain them with the actions taken.
7. Pass the findings to the food safety team for analysis under clause 8.8.2.

Illustrative food-manufacturing example

Illustrative catering example

A caterer verifies a PRP by observing its application during a representative service period and reviewing relevant records. The activity finds that the documented arrangement is followed before service but not maintained during a busy handover.

The finding is communicated for action and included in the team's analysis. A completed pre-service checklist alone would not have revealed the later weakness.

Evidence and common mistakes