hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us
Clause 8.9.1ISO 22000:2018 · Control, evaluate and decide safely

ISO 22000 clause 8.9.1: give monitoring evaluators competence and authority

ISO 22000 clause 8.9.1 requires monitoring data from CCPs and OPRPs to be evaluated by designated people who are competent and authorised to initiate corrections and corrective actions. This closes a critical gap between collecting a result and acting on it. A monitoring system can produce accurate data while the organisation still fails to make the necessary decision.

What clause 8.9.1 requires in practice

This short sub-clause deals with a gap that many systems leave open: who looks at the monitoring results and does something about them. The organisation ensures that data from OPRP and CCP monitoring is evaluated by designated persons who are competent to understand it and who have the authority to start corrections and corrective actions. Collecting readings is not the same as evaluating them. The clause therefore requires a deliberate assignment of this role, so that results are interpreted promptly and action follows without waiting for permission from someone else. The outputs are the designations, the evidence of competence and authority, and the evaluations and actions that result. The clause sits at the point where monitoring ends and action begins, which is why the role needs to be explicit rather than assumed.

Define the evaluator's responsibility

Identify who evaluates the relevant results and what authority that person has. The role needs to connect with the hazard-control plan, including the response to failed limits or criteria. Avoid an arrangement where everyone assumes someone else reviews the records.

Distinguish performing the measurement from evaluating its significance where the roles differ. The evaluator needs enough information about the product, process and relevant period to understand the implications of a result.

Include the handling of missing, uncertain or inconsistent data. These situations can create uncertainty about control even when no explicit failed value is recorded. The appropriate evaluation should follow the actual evidence rather than automatically treating a blank entry as acceptable.

ISO 22000 consulting & certification support

Get clause 8.9.1 right the first time — with a global leader in ISO 22000 implementation

A Sterling consultant works the requirement through with your team, links it to the rest of the system and carries it to certification readiness. Expert and experienced consultants, 8,100+ client engagements in 60+ countries.

Establish competence for the decision

Competence includes understanding the relevant criterion, the control's purpose, the response requirements and the person's authority. A general food safety induction may not establish capability to evaluate a particular CCP or OPRP event.

Use suitable assessment and development under clause 7.2. A realistic scenario can reveal whether the person recognises when product must be controlled and when specialist input is necessary.

Define escalation beyond the evaluator's own competence or authority. Clear boundaries help prevent both delayed action and unsupported product decisions.

Make authority usable in real time

Consider shifts, absence and external operations. A named evaluator who is unavailable during production cannot provide a dependable response route. Establish suitable cover and access to the information needed.

The evaluator must be able to initiate relevant corrections and corrective actions. If commercial pressure can routinely block that action, the responsibility exists only on paper. Management needs to support the assigned authority.

Connect evaluation with the records of correction, corrective action and product decisions. The evidence should show what followed the result.

Why clause 8.9.1 matters to the business

A monitoring system can produce perfect records and still fail if nobody turns a result into a decision. Readings are sometimes reviewed only after product has shipped, or by someone who cannot act. Assigning competent evaluators with real authority reduces the amount of product exposed to a failure and removes ambiguity about who decides. It also protects staff, because those on the floor know where responsibility lies. Customers who audit a site often ask who reviews results and how quickly, so a clear answer builds confidence.

How to implement clause 8.9.1

Make the evaluator role explicit, equip the person for it, and test that it works at every time the plant runs. Review the designations whenever staffing, shift patterns or products change, because evaluator cover is among the first arrangements to erode quietly in busy periods.

  1. Identify, for each CCP and OPRP, the role that evaluates results and the role that covers when that person is away.
  2. Define the authority of the evaluator, including holding product and starting corrections, and the point at which a decision moves to someone more senior or specialist.
  3. Assess competence against the specific criteria and responses, using scenarios, and provide training under clause 7.2 where it is needed.
  4. Give evaluators the information they need, such as links between results and production periods or lots.
  5. Set rules for missing, late or doubtful data, so gaps trigger evaluation rather than being ignored.
  6. Check on each shift that evaluations are made in time to protect product.
  7. Review the arrangements after any event where evaluation was delayed or unclear.

Illustrative food-production example

Illustrative example 1

A manufacturer finds that night-shift monitoring records are reviewed only after morning dispatch. It examines whether the arrangement supports the required timely response and assigns competent cover with clear authority and access to product information.

Illustrative example 2

The change addresses the timing and decision gap. Adding a morning signature would not resolve product that had already moved before an unacceptable result was evaluated.

Automate™ on Effivity · included in every Sterling engagement

Keep clause 8.9.1 alive in Effivity

Record what you decided under clause 8.9.1, link it to the records and controls it affects, and let the review date trigger the next look. Effivity is the ISO & GRC software used in 50+ countries — and part of every Sterling ISO 22000 programme.

Illustrative catering example

A caterer uses a supervisor to evaluate a failed OPRP observation. A scenario reveals that the supervisor can identify the deviation but is uncertain about the affected-product evaluation and escalation route. The organisation provides targeted development and reassesses the role.

The supervisor is not asked to make technical decisions beyond competence. The revised arrangement gives a clear route to the appropriate decision-maker while maintaining product control.

Evidence and common failures

What counts as evidence

Useful evidence connects role assignments, competence, authority and actual evaluations. The detailed correction and product-control requirements specify relevant retained information. A responsibility chart is useful only if practice follows it.

Common weaknesses

Common failures include automatic sign-off without interpretation, a single unavailable evaluator, and authority limited to recording the problem. Another is treating every result as equivalent without considering the control category and consequences.

Use the nonconformity overview to connect the evaluator's role with the complete response process.

Frequently asked questions

Can the monitor also evaluate the result?

Responsibilities must meet the competence and authority requirements. Separate verification of the same monitored activity is governed by clause 8.8.1.

Is a signature proof of evaluation?

Not by itself. The person should be able to explain the result and the decision or action taken.

Must evaluation wait for a complete investigation?

No. Necessary immediate control and correction should not be delayed while causes and longer-term actions are investigated.

Clarify who can act on a food safety result

Discuss monitoring evaluation roles with Sterling, including competence, cover and evidence. Suitable Effivity ISO & GRC automation software support can accompany the agreed workflow. Explore ISO 22000 Food Safety Awareness and the requirements hub.

Source basis and reading note. This is original practical guidance for ISO 22000. Use an authorised copy for definitive requirements. Illustrative examples describe hypothetical situations, not client results. Implementation methods are distinguished from requirements; independent bodies decide management-system certification outcomes. Issuer standard record: iso.org.
Disclaimer. This guide is provided for general information only. It is not the text of the standard, not legal or professional advice, and not a representation of how any certification body will assess your organisation. Sterling International Consulting accepts no liability for any loss arising from reliance on it. Requirements are applied to each organisation's own context through an engagement; contact us to implement ISO 22000 in your organisation.