Tag Archives: Hazard analysis and critical control points


Hazard Analysis and Critical Control Points (HACCP) for the Cannabis Industry: Part 3

By Kathy Knutson, Ph.D.

Parts One and Two in this series have defined Good Manufacturing Practices, introduced Hazard Analysis and Critical Control Points (HACCP) and explained the first HACCP step of hazard analysis. A food safety team will typically work from a flow diagram to identify biological, chemical or physical hazards at each step of processing and packaging. Once the hazard is identified, the severity and probability are debated. Hazards with severe consequences or high probability are carried through the HACCP plan as Critical Control Points (CCPs).

Critical Control Points definedHACCP is a do-it-yourself project.

Where exactly will the hazard be controlled? CCPs are embedded within certain steps in processing and packaging where the parameters, like temperature, must be met to ensure food safety. Failure at a CCP is called a deviation from the HACCP plan. The food safety team identifies where manufacturing problems could occur that would result in a product that could cause illness or injury. Not every step is a CCP! For example, I worked with a client that had several locations for filters of a liquid stream. The filters removed food particles, suspended particulates and potentially metal. We went through a virtual exercise of removing each filter one-by-one and talking through the result on controlling the potential hazard of metal. We agreed that failure of the final filter was the CCP for catching metal, but not the other filters. It was not necessary to label each filter as a CCP, because every CCP requires monitoring and verification.

Identification of a CCP starts more documentation, documentation, documentation.

Do you wish you had more reports to write, more forms to fill out, more data to review? No. Nobody wants more work. When a CCP is identified, there is more work to do. This just makes sense. If a CCP is controlling a hazard, you want to know that the control is working. Before I launch into monitoring, I digress to validation.

CCP validationThis is where someone says, “We have always done it this way, and we have never had a problem.”

You want to know if a critical step will actually control a hazard. Will the mesh of a filter trap metal? Will the baking temperature kill pathogens? Will the level of acid stop the growth of pathogens? The US had a major peanut butter recall by Peanut Corporation of America. There were 714 Salmonella cases (individuals) across 46 states from consumption of the contaminated peanut butter. Imagine raw peanuts going into a roaster, coming out as roasted peanuts and being ground into butter. Despite the quality parameters of the peanut butter being acceptable for color and flavor, the roasting process was not validated, and Salmonella survived. Baking of pies, pasteurization of juice and canning all rely on validated cook processes for time and temperature. Validation is the scientific, technical information proving the CCP will control the hazard. Without validation, your final product may be hazardous, just like the peanut butter. This is where someone says, “We have always done it this way, and we have never had a problem.” Maybe, but you still must prove safety with validation.

The hazard analysis drives your decisions.

Starting with the identification of a hazard that requires a CCP, a company will focus on the control of the hazard. A CCP may have one or more than one parameter for control. Parameters include time, temperature, belt speed, air flow, bed depth, product flow, concentration and pH. That was not an exhaustive list, and your company may have other critical parameters. HACCP is a do-it-yourself project. Every facility is unique to its employees, equipment, ingredients and final product. The food safety team must digest all the variables related to food safety and write a HACCP plan that will control all the hazards and make a safe product.

Meeting critical limits at CCPs ensures food safety

The HACCP plan details the parameters and values required for food safety at each CCP.The HACCP plan identifies the minimum or maximum value for each parameter required for food safety. A value is just a number. Imagine a dreadful day; there are problems in production. Maybe equipment stalls and product sits. Maybe the electricity flickers and oven temperature drops. Maybe a culture in fermentation isn’t active. Poop happens. What are the values that are absolutely required for the product to be safe? They are often called critical limits. This is the difference between destroying product and selling product. The HACCP plan details the parameters and values required for food safety at each CCP. In production, the operating limits may be different based on quality characteristics or equipment performance, but the product will be safe when critical limits are met. How do you know critical limits are met?

CCPs must be monitored

Every CCP is monitored. Common tools for monitoring are thermometers, timers, flow rate meters, pH probes, and measuring of concentration. Most quality managers want production line monitoring to be automated and continuous. If samples are taken and measured at some frequency, technicians must be trained on the sampling technique, frequency, procedure for measurement and recording of data. The values from monitoring will be compared to critical limits. If the value does not reach the critical limit, the process is out of control and food safety may be compromised. The line operator or technician should be trained to know if the line can be stopped and how to segregate product under question. Depending on the hazard, the product will be evaluated for safety, rerun, released or disposed. When the process is out of control, it is called a deviation from the HACCP plan.

A deviation initiates corrective action and documentation associated with the deviation. You can google examples of corrective action forms; there is no one form required. Basically, the line operator, technician or supervisor starts the paperwork by recording everything about the deviation, evaluation of the product, fate of the product, root cause investigation, and what was done to ensure the problem will not happen again. A supervisor or manager reviews and signs off on the corrective action. The corrective action form and associated documentation should be signed off before the product is released. Sign off is an example of verification. Verification will be discussed in more detail in a future article.

My thoughts on GMPs and HACCP were shared in a webinar on May 2nd hosted by CIJ and NEHA. Please comment on this blog post below. I love feedback!


Hazard Analysis and Critical Control Points (HACCP) for the Cannabis Industry: Part 2

By Kathy Knutson, Ph.D.

HACCP is a food safety program developed in the 1960s for the food manufacturing industry, mandated for meat, seafood and juice and adopted by foodservice for the safe serving of meals at restaurants. With state requirements for the safe production of cannabis-infused products, namely edibles, facilities may be inspected against HACCP principles. The cannabis industry and state inspectors recognize the need for safe edible manufacture. Lessons can be learned from the food industry, which has advanced beyond HACCP plans to food safety plans, starting with procurement and including the shipment of finished product to customers.

In my work with the food industry, I write HACCP and food safety plans and deliver training on food safety. In Part 1 of this series, I wrote about the identification of hazards, which is the first step in HACCP plan development. Before we continue with the next HACCP step, I will discuss Good Manufacturing Practices (GMPs). GMPs are the foundation on which HACCP is built. In other words, without GMPs in place, the facility will not have a successful HACCP program. GMPs are required in the food, dietary supplement and pharmaceutical industries, all under the enforcement of the federal Food and Drug Administration (FDA). Without federal regulation for cannabis edible manufacture, there may not be state-mandated requirements for GMPs. Let me warn you that any food safety program will not succeed without proper control of GMPs.HACCP

GMPs cover all of your programs and procedures to support food safety without having a direct, instant control. For example, when brownies are baked as edibles, food safety is controlled by the time and temperature of baking. A written recipe and baking procedure are followed for the edible. The time and temperature can be recorded to provide documentation of proper baking. In the food industry, this is called a process preventative control, which is critical to food safety and is part of a HACCP plan. Failure of proper time and temperature of baking not only leads to an unacceptable product in terms of quality, but results in an unsafe product that should not be sold.

Back to GMPs. Now think of everything that was done up to the steps of mixing and baking. Let’s start with personnel. Facilities for edibles have hiring practices. Once an employee is hired, the employee is trained, and training will include food safety procedures. When working at the job after training, the employee measuring ingredients will demonstrate proper grooming and hand washing. Clean aprons, hairnets, beard nets and gloves will be provided by the facility and worn by the employee. The same goes for the employee that bakes and the employee that packages the edible. One category of GMPs is Personnel.

Edibles facilities are not foodservice; they are manufacturing. A second GMP category is cleaning and sanitizing. Food safety is controlled through proper cleaning and sanitizing of food contact surfaces (FCS). The edible facility will have in place the frequency and methods for cleaning all parts of the facility- outside, offices, restrooms, break room and others. GMPs cover the general cleaning procedures and procedures for cleaning receiving, storage; what we would consider processing to include weighing, process steps and packaging; finished product storage and shipping. Management of the facility decides the methods and frequency of cleaning and sanitizing with greater care given to processing. Without proper cleaning and sanitizing, a facility cannot achieve food safety.

I could go on and on about GMPs. Other GMPs include water safety, integrity of the buildings, pest control program, procurement, sewage disposal and waste disposal. Let’s transition back to HACCP. In Part 1 of this series, I explained identification of hazards. Hazards are one of three types: biological, chemical and physical.

At this point, I am not surprised if you are overwhelmed. After reading Part 1 of this series, did you form a food safety team? At each edibles facility, there should be at least one employee who is trained externally in food safety to the standard that foodservice meets. Classes are offered locally and frequently. When the facility is ready, the next step of training is a HACCP workshop for the food industry, not foodservice. Edibles facilities are not foodservice; they are manufacturing. Many colleges and associations provide HACCP training. Finally, at the least, one employee should attend a workshop for Preventive Controls Qualified Individual.

To institute proper GMPs, go to ConnectFood.com for a GMP checklist. Did you draw up a flow diagram after reading Part 1? With a flow diagram that starts at Receiving and ends at Shipping, the software at ConnectFood.com takes you through the writing steps of a HACCP or food safety plan. There are many resources out there for GMPs, so it can get overwhelming. ConnectFood.com is my favorite resource.

The next step in HACCP development after identification of hazards is to identify the exact step where the hazard will be controlled. Strictly speaking, HACCP only covers process preventive controls, which typically start with a weigh step and end with a packaging step. A facility may also have a step where temperature must be controlled for food safety, e.g. cooling. In HACCP, there are commonly two process preventive controls:

  • Biological hazard of Salmonella and Escherichia coli: the heat step
  • Physical hazard of metal: metal detector

Strictly speaking, HACCP does not include cleaning, sanitizing and supplier approval for procurement of ingredients and packaging. I hope you see that HACCP is not enough. There have been hundreds of recalls and outbreaks due to problems in non-processing steps. The FDA requires food manufactures to go beyond HACCP and follow a written food safety plan, which includes hazards controlled at these steps:

  • Biological hazard of Listeria monocytogenes: cleaning and sanitizing of the processing environment and equipment
  • Physical hazards coming in with ingredients: supplier approval
  • Physical hazard of glass and hard plastic: Here I am thinking of glass breaking or plastic pieces flying off buckets. This is an internal hazard and is controlled by following written procedures. The written document is a Standard Operating Procedure (SOP).
  • Chemical hazard of pesticides: supplier approval
  • Chemical hazard of mycotoxins: supplier approval
  • Chemical hazard of allergens: supplier approval, label check at Receiving and product labeling step

Does a cannabis edible facility honestly not care or not control for pesticides in ingredients because this is not part of HACCP? No. There are two ways for procurement of ingredients in which pesticides are controlled. Either the cannabis cultivation is controlled as part of the samebusiness or the facility works with a supplier to confirm the ingredient meets pesticide tolerances. Strictly speaking, this control is not part of HACCP. For this and many other reasons, HACCP is a good place to start the control of food safety when built on a solid foundation of GMPs. In the same way the food industry is required to go beyond HACCP with a food safety plan, the cannabis industry must go beyond HACCP.

My thoughts will be shared in a webinar on May 2nd hosted by CIJ and NEHA. I encourage you to listen in to continue this discussion.Please comment on this blog post below. I love feedback!

extraction equipment

Implementing a HACCP Plan in Cannabis Processing

By Aaron G. Biros
No Comments
extraction equipment

Hazard analysis and critical control points (HACCP) is a robust management system that identifies and addresses any risk to safety throughout production. Originally designed for food safety through the entire supply chain, the risk assessment scheme can ensure extra steps are taken to prevent contamination.

The FDA as well as the Food Safety and Inspection Service currently require HACCP plans in a variety of food markets, including high-risk foods like poultry that are particularly susceptible to pathogenic contamination. As California and other states develop and implement regulations with rigorous safety requirements, cannabis cultivators, extractors and infused product manufacturers can look to HACCP for guidance on bolstering their quality controls. Wikipedia actually has a very helpful summary of the terms referenced and discussed here.

Dr. Markus Roggen, vice president of extraction

The HACCP system consists of six steps, the first of which being a hazard analysis. For Dr. Markus Roggen, vice president of extraction at Outco, a medical cannabis producer in Southern California, one of their hazard analyses takes place at the drying and curing stage. “When we get our flower from harvest, we have to think about the drying and curing process, where mold and bacteria can spoil our harvest,” says Dr. Roggen. “That is the hazard we have to deal with.” So for Dr. Roggen and his team, the hazard they identified is the potential for mold and bacteria growth during the drying and curing process.

The next step in the HACCP system is to identify a critical control point. “Correct drying of the flower will prevent any contamination from mold or bacteria, which is a control point identified,” says Dr. Roggen. “We also have to prevent contamination from the staff; it has to be the correct environment for the process.” That might include things like wearing gloves, protective clothing and hand washing. Once a control point is identified, the third step in the process is to develop a critical limit for those control points.

A critical limit for any given control point could be a maximum or minimum threshold before contamination is possible, reducing the hazard’s risk. “When we establish the critical limit, we know that water activity below 0.65 will prevent any mold growth so that is our critical limit, we have to reach that number,” says Dr. Roggen. The fourth step is monitoring critical control points. For food manufacturers and processors, they are required to identify how they monitor those control points in a written HACCP plan. For Dr. Roggen’s team, this means using a water activity meter. “If we establish the critical control point monitoring, water activity is taken throughout the drying process, as well as before and after the cure,” says Dr. Roggen. “As long as we get to that number quickly and stay below that number, we can control that point and prevent mold and bacteria growth.”

One of the cultivation facilities at Outco

When monitoring is established and if the critical limit is ever exceeded, there needs to be a corrective action, which is the fifth step in a HACCP plan. In Dr. Roggen’s case, that would mean they need a corrective action ready for when water activity goes above 0.65. “If we don’t have the right water activity, we just continue drying, so this example is pretty simple,” says Dr. Roggen. “Normal harvest is 7 days drying, if it is not dry enough, we take longer to prevent mold or bacteria growth.”

The sixth step is establishing procedures to ensure the whole system works. In food safety, this often means requiring process validation. “We have to double check that our procedure and protocols work,” says Dr. Roggen. “Checking for water activity is only a passive way of testing it, so we send our material to an outside testing lab to check for mold or bacteria so that if our protocols don’t work, we can catch those problems in the data and correct them.” They introduced weekly meetings where the extraction and cultivation teams get together to discuss the processes. Dr. Roggen says those meetings have been one of the most effective tools in the entire system.

Dr. Roggen’s team identified worker safety as a potential hazard

The final step in the process is to keep records. This can be as simple as keeping a written HACCP plan on hand, but should include keeping data logs and documenting procedures throughout production. For Dr. Roggen’s team, they log drying times, product weight and lab tests for every batch. Using all of those steps, Dr. Roggen and his team might continue to update their HACCP plans when they encounter a newly identified hazard. While this example is simplistic, the conceptual framework of a HACCP plan can help detect and solve much more complex problems. For another example, Dr. Roggen takes us into his extraction process.

Dr. Roggen’s team, on the extraction side of the business, uses a HACCP plan not just for preventing contamination, but for protecting worker safety as well. “We are always thinking about making the best product, but I have to look out for my team,” says Dr. Roggen. “The health risk to staff in extraction processes is absolutely a hazard.” They use carbon dioxide to extract oil, which carries a good deal of risks as well. “So when we look at our critical control points we need to regularly maintain and clean the extractor and we schedule for that,” says Dr. Roggen.

Gloves, protective clothing, eyewear and respirators are required for workers in the extraction process.

“My team needs respirators, protective clothing, eyewear and gloves to prevent contamination of material, but also to protect the worker from solvents, machine oil and CO2 in the room.” That health risk means they try and stay under legal limits set by the government, which is a critical limit of 3,000 ppm of carbon dioxide in the environment. “We monitor the CO2 levels with our instruments and that is particularly important whenever the extractor is opened.” Other than when it is being opened, Dr. Roggen, notes, the extractor stays locked, which is an important worker safety protocol.

The obvious corrective action for them is to have workers leave the room whenever carbon dioxide levels exceed that critical limit. “We just wait until the levels are back to normal and then continue operation,” says Dr. Roggen. “We updated our ventilation system, but if it still happens they leave the room.” They utilize a sort of double check here- the buddy system. “I took these rules from the chemistry lab; we always have two operators working on the machine on the same time, never anyone working alone.” That buddy check also requires they check each other for protective gear. “Just like in rock climbing or mountain biking, it is important to make sure your partner is safe.” He says they don’t keep records for employees wearing protective gear, but they do have an incident report system. “If any sort of incident takes place, we look at what happened, how could we have prevented it and what we could change,” says Dr. Roggen.

He says they have been utilizing some of these principles for a while; it just wasn’t until recently that they started thinking in terms of the HACCP conceptual framework. While some of those steps in the process seem obvious, and it is very likely that many cannabis processors already utilize them in their standard operating procedures and quality controls, utilizing the HACCP scheme can help provide structure and additional safeguards in production.