Tag Archives: verification

HACCP

Hazard Analysis and Critical Control Points (HACCP) for the Cannabis Industry: Part 4

By Kathy Knutson, Ph.D., Kathy Knutson, Ph.D.
No Comments
HACCP

In Part 3 of this series on HACCP, Critical Control Points (CCPs), validation of CCPs and monitoring of CCPs were defined. When a HACCP plan identifies the correct CCP, validates the CCP as controlling the hazard and monitors the CCP, a potential hazard is controlled in the manufacturing and packaging of cannabis-infused edibles. The food industry is big on documentation. If it’s not documented, it did not happen. The written hazard analysis, validation study and monitoring of CCPs create necessary records. It is these records that will prove to a customer, auditor or inspector that the edible is safe. Here in Part 4, more recordkeeping is added on for deviation from a CCP, verification and a recall plan. 

Take Corrective Action When There Is a Deviation from a Critical Control Point

Your food safety team conducts a hazard analysis, identifies CCPs and decides on monitoring devices, frequency and who is responsible for monitoring. You create an electronic or paper record of the monitoring for every batch of edible to document critical limits were met. Despite all your good efforts, something goes wrong. Maybe you lose power. Maybe the equipment jams. Nothing is perfect when dealing with ingredients, equipment and personnel. Poop happens. Because you are prepared before the deviation, your employees know what to do. With proper training, the line worker knows what to do with the equipment, the in-process product and who to inform. In most cases the product is put on hold for evaluation, and the equipment is fixed to keep running. The choices for the product include release, rework or destroy. Every action taken needs to be recorded on a corrective action form and documents attached to demonstrate the fate of the product on hold. All the product from the batch must be accounted for through documentation. If the batch size is 100 lb, then the fate of 100 lb must be documented.

Verify Critical Control Points Are Monitored and Effective

First, verification and validation are frequently confused by the best of food safety managers. Validation was discussed as part of determining CCPs in Part 3. Validation proves that following a CCP is the right method for safety. I call validation, “one and done.” Validation is done once for a CCP; while verification is ongoing at a CCP. For example, the time and temperature for effective milk pasteurization is very well known and dairies refer to the FDA Pasteurized Milk Ordinance. Dairies do not have to prove over and over that a combination of time and temperature is effective (validation), because that has been proven.

I encourage you to do as much as you can to prepare for a recall.A CCP is monitored to prove the safety parameters are met. Pasteurization is an example of the most commonly monitored parameters of time and temperature. At a kill step like pasteurization, the employee at that station is responsible for accurate monitoring of time and temperature. The company managers and owners should feel confident that CCPs have been identified and data are being recorded to prove safety. Verification is not done by the employee at the station but by a supervisor or manager. The employee at the station is probably not a member of the food safety team that wrote the HACCP plan, but the supervisor or manager that performs verification may be. Verification is proving that what was decided by the food safety team is actually implemented and consistently done.

Verification is abundant and can be very simple. First, every record associated with a CCP is reviewed by a supervisor or manager, i.e. someone who did not create the record. This can be a simple initial and date at the bottom of the record. Every corrective action form with its associated evaluation is verified in the same way. When HACCP plans are reviewed, that is verification. Verification activities include 1) testing the concentration of a sanitizer, 2) reviewing Certificates of Analysis from suppliers, 3) a review of the packaging label and 4) all chemical and microbiological testing of ingredients and product. The HACCP plan identifies CCPs. Verification confirms that implementation is running according to the plan.

Verification is like a parent who tells their child to clean their room. The child walks to their room and later emerges to state that the room is clean. The parent can believe the word of the child, if the child has been properly trained and has a history of successfully cleaning their room. At some frequency determined by the parent, the room will get a parental visual check. This is verification. In the food industry, CCP monitoring records and corrective action must be reviewed within seven days after the record is created and preferably before the food leaves the facility. Other verification activities are done in a timely manner as determined by the company.

Food processing and sanitation
Product recalls due to manufacturing errors in sanitation cause mistrust among consumers.

Write a Recall Plan

In the food industry, auditors and FDA inspectors require a written recall plan. Mock recalls are recommended and always provide learning and improvement to systems. Imagine your edible product contains sugar, and your sugar supplier notifies you that the sugar is recalled due to glass pieces. Since you are starting with the supplier, that is one step back. Your documentation of ingredients includes lot numbers, dates and quantity of sugar.You keep good records and they show you exactly how much of the recalled lot was received. Next you gather your batch records. Batches with the recalled sugar are identified, and the total amount of recalled sugar is reconciled. You label every batch of your edible with a lot code, and you identify the amount of each affected lot and the customer. You have a press release template in which you add the specific information about the recall and affected lots. You notify every customer where the affected edible was shipped with a plan to return or destroy the edible. When you notify your customers, you go one step forward.

How would your company do in this situation? I have witnessed the difficulties a company faces in a recall when I was brought in to investigate the source of a pathogen. Food safety people in my workshops who have worked through a recall tell me that it was the worst time of their life. I encourage you to do as much as you can to prepare for a recall. Here are two good resources:

Please comment on this blog post below. I love feedback!

HACCP

Hazard Analysis and Critical Control Points (HACCP) for the Cannabis Industry: Part 3

By Kathy Knutson, Ph.D., Kathy Knutson, Ph.D.
2 Comments
HACCP

Parts One and Two in this series have defined Good Manufacturing Practices, introduced Hazard Analysis and Critical Control Points (HACCP) and explained the first HACCP step of hazard analysis. A food safety team will typically work from a flow diagram to identify biological, chemical or physical hazards at each step of processing and packaging. Once the hazard is identified, the severity and probability are debated. Hazards with severe consequences or high probability are carried through the HACCP plan as Critical Control Points (CCPs).

Critical Control Points definedHACCP is a do-it-yourself project.

Where exactly will the hazard be controlled? CCPs are embedded within certain steps in processing and packaging where the parameters, like temperature, must be met to ensure food safety. Failure at a CCP is called a deviation from the HACCP plan. The food safety team identifies where manufacturing problems could occur that would result in a product that could cause illness or injury. Not every step is a CCP! For example, I worked with a client that had several locations for filters of a liquid stream. The filters removed food particles, suspended particulates and potentially metal. We went through a virtual exercise of removing each filter one-by-one and talking through the result on controlling the potential hazard of metal. We agreed that failure of the final filter was the CCP for catching metal, but not the other filters. It was not necessary to label each filter as a CCP, because every CCP requires monitoring and verification.

Identification of a CCP starts more documentation, documentation, documentation.

Do you wish you had more reports to write, more forms to fill out, more data to review? No. Nobody wants more work. When a CCP is identified, there is more work to do. This just makes sense. If a CCP is controlling a hazard, you want to know that the control is working. Before I launch into monitoring, I digress to validation.

CCP validationThis is where someone says, “We have always done it this way, and we have never had a problem.”

You want to know if a critical step will actually control a hazard. Will the mesh of a filter trap metal? Will the baking temperature kill pathogens? Will the level of acid stop the growth of pathogens? The US had a major peanut butter recall by Peanut Corporation of America. There were 714 Salmonella cases (individuals) across 46 states from consumption of the contaminated peanut butter. Imagine raw peanuts going into a roaster, coming out as roasted peanuts and being ground into butter. Despite the quality parameters of the peanut butter being acceptable for color and flavor, the roasting process was not validated, and Salmonella survived. Baking of pies, pasteurization of juice and canning all rely on validated cook processes for time and temperature. Validation is the scientific, technical information proving the CCP will control the hazard. Without validation, your final product may be hazardous, just like the peanut butter. This is where someone says, “We have always done it this way, and we have never had a problem.” Maybe, but you still must prove safety with validation.

The hazard analysis drives your decisions.

Starting with the identification of a hazard that requires a CCP, a company will focus on the control of the hazard. A CCP may have one or more than one parameter for control. Parameters include time, temperature, belt speed, air flow, bed depth, product flow, concentration and pH. That was not an exhaustive list, and your company may have other critical parameters. HACCP is a do-it-yourself project. Every facility is unique to its employees, equipment, ingredients and final product. The food safety team must digest all the variables related to food safety and write a HACCP plan that will control all the hazards and make a safe product.

Meeting critical limits at CCPs ensures food safety

The HACCP plan details the parameters and values required for food safety at each CCP.The HACCP plan identifies the minimum or maximum value for each parameter required for food safety. A value is just a number. Imagine a dreadful day; there are problems in production. Maybe equipment stalls and product sits. Maybe the electricity flickers and oven temperature drops. Maybe a culture in fermentation isn’t active. Poop happens. What are the values that are absolutely required for the product to be safe? They are often called critical limits. This is the difference between destroying product and selling product. The HACCP plan details the parameters and values required for food safety at each CCP. In production, the operating limits may be different based on quality characteristics or equipment performance, but the product will be safe when critical limits are met. How do you know critical limits are met?

CCPs must be monitored

Every CCP is monitored. Common tools for monitoring are thermometers, timers, flow rate meters, pH probes, and measuring of concentration. Most quality managers want production line monitoring to be automated and continuous. If samples are taken and measured at some frequency, technicians must be trained on the sampling technique, frequency, procedure for measurement and recording of data. The values from monitoring will be compared to critical limits. If the value does not reach the critical limit, the process is out of control and food safety may be compromised. The line operator or technician should be trained to know if the line can be stopped and how to segregate product under question. Depending on the hazard, the product will be evaluated for safety, rerun, released or disposed. When the process is out of control, it is called a deviation from the HACCP plan.

A deviation initiates corrective action and documentation associated with the deviation. You can google examples of corrective action forms; there is no one form required. Basically, the line operator, technician or supervisor starts the paperwork by recording everything about the deviation, evaluation of the product, fate of the product, root cause investigation, and what was done to ensure the problem will not happen again. A supervisor or manager reviews and signs off on the corrective action. The corrective action form and associated documentation should be signed off before the product is released. Sign off is an example of verification. Verification will be discussed in more detail in a future article.

My thoughts on GMPs and HACCP were shared in a webinar on May 2nd hosted by CIJ and NEHA. Please comment on this blog post below. I love feedback!

Supplier Quality Audits: A Critical Factor in Ensuring GMP Compliance

By Amy Scanlin, Amy Scanlin
No Comments

Editor’s Note: This is an article submission from the EAS Consulting Group, LLC team.


To Audit, or not to audit? Not even a question! Audits play a crucial role in verifying and validating business practices, ensuring suppliers are meeting their requirements for Good Manufacturing Practices (GMPs), and most importantly, protecting your interests by ensuring that you consistently receive a compliant and quality product. Audits can help ensure sound business procedures and quality systems, including well-established SOPs, verification and documentation of batch records, appropriate sanitation practices and safe storage and use of ingredients. Audits can also identify deficiencies, putting into motion a corrective action plan to mitigate any further challenges. While a detailed audit scheme is commonplace for established industries such as food, pharmaceuticals and dietary supplements, it is equally important for the cannabis industry to ensure the same quality and safety measures are applied to this budding industry.

If the question then is not whether to audit, perhaps the question is how and when to audit, particularly in the case of a company’s suppliers.This is an opportunity to strengthen the working relationship with each side demonstrating a commitment to the end product.

Supplier audits ensure first and foremost that the company with which you have chosen to work is operating in a manner that meets or exceeds your quality expectations – and you should have expectations because ultimately your product is your responsibility. Any issues that arise, even if they are technically the fault of a supplier, become your issue, meaning any enforcement action taken by your state regulators will directly impact your business. Yes, your supplier may provide you with a batch Certificate of Analysis but you should certify their results as well.

Audits are a snapshot of a moment in time and therefore should be conducted on a regular basis, perhaps biennially or even annually, if they are a critical supplier. In some cases, companies choose to bring in third-party auditors to provide an objective assessment of suppliers. This is especially helpful when the manufacturer or customer does not have the manufacturing, compliance and analytical background to accurately interpret data gathered as part of the audit. With the responsibility for ensuring ingredient identity and product integrity falling on the manufacturer, gaining an unbiased and accurate assessment is imperative to reducing the risk to your business.

Conducting a supplier audit should be well planned in advance to ensure both sides are ready. The audit team must be prepared and able to perform their duties via a combination of education, training and experience. A lead auditor will oversee the team and ultimately will also oversee the results, verifying all nonconformities have been properly identified. They will also work with the supplier to conduct a root cause analysis for those nonconformities and develop a corrective action plan to eliminate them from occurring in the future. The audit lead will also verify follow-up results.

Auditors should discuss with the supplier in advance what areas will be observed, what documentation will need to be ready for review and they should conduct their assessments with professionalism. After all, this is an opportunity to strengthen the working relationship with each side demonstrating a commitment to the end product.This is your chance to ensure your suppliers are performing and will meet your business, quality and product expectations.

Auditors must document that ingredient identity and finished product specifications are verified by test methods appropriate for the intended purpose (such as a whole compound versus a powder). State regulations vary so be certain to understand the number and types of required tests. Once the audit is complete and results are analyzed, you, the manufacturer, have an opportunity to determine if the results are acceptable. Remember, it is your product, so ultimately it is your responsibility to review the available data and release the product to market, you cannot put that responsibility on your supplier.

Quality Agreements as Part of a Business Agreement

There are opportunities to strengthen a partnership at every turn, and one way to set a relationship on the right path is to include a quality agreement as part of a business agreement. A quality agreement lays out your expectations for your suppliers, what you are responsible for and is a living document that, once signed, demonstrates their commitment to upholding the standards you expect. Just as with a business agreement, have any quality agreements reviewed by an outside expert to ensure the wording is sound and that your interests are protected. This is just another step in the development of a well-executed business plan and one that solidifies expectations and provides consequences when those expectations are not met.

Supplier audits must be taken seriously as they are opportunities to protect your brand, your business and your consumers. Enter into an audit as you would with any business endeavor – prepared. This is your chance to ensure your suppliers are performing and will meet your business, quality and product expectations.