PattyMcDermott, ThermoFisher Scientific
In the Food Lab

How Digital Solutions Support Supply Chain Transparency and Traceability

By Patricia McDermott
No Comments
PattyMcDermott, ThermoFisher Scientific

Ensuring the safety and authenticity of food is a key responsibility of growers, producers, manufacturers and suppliers. With so many partners involved in the journey from farm to fork, tracking chain of custody data and maintaining a clear, unbroken record are essential to safeguard the quality and provenance of products. However, without proper systems to maintain transparent supply chain audit trails, businesses operating within the food industry run the risk of being responsible for adverse events that could result in health, economic or even legal consequences.

One of the biggest challenges associated with maintaining a clear chain of custody is the need to monitor the flow of raw materials, ingredients and products across increasingly global distribution networks. To successfully track food products throughout the value chain, information on product movements and quality control data must be accessible to those who need it. These systems must also remain compliant with the latest regulations, as well as ensure stakeholders can achieve the highest levels of productivity to meet consumer demand.

For players within the food supply chain to achieve transparent processes and complete traceability, robust information exchange mechanisms and integrated data management systems are key. The latest digital solutions are ensuring the integrity of supply networks by capturing and making available data from any stage of this journey for regulatory or product quality assurance purposes.

Food Safety: A Global Responsibility

The global nature of modern supply networks can make ensuring the safety and quality of food challenging. From honey and juice to yogurt and cheese, tracking the lifecycle of food products is essential to combat food fraud and adulteration, as well as safeguard consumers from harmful food contaminants, such as pesticides and bacteria. Unscrupulous behavior from businesses operating within the supply chain can, for example, cause consumers to purchase products that are not what they claim to be, and even put customers’ health at risk through exposure to potentially unsafe batches.

Given the global expansion of the food supply chain, regulatory bodies are putting increased focus on ensuring that products that pass through multiple channels and regions comply with the same regulations. By focusing on enforcing standards through audits and reviews, it becomes possible to prevent and therefore reduce the potential for adverse events occurring.1 As a result, voluntary standards such as the ISO 22000 guidelines, and mandatory regulations such as FSMA and EU 178/2002, have been put in place to set clear benchmarks for stakeholders’ responsibilities and better enforce food quality and safety.

Regulations such as these require extensive record keeping, transparent audit trails and accountability for all processes. While end-to-end monitoring of one process may be relatively straightforward, ensuring visibility for every process within a complex food supply network can quickly become an overwhelming task. In order to achieve regulatory compliance across all aspects of a supply chain, businesses must be able to integrate their data management systems to achieve full oversight. Moreover, with effective data management tools in place, businesses can organize and incorporate data from all aspects of a food product lifecycle in a compliant manner, enabling them to expand globally.

Integrating Digital Solutions for Better Outcomes

To preserve consumer confidence and brand integrity, businesses operating within the food industry are recognizing the need for automated infrastructures that can manage data, streamline processes, and ensure traceability and accountability for every product. By integrating all monitoring processes into a single system and enabling access to this information via the cloud, the latest digital data management platforms are working to alleviate the challenges associated with operating global supply networks.

Manually organizing inventory management, standard operating procedure (SOP) use, and product traceability can be difficult and time-consuming, especially if operations are on a global scale. Setting up automated processes to manage fail points using a laboratory information management system (LIMS), where they can be itemized and protocols established for potential hazards and preventive measures, can boost speed and efficiency while ensuring the highest levels of data integrity.

Routine food safety testing requires the consistent replenishment of supplies, and the failure to keep on top of inventory use can cause operations to grind to an unexpected stop. Automatic supply level monitoring and automated ordering using a LIMS can eliminate inventory fail points and help to ensure uninterrupted productivity. Furthermore, introducing electronic SOPs as part of a LIMS can define and outline workflows to prevent unintended errors and ensure reliability. Additionally, tracking and logging products using barcode readers throughout their lifecycle gives stakeholders confidence in the products they handle, and can simplify quality control and regulatory review processes.

With the need to monitor so many processes across the food supply chain, there are large volumes of instrument data, workflows and records that must be maintained. Leveraging a LIMS to collect and manage disparate data from all aspects of every process can help stakeholders to streamline workflows. From evaluating potential hazards to eliminating possible issues, having procedures tracked automatically not only transforms processes, but also simplifies quality assessment.

The latest LIMS are able to aggregate all of this data in a single cloud-based system, making this information available at the tap of a tablet or smartphone. Integrating a LIMS with laboratory equipment across food safety testing protocols allows for automated data transfer and increased lab efficiency. Data can be captured from laboratory equipment using a connected scientific data management system (SDMS), which is generated using the approved methods and SOPs available from a laboratory execution system (LES). Interfacing to each instrument using the LES ensures there are no input or copying errors. Subsequently, as process results are entered into the system, any out of specification parameters can be flagged and reported automatically.

The value of an LES within a LIMS can be seen in food safety labs where global demand drives time to market and thus the need for high production efficiency. By giving lab managers control over method and protocol management from any location, the actions of users can be easily recalled for performance monitoring and accountability purposes. And with protocols, regulations and corrective actions defined through the LIMS, labs can achieve faster and more effective decision-making.

Digital solutions such as LIMS are enabling food safety scientists to perform analyses based on readily available SOPs using LES platforms, collect and store data in its original form using an SDMS, and evaluate how the data is being collected, transferred, stored and accessed from a centralized, cloud-based LIMS. These integrated digital solutions offer comprehensive support for the organization of chain of custody data, ensuring full traceability and compliance, and protecting consumer safety and food integrity.

Improved Traceability for Regulatory Compliance

Current regulations are enforcing the quality and safety of food products using well-defined standards for laboratory processes, ensuring the transparency of data handling processes, from raw materials to packaged products. ISO 22000 sets recommendations for food safety management systems and requires businesses to implement hazard analysis and critical control points (HACCP) to ensure the highest levels of quality control and assurance throughout the product lifecycle.

Regulations such as EU 178/2002 and FSMA include mandatory requirements for the traceability of food, feed and any other food-related substance or animal through identification and food tracking programs. Given the unfortunate growth of food fraud, traceability and authentication are becoming increasingly important. The latest regulations are helping the food industry to maintain optimal production practices to safeguard public health, maintain consumer confidence and preserve brand integrity.

Systems that are fully harmonized with these guidelines can be used to maintain data in organized archives, simplify audit trail recording for proof of compliance, and enable easy-access for users to review data. The latest LIMS can support HACCP compliance by automatically alerting users to deviations in expected processing parameters. In this way, issues can be quickly identified, and corrective action can be taken to prevent potentially dangerous products from reaching the consumer.

Digital lab and data management solutions are helping food supply chain stakeholders to simplify tracking, improve transparency and ensure the highest levels of accountability to protect both product authenticity and consumer safety. The integration and implementation of these systems helps to fulfill production demands as well as meet future challenges, allowing the food industry to expand and develop services and checks with the growing global market. Moreover, the potential for food fraud or adulteration is greatly minimized, giving consumers additional confidence in the products they purchase.

Reference

  1. Charlebois, S. Sterling, B. Haratifar, S. and Naing, S.K. (2014). “Comparison of Global Food Traceability Regulations and Requirements,” Compr. Rev. Food Sci. Food Saf., vol. 13, no. 5, pp. 1104–1123.
Deirdre Schlunegger, Stop Foodborne Illness
Food Safety Culture Club

How We Use the Word ‘Recall’ Matters

By Deirdre Schlunegger
No Comments
Deirdre Schlunegger, Stop Foodborne Illness

“Recalls”. This topic got me thinking, what is the literal meaning of recall? So, I looked it up:

Verb

  1. Bring (a fact, event or situation) back into one’s mind, especially so as to recount it to others, remember.
    “I can still vaguely recall being taken to the hospital”
  2. Officially order (someone) to return to a place
    “the Panamanian ambassador was recalled from Peru”

Noun

  1. An act or instance of officially recalling someone or something
    “the recall of the ambassador”
  2. The action or faculty of remembering something learned or experienced.
    “their recall of dreams”

Many people think of FDA when hearing the word “recall”, and many consumers believe that the FDA often or even always orders recalls. In fact, the FDA relies on responsible parties to voluntarily recall food products when a threat exists, but FSMA’s mandatory recall authority allows FDA to mandate a recall only when the criteria under section 423 of the FD&C Act are met.

For most, the word “recall” is all too familiar. We hear it so often that I wonder if we are becoming desensitized to it. Almost daily we hear this item or that item has been recalled due to XXX, allergy, Salmonella, Listeria, foreign matter, and the list goes on. I counted 45 human and three pet food-related recalls just since May 1, 2018—that’s in just 84 days as I write this. So, for consumers (and we are all consumers), how do we hear the word recall and what is our visceral reaction when we hear the word? What actions if any do we take? Does it become too overwhelming? Are we becoming immune from the word? We are required to eat for survival sake and we don’t know if there is a problem with the food we are eating until after it has been recalled. At Stop Foodborne Illness, we send out recall notices every time there is a recall announced, which is typically a few times a week. Recently, a friend asked, “So, do I just quit eating to avoid contamination?”

I wonder if we can start a conversation about the term, how we use it and how to use the word and related action effectively. What does it mean for consumers? Is it only meaningful after the fact? The word and action of the word “prevention” is so much more powerful. Just “food” for thought.

Melody Ge, Kestrel Management
FST Soapbox

8 Tips to Food Safety Program Development for Small and Entrepreneurial Businesses

By Melody Ge
No Comments
Melody Ge, Kestrel Management

The FSMA HARPC regulation has been in the implementation phase for approximately a year. Many small and entrepreneurial businesses are in the process of starting or finalizing the development of a food safety plan to comply with FSMA requirements. This includes program development, operational awareness and employee training. Often, small companies find this development more challenging compared to mature companies for several reasons, including a lack of resources or simply not knowing where to start.

The following eight tips can help small businesses that are developing a food safety plan to comply with FSMA.

1. Don’t be scared.

FSMA Preventive Controls is nothing scary. It is simply a series of food safety protocols and related documentation. It might seem overwhelming at the beginning with many documents and changes; however, it is actually a good method and tool to help strengthen operation lines and management.

FSMA helps businesses sustain and streamline processes. It is helpful to first map out the production process from the very beginning (when raw materials are received) through the end (when finished products leave the facility). The more details that are documented on the process, the easier and less time consuming it will be later to prevent potential risks.

2. Be familiar with the process and the FDA hazard types.

Once all processes are mapped, take time to study and get familiar with them. It will be helpful to have a team of individuals with different job functions review process maps together. The objectives are to identify the following:

  • Where is the weakness?
  • Where can weaknesses be controlled?
  • What should be monitored?
  • When is a good time to monitor each process step?

According to FDA, five hazard types need to be considered and prevented: Physical, chemical, biological, intentional adulteration and radiological. These five types should always be kept in mind when reviewing and analyzing the direct production and non-direct production processes.

3. Thoroughly understand the entire supply chain.

Supply chain management is one of the key preventive controls required by FSMA. Just like mapping out the process, FDA requires each business to have a thorough understanding and control of its supply chain to ensure the risks are minimized from raw materials to end consumers. Whether you have foreign suppliers, distribution centers or co-manufacturers, finished product safety must not be compromised by any party. If foreign suppliers are being used, FSVP (Foreign Supplier Verification Program) must be implemented and communicated to vendors.

4. Think in food safety mindset.

If your business has just been established, then congratulations! You have the opportunity to start everything right from the beginning. Take food safety into consideration throughout every step in the process and operation. Considering food safety aspects and preventing hazard types might help you make your next good business decision.

5. Get everyone involved!

Food safety is not only the food safety and quality departments’ responsibilities; it reflects the entire company’s operational structure—from building structure, security, production line, and supply chain to procurement, HR and finance. Get everyone involved, from top management to line workers. Their expertise, experiences and feedback will help the entire program’s implementation and execution. With the inputs from each department function, the food safety program will be more practical to the entire business operation and, therefore, will be more solid and sustained, especially when it comes to ongoing implementation.

6. Designate one project leader.

If FSMA program development is considered a project that the whole company engages in, a project leader is required to make the journey efficient and smooth. The leader needs to have both the company operational experience, as well as food safety knowledge. The leader plays an important role in leading the project, coordinating the timeline, prioritizing work across departments, and communicating with all levels of employees.

7. Keep everything documented and recorded.

Documentation and recordkeeping are core to the entire program. Say what you do by writing down all procedures, policies, programs and SOPs. Do what you say by demonstrating what is contained in all records kept onsite. This is not only for audit purposes, but also for your own business growth. Your own operation data is the best data to improve and modify your processes, if needed. Records can be used for trend study and analysis after years in business. Records can reveal whether methods or programs implemented are working effectively and helping the business. Records can also provide strong support/evidence when there is an unexpected event.

8. Utilize free third-party resources.

There are many technologies linking the entire world together—leverage them to learn from your peers. GFSI-recognized certification programs, such as SQF, FSSC22000 and IFS, are releasing a global market program to specifically help small business start their programs. Webinars and trainings are available on many program development and food safety hot topics to help address challenges, and there are many tools and templates available for download to assist with documentation and recordkeeping.

Although there are a lot of perspectives and aspects to be considered to comply with FSMA, compliance can be achieved one step at a time. Start by mapping out your own production process today.

Francine Shaw, Savvy Food Safety, Inc.
Retail Food Safety Forum

How Technology is Elevating Food Safety Practices & Protocols

By Francine L. Shaw
No Comments
Francine Shaw, Savvy Food Safety, Inc.

Technology is elevating food safety practices and protocols, and will help reduce or eliminate food safety incidents and outbreaks in the future. However, a major challenge will be getting food businesses to adopt these tech tools. Food service companies have been slower than other industries to adopt technology, preferring instead to do things “the way they’ve always done them”— often using antiquated pen and paper systems to track food safety standards. Often, food business owners are worried about the cost and implementation of tech solutions, fearing that they’ll be too expensive and/or complex for them to manage.

Something has to change in our industry. Food recalls are on the rise—recently with a huge nationwide romaine lettuce E. coli outbreak and recall. Even a big name packaged breakfast cereal was recently recalled for possible contamination.

America’s food industry has a $55.5 billion safety problem annually, as reported by Fortune magazine (This information was gathered from a 2015 study by Robert Scharff,  an associate professor at Ohio State University, who estimated that foodborne illnesses cost $55.5 billion per year in medical treatment, lost productivity, and illness-related mortality in the United States). This includes foodborne illnesses at restaurants and retailers, food recalls, and other food safety issues.

The CDC reports that 48 million Americans become sick, 128,000 are hospitalized, and 3,000 die from foodborne diseases each year in the United States. Therefore, investing in food safety is one of the smartest things that food service organizations can do. The expense, time and energy necessary to implement—or elevate—your organization’s food safety protocols won’t be overwhelming, and it’s crucial to your business’ success.

Foodborne illnesses are expensive and damaging for businesses. Having a foodborne illness incident or outbreak can cost significant money—including decreased revenues, hefty legal fees, potential lawsuits, diminished sales (and loyalty) from guests afraid to visit the (possibly contaminated) restaurant or store, and a damaged reputation that could permanently shut your doors.

TraceGains Sponsored Content
Are you ready to better leverage your data? With TraceGains, customers accelerate product time to market and boost regulatory compliance performance. Suppliers are significantly aided in their daily activities by working within one common user-interface for many of their customers, completing questionnaires once and leveraging our PostOnce™ technology to automatically share those documents with all necessary customers. It’s your data. Use it. See what TraceGains can do for you!

Food safety should be part of every company’s culture. Everyone—on every shift—should be trained in proper food safety protocols. And, since tech solutions have become more accessible and mainstream, more food businesses should adopt and use them.

The latest technologies are elevating the way many food service businesses operate. Not only do these technological tools make food safer, but they can also save restaurants, convenience stores, hotels and other food service companies a tremendous amount of money each year.

Technological solutions enhance food safety protocols and make it faster, more accurate, and more efficient to conduct inventory, auditing, training and keep food safe. Investing in technology is something that all food businesses should do to help boost the health and safety of their establishments.

Nothing will negatively impact your organization’s brand and reputation more than a foodborne illness outbreak. While human error can never be completely eliminated, advancements in technology help minimize the risks. Some innovative developments include:

  • Sensors. Sensors ensure foods are being held at proper temperatures. For instance, centralized, continuous refrigeration monitoring systems signal when temperatures in coolers or freezers rise above safe holding temperatures, eliminating the need to throw away entire coolers or freezers of food due to improperly working units. As a result, businesses can save thousands of dollars (or more) in lost product and potentially save lives by storing cold foods properly.
  • Digital auditing tools. Innovative digital tools can now be used for food companies’ internal auditing systems, which is a more efficient, cost-effective and accurate solution versus the pen and paper methods that are often (and widely) used in the food service industry. Using pen and paper to audit restaurants, hotels, institutions and stores often results in increased labor, time, errors and expenses. Additionally, hard copy records can be hard to organize and access—and it’s extremely difficult to integrate and analyze the data. Digital tools provide more efficient, cost-effective internal auditing systems, with records that are easy to access and analyze.
  • Mobile solutions. The food service industry is comprised of many employees from younger generations (e.g., millennials and Gen Z), and these populations have grown up on their smartphones. Now, food businesses can leverage digital tools that can be used on cell phones and tablets, which is an easy and effective way to engage younger employees. Many companies are providing downloadable apps that enhance the way food service employees conduct inspections, keep temperature logs, conduct training, manage QA forms, access food code information, and more. Critical food safety information can (literally) be at employees’ fingertips.

These (and other!) tech solutions offer significant benefits to food service businesses, including:

  • Boosting operational systems. Digital tools can help with brand protection and quality assurance concerns by optimizing and improving line checks, shift logs, inspections, auditing and other reporting.
  • Improving the bottom line. Investing in technology boosts companies’ operational efficiencies, which has been proven to improve their bottom line. Technology tools can reduce or prevent food spoilage, reduce labor costs and help avoid foodborne illnesses.
  • Reducing fraud. There’s a widespread “pencil whipping” problem in the food service industry, where employees using paper record systems falsify records or “cheat” on their processes. As much as food service leadership wants to deny that “pencil whipping” happens in their organizations, it’s (unfortunately) a fairly common practice in restaurants, convenience stores and other industry businesses. Pencil whipping can result in increased food safety risks, food code violations and other (potentially costly) issues. Digital tools can help reduce or eliminate “pencil whipping” through real-time data collection, and visual records using photos and videos.

While technology has previously been considered to be a luxury, today, digital tools are affordable, widespread and accessible. Technology that can help minimize labor, reduce (or eliminate) foodborne illness risks, and minimize food waste is not an expense, it’s an important investment.

Technology streamlines operations, improves safety protocols, reduces errors, integrates data—and so much more. The benefits are huge. Often, food service owners tell me that they can’t afford the investment, or that they’re overwhelmed about how to find and implement the right system. I reassure them that it’s truly easier than ever to incorporate tech tools into food companies, and it’s one of the smartest things companies can do. Innovative technology tools are critical to keeping foods, consumers and businesses healthy and safe.

Martin Flusberg, Powerhouse Dynamics
Retail Food Safety Forum

Automating Food Safety Processes in Restaurants: How 1+1 Can Equal 3

By Martin Flusberg
No Comments
Martin Flusberg, Powerhouse Dynamics

With the recent death of Anthony Bourdain, the topic of restaurant food safety is once again on the minds of many people. It has been 19 years since Bourdain’s exposé in The New Yorker (Don’t Eat Before Reading This) and 18 years since his memoir Kitchen Confidential, which became a TV series and has rocketed to the top of the Amazon best seller list since his death. Bourdain identified many issues that restaurants struggle with, including those that affect the safety of the food being served.

While many of the issues chronicled by Bourdain probably continue to this day, there has been a push by the restaurant industry to address food safety over the intervening years, and particularly in the last two or three.

Many restaurant chains have taken steps to automate the HACCP (Hazard Analysis Critical Control Points) food safety reporting process—or at least are exploring that option. The first and most common approach has been to replace time consuming, error prone, manual data collection processes with mobile apps that digitize tasks, may include digital probes to replace manual temperature data recording, and may even track corrective actions. These systems deliver more accurate data than fully manual processes and are faster. They also ensure that the data is easily retrievable, both for management review and for the times that inspectors visit the facility. And, they generally address a broader set of food safety processes than temperature monitoring.

Another approach that has begun to catch on is the installation of fixed temperature sensors—usually but not always wireless—into refrigeration and food warming equipment. These systems will capture and report on temperature at regular intervals—in some cases as frequently as every minute. This eliminates the need to manually check temperatures in monitored equipment as part of HACCP reporting. Moreover, these systems generally offer real-time alerts that can help avoid food safety problems. The more advanced systems track corrective actions and deliver escalating alerts to notify additional team members about issues that have not yet been addressed.

Automated temperature monitoring systems don’t fully take the place of the mobile systems described above since they cannot capture all temperatures and do not address aspects of the food safety process other than temperature monitoring.

Interestingly, the vast majority of restaurant brands that have automated food safety reporting—or are looking to do so—with whom we have spoken have implemented one but not both of these approaches. And yet, the approaches are inherently complementary.

As noted, automated temperature monitoring systems don’t address all aspects of the food safety process, while mobile technology cannot provide real-time warnings about food safety issues so that they can be addressed before they turn into major problems. Moreover, while mobile apps are faster than paper and pencil, they still require staff time. By contrast, automated temperature monitoring systems require no labor for monitored equipment—other than to address problems that are flagged in real-time.

To illustrate the potential of combining these two approaches, consider these results reported to us by one of our customers, a major restaurant chain. This brand started with fixed temperature sensors in refrigeration and other equipment, while continuing to perform manual data collection. They recently added a mobile digital task list app as a test in a group of restaurants. Their findings: What had been a 17-minute HACCP data capture process was now down to two minutes! Not needing to manually capture data now being automatically collected was part of this story, but savings also resulted from the shorter distances the staff now needed to cover to complete the process. Over the course of four checks a day, these savings were significant.

The market for automating food safety tasks and reporting is still in an early stage but appears to be accelerating. The technology is here today and constantly being improved. We would encourage all companies on the retail side of food services to explore technologies that cover the broadest range of capabilities for automating food safety processes.

Craig Reeds

Six Ways to Prepare for a Cybersecurity Audit

By Craig Reeds
No Comments
Craig Reeds

In the food manufacturing industry, just as in any other industry, cybersecurity is very important. Your organization should be having cyber vulnerability assessments or penetration tests performed at least once a year. Like any big test you have taken in your life, this sort of assessment can be scary, but if you prepare for it, you can greatly improve the potential of passing the test. As you prepare for the assessment, there are six things you can either implement or do to make the result of this audit better for your organization.

  1. Do an inventory of what is connected to your network. You cannot expect to defend devices on your network that you are not aware of. Be sure when you perform this inventory that you include any device that connects to your network. Think past the routers, switches, desktop PCs, laptops and printers. What is connecting to your wireless network? Is your security system or HVAC system connected to the network? Creating a network device inventory can be difficult, but there are tools available to make it easier. Once you have created the initial inventory, your baseline, go back at least monthly to look for new devices or devices that are no longer connected so you can update your inventory.
  2. Determine what is running on all of your network devices. In the first step you inventoried the hardware—now we need to inventory what is running on each device. You can use tools such as Nessus to inventory the software on each computer as it scans the network to perform the device inventory. This is the quickest way to complete both of these steps. If there is old or unused software on a device, remove it. You need to document the operating system and application software on each device. This software Inventory should also be included in your baseline and verified/updated on at least a monthly basis.
  3. Use the Principle of Least Privilege. This is a very valuable cybersecurity concept. Never give a user or device more rights on the network than they/it need to perform their assigned tasks. Privileges are assigned based on roles or job functions. If a user is unable to download and install applications on their PC or laptop, you reduce the chance of a device becoming compromised. Many hackers, once in a network, move laterally through the network from machine to machine looking for information or vulnerabilities that can be used to give themselves more abilities on the network. If a hacker were to gain access to a user account or system with low privileges, it decreases the amount of damage they could do.
  4. Use Secure Configurations. All operating systems, web browsers and many other networked devices have secure configuration settings. One of the problems with doing this is that operating systems alone can have hundreds of settings to choose from. The Center for Internet Security provides benchmarks for just about every conceivable device. The CIS Benchmarks are distributed free of charge in PDF format to propagate their worldwide use and adoption as user-originated, de facto standards. CIS Benchmarks are the only consensus-based, best-practice security configuration guides both developed and accepted by government, business, industry, and academia.
  5. Set up a policy and procedure for applying security patches. New vulnerabilities are discovered every day and when these vulnerabilities are found, vendors release updates or patches to mitigate the vulnerability. Exploiting vulnerabilities is what a hacker lives for. An unpatched vulnerability can be almost an open door for a hacker to get into your computer or network. It is mind boggling to hear that some organization was hit with ransomware because they didn’t load a security patch that was released six to 12 months ago. When an application reaches end-of-support, the vendor stops releasing patches, and that should tell you that it is time to upgrade the software to the newest version or find another tool to perform that task. Never use unsupported software on your network. Speaking as an auditor, a fully patched network is impressive.
  6. Create an Incident Response Plan. Let’s face it, no matter what you do to protect yourself, something is eventually going to go wrong. Do you have a plan to continue operations if you lose access to your office building? Do your users know what to do if they receive or fall prey to a phishing e-mail? This process starts with performing a risk assessment. Once you have determined the potential risks, you then move on to determining how to mitigate the risks. You will need to create policies and procedures and then train the employees on them, so they know what to do.

By performing these six steps you will be protecting and strengthening your networks, your users, and trust me, you will impress the auditor. Also, it should be noted that these are not once and done steps—these are steps that must be repeated sometimes on a daily, if not at least on a monthly, basis.

Deirdre Schlunegger, Stop Foodborne Illness
Food Safety Culture Club

The C-Suite: Showing up for Food Safety

By Deirdre Schlunegger
No Comments
Deirdre Schlunegger, Stop Foodborne Illness

It’s plain and simple: Having safe food, strong food safety programs, and ample resources allocated to them, are only possible (and sustainable) when company leadership make customers and consumers a priority.

Hence, a company’s food safety leadership, their departments and support will have experienced and knowledgeable staff, and access to new technology, best practices and collaboration opportunities. A long-view perspective means a better chance of meeting the bottom line—money saved, illness and possible lawsuits avoided, all while ensuring food integrity.

When you witness a company’s food safety leaders at important conferences, you can see their commitment to make food safety their top priority. But, when a CEO shows up to speak, listen and learn along with their food safety leadership, it is confirmation that they understand and care, or are there to learn. At national and international meetings, when they’re side by side with their senior staff, one can be confident that a strong food safety culture is a priority in their company.

Recalls and outbreaks will still happen,, but it’s been my perspective that food safety representatives who are absent at the food safety table may lack a commitment to a sustainable company-wide food safety culture and are subject to reoccurring and frequent recalls.

I applaud those C-Suite executives who show up, and are committed to hard work, research and collaboration, and sharing insight into their best practices! The list of great examples, of these kinds of companies and leaders, is growing.

Please join me in recognizing their ever-growing contribution to not only the safety of food, but consumers.

Janice Buchanon, Steritech
FST Soapbox

Is Food Safety Part of Your Crisis Management Plan?

By Janice Buchanon
1 Comment
Janice Buchanon, Steritech

Unless you’ve been living under a rock, it’s been hard to miss the food safety-related headlines of the past month: E. coli in romaine lettuce, Salmonella-tainted eggs, norovirus-infected oysters sickening hundreds, and hepatitis A crises across several states, to name just a few. Since 1993 when an E. coli outbreak linked to ground beef at a fast food chain resulted in the deaths of several children, food safety has been on the radar of most major foodservice groups. Yet, surprisingly, food safety often doesn’t have its own crisis management plan within organizations.

At the 2018 Food Safety Consortium, don’t miss the Plenary Panel Discussion: Crisis Management: Don’t let that crisis sink your business!A Single Food Safety Crisis Can Ripple Across Your Operation

A food safety crisis can have tremendous impacts on an organization, leading to lost sales, negative media and social media publicity, unsavory online reviews, temporary restaurant closure, lost wages for your staff, increased scrutiny on other locations, lawsuits and more.

In a 2016 survey of more than 500 consumers, it was revealed that food safety incidents stick with consumers—and that can impact your reputation and your bottom line for much longer than you may realize.

  • Of the respondents, 62.5% said they were aware of a food safety incident at a restaurant in the last six months.
  • A foodborne illness outbreak isolated to a single location of a chain restaurant would prevent many of the survey respondents from dining at other locations in the chain; 34.1% of respondents said that if they knew about an outbreak at a single location, they’d avoid eating at other restaurants in the chain for more than six months. Worse, 17% said they’d never eat at the chain again.
  • If a foodborne illness outbreak is linked to multiple locations of a restaurant, consumers get even tougher. A whopping 37.5% would avoid eating at the entire chain for more than six months. There’s more disturbing news: 31.7% of the respondents said they’d never eat at that chain again.

Food safety incidents don’t have to be large scale to be significant and get into the consumer eye. They happen every day, in small scale, for many foodservice operations. Think about how the following incidents could impact food safety in your organization:

  • A power outage knocks out refrigeration for a single location for 12 hours
  • A boil water advisory is issued for a large city
  • A fire extinguisher is discharged in a kitchen to put out a small fire
  • A hurricane brings widespread flooding to a metropolitan area
  • A child whose parent asks about peanut allergies is served a food containing peanuts
  • A child becomes ill in a restaurant and vomits
  • A kitchen employee is diagnosed with hepatitis A and continues to work without disclosing the illness
  • A location is closed by the health department for a pest infestation
  • Several locations were supplied with a food item involved in a major recall for contamination

Each of these incidents is related to food safety. Would your employees, from the top down, know what actions to take in each specific situation? Most senior or executive-level C-suite personnel might know what to do, but that type of training often never makes it down to the operator level. When an incident does happen, it leaves location level management and employees scrambling to figure out what to do; often, the steps they take are incorrect, and can even exacerbate the situation.

What’s Trending in Food Safety Incidents
Over the last 24 months, we’ve helped many major brands in resolving crisis situations. The top five types of crisis incidents we’ve assisted with include:
– Potential Hepatitis A exposure
– Potential Norovirus outbreaks/exposure
– Health department closure
– Power outages
– Boil water advisory

Just as organizations prepare for other crises—fire drills, food shortages, staffing problems, active shooters—having crisis plans for food safety incidents can help an organization’s players know what to do when a food safety incident occurs. This goes beyond risk mitigation to actually knowing what steps to take when specific types of crisis happen. Proper planning for crisis management includes:

  • Identifying the most likely crisis situations and developing a plan of action for each of them.
  • Identifying who all the key players are going to be in the management of the crises, from C-suite to public relations to individual location responsibilities, and communicating that to all team members
  • Outlining all the steps to be taken in a crisis
  • Building familiarity with a defined plan for operators of an individual location
  • Presenting an opportunity to practice the plan before a crisis occurs (training)
  • Crisis management doesn’t end with the crisis; following any crisis, key stakeholders should review the crisis management plan for that incident to determine if updates or changes are needed

What to Look for in a Crisis Management Partner

Crisis management isn’t something to go alone if you don’t have internal expertise on your team. Crisis management goes beyond public relations—it should include training and step-by-step processes for each specific type of crisis. So what should you look for in a food safety crisis management partner?

  • A partner who has food safety knowledge and practical experience in dealing with crisis
  • A partner who has familiarity with the different types of crises you outline as critical for your organization
  • A partner who engages team members and can help you conduct training from the top down

Why Now?

Crisis management should be part of every organization’s plan already, but if it’s not, there are some key reasons to act now. A number of current events are having a substantial impact on the foodservice community, increasing the need for food safety crisis management plans.

  • Hepatitis A outbreaks. States including California, Michigan, Kentucky and Indiana have had a significant increase in the number of hepatitis A cases reported. While this problem doesn’t start in the foodservice community, it does impact it—because as communities see higher cases, the chances of a food handler coming into contact with an ill person and contracting hepatitis A increase. Hepatitis A can be easily spread through food, so it’s critical that foodservice operations have a crisis management plan to deal with exposure incidents.
  • Norovirus. Norovirus-related outbreaks and foodservice operation closures—and the media exposure that goes along with them—have been on the rise for the last several years. Norovirus can create problems for operations in a number of ways, from employees working while sick, to customers getting sick in the establishment, to foods being contaminated with norovirus. Knowing how to respond to norovirus incidents is critically important, as norovirus outbreaks can lead to location closures, costly disinfection costs, unwanted publicity, lawsuits, and more.
  • Increasing turnover. With unemployment rates at record lows, foodservice operations are facing an employment crisis, unable to hire enough workers. This can increase the opportunity for food safety incidents as routine tasks and processes may be “short cut” during an employment shortage.
  • Delivery. The skyrocketing demand for delivery has led chains to quickly put together delivery plans. Crisis management should be addressed as part of any delivery plan, as there are any number of variables which could lead to potential incidents in delivery.

Don’t wait until a food safety incident occurs to figure out your crisis management plan. Start work today to ensure that when a food safety crisis occurs, your team and your brand can weather the storm.

Ibidun Layi-Ojo, Prometric
FST Soapbox

A Best-Practices Approach to Properly Assessing Food Safety Workers

By Ibidun Layi-Ojo
No Comments
Ibidun Layi-Ojo, Prometric

Success Factor 3: Create exams that properly assess the workforce.

Food safety exams give employers the peace of mind that the employees they hire can do the job they were trained to do and help prevent food safety incidents from happening. Equipped with the right training and assessment developed by responsible and qualified companies, employees in the field―ranging from food handlers to food managers―are the first line of defense to uphold the highest of food safety and security standards.

My previous two columns in Food Safety Tech explained important factors that employers need to consider when developing a food safety assessment program. Working with a quality-driven food safety assessment provider to develop the exam is a critical first step. Equally important is the practice of using exams with rigorous, reliable and relatable questions that are developed, tested and continuously evaluated to correlate with market needs and trends.

This article focuses on another key factor that should not be overlooked. In order to properly assess the workforce, exams must reflect best practices for test taking and learning, and be in sync with how the workforce operates and processes information. It is not enough for food safety assessment providers to merely develop questions and exams. A comprehensive exam creation process that takes into consideration technical and human factors allows for a fair assessment of workers’ knowledge and skills, while also providing feedback on exam performance that can be used to adapt exams in an ever-changing industry.

What should employers look for to help ensure that exams can properly assess the food safety workforce?

First, food safety exams should test what a food safety worker needs to know, and quality-driven assessment providers should solicit input from the industry during the exam creation process. Test developers should use surveys, conduct interviews and facilitate panel-based meetings to gather information. They also should invest in close collaboration with industry-leading subject matter experts (SMEs), as well as food handlers, managers and regulators in order to create questions and exams that are relevant. By engaging SMEs during the question writing and exam creation process, qualified food safety assessment providers can pinpoint the important information to be developed into questions and implemented in the exams.

In addition to incorporating industry stakeholder input, it is important for assessment providers to have a comprehensive understanding of the various assessment modalities —from selected response item types, such as multiple choice assessments, to performance-based, interactive scenarios that mirror real-life situations—and select the appropriate modality to maintain test fidelity.

Food safety assessment, training
Image courtesy of Prometric

An assessment provider with this level of proficiency can leverage the combination of its expertise and industry awareness to determine the best modality for the food safety workforce. For example, progressive assessment providers are actively investing in interactive, animated, scenario-based assesments because they believe this type of testing might better assess the skills and knowledge required to successfully perform in the workplace while providing:

  • High candidate engagement levels—with real-life scenarios being more relatable.
  • A safe environment for candidates to practice and understand the consequences of their actions.

Another critical component in creating effective exams is for the assessment provider to continuously review the content and incorporate quantitative and qualitative feedback from data and test takers respectively. By reviewing feedback regularly, asssessment providers can enhance the exams and adjust accordingly—keeping the exam relevant to the workforce and the industry. As the workforce and the industry change, so should food safety exam and certification programs. A feedback loop is essential to help ensure that the exam stays relevant to those who work in the food service industry as they seek to prove that they have mastered the necessary principles and skills to protect the public against food incidents. If a food safety exam does not properly assess the workforce, the consequences can be significant, not only to public health and safety, but also to the companies preparing, handling and serving food that could experience loss of reputation, revenue and the business.

Quality-driven food safety assessment providers follow a best-practices approach for creating exams and certificate/certification programs. They demonstrate a thorough understanding of behavioral learning, the necesary job skills and regulatory compliance requirements. A food safety exam that properly assesses the workforce will:

  • Solicit industry input.
  • Incorporate interactive scenarios that mirror real-life situations.
  • Create a feedback loop and adaptable exams that can easily be modified to stay abreast with the ever-changing industry.

While food handlers may be one of the biggest vulnerabilities in a safe food supply and delivery chain, they also represent one of the greatest opportunities to guard against food safety issues. Developing an effective food safety assessment program as part of a preventative strategy will help ensure both public health and corporate long-term business success.

Rajan Gupta, Enexas
FST Soapbox

My IT Department Doesn’t Understand Me or My Business

By Rajan Gupta
No Comments
Rajan Gupta, Enexas

Despite much progress in technology, information technology departments (IT) continue to lack credibility with business leaders and despite spending significant costs, many “IT” projects continue to “fail” in the eyes of the very users that IT tries to support. In this article, I will share the common challenges that contribute towards perceived and actual misalignment between IT and business.

We know that technology is at the core of every business process and is the primary driver of competitive advantage. However, studies suggest that most business leaders do not feel comfortable with the direction for their IT and digital transformation. As business leaders focus more on IT costs and not how IT can transform the business, IT is pushed more towards daily operations versus long-term strategy. Dave Aron of Gartner Research, says that “Buying a piece of technology does nothing by itself. It’s how you use the technology that matters the most. But we must make sure that what we buy satisfies the business needs.”

During my many interactions with business and IT leaders, I normally ask questions like:

  1. Explain the core business of the organization?
  2. Have IT resources spent anytime working in the day of life of an average business user doing daily tasks as if they were in that role?
  3. Do business and IT teams communicate in the same language (i.e., Does IT communicate in a manner that a business user will understand technology), or does IT use technical jargon that goes over the heads of most people?
  4. Are you comfortable that your IT and business strategies are aligned?
  5. Do IT leaders actively participate in senior leadership meetings and define business strategy?

Not surprisingly, the answers to these questions are on opposite ends of the spectrum between the business and IT leaders. In spending more than two decades of providing technical solutions to business problems, I have found that such divide is only expanding as technology becomes increasingly complex each day. A global economy puts increasing pressure on business to stay competitive and drive growth at a rapid pace, especially as it relates to food safety, regulatory and quality. Food is now globally sourced and the processes require innovative technical solutions in assisting food safety and regulatory compliance of foreign suppliers. Many IT organizations do not have a deep understanding of the business of food safety, leaving a gaping hole in deploying solutions that keep our food chain supply safe.

Defining a Bridge

So how do we effectively tackle this divide between IT and business leaders? I often call myself the “bridge” between business and IT. For those that understand technology, it is your role to ensure that what we do with technology satisfies the business need! Ultimately, it is the business that will succeed with our support, because technology by itself is not successful. But wait, not every IT staff member can be expected to understand the business and technology. What I often observe is that most IT organizations lack a leader who has the business, technical, interpersonal, innovative and customer-centric skills. Such people are certainly not growing on trees. Business and IT leaders must establish a group of resources that act as the “bridge” for their organization. By identifying these resources, you can focus on providing them with the appropriate skills and training to work jointly with business and IT to deliver solutions that drive the overall business strategy. Finally, I must point out that this group is normally led by the chief information officer (CIO), who is more importantly a business leader with technical acumen and not a hardcore technologist.

CIO as a Business Leader First

The role of a CIO is perhaps the most complex of all C-Level executives. CIO is expected to manage daily IT operations, contain costs, increase efficiencies, provide valuable insights through factual data, partake actively in business strategy, align the IT strategy with the business, and innovate at the speed of business. Not to mention, do all this while increasing overall customer experience. CIOs must tighten the connection of their IT teams to the business!

IT Drives Project Prioritization Aligned to Business Strategy

How can CIOs, IT, and business leaders close this fundamental gap between their IT and business organizations? Let’s first start with prioritization. How often do you find yourself saying that I must have something completed by IT yesterday? If you are like most people, you would probably challenge yourself in whether you demand IT to be reactionary to your needs. Most IT organizations fail to understand the true impact of user requests to the business. Usually, project prioritization comes down to cost, who will pay for it, and what may be defined as the “cool” factor.

IT has the broadest view of all technology projects across the organization and must lead in communicating with all business leaders. A CIO needs to effectively communicate the impact of various projects on each of the business divisions, the impact of the project, the cost/ROI, and help define the prioritization for business projects. IT must play the role of a negotiator and help business leaders in making decisions that provide the greatest impact. Martha Heller in the CIO Paradox says that there are “no IT projects, only business projects!”

As mentioned earlier, IT departments usually lack understanding of the food safety and quality processes. CIOs need to conscientiously understand the business of food safety, as it is not only important to keep our food chain safe but also to protect the organizational brand and ensure that food safety and regulatory groups are able to monitor, assess, and proactively ensure that no harm is introduced to the public through their products. Many organizations rely on recall processes to help contain food safety issues, but that is a reactive approach, which in many cases, tarnishes the brand image and costs the organization more than what was ever expected.

Keeping It Simple

How often do we see technology being deployed because the previous tools were too old or have simply lost their luster? With a constant bombardment of new gadgets and apps, we increasingly find ourselves overwhelmed with the variety of options available for almost any task. But that does not mean that the most advertised, or the one with highest reviews is going to fit your specific business needs. Cookie-cutter approaches do not work in all business environments. IT must assess the business need, challenge the business users on their processes, propose and analyze options, and then actively work with business and software vendors to find the right fit. Sometimes, that means not changing anything at all.

I often see businesses put together selection committees comprised of business and IT teammates. The business leaders each focus on their own silos, and IT focuses on such things as security, infrastructure, demand on their time and support. But no one in the group is looking at the impact across the organization. An IT strategy aligned with business will ensure that IT leadership is able to guide each business user towards the pros/cons of any project impacting their specific business area. IT must be in front of the business and lead business users through all technology choices. CIOs and their IT teams need to learn to convey the messages through examples and language that a business user understands. Help businesses find software vendors that are at the forefront of innovation and have not fallen in the trap of legacy enterprise software companies that are resistant to change.

Another common mistake by IT is asking the business users what they want. IT needs to take the ownership of understanding the business and then innovate in a manner that makes that task/process easy, efficient, accurate, sexy and simple! Be truly disruptive by providing a product that your business users automatically gravitate to that solution. It is the role of the IT departments to understand the business. I am convinced that certain business jargon, like FSMA, FSVP, social responsibility, and sustainability are terms not well understood by most IT organizations. Many food compliance staff members are buried in mountains of paper, PDF and email documentation, leading to selective review and processing of information. Such an approach of sampling only a part of relevant information is a major risk to our food supply chain. In recent years, tools have emerged that allow food safety and regulatory staff to electronically monitor the relevant information and focus their attention on information that really matters. By streamlining the processes through creativity and technology, we can empower the food safety staff to be vigilant and ensuring that only safe, reliable, and high-quality food enters our food chain.

Getting Business to be Comfortable with IT

In an organization, it is easy to find executives and managers who have worked across several departments. A customer service representative may transition to sales, or a vice president of sales becomes a CEO of the company. But not many people crosspollinate with IT. Most people outside of IT do not understand technology at a level to contribute effectively on a technical team. So, you may be saying why can’t the business understand technology? Well that’s because technology is in a supporting role for the business. It’s like a supporting actor helps the lead actor succeed at their role in a movie. It is the job of the IT group to support the business and get them to be comfortable with you. In every project, ensure that there is a business leader who owns the project. Remember that it is a business project, and not an IT project.

The CIO Magazine and other such periodicals are frequently publishing articles on speaking the language of the business. This suggests that IT still does not understand how to communicate with the business. Simplify your communication by removing technical jargon from your communications. Actively participate in business meetings to understand the needs of the business user. Be curious and be a trusted advisor for the business. Remember that you are the bridge and you do not need to explain the underlying infrastructure to you your business peers; you just need to help them do their job effectively, and efficiently. Discuss with them how you can help them win!

IT is about serving the business, being adaptable, innovative, and having its success be defined as only being the success of its business partners. Martha Heller in CIO Paradox states that “[IT] needs to have egos that are big enough to initiate transformative projects but small enough to let someone else take credit.”