Construction and Practice of Quality Management Systems in the Food Industry —— In-depth Analysis Based on ISO 22000 and HACCP

The food industry is one of the most sensitive sectors in the global supply chain. Quality and safety management in this sector not only concern consumer health but also directly impact the brand reputation and market competitiveness of enterprises. Unlike the automotive and electronics manufacturing industries, food quality management faces unique challenges such as complex raw material sources, diverse processing stages, long distribution chains, and variable microbial and chemical risks. Therefore, establishing a systematic, preventive, and traceable food safety management system is the foundation for the survival and development of food enterprises. This article will systematically analyze the construction path, key control methods, and practical implementation points of quality management systems in the food industry from the perspective of international standards.

1. Framework of the ISO 22000 Food Safety Management System

The core standard for food safety management systems is ISO 22000, which integrates the principles of HACCP (Hazard Analysis and Critical Control Points) with the requirements of the ISO 9001 quality management system, forming a comprehensive control system from farm to table. The ISO 22000:2018 edition adopts the same high-level structure (HLS) as ISO 9001:2015, enabling food enterprises to seamlessly integrate their food safety management systems with quality management systems, reducing management redundancy, and enhancing operational efficiency.

The core advantage of the high-level structure is that when an enterprise operates multiple management systems (such as ISO 9001, ISO 14001, ISO 45001), it can achieve integrated management in common clauses such as organizational environment, leadership, planning, support, operation, performance evaluation, and improvement. For food enterprises, this means they no longer need to maintain multiple independent process documents and record systems; a single management manual can meet the requirements of multiple standards.

In practical applications, many food enterprises also combine certification schemes recognized by GFSI (Global Food Safety Initiative) such as FSSC 22000, BRCGS, and IFS to meet the entry requirements of different markets and customers. FSSC 22000 is based on ISO 22000 and adds detailed requirements for PRPs (Prerequisite Programs), making it a widely recognized certification standard by international retailers and brand owners. The BRCGS standard, originating from the UK, is now adopted by food enterprises in over 130 countries worldwide. Its audit frequency and scoring system impose higher requirements for continuous improvement. The IFS standard primarily dominates the European market, emphasizing product quality and compliance. When selecting a certification scheme, enterprises should consider the target market, customer requirements, and existing management levels comprehensively, avoiding the盲目 pursuit of multiple certifications that can lead to resource dispersion.

2. Practical Application of HACCP Methodology and the Seven Principles

The HACCP system is the core methodology for food safety management, starting with a systematic hazard analysis of the entire process from raw material receipt to consumer consumption. Since its development in the 1960s by the U.S. Pillsbury Company, the U.S. Army, and NASA, HACCP has evolved from an initial tool for space food safety to a globally recognized risk management standard in the food industry, listed by the World Health Organization and the United Nations Food and Agriculture Organization as a benchmark requirement for international food trade.

Specifically, HACCP includes seven principles: conducting a hazard analysis, identifying critical control points (CCPs), establishing critical limits, developing CCP monitoring procedures, establishing corrective actions, developing validation procedures, and establishing record-keeping systems. In the implementation process, food enterprises need to first form a cross-functional HACCP team, covering core functions such as production, quality control, R&D, equipment maintenance, and warehousing logistics, to ensure the comprehensiveness and professionalism of the hazard analysis. The team leader should have professional knowledge and experience in food safety management and typically needs to have undergone formal HACCP training and obtained the corresponding qualifications.

Hazard analysis is the most critical step in the HACCP system, and its quality directly affects the effectiveness of all subsequent control measures. Hazard analysis must cover three types of hazards: biological hazards (such as Salmonella, Listeria, E. coli O157:H7, Staphylococcus aureus, and toxin-producing molds like Aspergillus flavus), chemical hazards (such as pesticide residues, veterinary drug residues, heavy metals, nitrites, acrylamide, and allergens), and physical hazards (such as metal fragments, glass shards, stones, plastic pieces, and bone fragments). Each hazard must be assessed for its likelihood and severity, and based on this, it is determined whether control measures need to be implemented at that stage.

To systematically conduct hazard analysis, the HACCP team often uses decision tree tools. The first question in the decision tree is: Does this step have a hazard? If so, the second question is: Is it necessary to control this hazard at this step? The third question is: Can the hazard be eliminated or reduced to an acceptable level through subsequent steps? The fourth question is: If not controlled at this step, will the product definitely be unsafe? By answering these four questions, it can scientifically determine which control points are CCPs and which are general control points that can be managed through PRPs.

In setting CCPs, common CCPs include raw material acceptance (such as allergen control and pesticide residue testing), thermal processing (sterilization, pasteurization, and pasteurization), metal detection, X-ray foreign object detection, refrigeration temperature control, and packaging integrity testing. Each CCP must have clear critical limits. For example, a common critical limit for canned food sterilization is a temperature of no less than 121°C and a holding time of no less than 15 minutes; for liquid milk pasteurization, the requirement is typically 72°C for 15 seconds; for meat products, the core temperature requirement is usually 70°C for 2 minutes. These critical limits must be scientifically supported, such as by referencing literature data, regulatory standards, or challenge test results.

The design of monitoring plans needs to balance risk control and operational feasibility. For high-risk CCPs, continuous monitoring should be implemented, such as automatic recording of sterilization temperatures and real-time monitoring of refrigeration system temperatures. For low-risk points, periodic sampling can be used, such as testing the sensitivity of metal detectors once per hour. Monitoring records must include actual measurement values and the signature of the responsible person to ensure traceability. When a continuous monitoring system triggers an alarm, operators should immediately respond and document the handling process, rather than just reviewing historical data at shift change.

Pre-planning of corrective actions is a critical but often overlooked aspect of the HACCP system. When monitoring shows that a CCP has deviated from the critical limit, immediate corrective actions must be taken: the first step is to isolate all affected products produced during the deviation period; the second step is for the HACCP team or senior quality engineers to assess the product safety risk and decide whether the product can be released, requires rework, or must be scrapped based on the degree of deviation; the third step is to identify the root cause of the deviation, determining whether it was due to equipment failure, operational error, or raw material anomaly; the fourth step is to implement corrective actions to prevent recurrence, such as repairing equipment, retraining operators, or changing suppliers. Corrective action records must be detailed and complete, including a description of the deviation, the time of occurrence, the cause analysis, the method of product disposal and quantity, the validation conclusion, and the approval signature. These records are not only key verification objects during system audits but also valuable resources for enterprises to accumulate experience data and optimize control limits.

The core purpose of the validation program is to confirm the effectiveness of the HACCP system. Validation activities include: regular calibration of CCP monitoring equipment (such as monthly calibration of temperature sensors and daily sensitivity verification of metal detectors), microbial and physicochemical indicator testing of finished and semi-finished products, environmental monitoring plans (such as swab testing for surface hygiene), internal audits and management reviews, and record reviews. Typically, the validation frequency is higher than the requirements for external audits, such as conducting a comprehensive HACCP system effectiveness assessment every six months.

3. Food Fraud and Food Defense

Quality management in the food industry also faces a unique challenge—preventing food fraud and adulteration. Traditional HACCP systems primarily focus on unintentionally introduced hazards, but food fraud involves intentional actions, including substituting inferior products, false labeling, ingredient replacement, origin falsification, and tampering with shelf life. These actions not only harm consumer rights but can also lead to serious food safety incidents. To address food fraud, VACCP (Vulnerability Assessment and Critical Control Points) is used to identify risk points in the raw material supply chain.

The implementation method of VACCP is similar to the company's FMEA, first identifying all fraud risk factors for raw materials and auxiliary materials (such as price deviations from market averages, availability of substitutes, supply chain complexity, and historical fraud records), then assessing the fraud likelihood and impact of each material, and finally developing specific control measures for high-risk materials, such as increasing the frequency of third-party testing, conducting surprise audits, and establishing a full-batch sample retention system.

Similarly, food defense (preventing intentional contamination or terrorist attacks) is managed through TACCP (Threat Assessment and Critical Control Points). TACCP focuses on intentional human actions, including internal personnel poisoning, competitor sabotage, and terrorist attacks. The ISO 22000:2018 edition has included food defense in its requirements, and enterprises should simultaneously establish food fraud vulnerability assessments and food defense plans when building their systems. In specific implementation, the 5W1H framework can be used: Who could carry out an attack, Where could it happen, How could it be carried out, What means could be used, Why would it happen, and How to prevent it.

4. Full Chain Control from Raw Materials to Finished Products

From the perspective of supplier management, raw material quality control in food enterprises is far more complex than in manufacturing. Raw materials are diverse, sourced from various locations, and often seasonal, with most agricultural products lacking unified standards. An effective raw material quality management strategy should include: establishing a list of qualified suppliers and implementing tiered management, conducting on-site audits or third-party inspections for high-risk raw materials (such as dairy, meat, and seafood), requesting certificates and reports for each batch of raw materials (inspection reports, origin certificates, and certificates of conformity), and retaining samples for verification. For imported raw materials, it is essential to verify the registration information of overseas producers and inspection and quarantine certificates.

Supplier audits should be conducted in layers: new suppliers must complete written and on-site audits before introduction, covering aspects such as food safety management system certification, GMP implementation, traceability capabilities, and past quality performance; for existing suppliers, the frequency of re-audits should be determined based on risk levels, with high-risk raw material suppliers being audited at least once a year, medium-risk suppliers every two years, and low-risk suppliers acceptable for document reviews. Non-conformities identified during audits should be tracked for corrective actions, forming a closed loop.

Building a traceability system is another core capability in food industry quality management. An efficient traceability system should be able to complete bidirectional tracing from raw material batch numbers to finished product shipments and from finished product batch numbers to raw material sources within 4 hours. In implementation, enterprises need to establish a unified batch coding rule, typically including production date, production line number, shift number, and raw material batch information, ensuring that each packaging unit can be uniquely identified. Batch information should be recorded comprehensively at each stage of procurement, production, storage, and shipment, and collected automatically through barcodes or RFID to avoid errors and delays in manual recording. Regular traceability drills (recommended quarterly) are necessary to verify system effectiveness, recording the total time from product issue discovery to tracing completion, as well as the completeness and accuracy of tracing information. Issues identified should be included in the corrective and preventive action management system, continuously optimizing the tracing process.

5. GMP, SSOP, and Process Hygiene Control

In process control, hygiene management in food production is of utmost importance. GMP (Good Manufacturing Practices) and SSOP (Sanitation Standard Operating Procedures) form the basic hygiene assurance for food production. GMP covers hard requirements such as plant facilities and layout, equipment materials and installation, personnel hygiene standards, pest control, and wastewater and waste management. The layout of the plant must follow the principle of unidirectional flow from raw materials to finished products, avoiding cross-contamination—clean operation areas and non-clean operation areas should be separated by buffer zones, and air flow should move from high-clean areas to low-clean areas.

SSOPs detail cleaning and disinfection procedures, cross-contamination prevention measures, employee health management systems, and chemical management procedures. Typical SSOP documents include: CIP (Clean-In-Place) cleaning procedures for production equipment, standards for preparing and replacing disinfectant solutions for contact surfaces, handwashing and disinfection procedures for employees entering production areas, cleaning and disinfection norms for tools and equipment, and validation procedures for allergen switching. Enterprises should document and visualize SSOPs, setting operation instruction signs at key positions, and establishing daily hygiene checklists to be executed by frontline team leaders, with secondary verification by the quality control department.

Pest control is one of the challenges in food factory hygiene management. Effective pest control should adopt an IPM (Integrated Pest Management) strategy, combining physical barriers (such as screens, door curtains, and air curtains), trapping devices (such as sticky traps, UV fly traps, and bait stations), and environmental management (such as eliminating standing water, clearing weeds, and sealing holes). All pest monitoring devices should be numbered and have a layout map, with regular checks and records of captures. When the capture volume exceeds the set threshold, a root cause analysis and enhanced control measures should be immediately initiated.

6. Laboratory Management and Testing Capabilities

Laboratory management holds a special position in food enterprises. Unlike dimensional testing in manufacturing, food laboratories primarily conduct microbial testing (total bacterial count, coliforms, Salmonella, Staphylococcus aureus, etc.), physicochemical analysis (moisture, protein, fat, salt, acid value, peroxide value, etc.), and sensory evaluation. The laboratory should have an independent testing area, equipped with basic facilities such as ultra-clean workbenches, incubators, sterilizers, drying ovens, and precision balances, and establish testing plans based on product characteristics and regulatory requirements, clearly defining testing items, testing frequency, testing methods, and judgment criteria.

For small and medium-sized enterprises (SMEs) without testing capabilities, they should choose third-party testing institutions with CMA or CNAS qualifications for commissioned testing and maintain complete archiving of testing reports. Sample management is the foundation of reliable testing results, and enterprises should establish a comprehensive standard from sampling to sample retention, including sampling locations, sampling quantities, sample identification, transportation conditions, storage conditions, and retention periods. Finished product samples should be retained for at least one month after the product's shelf life ends.

7. Training Systems and Food Safety Culture

Personnel training and cultural shaping are key to the implementation of food quality systems. The hygiene awareness of frontline operators directly determines the safety level of products. Effective training should not be limited to annual classroom training but should establish a job competency matrix, developing differentiated training plans for different positions. Sterilization workers need to understand temperature control principles and abnormal handling procedures, ingredient handlers need to know allergen management and weighing precision requirements, and packaging workers need to be familiar with metal detector operations and packaging integrity inspection standards.

Training for each position should include four stages: theoretical training (explaining standard operating procedures), practical guidance (one-on-one mentoring by experienced employees), independent operation assessment (joint evaluation by quality control and supervisors), and regular retraining (at least once a year, with immediate updates for knowledge updates or quality incidents). Those who fail the assessment should not be allowed to work independently.

Establishing a food safety culture evaluation mechanism, quantifying cultural maturity through employee questionnaires, behavior observations, and audit findings, is crucial. Food safety culture typically progresses through five stages: passive compliance, active cooperation, committed investment, intrinsic motivation, and continuous excellence. Enterprises can develop a cultural improvement roadmap based on these stages, promoting a shift from compliance for audits to commitment for safety. The demonstration role of management is the core driving force for food safety culture construction. When senior managers personally focus on hygiene details during inspections and prioritize food safety discussions in meetings, the safety awareness of all employees will truly improve.

8. Digital Empowerment of Food Quality Management

Digital tools are transforming the quality management model in the food industry. Transitioning from traditional paper records to electronic quality management systems (EQMS), enterprises can achieve real-time data collection for inspections, automatic alerts for CCP monitoring, second-level query for traceability information, and online tracking of audit corrections. IoT (Internet of Things) technology enables the entire process of temperature monitoring in cold chain transportation to be visualized and trigger abnormal alarms, with temperature control data automatically uploaded to the cloud. When temperatures exceed the set range, the system can automatically send SMS or app notifications to relevant personnel.

Blockchain technology provides tamper-proof data evidence for supply chain traceability, particularly suitable for credible traceability scenarios of premium foods. Of course, digital transformation should be matched with the scale and management maturity of the enterprise. Large food enterprises can invest in building a complete MES (Manufacturing Execution System) to achieve full digital control of the production process; small and medium-sized food enterprises can start with digital record-keeping at key stages, such as digitizing CCP monitoring records (replacing paper temperature logs) and electronic management of inspection reports, gradually moving towards comprehensive quality digitalization.

9. Competency Requirements for Quality Professionals in the Food Industry

Excellent quality managers in the food industry need to possess a wide range of comprehensive skills. First, they should have a deep understanding of standards such as ISO 22000, HACCP, and FSSC 22000, mastering core methods such as hazard analysis, risk assessment, and root cause analysis. Second, they need to be familiar with food processing technologies and understand the key control points in the process from raw materials to finished products. Third, they should remain sensitive to relevant regulations, including food safety laws, food additive usage standards, prepackaged food labeling regulations, and production licensing management methods. Finally, communication and coordination skills are equally important, as the quality department needs to frequently collaborate with procurement, production, R&D, and sales departments to promote cross-departmental food safety improvements.

In summary, the core logic of quality management in the food industry is prevention-oriented, systematic control, full-chain traceability, and continuous improvement. Similar to how IATF 16949 in the automotive industry emphasizes process capability and defect prevention, ISO 22000 and HACCP in the food industry focus on hazard analysis and risk control, with a high degree of consistency in management philosophy. Quality professionals in food enterprises can draw on mature methods from manufacturing (such as FMEA, 8D, SPC, MSA), adapt them to the characteristics of the food industry, and build a quality management system that is both compliant and practical. As consumer attention to food safety continues to rise and regulatory requirements become increasingly stringent, systematic, digital, and preventive food quality management will become one of the core competencies of enterprises.

Full Chain Control from Farm to Table

Knowledge Number: 15.1.1

Version: v20260704

Author: Excellence Quality Think Tank Excellence Quality Think Tank is dedicated to providing systematic professional knowledge, methodologies, and practical tools for quality management practitioners, assisting enterprises in continuously enhancing their quality capabilities.