We had our audit last week and Food defense and Food fraud was sadly not checked. But here is what I did:
For food defense I completed the risk assessment with the FDA Food Defense Plan Builder and each year with an internal audit the plan is being reviewed. Furthermore the locks on doors and other Food defense critical points are check with an audit.
For Food Fraud I made an risk assessment like our HACCP plan and each raw material group has:
- several kinds of frauds, like the product has been swapped with an cheap alternative, or organic product is not organic
- then there is a occurrence score, so how high is that chance the this occurs (from 0 - 5), this chance is based on incidents of the past (based on RASFF and www.foodfraud.org), profit, supplier and availability of the product
- then chance of detection, so how high is the chance that the fraud will be detected (from 0 – 5). This is based on visibility, are there analyses that can pinpoint the fraud (and are they affordable) and are there any sub processes.
- after this this risk is based on occurrence x detection. If the risk is higher than 10 we need to have extra measures.
This again is yearly checked in an internal audit, so checking both databases if there are new developments and internally if there is some new knowledge.
I think this is more than enough for the BRC standard
