This Risk Assessment is similar to what I have done and we just passed our audit to BRC V7 with an AA grade! only 4 minors!
I did have a few more categories as suggested by Charles and did the vulnerability assessments on a separate Excel spreadsheet, then referenced the final score on the main Raw Material Risk Assessment spreadsheet.
So on the Vulnerability Assessment had the names of the raw materials across the top and the categories down the side as follows and then filled in what I could find out from online searches and internal knowledge into each section.
Likelihood of Occurrence
Historical Incidents Historical evidence of substitution or adulteration of the ingredient
Current / Emerging concerns Any emerging issues and information identified
Economic Factors which may make substitution or adulteration more attractive
Cost/value of material
Geographic origin/supply chain Country of origin Length and complexity of the supply chain
Ease of Access to raw materials though the supply chain
Nature of the Raw Material The nature of raw material may change the potential for food fraud e.g. spice blend, single ingredient
Availability for example, a poor harvest may restrict availability and may increase the potential for adulteration
Availability of adulterants / complexity and cost of committing fraud
Likelihood of Detection
Geographic origin / Supply Chain Country of origin Length and complexity of the supply chain
Physical Form
Existing Supplier Controls
Routine Testing Sophistication of routine testing to identify adulterants If testing within the supply chain is comprehensive and specifically focused on potential fraud issues, then the likelihood of adulteration is reduced
Relevant Audits
Vulnerability - Conclusions
Based on the risk matrix published by BRC in their webinar about Vulnerability assessments - scored each of Likelihood of Occurrenece and Detection and came up with Low/Medium/High risk.
The above is a combination of methods gleaned from other posts on this forum and the BRC Webinar and guidelines.
The PIF is a Product Information Form issued by the Australian Food And Grocery Council. Link as follows:
http://www.afgc.org....ation-form-pif/
It is an excellent form used by most companies in Australia and New Zealand and a lot elsewhere too, and gives all the information required to conduct VITAL analysis.
Thanks for all the ideas I used in developing our Vulnerability Assessment.