Hi everyone there!
I'm reviewing a customer's HACCP to give them support. They are ISO 22000 certified and they make gases for packaging, beverages and so on.
When conducting the risk assessment, they have rated probability into 4 categories: not probable (0 score), low probability (1 score): it happens every two years or never, médium prob (3 score): it happens between 2 years or 1 year, high prob (5 score) : it happens once per year. Severity is classified into 3 categories (low=1, médium=3, =5). THey say the risk is significant if the score is higher tan 9. NO explanation regarding method
THey do not have any PPRO or CCP which it can be fine, but as I do not have a justification on why the score they give to the risk it this, I have a weird feeling and I fill that for example, steps like the air intake to compress it previous to sepparating the different gases should be a PPRO.
Or for example, in some steps they are performing a continous control and they stop production if they detect more hidrocarburs than the limit, this control is more like PPRO than a PPR.
So I have a lack of proper justification to tell them that the risk matrix is not appropiate, or am I wrong?
Can you help me?
Thanks in advance!!