I literally have an oprp because the auditor wanted to see one. Does it do anything for me? No, not really. Mine is a spec review on high risk ingredients. The issue? No company is going to send me a spec that says it contains a pathogen. They call you AFTER you've consumed said ingredient and tell you to recall it. IF they knew it contained a pathogen from the drop, they wouldn't ship it in the first place....lol. But we keep looking at all those specs! Just waiting for the day when one says the test results are bad! And my auditor is happy! So whatevs!
A spec review? That is legitimately bonkers. How is that an oPRP? Mind blown...
I was reading the new Campden BRI standard and bless him, Andrew Collins has tried to square the circle and make oPRPs the same as Preventive Controls. Then call them something different.
Put it this way, I'm not sure it was worth the £145 I paid. Version 5 was far simpler. And all because ISO 22000 and the US decided to do something different.
There probably is a space for something between Prerequisites and CCPs. I'm just yet to be convinced oPRPs are that (or preventive controls for that matter, laughably, FDA "experts" I've talked to think all process preventive controls are CCPs which is just not true either.)