I can't answer all your questions; some will relate to the US market but I'll try on 2 and 3.
2. The first step is probably the supermarket's own standard for fresh fruit. Although I know many people who would not wash berries before eating them (even me on occasion, even though I know they're not treated), I think it's a fair assumption to cover yourself with the "wash before use" because if you did wash them, you would get a huge level of damage and reduction in shelf life which might actually make the micro loading worse not better! I think the best route is to monitor them but also have really strict hand hygiene requirements; frequent hand swabs etc. It is far more common in the US than the UK to have carriers as well, so it might even be worth doing some start of employment stool testing in addition to the normal questionnaire looking for a history of illness. I'd also be very careful about employing people who've recently worked with raw meat (I'd certainly stool test them pre employment) as they can end up carrying Salmonellae etc.
Remember also to really monitor your farms / suppliers closely. I've seen the US produce outbreaks from the UK and as far as I can tell, they all seem to be related to poor irrigation water which will lead to contamination inside the plant. You can't wash that off!
3. No sane person will eat asparagus raw. I'd still do testing as above and monitor the suppliers, monitor handwashing etc but you're right, the final kill step is with the consumer; however, I wouldn't expect pathogens to be present either if the controls are all good.
As you can't control micro apart from the prerequisite controls I've said above, you need to look at physical and chemical. Chemical - I can't see any
CCP controls you need but I'd keep an eye on pesticide use (we had a major issue with spanish peppers a year ago so it can happen). Physical is probably touch and go if you need
CCP controls. In a field obviously you can get soil, stones, glass, metal, insects etc. The shape of asparagus will help you as no physical contaminant is likely to get caught up with it. Probably best practice is to have a
metal detector just because it's a standard now in the food industry and there is a small risk there. If you're washing the asparagus as well, that might be a
CCP for physical contamination but all the above is debatable, it probably could be argued that all controls are prerequisites. If I was auditing you and saw either all prerequisites or perhaps up to 2
CCPs for physical controls, I'd be happy as long as either were justified and you have a good prerequisite programme.
Hope that's helpful.