A swab programme that only runs before audits isn't a verification system, it's theatre. We design zone-based sampling plans that catch contamination where it lives, and corrective action protocols that eliminate it for good.
An environmental monitoring programme, EMP, is a structured sampling and testing programme that identifies the presence of pathogens, most commonly Listeria species and Salmonella, in the food production environment, on surfaces, equipment, drains, and air handling systems, not only in finished product. The objective is to find potential sources of contamination before they reach product, verify that sanitation and hygienic design controls are working, and identify areas and activities needing improvement.
Under FSMA's Preventive Controls for Human Food rule, 21 CFR Part 117, environmental monitoring is required as a verification activity where environmental contamination is a hazard requiring a preventive control, which in practice covers most facilities producing ready-to-eat foods with exposed product after a lethality step. GFSI-benchmarked schemes including SQF, BRCGS, and FSSC 22000 also require a documented, risk-based EMP.
The core logic of an EMP is that contamination establishes itself in the production environment as much as in the product. Listeria monocytogenes is ubiquitous in nature and can become established in harbourage points within a facility, equipment seams, drains, hollow frames, where it persists and periodically transfers to product contact surfaces. A well-designed EMP finds these harbourage points through environmental sampling before they result in a product-level finding, a recall, or worse.
Recent years have made the stakes concrete: Listeria-linked recalls have affected deli meats, cheese, ice cream, and frozen foods, with several outbreaks resulting in multiple deaths. FDA enforcement trends show increased scrutiny of EMPs in ready-to-eat and high-risk operations, and warning letters frequently cite inadequate environmental monitoring as a finding.
Every effective EMP starts with an accurate map of where contamination risk lives in the facility.
Surfaces, equipment and utensils that directly touch exposed product. The highest-risk zone, sampled most frequently. A positive here means direct product contamination risk.
Non-food-contact surfaces close to food contact surfaces or exposed product, such as equipment housings, conveyor frames, and control panels. A pathway to Zone 1 if not controlled.
Surfaces further from product but within the processing room, such as floors, walls, drains, and overhead structures. Common harbourage points for persistent contamination.
Locker rooms, hallways, loading docks, and other areas outside processing that can introduce contamination via foot traffic, equipment movement, or airflow.
FDA recommends that Zones 1 and 2 be sampled more frequently, since contamination of these zones poses the highest risk to food safety, but Zone 3 sites, particularly drains and floor areas with standing water or condensation, are often where Listeria establishes a persistent harbourage that periodically transfers to Zone 2 and then Zone 1 through normal facility traffic and operations. A sampling plan that only covers Zone 1 misses the upstream sources that keep generating Zone 1 positives.
Two recent developments from FSIS and FDA change both the scope of testing expected and how facilities should respond to certain positive results.
Both changes reflect the same underlying logic: catch sanitation gaps earlier using broader testing, while allowing a more proportionate response to early-stage findings and not an automatic worst-case escalation.
FSIS broadened testing to include all Listeria species, not only L. monocytogenes, in RTE products, environmental surfaces, and food contact surfaces. If sanitation is effective, no Listeria species should be found anywhere in the post-lethality RTE environment.
FDA's draft guidance eliminates the automatic regulatory consequence for an initial Zone 1 positive for Listeria species (non-monocytogenes), allowing clean, sanitize, and intensified sampling on the next run instead of mandatory hold-and-test.
If the Zone 1 surface tests positive again after the intensified response, hold-and-test of finished product for L. monocytogenes becomes required. The flexibility applies to a genuinely first finding, not repeated ones.
For facilities, the practical effect is that broader Listeria species testing, finding non-monocytogenes species on environmental or food contact surfaces, is now a meaningful early indicator of sanitation effectiveness, not a result to dismiss because it isn't the regulated pathogen itself. At the same time, a single Zone 1 positive for a non-monocytogenes species no longer automatically triggers finished product hold-and-test under the draft FDA approach, provided the facility responds with intensified cleaning and sampling and the follow-up result is clean. This rewards facilities that already have a responsive seek-and-destroy process in place, and creates more risk for facilities that don't, since a repeat positive now carries the full consequence.
FSIS also published its FY2025 Sampling Summary in April 2026, reporting environmental and product sampling results for Listeria monocytogenes across RTE meat, poultry and egg products alongside Salmonella and STEC data for raw products, giving facilities a current industry benchmark for typical positive rates.
Environmental monitoring is relevant to any facility producing ready-to-eat foods with exposed product after a lethality step, across sectors.
Operations needing to align with FSIS's expanded Listeria species testing scope effective January 2025.
Businesses in sectors with documented Listeria recall history needing a risk-based EMP regardless of FSIS oversight.
Operations where the same sites test positive repeatedly, needing a seek-and-destroy investigation and not repeated re-cleaning.
Operations needing a documented, risk-based EMP to meet GFSI scheme requirements, including SQF's 2026 update.
Operations sampling without a formal Zone 1-4 classification, resulting in sampling plans that don't reflect actual risk.
Businesses needing a thorough seek-and-destroy investigation and verification before resuming normal operations.
We cover the full scope of EMP design and verification, from zone classification through to ongoing trend analysis.
A review of existing zone classification, sampling plans, testing scope, and corrective action protocols against current regulatory expectations and GFSI scheme requirements.
On-site classification of Zones 1 through 4, identifying harbourage points and pathways between zones specific to your facility's layout and equipment.
Design of site selection, sampling frequency, and rotation, weighted toward higher-risk zones and known harbourage points.
Review of which organisms are tested for and where, aligned with the 2025 FSIS expanded Listeria species testing scope where applicable.
Development of corrective action protocols for positive results, including intensified sampling, root cause investigation, and verification before resuming normal operations.
Development of response protocols for Zone 1 positives aligned with FDA's draft guidance approach, clean, sanitize, intensify, verify, escalate if needed.
Design of systems to trend environmental data over time, identifying patterns before they result in product-level findings.
Review of equipment for harbourage potential, seams, hollow frames, hard-to-clean areas, that contribute to recurring positives.
Verification sampling and documentation following a positive result or recall, before resuming normal production.
The process follows a defined sequence. Our part of the process typically takes 1 to 2 weeks. Laboratory testing turnaround is separate and depends on your chosen laboratory.
| Stage | What happens | Our role | Duration |
|---|---|---|---|
| 1. Facility walkthrough | The facility is walked to identify zones, harbourage points, and pathways between zones. | We conduct the walkthrough and document findings. | 1 to 2 days |
| 2. Zone classification | Zones 1 through 4 are formally classified based on the walkthrough. | We produce the zone classification map. | 1 to 2 days |
| 3. Sampling plan design | Site selection, frequency, and rotation are designed, weighted toward higher-risk zones. | We design the sampling plan and testing scope. | 2 to 3 days |
| 4. Corrective action protocol | Seek-and-destroy protocols are developed for positive results at each zone. | We develop the protocols and response documentation. | 2 to 3 days |
| 5. Trending system setup | A data trending and verification system is established for ongoing monitoring. | We set up the trending structure and reporting format. | 1 to 2 days |
| 6. Implementation | The EMP is put into practice. Sampling begins on the new schedule. | We provide implementation support during the first cycles. | 2 to 3 weeks |
| 7. Laboratory testing | Samples are analysed by your chosen laboratory. | We advise on laboratory selection if needed. | Per laboratory turnaround |
| 8. Ongoing trend review | Results are trended over time, with periodic review of the sampling plan effectiveness. | We support ongoing trend review and plan refinement. | Ongoing |
Our gap assessment tests whether your EMP would withstand inspection, beyond confirming that swabbing simply happens.
The assessment reviews existing zone classifications, sampling site selection and rotation, testing scope, sampling frequency, and corrective action protocols for positive results, against current regulatory expectations and GFSI scheme requirements.
It includes a facility walkthrough to verify that documented zones match actual risk, particularly around equipment with known harbourage potential, and a review of historical environmental data to assess whether trending and verification are being used effectively, or whether positives are simply re-cleaned and forgotten.
We verify documented zones against actual facility layout and risk during a walkthrough.
We review site selection, frequency, rotation, and which organisms are tested for.
We review historical positives and how they were responded to.
We produce a written gap assessment with a prioritised action plan.
If you've had a recent positive result or recall, we can prioritise the seek-and-destroy investigation alongside the broader gap assessment.
The same gaps appear across EMP reviews regardless of sector. Knowing where these gaps cluster is the most effective preparation.
Facilities lacking clearly defined Zones 1 through 4 end up with sampling plans based on convenience or habit and not actual contamination risk, missing the highest-risk areas.
Swabbing performed inconsistently, or concentrated in the weeks before a scheduled audit, doesn't function as ongoing verification and can mask patterns that routine sampling would reveal.
Corrective actions that re-clean the immediate site of a positive without investigating harbourage points, equipment seams, drains, hollow frames, leave the actual source in place to recontaminate the area.
Testing scope limited to Listeria monocytogenes only misses the broader Listeria species testing now expected following the 2025 FSIS guidance update, and the earlier-warning value that broader testing provides.
Environmental data collected but not trended over time misses patterns, a particular site that's positive every few months, that would reveal a recurring issue before it results in a product-level finding.
Treating every positive identically, instead of distinguishing a genuine first finding (intensify and verify) from a repeat positive (escalate per FDA's draft guidance approach), either over-reacts to isolated findings or under-reacts to a developing pattern.
Understanding how environmental monitoring relates to other verification activities clarifies what it covers and what it doesn't.
| Environmental monitoring | HACCP verification | Allergen swabbing | |
|---|---|---|---|
| Target | Pathogens (Listeria, Salmonella) | Critical control point parameters | Allergen residue |
| Sample type | Surface swabs by zone | Process records, CCP logs | Surface swabs at changeover |
| Triggers | Seek-and-destroy protocol | Corrective action procedure | Re-clean and re-test before changeover |
| Our consulting | Environmental Monitoring | HACCP | Allergen Management |
What drives the timeline and cost of an EMP project. We provide a written proposal with a fixed fee after the initial consultation.
Timeline
How long our consulting work takes
Cost factors
What drives the consulting fee
No existing programme. Our consulting work, from walkthrough to implementation-ready plan, typically takes 1 to 2 weeks.
Review of an existing programme against current FSIS/FDA guidance and GFSI requirements. Typically 2 to 3 days.
Investigation following a positive result or recall, scoped to the extent of the issue.
Larger facilities with more equipment and zones require more extensive walkthrough and sampling plan design.
Multiple RTE product lines with different equipment may need separate sampling plans within the same facility.
Additional scope for facilities needing equipment-level review of harbourage potential.
A gap assessment only, a full EMP build, or an ongoing trend review retainer each carry different fees. All scopes are defined in writing before work begins.
Sample analysis costs are set by your chosen laboratory and are separate from our consulting fees.
Answers to the questions we hear most often from facilities building or reviewing environmental monitoring programmes.
An environmental monitoring programme, EMP, is a structured sampling and testing programme that identifies the presence of pathogens, most commonly Listeria species and Salmonella, in the food production environment, on surfaces, equipment, drains, and air handling systems, not only in finished product. The objective is to find potential sources of contamination before they reach product, verify that sanitation and hygienic design controls are working, and identify areas and activities needing improvement. Under FSMA's Preventive Controls for Human Food rule, 21 CFR Part 117, environmental monitoring is required as a verification activity where environmental contamination is a hazard requiring a preventive control, and GFSI-benchmarked schemes such as SQF, BRCGS, and FSSC 22000 also require a documented EMP.
Environmental monitoring zones classify areas of a facility by their proximity to exposed product and risk of contamination. Zone 1 is food contact surfaces, equipment and surfaces that directly touch exposed product. Zone 2 is non-food-contact surfaces close to food contact surfaces or exposed product, such as equipment housings and conveyor frames. Zone 3 is surfaces further from product but within the processing room, such as floors, walls, and drains. Zone 4 is surfaces outside the processing area, such as locker rooms, hallways, and loading docks, that can still introduce contamination into the processing environment via foot traffic or equipment movement. FDA recommends that Zones 1 and 2 be sampled more frequently, since contamination of these zones poses the highest risk to food safety.
Effective January 2025, the USDA Food Safety and Inspection Service broadened its testing to include all Listeria species, not only Listeria monocytogenes, in ready-to-eat products, environmental surfaces, and food contact surfaces. The rationale is that if a facility's sanitation programme is effective, no species of Listeria should be found in product, on food contact surfaces, or on environmental and non-food-contact surfaces in the post-lethality exposed RTE environment. Finding any Listeria species, even non-monocytogenes, provides an earlier signal of a sanitation gap than waiting for L. monocytogenes specifically, giving facilities more comprehensive insight into whether their sanitation programme is working.
FDA's draft guidance for industry on controlling Listeria monocytogenes in ready-to-eat foods eliminates the automatic regulatory consequence previously associated with an initial positive finding of Listeria species, other than L. monocytogenes itself, on a Zone 1 food contact surface. Under the draft guidance, instead of being required to hold and test finished product, a company can clean, sanitize, and conduct intensified sampling of the affected area during the following production run. A company is only required to hold and test finished product for Listeria monocytogenes if the Zone 1 surface tests positive again after this intensified response. This gives food companies more flexibility to respond proportionately to a first positive while still requiring escalation if the issue persists.
A seek-and-destroy protocol is the structured response to a positive environmental result: instead of simply re-cleaning the immediate spot and moving on, the protocol involves intensified sampling around the positive site to map the extent of contamination, root cause investigation into how the organism established itself, often in harbourage points such as equipment seams, drains, or hollow frames, targeted cleaning and, where necessary, equipment disassembly, and verification sampling to confirm the response was effective before normal operations resume. The goal is to find and eliminate the source, not only treat the symptom.
An environmental monitoring gap assessment reviews existing zone classifications, sampling site selection and rotation, testing scope, which organisms are tested for and where, sampling frequency, and corrective action protocols for positive results, against current regulatory expectations and GFSI scheme requirements. It typically includes a facility walkthrough to verify that documented zones match actual risk, particularly around equipment with known harbourage potential, and a review of historical environmental data to assess whether trending and verification are being used effectively.
The most common gaps are: facilities lacking clearly defined Zones 1 through 4, resulting in sampling plans that don't reflect actual contamination risk. Swabbing performed inconsistently or concentrated before audits and not as routine ongoing verification. Corrective actions that re-clean the immediate site of a positive without investigating harbourage points that could be the actual source. Testing scope limited to Listeria monocytogenes only, missing the broader Listeria species testing now expected following the 2025 FSIS guidance update. Environmental data collected but not trended over time, missing patterns that would reveal a recurring or worsening issue before it results in a product-level finding.
No. While USDA FSIS Listeria guidance applies specifically to meat, poultry and egg products, environmental monitoring for Listeria and other pathogens is relevant to any facility producing ready-to-eat foods with exposed product after a lethality step, including dairy, produce, bakery, and prepared foods. High-profile recalls linked to Listeria have involved deli meats, cheese, ice cream, and frozen foods, among others. GFSI-benchmarked schemes including SQF, BRCGS, and FSSC 22000 require a risk-based environmental monitoring programme regardless of sector, where the hazard analysis identifies environmental pathogens as relevant.
Our consulting work moves fast. A facility walkthrough and zone classification typically takes 1 to 2 days, and developing the full sampling plan, testing scope, and corrective action protocols typically takes 1 to 2 weeks. For facilities with an existing programme needing review against current FSIS and FDA guidance, a gap assessment typically takes 2 to 3 days. Laboratory testing turnaround for samples is separate and depends on your chosen laboratory.
Sampling plan design, testing scope review, corrective action protocol development, and data trending system design are available remotely. Zone classification and facility walkthroughs are best conducted on-site, since they depend on the physical layout, equipment, and traffic patterns of your specific facility. We can scope a hybrid approach combining an on-site walkthrough with remote programme design and ongoing trend review.
You can commission any of these on their own, with an agreed scope and a written quote, without taking on ongoing consulting. See all food safety services.
To check the programme is sampling where it should.
Read about An environmental monitoring programme review →Where a pathogen is establishing in the environment.
Read about Listeria and pathogen control support →Where changeover cleaning has never been validated.
Read about A cleaning and sanitation review →Where fabrication, zoning or flows are the underlying problem.
Read about A facility hygiene assessment →Tell us about your facility, your product range and your current sampling practices. We will tell you exactly where the gaps are.