A documented system tells people what to do. Culture is whether they do it. We assess where your organisation sits against the GFSI framework, and build the leadership behaviours and indicators that move it forward.
According to the Global Food Safety Initiative's updated Position Paper Version 2.0, published March 2026, food safety culture is a concept based on deeply rooted beliefs, behaviours, values, and assumptions shared by employees, directly impacting food safety performance. This definition matters because it locates culture in shared, often unspoken, assumptions, not in policy documents, posters, or training certificates.
The practical test of culture is what happens when no one is checking: whether a worker reports a near-miss or quietly fixes it and moves on, whether a supervisor pauses a line when something looks wrong even under production pressure, and whether food safety is treated as everyone's responsibility or as something that belongs to the quality department. These behaviours aren't written into procedures, because procedures can't anticipate every situation, but they determine whether procedures hold up when situations arise that the documentation didn't cover.
This is why food safety culture sits alongside a food safety management system and not inside it. A management system, built on HACCP, ISO 22000, or a GFSI-recognised scheme, documents what the organisation is required to do. Culture is whether people do it consistently, especially under pressure, and whether they exercise good judgement in situations the documentation didn't anticipate. An organisation can be technically compliant and still have a culture where corners are cut once the auditor leaves.
GFSI, as the benchmarking organisation behind many of the certification schemes covered elsewhere in our consulting services, increasingly treats culture not as a soft add-on but as a measurable, assessable component of food safety performance, a direction reinforced by both the Position Paper Version 2.0 and the culture-driven requirements arriving in SQF Edition 10.
The global reference document for food safety culture was substantially updated in March 2026, the first major revision since 2018.
GFSI released Version 2.0 of 'A Culture of Food Safety' in March 2026, updating the 2018 edition with research drawn from over 180 academic and industry sources spanning 25 years. The interim director of GFSI framed the central message clearly: food safety should be embedded in an organisation's culture, valued beyond crisis moments alone.
Culture is defined as deeply rooted beliefs, behaviours, values, and assumptions shared by employees, directly impacting food safety performance, an evidence-based reframing of the 2018 concept.
The paper differentiates internal organisational aspects of food safety management from the day-to-day operational practices that ensure food safety, making gaps between the two visible.
GFSI defines the universal conceptual framework and dimensions, the "what", while deliberately leaving implementation tools and maturity models, the "how", to businesses and standards owners.
The three core dimensions identified are Hazard and Risk Awareness, Consistency for Food Safety, and Adaptability, Change, and Continuous Improvement. These give organisations, and the standards built on GFSI's benchmarking work, a shared vocabulary for assessing culture, even where the specific assessment tools and maturity models differ between schemes. For businesses already working toward SQF, BRCGS, FSSC 22000, or other GFSI-recognised certifications, this means culture assessment increasingly speaks a common language across schemes, even as each scheme's specific audit checklist differs.
Each dimension applies across both the organisational and operational layers of the dual-layered structure.
Whether people throughout the organisation, not only quality staff, understand the hazards relevant to their role and recognise when something is, or might become, a food safety issue.
Whether food safety practices are applied the same way regardless of who's working, what shift it is, how busy the line is, or whether an audit is imminent.
Whether the organisation learns from near-misses, incidents, and changing circumstances, adjusting practices proactively instead of only after something goes wrong.
A useful diagnostic question for each dimension is whether it holds true at both layers. An organisation might score well on Hazard and Risk Awareness at the organisational layer, training programmes exist, hazard analyses are documented, while scoring poorly at the operational layer, if floor staff struggle to explain why a specific control point matters for the product they're handling. The gap between the two layers is often where the most useful improvement work happens.
Maturity models give organisations a way to locate their current state and track progress, the "how" that GFSI leaves to businesses and standards owners to develop.
Addressed only when problems occur. No systematic programme. Seen as QA's job.
Compliance driven by supervision and audit preparation and not internalised practice.
Individuals understand and follow practices without close supervision, but consistency across teams varies.
Near-misses reported and acted on. Leading indicators tracked. Culture actively managed, not assumed.
Food safety judgement is part of how decisions are made at every level, without needing to be separately invoked.
Most organisations are not uniformly at one level: production floor practice might sit at level 2 while leadership commitment sits at level 4, illustrating the dual-layered gap the GFSI framework highlights. The value of the model isn't the label itself, but the specific, concrete differences between levels, which become the basis for a prioritised improvement plan and not a vague aspiration to "improve culture."
Culture becomes auditable when it's backed by indicators, exactly the shift SQF Edition 10 is making central to certification.
Lagging indicators reflect what has already happened: internal audit non-conformances and trends, third-party audit scores and findings, customer complaints related to food safety, regulatory inspection observations, and product holds or recalls. These are necessary but, by definition, retrospective, they tell you culture was weak after the consequence has already occurred.
Leading indicators are forward-looking signals that culture is, or isn't, working before a lagging indicator confirms it: near-miss and hazard reporting rates, employee survey scores on topics such as psychological safety and perceived management priorities, training completion and competency verification, beyond simple attendance, and participation in food safety improvement initiatives. A rising near-miss reporting rate, counterintuitively, is often a positive sign: it suggests people feel safe reporting issues instead of hiding them, which is itself a culture indicator.
Benchmarking these indicators against industry standards, where GFSI schemes provide aggregate data from certified facilities, or against your own historical data over time, turns culture from a once-a-year impression into a tracked, managed metric, the kind of evidence SQF Edition 10 and similar scheme updates increasingly expect.
Culture work is relevant to any food business with a management system, since the system's effectiveness depends on it.
Operations needing to move from general culture statements to measurable, auditable evidence ahead of the transition.
Organisations where the same types of findings recur despite documented procedures, often a culture symptom and not a documentation gap.
Operations needing to understand whether culture factors, such as unreported near-misses, contributed, and to rebuild reporting trust.
Businesses where the same documented procedures produce different outcomes at different sites, often a culture and not a documentation difference.
Organisations needing to address the food safety culture emphasis in ISO 22002-100:2025 as part of broader certification work.
Organisations building a quality culture framework that can align with food safety culture work and not duplicate it.
We cover the full scope of culture assessment and development, from first diagnostic through to ongoing measurement.
An assessment against the GFSI Position Paper Version 2.0 dimensions, covering both organisational and operational layers, combining document review, interviews, surveys and floor observation.
Mapping your organisation's current state against a five-level maturity model, identifying specific gaps between organisational and operational layers.
Development of leadership commitment statements, communication practices, and visible leadership behaviours that support food safety culture in practice.
Design of a measurement framework combining leading indicators, near-miss reporting, survey scores, training competency, with lagging indicators, audit findings, complaints, recalls.
Development of near-miss and hazard reporting systems, and the leadership response practices needed for staff to trust the system.
Readiness review for SQF Edition 10's measurable, culture-driven requirements, including documentation and evidence expectations.
Review of culture indicators and practices across multiple sites to identify and address inconsistencies in documented-vs-actual practice.
Alignment of food safety culture work with quality culture requirements emerging in ISO 9001:2026, avoiding parallel, duplicated culture programmes.
Ongoing tracking of leading and lagging indicators, with periodic reassessment against the maturity model.
Culture isn't built by a single workshop, but training is one of the few interventions that directly affects whether staff genuinely understand why a control point matters, which is itself one of the GFSI dimensions. Training that builds genuine understanding, beyond an attendance record, is a meaningful input to the Hazard and Risk Awareness dimension. We recommend pairing this consulting programme with relevant training delivered through Confi Food, and can advise on the right approach during the initial consultation.
The process follows a defined sequence. Our part of the process typically takes 2 to 4 weeks. Measurable culture progress develops over a longer period through sustained practice.
| Stage | What happens | Our role | Duration |
|---|---|---|---|
| 1. Document and policy review | Existing leadership commitment statements, policies, and culture-related documentation are reviewed. | We review documentation against the GFSI V2.0 framework. | 1 to 2 days |
| 2. Leadership interviews | Leadership at multiple levels is interviewed on culture priorities, communication, and visible behaviours. | We conduct interviews and synthesise findings. | 2 to 3 days |
| 3. Employee surveys | Surveys covering psychological safety, perceived priorities, and reporting confidence are administered. | We design and analyse the survey. | 3 to 5 days |
| 4. Floor observation | Direct observation of operational practice compares documented procedures to actual behaviour. | We conduct observation visits and document findings. | 2 to 3 days |
| 5. Maturity mapping | Findings are mapped against the five-level maturity model, organisational and operational layers separately. | We produce the maturity map and gap analysis. | 2 to 3 days |
| 6. Indicator framework design | Leading and lagging indicators are defined, with baselines established from current data. | We design the indicator framework and reporting structure. | 3 to 5 days |
| 7. Leadership commitment and communication materials | Leadership commitment statements and communication practices are developed. | We develop materials in collaboration with leadership. | 3 to 5 days |
| 8. Ongoing measurement | Indicators are tracked over time, with periodic reassessment against the maturity model. | We support ongoing measurement and reassessment. | Ongoing |
Our assessment compares what's documented and stated against what people do in practice, the gap GFSI's dual-layered structure is designed to surface.
The assessment evaluates your organisation against the GFSI Position Paper Version 2.0 dimensions, Hazard and Risk Awareness, Consistency for Food Safety, and Adaptability, Change, and Continuous Improvement, across both the organisational and operational layers, combining document review, leadership interviews, employee surveys, and direct floor observation.
The output maps the organisation against the five-level maturity model and identifies specific, prioritised actions to close the gaps found, distinguishing between gaps that need policy or resourcing changes (organisational layer) and gaps that need different day-to-day behaviours (operational layer).
We review existing leadership commitment and culture-related documentation.
We gather leadership and employee perspectives across both layers.
We compare documented practice to actual operational behaviour.
We produce a written maturity map with prioritised actions.
If you're also working on ISO 22002 or ISO 9001 integration, we align this culture assessment with that work to avoid parallel, disconnected programmes.
The same gaps appear across culture assessments regardless of sector. Knowing where these gaps cluster is the most effective preparation.
Leadership commitment statements that exist as documents but are not visible in day-to-day leadership behaviour, such as production pressure consistently overriding food safety judgement without consequence, undermine the organisational layer regardless of what the policy says.
Near-miss and hazard reporting systems that exist but are rarely used, often because staff don't believe reports lead to action or fear blame, signal a culture gap no amount of system documentation will fix on its own.
Training that confirms attendance but doesn't build genuine understanding of why a procedure matters leaves compliance dependent on supervision and not internalised practice, a level 2 maturity pattern.
Culture treated as a one-off initiative, a training day or poster campaign, not an ongoing measured programme with leading and lagging indicators, doesn't sustain beyond the initiative itself.
An organisational layer, policies and resourcing, that doesn't match operational reality, where the documented culture and the lived culture diverge, is exactly the gap the GFSI dual-layered structure is designed to make visible.
Running separate quality culture and food safety culture initiatives, particularly as ISO 9001:2026 brings its own culture emphasis, duplicates effort that a single integrated culture framework could address once.
Understanding how culture relates to documented systems and training clarifies why all three are needed, and why none substitutes for the others.
| Food safety culture | Management system (ISO 22000/HACCP) | Training | |
|---|---|---|---|
| Defines | Shared beliefs, values, behaviours | Required procedures and controls | Knowledge and skills transfer |
| Measured by | Leading/lagging indicators, surveys | Audit conformance | Completion and competency checks |
| Reference | GFSI Position Paper V2.0 | ISO 22000, ISO 22002, HACCP | Scheme-specific competency requirements |
| Our consulting | Food Safety Culture | ISO 22000 | Training Courses |
What drives the timeline and cost of a culture programme. We provide a written proposal with a fixed fee after the initial consultation.
Timeline
How long our consulting work takes
Cost factors
What drives the consulting fee
A full assessment combining document review, interviews, surveys and observation for one site. Our consulting work typically takes 2 to 3 weeks.
Design of a leading/lagging indicator framework without a full assessment, for organisations with an existing culture understanding. Typically 3 to 5 days.
Review of culture-related documentation and evidence ahead of SQF Edition 10 transition.
Operations needing consistency review across multiple sites, scoped to the number of sites and degree of variation found.
Development of leadership commitment statements and communication materials, typically a few days depending on leadership availability.
For businesses also addressing ISO 9001:2026 quality culture requirements, aligning the two into a single framework.
A diagnostic assessment only, a full programme with indicators and leadership materials, or an ongoing monitoring retainer each carry different fees. All scopes are defined in writing before work begins.
Training delivered through Confi Food's course catalogue is scoped and quoted separately from consulting fees.
Answers to the questions we hear most often from organisations building or measuring food safety culture.
According to the Global Food Safety Initiative's updated Position Paper Version 2.0, published March 2026, food safety culture is a concept based on deeply rooted beliefs, behaviours, values, and assumptions shared by employees, directly impacting food safety performance. This definition emphasises that culture is not a policy document or a poster on a wall, but the shared, often unspoken, assumptions that shape how people behave when no one is watching, including whether they report problems, follow procedures under pressure, and treat food safety as core to their role and not someone else's responsibility.
GFSI released Version 2.0 of its 'A Culture of Food Safety' position paper in March 2026, updating the 2018 edition with research drawn from over 180 academic and industry sources spanning 25 years. The update introduces a refined, evidence-based model, a dual-layered structure differentiating internal organisational aspects of food safety management from the day-to-day operational practices that ensure food safety, and three core dimensions: Hazard and Risk Awareness, Consistency for Food Safety, and Adaptability, Change, and Continuous Improvement. The paper deliberately focuses on defining the 'what', a universal conceptual framework, while leaving the 'how', implementation tools and maturity models, to individual businesses and standards owners to develop.
The GFSI Position Paper Version 2.0 differentiates between two layers: the internal organisational aspects of food safety management, such as leadership commitment, resource allocation, communication structures, and how the organisation is set up to support food safety, and the day-to-day operational practices that are followed to ensure food safety in actual production and handling activities. A strong organisational layer without corresponding operational practice, or strong operational practice undermined by an unsupportive organisational layer, both represent culture gaps the dual-layered structure is designed to make visible.
A food safety management system, such as one built on ISO 22000 or HACCP, documents what an organisation is required to do: procedures, hazard analyses, control points, and records. Food safety culture is about whether people do those things consistently, especially under pressure, and whether they go beyond the minimum documented requirement when judgement is needed. An organisation can have a fully documented, technically compliant management system and still have a weak culture, where procedures are followed only when an audit is imminent, near-misses go unreported, or production targets are allowed to override food safety judgement in practice.
Food safety culture is measured through a combination of leading and lagging indicators. Lagging indicators include internal audit non-conformances and trends, third-party audit scores and findings, customer complaints related to food safety, regulatory inspection observations, and product holds or recalls. Leading indicators include near-miss and hazard reporting rates, employee survey scores on topics such as psychological safety and perceived management priorities, training completion and competency verification, and participation in food safety improvement initiatives. A maturity model is often used to map an organisation's current state, typically ranging from a reactive level, where food safety is addressed only when problems occur, through to a level where food safety is fully integrated into how decisions are made across the business.
SQF Edition 10 introduces measurable, culture-driven requirements as a central feature of the standard, alongside enhanced risk management. This represents a shift from food safety culture being addressed through general statements of commitment toward specific, auditable evidence: documented policies for communication and reporting, qualified individual training, employee training programmes with competency verification, and measurable culture indicators that an auditor can check instead of taking on trust. Businesses transitioning to Edition 10 are expected to demonstrate that food safety is a core value reflected in daily operations, not only in policy documents reviewed once a year.
A food safety culture assessment evaluates an organisation against the GFSI Position Paper Version 2.0 dimensions, Hazard and Risk Awareness, Consistency for Food Safety, and Adaptability, Change, and Continuous Improvement, across both the organisational and operational layers. It typically combines document review, leadership interviews, employee surveys, and direct observation of practices on the production floor, comparing what is documented and stated against what happens in practice. The output maps the organisation against a maturity model and identifies specific, prioritised actions to close the gaps found.
The most common gaps are: leadership commitment statements that exist as documents but are not visible in day-to-day leadership behaviour, such as production pressure consistently overriding food safety judgement without consequence. Near-miss and hazard reporting systems that exist but are rarely used, often because staff don't believe reports lead to action or fear blame. Training that confirms attendance but doesn't build genuine understanding of why a procedure matters, leaving compliance dependent on supervision and not internalised practice. Culture treated as a one-off initiative, a training day or poster campaign, not an ongoing measured programme with leading and lagging indicators. An organisational layer, policies and resourcing, that doesn't match operational reality, where the documented culture and the lived culture diverge.
Our consulting work moves fast. A culture assessment, combining document review, leadership interviews, surveys and floor observation, typically takes 1 to 2 weeks depending on organisation size. Developing the indicator framework, leadership commitment materials, and improvement plan typically takes a further 1 to 2 weeks. Culture itself develops over a longer period through sustained practice. The consulting work establishes the framework and starting point, with measurable progress typically visible within a few months of consistent application.
Document review, indicator framework design, survey design, and leadership commitment material development are all available remotely. Leadership interviews and employee surveys can often be conducted remotely as well. Direct floor observation, an important part of a full assessment, is best done on-site, and we can scope a hybrid approach combining remote and on-site elements depending on your locations.
You can commission any of these on their own, with an agreed scope and a written quote, without taking on ongoing consulting. See all food safety services.
To produce the measured baseline the schemes now expect.
Read about A food safety culture assessment →To establish what each role needs and what your records evidence.
Read about A training needs assessment →Where the clause requires audits and nobody internal is independent enough.
Read about An internal audit →Tell us about your current certifications, your locations, and what's prompted you to look at culture now. We will tell you where to start.