Whether your controls were ever proven capable, and whether your verification shows they are still working.
A verification and validation review checks two separate things. Validation asks whether a control measure is capable of achieving what the plan claims, established before you rely on it. Verification asks whether the control is operating as intended, on an ongoing basis. Most food businesses have verification records and no validation evidence at all.
The two words get used interchangeably and standards treat them as separate requirements. A year of correct readings proves the limit was met every time. It establishes nothing about whether the limit was the right one, and that second question is the one most systems have never answered.
A control inventory, an honest position on what your evidence supports, and a plan for the gaps with worst case conditions specified. Delivered remotely, in any language, quoted on scope.
Three different questions, three different frequencies, and standards require all three.
| Activity | Question it answers | When it happens | Typical evidence | Frequency |
|---|---|---|---|---|
| Validation | Is this control capable of working? | Before the control is relied on, and again after any change. | Scientific literature, a challenge study, a heat penetration study, in house trials. | Once, then on change. |
| Monitoring | Is the control operating right now? | Continuously or at a defined frequency during production. | Temperature readings, metal detector checks, visual checks at a step. | Every batch or shift. |
| Verification | Is the system working as intended over time? | On a schedule, separately from the people doing the monitoring. | Record review, calibration, product testing, internal audit, mock recall. | Scheduled. |
Eight areas where a control is relied on and evidence is expected to exist.
Every limit relied on to control a hazard, proven for your product on your equipment.
Time and temperature combinations, with heat penetration through the slowest heating point.
That product reaches temperature within the required time under worst case load.
That the procedure removes soil, allergen or microbiological load to the required level.
The sensitivity achievable for your product, packaging and orientation.
That the product remains safe across the life assigned, where the hazard supports growth.
That pH, water activity or preservative levels achieve the control claimed.
That the action taken after a deviation restores control and addresses affected product.
Eight failures, and the first is close to universal.
Twelve months of correct temperature readings presented as proof the limit works. They prove the limit was met. Nothing in them establishes that the limit is the right one.
A time and temperature combination lifted from an industry guide or a textbook. It is a starting point for validation and it is not validation, because it was not established on your equipment with your product.
The smallest pack, the lightest load, the fullest oven, the most careful operator. It demonstrates the control can work and says nothing about whether it does.
A new pack size, a reformulation, new equipment or a process change, with the validation evidence predating all of it. Validation attaches to the conditions it was performed under.
The person who takes the readings also reviews them. Verification requires independence from the activity, or it is a second look by the same eyes.
A signature confirming records were reviewed, with no statement of what the review found. It evidences that someone looked and nothing about what the system is doing.
Deviations recorded, actions taken, and nothing confirming the action restored control or that it held.
A validation study performed by an equipment or ingredient supplier, covering their conditions. It supports your case and it does not replace evidence for your own process.
The validation position says plainly where evidence you believed you had does not support what it is being used for.
| Element | What it covers |
|---|---|
| Control inventory | Every control measure the plan relies on, listed with what it claims to achieve. |
| Validation position | What evidence exists for each control, and what it genuinely supports. |
| Evidence gaps | Controls relied on with no validation behind them, in priority order. |
| Validation plan | The study needed for each gap, with the worst case conditions specified. |
| Verification schedule | Activities, frequencies and who performs each, with independence respected. |
| Record design | Verification records that state what the review found instead of that it happened. |
| Revalidation triggers | The changes that require validation to be repeated. |
| Management review input | The summary standards expect verification results to feed into. |
Food manufacturers, processors and packers operating a HACCP based system. It suits any business whose critical limits came from a guidance document, and any site where verification is carried out by the people doing the monitoring.
Your critical limits came from a guide and were never tested on your equipment.
An auditor has asked for validation evidence you could not produce.
Verification records confirm review happened and not what it found.
The person monitoring also verifies.
A reformulation or new equipment has not been revalidated.
Corrective actions are taken and never verified.
Shelf life is assigned with no growth evidence behind it.
Verification results never reach management review.
Every control the plan relies on is listed with what it claims to achieve, since validation is assessed against the claim.
Existing validation evidence is examined for what it covers and the conditions it was generated under.
Controls relied on with no evidence behind them are identified and ordered by risk.
Activities, frequencies, independence and what the records state are all assessed.
The study needed for each gap is specified, including the worst case conditions it must run under.
A verification schedule and the revalidation triggers are delivered, with the management review summary.
Performing the validation studies. The review specifies what each study needs and the conditions it must run under, and your laboratory carries it out.
Laboratory analysis and challenge testing.
Where a control cannot be validated as it stands, the review says so. The answer is a different control, not a study designed to pass.
Every review is quoted against its own scope. One product with two critical limits and a range with several kill steps and shared lines are very different pieces of work. These factors set the price.
These are the primary sources this work is built on. Where a market you sell into has its own requirement, that takes precedence and we assess against it.
Validation asks whether a control measure is capable of achieving what you claim, and is established before you rely on it. Verification asks whether the control is operating as intended on an ongoing basis. Validation is done once and repeated on change. Verification runs on a schedule.
No. Monitoring happens during production and tells you whether the control is operating at that moment. Verification happens separately and tells you whether the system is working over time. Standards require both, and they require different people.
Every control measure the plan relies on. Critical limits, cook and kill steps, chilling and freezing, cleaning procedures, detection equipment sensitivity, shelf life where the hazard supports growth, formulation barriers, and the corrective actions themselves.
Published literature and regulatory guidance are legitimate sources, and they have to be applied to your product and your equipment. A limit lifted from a guide without any assessment of whether your process achieves it is a starting point, not validation.
The least favourable combination the control must still work under. The largest pack, the fullest load, the coldest start, the shortest permitted contact time. Validation performed under the easiest conditions demonstrates the control can work and never that it does.
After any change that could affect whether the control still works. A new pack size, a reformulation, new or modified equipment, a change to the procedure, or a new supplier of a critical ingredient. Standards also expect periodic review even without change.
No. Verification requires independence from the activity being verified. Where the same person takes readings and reviews them, it is a second look by the same eyes, and standards treat it as such.
It supports your case and does not replace evidence for your own process. A study performed by an equipment or ingredient supplier covers their conditions, which are rarely identical to yours.
A record stating what the review found, not that it happened. Twelve signatures confirming records were reviewed evidence that someone looked. A note that three deviations were found, investigated and closed evidences a system working.
Yes, and it is regularly missing. Deviations get recorded and actions get taken, with nothing confirming that the action restored control or that it held over time.
Most standards require verification results as a management review input. Verification that is performed and never summarised satisfies half the requirement, and the gap surfaces when the review inputs are examined.
A control inventory, a validation position stating what your evidence genuinely supports, evidence gaps in priority order, a validation plan specifying worst case conditions for each study, a verification schedule respecting independence, improved record design, revalidation triggers and the management review summary.
Confi Food assigns work by subject. HACCP, labelling, certification standards, regulatory compliance, supplier assurance and monitoring are separate disciplines, and each piece goes to someone who works in that area. Every deliverable is reviewed internally by a second specialist before it reaches you.
Our technical positions are built from primary sources, meaning the legislation, the competent authority, Codex Alimentarius, the certification scheme owner or the relevant standards body. We set out how that works in our technical review and editorial policy, and what happens at each stage of an engagement in how Confi Food works.
An independent technical review of your existing HACCP plan, checking that the hazard analysis holds and that the CCPs are genuinely the right ones.
Read about HACCP Plan Review →A review of the calibration programme covering every device you rely on to prove a control is working.
Read about Calibration Programme Review →A review of your environmental monitoring programme, covering zoning, sample sites, frequency, organisms and how you respond to a positive.
Read about Environmental Monitoring Programme Review →Certificated course covering hazard analysis, critical limits and validation.
View Certified HACCP Manager →Expert HACCP consulting worldwide. HACCP plan development, hazard analysis, CCP determination, validation, internal audits and training for food businesses of all sizes.
See HACCP Consulting →Expert ISO 22000 consulting worldwide. Gap assessments, FSMS design, internal audits, mock certification audits and ongoing compliance support for food businesses of...
See ISO 22000 Consulting →Expert FSMA consulting worldwide. Preventive Controls for Human Food, HARPC food safety plans, PCQI support, FSMA 204 traceability and FDA compliance for food businesses.
See FDA FSMA Consulting →Send your plan, your critical limits and any validation evidence you hold, and receive a written quote covering the scope, the deliverable and the price.