7 Support

7.1Resources

7.1.1 General

The organization shall determine and provide the resources needed for the establishment, implementation, maintenance, update and continual improvement of the FSMS.
The organization shall consider:

a)the capability of, and any constraints on, existing internal resources;

b)the need for external resources.

7.1.2People

The organization shall ensure that persons necessary to operate and maintain an effective FSMS are
competent (see 7.2).
Where the assistance of external experts is used for the development, implementation, operation or assessment of the FSMS, evidence of agreement or contracts defining the competency, responsibility and authority of external experts shall be retained as documented information.

7.1.3 Infrastructure

The organization shall provide the resources for the determination, establishment and maintenance of the infrastructure necessary to achieve conformity with the requirements of the FSMS.
NOTE Infrastructure can include:

a)land, vessels, buildings and associated utilities;

b)equipment, including hardware and software;

c)transportation;

d)information and communication technology.

7.1.4 Work environment

The organization shall determine, provide and maintain the resources for the establishment, management and maintenance of the work environment necessary to achieve conformity with the requirements of the FSMS.
NOTE A suitable environment can be a combination of human and physical factors such as:

a)social (e.g. non-discriminatory, calm, non-confrontational);

b)psychological (e.g. stress-reducing, burnout prevention, emotionally protective);

c)physical (e.g. temperature, heat, humidity, light, air flow, hygiene, noise).

These factors can differ substantially depending on the products and services provided.

7.1.5Externally developed elements of the food safety management system

When an organization establishes, maintains, updates and continually improves its FSMS by using externally developed elements of a FSMS, including PRPs, the hazard analysis and the hazard control plan (see 8.5.4), the organization shall ensure that the provided elements are:

a)developed in conformance with requirements of this document;

b)applicable to the sites, processes and products of the organization;

c)specifically adapted to the processes and products of the organization by the food safety team;

d)implemented, maintained and updated as required by this document;

e)retained as documented information.

7.1.6 Control of externally provided processes, products or services

The organization shall:

a)establish and apply criteria for the evaluation, selection, monitoring of performance and re- evaluation of external providers of processes, products and/or services;

b)ensure adequate communication of requirements to the external provider(s);

c)ensure that externally provided processes, products or services do not adversely affect the organization's ability to consistently meet the requirements of the FSMS;

d)retain documented information of these activities and any necessary actions as a result of the evaluations and re-evaluations.

7.2 Competence

The organization shall:

determine the necessary competence of person(s), including external providers, doing work under its control that affects its food safety performance and effectiveness of the FSMS;

a)ensure that these persons, including the food safety team and those responsible for the operation of the hazard control plan, are competent on the basis of appropriate education, training and/or experience;

b)ensure that the food safety team has a combination of multi-disciplinary knowledge and experience in developing and implementing the FSMS (including, but not limited to, the organization’s products, processes, equipment and food safety hazards within the scope of the FSMS);

c)where applicable, take actions to acquire the necessary competence, and evaluate the effectiveness of the actions taken;

d)retain appropriate documented information as evidence of competence.

NOTE        Applicable actions can include, for example, the provision of training to, the mentoring of, or the re- assignment of currently employed persons; or the hiring or contracting of competent persons.

7.3 Awareness

The organization shall ensure that all relevant persons doing work under the organization’s control shall be aware of:

a)the food safety policy;

b)the objectives of the FSMS relevant to their task(s);

c)their individual contribution to the effectiveness of the FSMS, including the benefits of improved food safety performance;

d)the implications of not conforming with the FSMS requirements.

          7.4Communication

7.4.1General

The organization shall determine the internal and external communications relevant to the FSMS,
including:

a)on what it will communicate;

b)when to communicate;

c)with whom to communicate;

d)how to communicate;

e)who communicates.

The organization shall ensure that the requirement for effective communication is understood by all persons whose activities have an impact on food safety.

7.4.2External communication

The organization shall ensure that sufficient information is communicated externally and is available for interested parties of the food chain.
The organization shall establish, implement and maintain effective communications with:

a)external providers and contractors;

b)customers and/or consumers, in relation to:

    1. product information related to food safety, to enable the handling, display, storage, preparation, distribution and use of the product within the food chain or by the consumer;
    2. identified foods safety hazards that need to be controlled by other organizations in the food chain and/or by consumers;
    3. contractual arrangements, enquiries and orders, including their amendments;
    4. customer and/or consumer feedback, including complaints;

c)statutory and regulatory authorities;

d)other organizations that have an impact on, or will be affected by, the effectiveness or updating of the FSMS.

Designated persons shall have defined responsibility and authority for the external communication of any information concerning food safety. Where relevant, information obtained through external communication shall be included as input for management review (see 9.3) and for updating the FSMS (see 4.4 and 10.3).
Evidence of external communication shall be retained as documented information.

7.4.3 Internal communication

The organization shall establish, implement and maintain an effective system for communicating issues having an impact on food safety.

To maintain the effectiveness of the FSMS, the organization shall ensure that the food safety team is informed in a timely manner of changes in the following:

a)products or new products;

b)raw materials, ingredients and services;

c)production systems and equipment;

d)production premises, location of equipment and surrounding environment;

e)cleaning and sanitation programmes;

f)packaging, storage and distribution systems;

g)competencies and/or allocation of responsibilities and authorizations;

h)applicable statutory and regulatory requirements;

i)knowledge regarding food safety hazards and control measures;

j)customer, sector and other requirements that the organization observes;

k)relevant enquiries and communications from external interested parties;

l)complaints and alerts indicating food safety hazards associated with the end product;

m)other conditions that have an impact on food safety.

The food safety team shall ensure that this information is included when updating the FSMS (see 4.4 and 10.3).
Top management shall ensure that relevant information is included as input to the management review
(see 9.3).

7.5 Documented information
7.5.1General

The organization’s FSMS shall include:

a)documented information required by this document;

b)documented information determined by the organization as being necessary for the effectiveness of the FSMS;

c)documented information and food safety requirements required by statutory, regulatory authorities and customers.

    NOTE        The extent of documented information for a FSMS can differ from one organization to another due to:

— the size of organization and its type of activities, processes, products and services;

— the complexity of processes and their interactions;

—     the competence of persons.

7.5.2Creating and updating

When creating and updating documented information, the organization shall ensure appropriate:

a)identification and description (e.g. a title, date, author, or reference number);

b)format (e.g. language, software version, graphics) and media (e.g. paper, electronic);

c)review and approval for suitability and adequacy.

7.5.3Control of documented information

7.5.3.1 Documented information required by the FSMS and by this document shall be controlled to

ensure:

a)it is available and suitable for use, where and when it is needed;

b)it is adequately protected (e.g. from loss of confidentiality, improper use, or loss of integrity).

7.5.3.2For the control of documented information, the organization shall address the following activities, as applicable:

a)distribution, access, retrieval and use;

b)storage and preservation, including preservation of legibility;

c)control of changes (e.g. version control);

d)retention and disposition.

Documented information of external origin determined by the organization to be necessary for the planning and operation of the FSMS shall be identified, as appropriate, and controlled.
Documented information retained as evidence of conformity shall be protected from unintended alterations.
NOTE        Access can imply a decision regarding the permission to view the documented information only, or the permission and authority to view and change the documented information.