HACCP and GMP Implementation, the Foundation Everything Else Sits On
ASC Food Safety Consultants builds good manufacturing practice, the prerequisite programmes underneath it, and a HACCP plan worked through the Codex Alimentarius twelve steps and seven principles, then verifies the result with a GMP audit. This is the foundation every certification scheme is built on.
Consulting is charged hourly. A full implementation is quoted on scope once ASC has seen the site and the size of the gap, and ASC will tell you before the quote if the work is smaller than you think.
ASC builds the foundation a food business actually runs on: good manufacturing practice, the prerequisite programmes underneath it, and a HACCP plan worked through the Codex Alimentarius twelve steps and seven principles. The work happens on your site, in your process, with your people, and ends with a system your own team can run.
Most businesses meet HACCP because a customer or a tender asked for it, and what comes next is usually the same picture: a plan exists as a document, but the flow diagram does not match the floor, the critical limits were lifted from a template, and nobody can explain why the cook step sits where it sits. That plan will not survive an auditor or an inspection.
The legal position comes before the commercial pressure. The Foodstuffs, Cosmetics and Disinfectants Act 54 of 1972 and the general hygiene requirements published as R638 of 22 June 2018 in Government Gazette 41730 apply to food premises whether or not a business holds any certificate. R638 requires food premises to hold a certificate of acceptability issued by the local authority, and sets requirements for the handling of food, for food handlers, for premises and facilities, and for the transport of food. A food business that cannot show hygiene control has a legal problem before it has a commercial one.
Key facts at a glance
When a business calls ASC in
- A retailer, a food service group or an export customer has asked for a HACCP plan and a GMP audit report, and the business has neither.
- An informal or small operation is scaling into formal supply and must move from personal supervision to a system other people can run.
- A HACCP plan exists on paper, but nobody can produce the validation behind a single critical limit and an audit is close.
- A local authority inspection, a recall or an allergen incident has exposed a control that was assumed rather than verified.
- The business will certify to a scheme later and wants the foundation built first, so that project extends existing work instead of rebuilding it.
How ASC works with you
Good manufacturing practice and the prerequisite programmes
Good manufacturing practice is usually understood as cleaning, hairnets and a coat of paint. It is far wider. GMP is the set of operating conditions and practices that make it possible to produce safe food consistently, and HACCP assumes those conditions exist before the first hazard is written down. ASC builds each one: premises, layout and product flow so raw and ready to eat do not cross; water quality and the testing that proves it; cleaning and sanitation with chemical concentrations and contact times validated rather than inherited; personal hygiene and food handler health screening; pest management; maintenance; calibration; waste; chemical and packaging storage; supplier approval and incoming goods control; and storage and transport. Where these are weak, HACCP has nothing to stand on, because the plan then tries to control at a critical control point what basic hygiene should have prevented.
The Codex twelve steps, worked on the floor
ASC runs the twelve steps in order and skips none of them. A HACCP team is assembled from the people who operate the process, the product and its composition are described, and the intended use and consumer are identified, which carries weight when the customer is a school, a hospital or an elderly care facility. The flow diagram is drawn, then walked and verified on the floor while the line runs, because rework loops, bypass valves and the informal route a tray takes to the wash bay are where hazards hide. ASC then works the hazard analysis, determines critical control points using decision logic rather than habit, sets critical limits, designs monitoring a supervisor can genuinely complete during a shift, writes corrective actions naming the responsible person and the disposition of affected product, and puts in place the verification, documentation and record keeping that hold it together.
Validation, verification and the GMP audit
Validation separates a defensible plan from a paper one. A critical limit has to be justified against a target organism, and a habit is not evidence. A cook step needs a thermal process justification: which organism is controlled, what log reduction is required, at what core temperature, held for how long, measured at the slowest heating point of the largest unit rather than in the middle of the pot. Where preservation rests on formulation instead of heat, water activity and pH are the controlling hurdles, measured on finished product at the worst case end of the specification with calibrated instruments. Cross contamination and allergen carry over are treated the same way, with cleaning validated by result rather than appearance. ASC then verifies the system in use through a GMP audit, generally one day on site, report turnaround a week.
What you receive
| Deliverable | What it contains |
|---|---|
| Gap assessment report | The premises and process measured against good manufacturing practice, the prerequisite programmes and the general hygiene requirements, every gap rated and given an owner and a date. |
| Prerequisite programme set | Procedures for cleaning and sanitation, personal hygiene and health screening, pest management, maintenance, calibration, waste, chemical storage, supplier approval, water, storage and transport, with their registers. |
| HACCP study file | Team appointment and scope, product descriptions, intended use, the flow diagram verified on site, the hazard analysis and the critical control point determination with its reasoning. |
| HACCP control plan | Each critical control point with its critical limit, monitoring method and frequency, responsible person, corrective action, verification activity and the record it generates. |
| Validation file | The evidence behind each critical limit: thermal process justification, water activity and pH data where formulation controls the hazard, cleaning and allergen removal validation, and calibration certificates. |
| GMP audit report | Findings from one day on site against good manufacturing practice and the prerequisite programmes, with corrective action requests, evidence and a closeout route. |
Everything you need for HACCP and GMP, in one place
Consulting is one route. The ASC toolkits give you the HACCP and prerequisite documents, the online courses build competence from food handler to advanced implementer, and the library is free.
Do it yourself
Editable ASC document toolkits and templates, built by the same auditors who run the audits.
Train your team
Accredited online courses on ascfoodsafetytraining.com, studied at your own pace with certificates on completion.
Read first
Free guidance from the ASC library, written for South African food businesses.
Who this work suits
ASC works with food manufacturers, bakeries, butcheries and meat processors, packhouses, caterers and restaurant groups, school and hospital feeding operations, cold stores and distributors, and small or informal traders moving into formal supply. The work scales down honestly: a spaza operator or a home based baker growing into retail supply does not need the document set of a plant running four lines, but both need the same underlying controls.
ASC is SAATCA registered, is a FoodBev SETA Accredited Provider No. 587/00337/1900, and is B-BBEE Level 1. Founder and lead consultant Mthokozisi Nkosi is a SAATCA registered lead auditor, so the person building your HACCP plan knows how it will be tested when someone else audits it.
Where ASC stops
ASC is not a certification body. ASC does not certify anyone, does not award a certificate against any scheme, and cannot guarantee a certification result. The certification decision belongs to an accredited certification body after its own third party audit, and ASC keeps that separation deliberately. Where a scheme version or transition date affects your plans, confirm it with your certification body.
Frequently asked questions
Do we have to be certified to something before HACCP and GMP matter?
No. Certification is a commercial choice, but hygiene control is a legal requirement for food premises in South Africa under the Foodstuffs, Cosmetics and Disinfectants Act 54 of 1972 and the general hygiene requirements in R638 of 22 June 2018. A business with no scheme still has to hold a certificate of acceptability from its local authority and control its food handling, its food handlers, its premises and its transport.
How long does an implementation take, and how is it charged?
Consulting is charged hourly, but a full HACCP and GMP implementation is not an hour of advice. It is a project running over days or weeks depending on the number of products and process steps, the number of sites and how much of the prerequisite base exists. ASC quotes it on the agreed scope once the gap assessment is done.
Our HACCP plan was written by someone else. Can you work with it?
Yes, and this is common. ASC reviews the study against the twelve steps, verifies the flow diagram on the floor, tests whether each critical control point is genuinely critical, and asks for the validation behind each limit. Some need a rewrite, many need the hazard analysis reworked and the validation built, and a few simply need the records run properly.
Will this shorten a certification project later?
Yes, and this is the main reason to do it in this order. ISO 22000:2018, FSSC 22000, BRCGS Food Safety, IFS Food and SQF all build on the same foundation: prerequisite programmes, a hazard analysis, valid critical limits, and records showing the system was run as written. When that base is solid, a later scheme project becomes an exercise in adding what the scheme asks for on top.
What happens if the certification audit still raises findings?
Some will. An audit that raises nothing at all is unusual, and the certification body is entitled to see things ASC did not. What ASC works to prevent is a finding against a requirement it built, and a finding the site cannot close inside the certification body’s deadline. ASC stays available while findings are closed, works each one back to a root cause rather than patching it, and gathers the closure evidence in the form the auditor asked for. ASC cannot guarantee the outcome, because the decision belongs to the certification body, and any consultant who guarantees it is telling you something they cannot deliver.
Get a HACCP plan that will actually hold
Whether you need a plan built from nothing, an honest read on the one you have, or a GMP audit before an inspection, start with a conversation about your product and your process.
Not ready for a quote? Use Where Do I Start to see which standard your market actually needs, or book a virtual consultation.