15.1 Active Managerial Control Programs

A health inspection is a snapshot. It cannot watch Tuesday’s 9 p.m. cool-down or Saturday’s brunch rush. Active managerial control (AMC) is the FDA-recommended way to run the other 364 days: the Person in Charge (PIC) proactively keeps the five CDC/FDA retail risk factors under control instead of waiting for a red mark on an inspection form.

Chapter 2 introduced the PIC duty list and the AMC cycle. This section is the program that makes those duties real — written procedures, trained people, scheduled monitoring, pre-decided corrections, and records someone actually reads. The certificate on the wall is an input. The program is the work.

The five risk factors have not changed: food from unsafe sources, inadequate cooking, improper holding, contaminated equipment, and poor personal hygiene. Inspectors still look for them. AMC is how you stop them before the sedan with the county seal parks out front.

Why FDA Prefers AMC to Inspector-Driven Control

If the only time the operation meets the Food Code is during a visit, the system is reactive. Outbreaks happen between inspections. FDA’s retail guidance treats AMC as the permit holder’s job: identify the risks on this menu, put controls in place, watch those controls, and fix failures immediately. The inspector then verifies that the system is working. That is the opposite of “we will fix whatever they write up.”

Proactive control is specific. It is not a poster that says “Keep food safe.” It is a cold-well check every two hours with a discard rule, a receiving SOP that rejects 50°F milk, and a written health policy that sends a nauseated cook home before the first ticket. Those actions happen whether or not an inspector is in the building.

Scenario: The Manager Who Only Reacts After a Failed Inspection

A manager treats inspection day as the food-safety calendar. After a failed visit — cold wells at 50°F, missing date marks, an ill cook on the line — the manager buys a new thermometer, reprints posters, and coaches staff for two days. Logs look perfect until memory fades. The next inspection finds the same risk factors.

That manager has activity, not AMC. A living program would already have required cold-holding checks with a written discard rule, date-marking at prep rather than after a write-up, and an employee health policy that excluded the ill cook before service. The exam stem often describes this person as someone who “corrects violations only after the inspector leaves.” The correct move is to install the control before the visit — and to keep using it after the inspector drives away.

Tools of a Living AMC Program

AMC is a kit, not a slogan. Each tool maps to one or more of the five risk factors. If a tool exists only as a PDF in an office drawer, it does not count.

Trained CFPM and PIC

A certificate proves knowledge on test day. AMC requires a trained PIC who is on site and using that knowledge. Cross-train shift leads so the control does not leave when the opening manager does. Food Code 2-101.11 still requires a designated PIC during all hours of operation; this chapter adds the program layer: who is trained to monitor, who may discard food, and who may send a sick cook home at 8 p.m. without calling corporate first.

SOPs

An SOP is the written “how” for a repeating task. Receiving cold time/temperature control for safety (TCS) food at 41°F or below, cooking poultry to 165°F, cooling 135°F to 70°F in 2 hours then 70°F to 41°F in 4 more, washing, rinsing, and sanitizing a slicer at least every 4 hours of room-temperature TCS use — those are SOPs if staff can follow them without inventing a method.

A useful SOP names the hazard, the steps, the limit, who monitors, what correction is mandatory, and what record is kept. A poster that says “Wash hands” is a reminder. An SOP says when, at which sink, for at least 20 seconds, and what happens if the sink is empty of soap.

Monitoring: Temperatures, Handwashing, Receiving

Monitoring is planned observation, not a vibe. Cold wells and hot wells are checked on a schedule. Receiving includes product temperature, condition, and approved-source documents. Handwashing is watched at high-risk moments: after restroom use, after handling raw protein, before plating ready-to-eat (RTE) food.

If monitoring is only “we have thermometers,” you will miss the 128°F soup that sat through lunch. Write the frequency on the SOP. Train more than one person to do the check. The PIC reviews the numbers the same day, not at the end of the month.

Corrective Actions

Every monitor needs a pre-decided fix:

• Poultry under 165°F → continue cooking; do not plate
• Milk received at 50°F → reject the lot
• Chili that missed 70°F at 2 hours → reheat and restart cooling, or discard
• Cook with vomiting → exclude immediately; do not “finish the rush”
• Board used for raw chicken then lettuce → discard the lettuce; wash, rinse, and sanitize the board

The PIC who “notes” a failure and serves the food anyway is documenting a violation, not practicing AMC.

Record Keeping

Records are how AMC survives a shift change and an inspection. Keep what you will actually use: receiving logs and invoices, cook and cool logs for TCS batches, calibration logs, employee illness reports, pest-control invoices, and allergen incident notes. A stack of blank forms is not record keeping. Completed, dated, reviewed logs are. If a number is out of limit, the record must show the correction, not only the failure.

Employee Health, Allergens, and Suppliers

Chapter 7 owns exclusion details. The AMC program is the written policy plus the habit of sending people home. Chapter 5 owns the Big Nine. The AMC program is the ticket-note process, designated allergen equipment or a verified clean-down, and a manager who can answer “does this contain sesame?” without guessing. Chapter 9 owns approved sources. The AMC program is the approved-vendor list and the authority to reject a truck.

Food Safety Culture

Culture is AMC when the CFPM is not looking. It is built by training, by praising a discard, by never punishing an honest illness report, and by managers who follow the same rules they post. A kitchen that hides a cooling failure, restocks the hand sink only for inspection day, or jokes about “working sick” has a culture that will beat any binder.

AMC and FSMS Are Now Defined Terms

Through the 2022 base Code, "active managerial control" was a concept explained in Annex 4 rather than a defined word. The Supplement to the 2022 Food Code changed that. Two definitions were added to §1-201.10(B), and a manager should be able to say both:

ACTIVE MANAGERIAL CONTROL — "the purposeful incorporation of specific actions or procedures by industry management into the operation of their business to attain control over foodborne illness risk factors. It embodies a preventive rather than reactive approach to food safety through a continuous system of monitoring and verification."

FOOD SAFETY MANAGEMENT SYSTEM — "a specific set of actions taken by the employee to prevent the occurrence of foodborne illness risk factors based on the type of operation, type of food preparation, and foods prepared," and it "includes written procedures, training plans, and monitoring records."

The relationship is worth getting straight, because exam items now use both phrases. AMC is the management behavior. The FSMS is the documented system that carries it out. The Supplement also rewrote the lead-in sentence of §2-103.11 to read "The person in charge shall maintain active managerial control of foodborne illness risk factors by ensuring that…" — so AMC is no longer only good practice; every listed PIC duty now hangs off it.

And the FSMS now has a deadline: new §8-201.15 requires a written food safety management system to be developed and maintained, implemented during all hours of operation, and available to the regulatory authority on request, within 4 years of the regulatory authority's adoption of the Code. That section, plan review, and the FSMS contents question are covered in 16.5.

Binder on a Shelf Versus a Living System

Corporate packets often arrive as a thick food-safety binder: SOPs, blank logs, an allergen matrix, a recall phone tree. That binder is inventory. A living system is staff trained on the pages that match this menu; logs filled at the time of the check, not reconstructed after close; a PIC who reviews logs and acts on out-of-limit entries; procedures updated when the menu changes (a new raw bar, a new cook-chill chili); and mock drills for vomit cleanup and recalls.

If the inspector asks for the cooling SOP and the line cook has never seen it, you have a shelf system. If the cooling log is complete but every chili that missed 70°F was still served, you have a shelf system with extra paper. Living AMC produces different food, not only different files.

How AMC Maps to the Published Blueprints

NRFSP puts Implementing Active Managerial Control at the top of its blueprint as domain 100 (12.5 percent, 10 items), and adds Responding to Crises as domain 900 (6.25 percent). StateFoodSafety prints Managerial Responsibilities at 12 percent. Learn2Serve folds the same material into Legal and Regulatory Issues at 15 percent. However it is labeled, management is roughly an eighth of the exam on its own — and AMC is the management overlay on the flow of food. Receiving, storage, prep, cook, cool, reheat, and service are the process steps. AMC is how the PIC makes each step produce a safe outcome: SOP, monitor, correct, record. The next section is the formal seven-principle version of the same logic for processes that need critical control points.

When an exam item asks what the manager should do about a risk factor, the answer is almost never “wait for the next inspection” or “add a poster.” It is identify, intervene, monitor, correct, and train — AMC. The manager who only reacts after a failed inspection has described the wrong system.