1.2 ANAB-CFP Accreditation, FDA 2-102.12, and Providers
Key Takeaways
- FDA Food Code 2022 §2-102.12(A) states that the person in charge shall be a certified food protection manager who has shown proficiency by passing a test that is part of an accredited program; §2-102.12(B) lets the regulatory authority exempt establishments it deems minimal risk.
- Pre-2022 editions required only "at least one employee that has supervisory and management responsibility" to be certified, and that older wording is still enforced wherever a jurisdiction has not adopted the 2022 Code.
- FDA Food Code §2-102.11 lets the PIC demonstrate knowledge by (A) having no priority-item violations, (B) being a CFPM, or (C) answering inspector questions across 17 listed knowledge areas — 18 once a jurisdiction adopts the Supplement, which added food defense as §2-102.11(C)(18).
- The Conference for Food Protection writes the Standard for Accreditation (current version approved at the 2025 CFP meeting); the ANSI National Accreditation Board accredits programs against it. ANAB-CFP providers include ServSafe, StateFoodSafety, NRFSP, and 360training Learn2Serve.
- The current model is the 2022 Food Code (January 18, 2023 version) plus the Supplement to the 2022 Food Code, published 2024-11-04 with editorial corrections in December 2024. The next complete edition is due in 2026.
The Legal Hook: FDA Food Code §2-102.12
The reason a restaurant manager sits a CFPM exam is written in FDA Food Code 2022 §2-102.12. Read the 2022 text exactly, because it is stricter than the sentence most study books still print:
§2-102.12(A) — "The person in charge shall be a certified food protection manager who has shown proficiency of required information through passing a test that is part of an accredited program."
§2-102.12(B) — the section "does not apply to certain types of food establishments deemed by the regulatory authority to pose minimal risk of causing, or contributing to, foodborne illness based on the nature of the operation and extent of food preparation."
Two phrases do the exam work. The person in charge is the operative subject: under the 2022 edition the certificate attaches to whoever is the PIC, and §2-101.11 requires a PIC to be present during all hours of operation. A framed certificate belonging to a manager who is off on Sunday does not satisfy a Code that names the PIC. Passed a test that is part of an accredited program shuts down unaccredited internet certificates: the test has to belong to a program accredited against the CFP Standard, which is the ANAB-CFP pathway taught in this chapter.
The Older "At Least One Supervisory Employee" Wording Is Not Gone
Editions before 2022 wrote §2-102.12(A) differently: at least one employee that has supervisory and management responsibility and the authority to direct and control food preparation and service had to be a certified food protection manager. That is a staffing rule — one certified supervisor somewhere on the roster — not a shift-by-shift PIC rule.
Both sentences are live in the field. The FDA Food Code is a model; a jurisdiction enforces the edition it adopted. A county still on the 2013 or 2017 Code enforces "at least one supervisory employee." A county on the 2022 Code enforces "the person in charge shall be a certified food protection manager." On a national CFPM item that names the 2022 Food Code, answer with the PIC version. In your own operation, ask the health department which edition and which Supplement it has adopted, then staff to that sentence — and note that certifying more than one manager is how you satisfy either version on every shift.
Scenario: a new cafe owner buys a $15 "food manager diploma" from a website that is not ServSafe, StateFoodSafety, NRFSP, or Learn2Serve and is not otherwise ANAB-CFP accredited. The PDF looks official. On inspection day the health department asks for the accredited-program certificate required by the jurisdiction's adoption of §2-102.12. The $15 file does not meet "passed a test that is part of an accredited program." The establishment is out of compliance even if the coolers are perfect.
§2-102.11 Is Related — and It Is Not the Same Rule
FDA Food Code §2-102.11 is the demonstration of knowledge section for the PIC. It gives the PIC three ways to show the inspector that someone in charge understands food safety:
- (A) Complying with the Code by having no priority-item violations during the current inspection.
- (B) Being a certified food protection manager (the CFPM path).
- (C) Responding correctly to the inspector's questions across the Code's listed areas of knowledge. The 2022 edition lists 17 of them, §2-102.11(C)(1)–(17): the relationship between personal hygiene and foodborne disease, the PIC's duty over ill employees, symptoms of foodborne disease, time/temperature control, the hazards of raw or undercooked meat/poultry/eggs/fish, required cook times and temperatures, required storage/hot-holding/cooling/reheating times and temperatures, cross-contamination and bare-hand contact and handwashing and clean condition, major food allergens and their symptoms, adequate and properly designed equipment, cleaning and sanitizing procedures, water source and backflow, poisonous or toxic materials, critical control points, HACCP-plan compliance, the responsibilities and rights of employees / conditional employees / the PIC / the regulatory authority, and reporting-and-exclusion compliance.
The Supplement to the 2022 Food Code added an 18th area, §2-102.11(C)(18): explaining the steps taken to prevent intentional adulteration — food defense. So the honest count is 17 areas in the 2022 base Code and 18 once your jurisdiction adopts the Supplement. If a question asks how many areas of knowledge §2-102.11(C) lists, read the edition the stem names.
Candidates mix these sections up. §2-102.11(A) is not a substitute certificate. It is one way a PIC can demonstrate knowledge on that inspection. §2-102.11(C) is why a sharp PIC who has never sat an accredited exam can still answer inspector questions and look competent. §2-102.12 is still sitting next to it: under the 2022 edition the model Code wants the PIC to be a CFPM who passed an accredited-program test. A store can theoretically look knowledgeable under 2-102.11 and still be missing the 2-102.12 certificate on the person actually in charge. Study both citations. Do not collapse them into "if I can answer questions I do not need the card."
Worked example: during a routine visit the inspector finds a priority-item violation — chicken held at 120°F. Path (A) is already gone because a priority item failed. If the PIC also has no CFPM certificate, path (B) is gone. The PIC is now relying on path (C) and on whatever local enforcement the jurisdiction attaches to a missing 2-102.12 certificate. That is a bad day. The operational lesson is not "memorize the lettered paths to argue with an inspector." It is "hold the accredited certificate and run the operation so priority items do not appear."
Who Writes What: CFP, ANAB, FDA, Local Health Departments, Providers
Four organizations and your local health department share the CFPM world. They do not do the same job.
| Who | What they actually do | What they do not do |
|---|---|---|
| Conference for Food Protection (CFP) | Writes the Standards for Accreditation of Food Protection Manager Certification Programs | Does not grade your individual exam or inspect your restaurant |
| ANSI National Accreditation Board (ANAB) | Accredits certification programs against the CFP Standards | Does not write the FDA Food Code or issue every certificate by hand |
| U.S. Food and Drug Administration (FDA) | Publishes the Food Code, a model code that jurisdictions may adopt | Does not automatically make a new edition into nationwide law on publication day |
| Local health department | Adopts an edition of the Code (or a state code), inspects, and decides which certificates it will accept | Does not accredit ServSafe or write the CFP Standards |
| Providers (ServSafe, StateFoodSafety, NRFSP, 360training Learn2Serve) | Write, deliver, and score the accredited exams and issue certificates | Do not replace your local ordinance |
Keep the verbs straight for the exam and for registration day: CFP writes Standards. ANAB accredits programs. FDA writes a model code. The local health department enforces. The provider tests you.
The Accredited Provider Roster
Current ANAB-CFP Food Protection Manager programs that this guide treats as the core roster are:
- ServSafe (National Restaurant Association)
- StateFoodSafety
- National Registry of Food Safety Professionals (NRFSP)
- 360training Learn2Serve
Other names appear in the marketplace. Before you pay, confirm the program is the ANAB-CFP Food Protection Manager accreditation — not a food-handler card, not an alcohol certificate, and not an unaccredited "diploma." A food-handler card is a different, usually shorter credential for line staff. It does not satisfy the accredited-program test §2-102.12 requires of the person in charge.
NRFSP publishes a Manager Examination Blueprint with an effective date of 2025-12-22, and its exams began using that blueprint on 2026-01-05. The important second half of that announcement is that content coverage is unchanged. NRFSP regrouped how it labels domains; it did not invent a new body of food law. If you already studied FDA Food Code temperatures, the Big Six, the Big Nine, and PIC duties, you do not throw that work away because a domain heading moved. You do update any printed NRFSP outline so your study map matches the 2026 labels.
"Universal Acceptance" Still Has a Local Phone Call
Certificates from accredited programs are intended for universal acceptance. That is the point of a national standard: a ServSafe or StateFoodSafety or NRFSP or Learn2Serve CFPM card should travel with the manager from one adopting jurisdiction to another. "Intended for" is not the same sentence as "every clerk in every city has already updated the binder."
You still confirm the local health-department rule before you spend the voucher, and again before you open a second location.
- New York City is the classic extra-layer example. NYC runs its own Food Protection Course and card rules. An ANAB-CFP certificate that is accepted in a suburban county may not, by itself, finish the NYC requirement. Check the city, not a national brochure.
- Some California, Illinois, and Massachusetts operations add a separate allergen training or acknowledgment on top of the manager exam. The CFPM exam will still test allergen control — sesame is part of the Big Nine as of 2023-01-01 — but a local allergen add-on can still be a second card on the wall.
- Texas Department of State Health Services (DSHS) offers a statewide food-manager exam that is not the ANAB-CFP exam. A Texas operator who only holds the DSHS statewide result should not assume that card is the same credential as an ANAB-accredited CFPM if they later move to a state that lists only ANAB-CFP programs. The reverse is also a phone call: some Texas local jurisdictions have their own acceptance lists. Do not treat "I tested in Texas" as a complete legal analysis.
Scenario: Maya earns Learn2Serve in Ohio, then accepts a PIC job in a Massachusetts city that also wants documented allergen training. Her CFPM certificate is the accredited manager credential. It may still sit next to a local allergen module. She does not throw away the Learn2Serve card, and she does not assume the card silently completed every local add-on.
The Food Code Is a Model — Editions Lag on Purpose
The FDA Food Code is a model code. FDA publishes it so states, territories, and local governments have a scientifically updated template. Jurisdictions adopt editions on their own schedule. One county may be on the 2022 Code with the 2024 Supplement. The next county may still be enforcing a 2013 or 2017 adoption — which is exactly why the §2-102.12 wording differs from county to county. That is why two inspections 30 miles apart can sound different even though both inspectors are talking about "the Food Code."
The Current Model Is 2022 Plus the 2024 Supplement
FDA publishes complete Food Code editions on a four-year cycle and issues a Supplement in between. The stack you should name on exam day is:
| Document | Date | Why a manager cares |
|---|---|---|
| Food Code 2022 (10th edition) | Originally posted 2022-12-28; current file is the January 18, 2023 version (the version date prints on page i) | The base model: 41°F–135°F, sesame as the ninth major allergen effective 2023-01-01, the PIC-must-be-a-CFPM wording in §2-102.12 |
| Supplement to the 2022 Food Code | Published 2024-11-04; editorial corrections posted December 2024 with an errata sheet | Adds the manager-facing changes in the table below |
| Next complete edition | FDA has said the next full revision publishes in 2026 | Not yet the enforceable model anywhere; do not answer from a rumor about it |
The Supplement carries the 2023 CFP biennial-meeting recommendations. Six of its changes are manager-facing enough to appear on a 2026 CFPM item:
| Supplement change | Code hook | What it means on the floor |
|---|---|---|
| New defined terms ACTIVE MANAGERIAL CONTROL, DISINFECTION, FOOD DEFENSE, FOOD SAFETY MANAGEMENT SYSTEM | §1-201.10(B) | AMC and FSMS are now defined words in the Code, not just training jargon (15.1, 16.5) |
| Food defense added as a PIC area of knowledge and as employee training | §2-102.11(C)(18); §2-103.11(R); §2-103.11 lead-in now states the PIC's duty to maintain AMC | The inspector may ask the PIC to explain anti-tampering steps, and staff need food-defense training (4.3) |
| Reinstatement testing broadened beyond stool culture | §2-201.13(E)(1), (F)(1), (G)(1) | "2 consecutive negative laboratory test results from a validated test, using a laboratory accredited or certified to handle clinical specimens" replaces the old culture-only requirement (7.3) |
| Refilling returnables rewritten | §3-304.17 | Consumer-owned and third-party reusable containers may be refilled under stated conditions (14.5) |
| New Part 4-10 Disinfection of Equipment and Utensils | §§4-1001.11, 4-1002.11, 4-1003.11; plus §4-302.14(B) and §4-501.116(B) test-kit rules and §7-102.11 common-name labeling | Disinfection is now codified and separate from sanitizing (17.1, 17.4) |
| FSMS required on a clock | new §8-201.15 | Within 4 years of the regulatory authority's adoption of the Code, a written FSMS must be developed, implemented during all hours, and available to the RA on request (16.5) |
Sushi-rice acidification also gained explicit critical-limit guidance in Annex 6, Section 4 — which is why 11.3 treats acidified sushi rice as a documented special process.
For this study guide, the teaching baseline is FDA Food Code 2022 (the January 18, 2023 publication) as amended by the Supplement to the 2022 Food Code unless a section says otherwise. That is why this course uses 41°F–135°F as the TDZ, 41°F cold holding, and 135°F hot holding. It is also why sesame is taught as the ninth major allergen as of 2023-01-01 under FDA allergen law, even if a local adoption is slower to reprint a poster. When a practice item or an inspector question is jurisdiction-specific, the right move is to apply the local adoption — after you have the national model straight.
How This Maps Onto Your Registration Decision
- Ask the local health department which accredited programs it lists and whether a training course is required first.
- Ask whether NYC-style local courses, allergen add-ons, or a statewide non-ANAB exam (Texas DSHS) apply to your address.
- Pick one ANAB-CFP provider and study that provider's clock and cut score from Chapter 1.1.
- Keep the certificate current for the typical 5-year term.
If you can assign each verb — writes, accredits, models, enforces, tests — to the correct organization, you already understand more of the CFPM system than most first-time candidates.
Under FDA Food Code 2022 §2-102.12(A), who must be a certified food protection manager?
In the CFPM accreditation system, what do the Conference for Food Protection and the ANSI National Accreditation Board each do?
Which statement about acceptance of CFPM certificates is correct?