6.6 Documenting Findings, Corrective Action Plans & Risk Control Plans
Key Takeaways
- Blueprint tasks B.16, B.21, B.22, and B.23 cover documenting assessment findings, analyzing inspection findings, developing a corrective action plan, and evaluating a facility's risk control plan.
- A defensible finding records the observation, the measurement, the location, the time, the code citation, and the correction status — never a conclusion about the operator.
- Analyzing findings means grouping them by risk factor to identify the systemic cause, rather than treating each citation as an isolated event.
- A corrective action plan states the immediate correction, the root cause, the systemic fix, who owns it, the deadline, and how it will be verified.
- A Risk Control Plan is a written agreement targeting one out-of-control risk factor, with a measurable monitoring method and a scheduled regulatory review.
6.6 Documenting Findings, Corrective Action Plans & Risk Control Plans
Exam Tip: Four separate Area B tasks live in this section. The distinction the exam tests most often is corrective action plan versus risk control plan — one fixes an incident, the other brings a chronically out-of-control risk factor back under active managerial control.
Anatomy of a Defensible Finding
Every documented finding should contain seven elements.
| Element | Example |
|---|---|
| What was observed | Sliced deli turkey in the front reach-in display |
| The measurement or objective fact | Internal temperature 51°F, measured with a calibrated thermocouple |
| Location | Front service reach-in, second shelf |
| Time | 11:42 a.m. |
| Quantity or extent | Approximately 8 lb across three pans |
| Code citation | Cold holding, Priority item, adopted code section |
| Correction status | Voluntarily discarded by the PIC at 11:50 a.m.; unit ambient 47°F, service call placed; reach-in taken out of service |
Three writing rules:
- Record observations, not conclusions. "Internal temperature 51°F" is evidence. "The operator does not care about food safety" is not.
- Quantify. "Several pans" is weaker than "three pans, approximately 8 lb."
- Record what the PIC said, verbatim where it matters. Paraphrase invites dispute.
Also record what was corrected on site. On-site correction is a legitimate and desirable outcome, and the record should show that the hazard was abated even where the violation is still cited.
Analyzing Findings: Grouping by Risk Factor
Blueprint task B.21 is "Analyze food safety inspection findings" — a distinct step from documenting them. Analysis converts a list into a diagnosis.
Group every finding under its risk factor and look at the pattern:
| Findings | Naive reading | Systemic reading |
|---|---|---|
| Cold holding 51°F; walk-in ambient 46°F; cooling log gaps; ice bath melted at the salad station | Four separate violations | One systemic failure: refrigeration capacity and cold-chain monitoring are inadequate; the operator's monitoring is not detecting drift |
| No soap at two hand sinks; bare-hand contact with sandwich bread; a hand sink blocked by a cart | Three violations | One systemic failure: handwashing infrastructure and hygiene training are not supported |
| Sanitizer bucket at 0 ppm; slicer with dried residue; no test strips on site | Three violations | One systemic failure: sanitation program lacks verification |
This is what separates a professional assessment from a checklist. The corrective action for "cold holding 51°F" is to discard the food; the corrective action for "the cold chain is not monitored" is a monitoring schedule, a logging procedure, an equipment repair, and a PIC record review.
The analytical questions to ask of any finding set:
- Is it repeat? Compare with prior inspection reports.
- Is it clustered? Multiple findings under one risk factor point to a systemic cause.
- Is it a monitoring failure or an execution failure? Did the operator know and not act, or not know?
- Does it correlate with a change? New menu item, new equipment, new supplier, turnover, ownership change.
The Corrective Action Plan
Blueprint task B.22 is "Develop a corrective action plan." A CAP addresses an identified deficiency and has six components.
| Component | Question it answers |
|---|---|
| Immediate correction | What was done right now to abate the hazard? (Discard, embargo, stop the process, exclude the employee) |
| Product disposition | What happens to the affected food? |
| Root cause | Why did this happen? Not "the cook forgot" — why was forgetting possible? |
| Systemic corrective action | What change prevents recurrence? (Repair, retrain, re-schedule, add a monitoring step, change a supplier) |
| Responsibility and deadline | Who, by when |
| Verification | How will it be confirmed effective, and by whom |
A CAP without a root cause is a promise to try harder, and it produces the same violation at the next inspection. Root cause analysis techniques — the Five Whys, fishbone diagrams — are covered in Section 4.5.
The Risk Control Plan
A Risk Control Plan (RCP) is a written, establishment-specific agreement between the operator and the regulatory authority targeting one out-of-control risk factor. It is the formal escalation when the same risk factor violation recurs across inspections.
| Element | Content |
|---|---|
| The risk factor targeted | One only — for example, improper cold holding |
| The specific violation history | Dates and findings that established the pattern |
| The control measure | What the operator will do differently, in operational terms |
| Monitoring | What will be measured, by whom, how often, recorded where |
| Corrective action | What the operator does when monitoring shows a deviation, without waiting for the regulator |
| Verification | How the operator will confirm the control is working — usually PIC record review |
| Regulatory review date | When the health authority will return to evaluate results |
| Signatures | Operator and regulatory authority |
CAP versus RCP
| Corrective action plan | Risk Control Plan | |
|---|---|---|
| Trigger | A specific deficiency or deviation | A repeated, out-of-control risk factor |
| Scope | The incident and its cause | One risk factor, systemically |
| Author | Usually the operator | Operator and regulator jointly |
| Formality | Internal document | Signed agreement with a scheduled regulatory review |
| Purpose | Fix and prevent recurrence | Restore active managerial control |
When evaluating an existing RCP (task B.23), test it against four questions:
- Does it target a single, specific risk factor, or is it a vague promise to do better?
- Is the monitoring measurable and scheduled, with a record?
- Does it define the corrective action the operator takes independently?
- Is there a review date, and did the review happen?
An RCP that says "management will emphasize the importance of temperature control" fails all four.
Report Quality and Legal Weight
The inspection report is a public record in most jurisdictions and may become evidence in an administrative hearing, a permit suspension, or civil litigation. Practical consequences:
- Write it on site or immediately after. Memory degrades and contemporaneous records carry more weight.
- Photograph conditions that will change — a blocked hand sink, a temperature display, pest evidence, a mislabeled container.
- Cite the specific adopted code section, not the model Food Code section, unless the jurisdiction adopted by reference.
- Have the PIC sign. The signature acknowledges receipt of the report, not agreement with the findings. Explain that when asked, because operators frequently refuse to sign believing they are admitting fault. A refusal to sign is itself noted on the report and does not invalidate it.
- Leave a copy and explain each violation, its classification, and its correction deadline before you leave.
During one inspection an inspector documents: two hand sinks with no soap, a hand sink blocked by a cart, and bare-hand contact with sandwich bread. What is the correct analytical conclusion?
What most clearly distinguishes a Risk Control Plan from a corrective action plan?
A person in charge refuses to sign the inspection report, saying it would be an admission that the violations are valid. What is the correct response?
Which corrective action plan entry demonstrates genuine root cause analysis rather than a restatement of the violation?