Food Science & Technology · Food Process Engineering · also Food Plant Sanitation, Cleaning and Sanitation, Food Hygiene, Sanitation and Hygiene in Food Industry
Keeping the plant clean and verified clean: soils and detergents, cleaning-in-place and cleaning-out-of-place, sanitisers and their validation, environmental monitoring for pathogens, personnel hygiene, pest management and water and waste hygiene.
In the exams: GATE XE-G Section 3 (food plant sanitation and cleaning in place); ICAR AICE 35.a Unit 4 (principles and practices of food plant sanitation); state Food Safety Officer syllabi
Sanitation is the part of food safety that happens every day, usually at night, and is noticed only when it fails. A plant can have a perfect HACCP plan, but if a slicer is not taken apart and cleaned, if a drain harbours Listeria, if a heat exchanger is left with a film of milk protein or if mice are nesting in a pallet store, the product will eventually be contaminated. Many of the largest recalls of the past decades, of ready-to-eat meats, cheeses, ice cream, peanut products and infant formula, were traced to failures of cleaning, environmental hygiene or pest control rather than to failures of the main process step.
This subject covers sanitation as an engineering and microbiological discipline: the principles of hygiene and the programmes that put them into practice; the kinds of soil and fouling found on equipment; the chemistry and choice of detergents and sanitisers; cleaning-in-place and its design, cycles and the Sinner circle; cleaning-out-of-place and manual and dry cleaning; how cleaning is validated and verified with ATP, swabs and allergen tests; biofilms and their control; environmental monitoring for Listeria and Salmonella; personnel and hand hygiene; integrated pest management; water hygiene; and the handling of waste and the care of the plant surroundings. The hygienic design of equipment and buildings is treated in food-plant-design-utilities and the management systems that sanitation belongs to in food-safety-management-systems.
Sanitation is examined in graduate entrance examinations in food technology, which name food plant sanitation and cleaning-in-place in their syllabi; in postgraduate and research-fellowship examinations; in food safety officer and food inspector recruitment examinations; and in professional certifications for food safety supervisors, preventive-controls practitioners, auditors and hygienic-design specialists. The questions with this manual follow those patterns, from definitions and sanitiser chemistry to plant scenarios and calculations of solution strength.
Sanitation in a food plant means creating and keeping hygienic conditions: removing soil and microorganisms from equipment and the environment, preventing contamination from people, pests, water and waste, and doing so in a way that can be shown to work. Several terms are used precisely. Cleaning removes soil (food residues, dirt, grease and scale) and with it most microorganisms; it always comes first, because sanitisers are inactivated by organic matter and cannot reach organisms buried in soil. Sanitising reduces the remaining microorganisms on a cleaned surface to levels considered safe; for food-contact sanitisers, regulators commonly specify a large reduction of test organisms in a short contact time, for example a 99.999 per cent (5-log) reduction in 30 seconds in the United States test protocol. Disinfection is a stronger reduction, aimed at destroying pathogens, usually on non-food-contact or clinical surfaces, and sterilisation destroys all life, including spores, as in the aseptic zone of a sterile filler.
The international framework is the Codex General Principles of Food Hygiene (CXC 1-1969, revised in 2020), which sets out good hygiene practices for the whole chain: primary production, establishment design and facilities, training and competence, establishment maintenance, cleaning and disinfection and pest control, personal hygiene, control of operation, product information, and transport. These good hygiene practices are often called prerequisite programmes because they must be in place before a HACCP system can work. Many food businesses write them up as sanitation standard operating procedures, which state for each area and item of equipment what is cleaned, by whom, how often, with which chemicals at which concentrations and temperatures, how it is checked, and what is done when it fails. A master sanitation schedule lists every cleaning task in the plant, including infrequent ones such as overhead structures, cooling units and drains, so that nothing is forgotten.
Effective sanitation depends as much on organisation as on chemistry. Responsibility is assigned to a sanitation manager or team, with trained staff, written procedures, enough time in the production schedule and proper tools. Hygienic zoning divides the plant by risk: raw-material areas, high-care or high-risk areas where cooked or ready-to-eat products are exposed, and dry areas. People, equipment, tools and air move from cleaner to less clean zones, never the reverse, and colour-coded tools stay in their zone. Wet cleaning, using water and chemicals, suits most processing areas; in dry plants handling powders, flour, nuts, chocolate or spices, water is kept out as far as possible, because moisture allows Salmonella and other organisms that survive in dry environments to multiply, and dry cleaning methods are used instead.
A typical wet clean of a production line follows a sequence: dry pick-up of debris and removal of product, disassembly, pre-rinse with water (often warm, not hot, to avoid baking protein onto surfaces), application of detergent with mechanical action, post-rinse, inspection, sanitising, and draining or drying before production starts. Safety is part of the procedure: machines are isolated and locked out before disassembly, operators wear protective equipment against hot water and caustic chemicals, and chemicals are stored and dispensed so that they cannot contaminate food. Sanitation also needs records and review. Pre-operational inspections, verification tests and environmental monitoring results are trended over time, and recurring failures lead to changes in procedures, training or equipment design. Regulators and certification auditors judge sanitation by these records as well as by what they see on the day.
Soil is any unwanted matter on a surface, and cleaning methods are chosen by knowing what the soil is and how it is bound. Carbohydrate soils, such as sugars, dissolve readily in warm water, but sugars that are heated caramelise into harder deposits, and starch gels and films need alkaline detergent. Fat soils are insoluble in water; they are removed by water hot enough to melt them, by emulsifying surfactants, and by alkali, which saponifies the fatty acids into soluble soaps. Protein soils are the most difficult: they bind strongly to surfaces, and heat denatures them into tough, insoluble films, so protein soils need strong alkali, often with chlorine (chlorinated alkaline detergents) or proteolytic enzymes, which break peptide bonds. Mineral soils come from hard water (calcium and magnesium carbonates, called scale), from milk (calcium phosphate milkstone) and from beer (calcium oxalate beerstone); alkalis do not remove them, and acids are needed. Microbial soils, including biofilms, consist of cells embedded in their own polymeric matrix (chapter 8).
Soils change with time and temperature. Fresh soil removed within minutes with water may need strong chemicals after it has dried for hours, and heat-treated soil is harder than raw soil, so equipment should be rinsed promptly after production. Surfaces matter too: soils cling more to rough, pitted, scratched or porous surfaces than to smooth stainless steel, and plastic and rubber parts absorb fat and deteriorate. A real soil is a mixture; milk residue, for example, contains protein, fat, lactose and minerals together. Cleaning programmes therefore usually combine an alkaline step to remove the organic soil with an acid step, used daily or periodically, to remove the minerals that the alkali leaves behind.
Fouling is the build-up of deposits on heat-transfer surfaces during processing. It reduces heat transfer, raises pressure drop, can stop a plant reaching its target temperature, and provides sites where spore-forming bacteria grow and break away into the product. It is most studied in dairy plants. Two types are distinguished. Type A deposits form at moderate temperatures, roughly between 75 and 110 °C, as in the heating section of a pasteuriser or the preheater of a UHT plant; they are soft, voluminous and rich in protein (largely denatured β-lactoglobulin, with some fat and minerals). Type B deposits form at higher temperatures, above about 110 °C, in UHT heaters; they are hard, granular and mainly mineral, chiefly calcium phosphate, because its solubility falls as temperature rises. Similar fouling occurs with egg, juices containing pulp, sugar solutions (scaling in evaporators) and starch.
Fouling is reduced by good design and operation: avoiding large temperature differences between the heating medium and the product, holding product briefly at a temperature that pre-denatures whey proteins in a holding section before the hottest zone, keeping velocities high, removing air, and controlling the product's pH and calcium. Even so, fouled plants need cleaning at regular intervals, and the length of a production run between cleans, the run time, is often set by fouling. The cleaning of a fouled heat exchanger is a two-stage chemical problem: an alkaline wash, often around 1 to 2 per cent sodium hydroxide at 70 to 85 °C, swells and dissolves the protein matrix, and an acid wash, for example with nitric or phosphoric acid, dissolves the mineral layer; the order depends on the deposit, and high-mineral type B deposits may need the acid first. Monitoring pressure drop and outlet temperature during production signals when fouling has become significant.
A detergent is a cleaning compound formulated for a soil, a surface and a cleaning method. Its components provide several functions: wetting (lowering surface tension so that the solution penetrates soil), emulsifying fats, dispersing and suspending particles so that they are rinsed away instead of redepositing, saponifying fats, dissolving proteins and minerals, sequestering hardness ions, and rinsing freely without leaving residues. A good detergent also avoids corroding the equipment and is as safe as possible for workers and the environment.
Alkalis are the backbone of most food-plant detergents. Sodium hydroxide (caustic soda) is strongly alkaline, saponifies fat and dissolves protein, and is cheap, making it the standard CIP detergent, but it is corrosive to aluminium and to skin and rinses less freely without additives. Sodium carbonate and silicates are milder; silicates also protect soft metals from corrosion. Phosphates, such as trisodium phosphate and polyphosphates, add alkalinity, disperse soil and sequester hardness, although their use is restricted in many regions because they cause eutrophication of waters. Acids remove mineral deposits: nitric acid is widely used in CIP and also passivates stainless steel, renewing its protective chromium oxide film; phosphoric acid is less aggressive and often combined with surfactants; organic acids such as citric, gluconic and glycolic acids are used where milder action is wanted. Hydrochloric acid is avoided on stainless steel because chlorides cause pitting corrosion.
Surfactants are molecules with a hydrophilic head and a hydrophobic tail. Anionic surfactants, such as alkyl benzene sulphonates, are good general cleaners and foamers; non-ionic surfactants, such as alcohol ethoxylates, are good wetting agents and low-foaming types are chosen for CIP, where foam would cause pump cavitation; cationic surfactants, the quaternary ammonium compounds, are weak cleaners but useful sanitisers (chapter 4), and they are incompatible with anionic surfactants; amphoteric surfactants work across a wide pH range. Sequestering and chelating agents, such as EDTA, gluconates and polyphosphates, bind calcium and magnesium so that they do not form scale or precipitate the detergent. Enzymes, mainly proteases, amylases and lipases, are used in mild-pH detergents for membrane plants and sensitive equipment.
Detergent choice follows the soil: alkaline for organic soils of fat and protein, chlorinated alkaline where protein films are stubborn (chlorine breaks peptide bonds and helps peptise protein), acid for mineral scale, enzymatic where surfaces cannot tolerate high pH or temperature, as with many polymeric ultrafiltration and reverse-osmosis membranes. It also follows the surface: stainless steel tolerates caustic and nitric acid; aluminium, galvanised steel and some plastics need milder products. Water hardness affects performance, because calcium and magnesium react with soaps and some detergent components and deposit scale; detergents for hard-water areas carry more sequestrant.
Concentration is checked rather than assumed. In CIP systems it is controlled by conductivity, which rises with caustic or acid concentration; in manual cleaning it is checked by titration of a sample against standard acid or alkali, or with test kits. Stronger is not always better: above a certain concentration, extra caustic gives little extra cleaning, costs more, needs more rinsing and can make protein deposits harder to remove by forming a gel on their surface. A typical CIP detergent solution is in the range of about 0.5 to 2 per cent sodium hydroxide; typical acid washes use about 0.5 to 1 per cent nitric or phosphoric acid at 60 to 70 °C, but suppliers' recommendations for the plant and soil take priority. To make up a solution, the volume of concentrate is calculated from the target concentration: for example, to prepare 1000 litres of 1.5 per cent (w/v) sodium hydroxide from a 50 per cent (w/w) solution with a density of about 1.52 kg/L, 15 kg of NaOH is needed, which is 30 kg of concentrate, or about 19.7 litres. Chemical safety rules apply throughout: acids and alkalis are never mixed with each other or with chlorinated products, because chlorine gas or heat can be released; concentrated chemicals are dosed by closed systems where possible; and safety data sheets are available to staff.
Sanitisers are applied to clean surfaces to kill the microorganisms that remain. Their effect depends on concentration, contact time, temperature, pH, the organic matter left on the surface, water hardness and the organisms present; spores, biofilms and some viruses are far more resistant than vegetative bacteria. Heat is the oldest and in many ways the best sanitiser: hot water at about 80 °C or above, or steam, penetrates crevices, leaves no residue and kills vegetative cells, but it is energy-intensive, can bake on residual soil and is a scalding hazard. Hot-water sanitising of utensils typically specifies a minimum water temperature, such as 77 °C, for a minimum time; CIP systems often finish with a hot-water or steam step.
Chlorine compounds, sodium hypochlorite and calcium hypochlorite, and chlorine gas in water treatment, are inexpensive and act quickly against bacteria, many viruses and, at high concentrations and long contact times, spores. In water they form hypochlorous acid (HOCl), the active form, in equilibrium with hypochlorite ion (OCl⁻); because the pKa is about 7.5, HOCl predominates at lower pH, so chlorine is far more effective around pH 6 to 7.5 than at pH 9, but below about pH 5 toxic chlorine gas may form. Chlorine is quickly consumed by organic matter, is corrosive to stainless steel at high concentrations and temperatures, irritates skin and can form chlorinated by-products. Typical food-contact sanitising concentrations are in the range of about 50 to 200 mg/L available chlorine, within the limits set by the regulator for no-rinse use. Chlorine dioxide is effective over a wider pH range, reacts less with organic matter and is used for water treatment, flumes and some surfaces. Iodophors, iodine complexed with a surfactant carrier, are used at about 12.5 to 25 mg/L iodine at acidic pH; their amber colour shows they are present, they are less corrosive than chlorine and act in hard water, but they stain plastics and lose iodine above about 50 °C.
Quaternary ammonium compounds (quats) are cationic surfactants that disrupt microbial membranes. They are stable, odourless, non-corrosive and non-irritating at use concentrations, and they leave a residual antimicrobial film, which is useful on floors, walls and drains and against Listeria, but undesirable on surfaces where residues could carry into fermented products, because quats inhibit starter cultures. They are less effective against some Gram-negative bacteria, do not kill spores, are inactivated by anionic surfactants and hard water, and foam, so they are not suited to CIP. No-rinse food-contact use is limited to set concentrations, commonly up to about 200 mg/L active quat.
Peracetic acid (peroxyacetic acid), sold as an equilibrium mixture with hydrogen peroxide and acetic acid, is a strong oxidising sanitiser with a broad spectrum including spores at higher concentrations; it works in cold water and at low pH, tolerates some organic matter, does not foam (so it suits CIP), and breaks down into acetic acid, water and oxygen, leaving no harmful residue. It is the most widely used CIP sanitiser in many dairies, breweries and beverage plants, typically at around 100 to 200 mg/L, although it is corrosive to soft metals and pungent in concentrated form. Hydrogen peroxide is used hot and concentrated to sterilise packaging material in aseptic fillers, ozone for water treatment and some surface applications, ethanol (about 70 per cent) for dry surfaces and small equipment in dry plants, ultraviolet light for water, air and surfaces in direct line of sight, and acid-anionic sanitisers that combine an acid rinse with sanitising.
Sanitiser efficacy is tested by standard laboratory methods: suspension tests, such as the European standard EN 1276, which requires at least a 5-log reduction of test bacteria in a set time; surface tests, such as EN 13697, which requires at least a 4-log reduction of bacteria on a dried film; and the use-dilution and sanitiser tests of AOAC International used in North America. A sanitiser is registered or approved for food-contact use by the national regulator with its permitted concentrations and whether a rinse is required. In the plant, the concentration in use is checked with test strips or titration at every application, because an under-strength solution gives a false sense of security and an over-strength one wastes money, damages equipment and may leave unlawful residues.
Cleaning-in-place (CIP) cleans pipelines, tanks, heat exchangers, fillers and other closed equipment by circulating cleaning solutions through them without dismantling. It is the standard method in dairies, breweries, beverage, sauce and liquid-food plants because it is repeatable, can be automated and recorded, uses chemicals and water efficiently and keeps operators away from hot caustic. Its principles are summarised in the Sinner circle, proposed by the chemist Herbert Sinner in 1959: cleaning results from four factors, temperature, mechanical action, chemical concentration and time (often remembered as TACT). If one factor is reduced, the others must be increased to achieve the same result; a lower detergent temperature, for example, needs a longer time or a stronger solution. In CIP the mechanical action comes from the flow: turbulent flow in pipes, commonly specified as a velocity of at least about 1.5 m/s, and the impact or sheeting of liquid from spray devices in tanks.
A typical CIP programme for a dairy line runs: a pre-rinse with water (often recovered final rinse water) to remove loose soil until the return runs clear; an alkaline wash, commonly about 0.5 to 2 per cent caustic at about 70 to 85 °C for some 10 to 30 minutes in pipes, longer in heavily fouled heat exchangers; an intermediate rinse; an acid wash, perhaps 0.5 to 1 per cent nitric or phosphoric acid at 60 to 70 °C, daily or at a set frequency; a further rinse; and a sanitising step with hot water or a chemical sanitiser such as peracetic acid, followed if needed by a potable-water rinse. Some plants use single-phase formulated detergents that combine functions to shorten the cycle. Each phase is controlled and recorded for flow, temperature, conductivity and time; the record is the evidence that the clean was done as validated. The exact parameters are set by validation for each circuit and soil, not copied from another plant.
A CIP system includes tanks for detergent, acid and water (and sometimes recovered rinse water), a supply pump, heat exchangers to heat the solutions, valves and pipework to route them to each circuit, return pumps to bring solutions back, and instruments: conductivity sensors to measure concentration and to detect the interface between water and chemical, temperature and flow sensors, and often turbidity sensors. In a re-use system, solutions are returned to their tanks, topped up and reused many times, saving chemicals and energy; in a single-use system, solution is used once and discarded, which suits heavily soiled or sensitive circuits and avoids cross-contamination between circuits. Satellite CIP units sit close to the equipment they serve.
Tanks and vessels are cleaned by spray devices. Static spray balls are simple and have no moving parts but rely on falling films and need large flows; rotating spray heads and rotating jet heads give higher impact with less liquid and can reach further, but they have moving parts that must be checked. Spray coverage is verified, for example by riboflavin tests, in which a fluorescent riboflavin solution is sprayed on the inside of the vessel and the absence of fluorescence under ultraviolet light after a water rinse shows full coverage. Tank outlets must drain freely so that solution does not pool, and return pumps must keep up with the supply, or the vessel fills and cleaning fails. Pipework is designed to drain, without dead legs (branches where solution does not flow, which should be avoided or kept to a length of not more than about one to two pipe diameters, as hygienic-design guidelines from bodies such as EHEDG and 3-A recommend), with hygienic fittings and gaskets. Product and cleaning circuits must be separated reliably while one part of a plant is cleaned and another runs: double-seat (mix-proof) valves with a leakage chamber open to drain, or removable connection panels (swing bends), prevent caustic from reaching product. CIP is designed together with the equipment from the start, because equipment that cannot be cleaned in place, or that has shadow areas a spray cannot reach, will remain a hazard however well the CIP programme is written.
Not everything can be cleaned in place. Equipment for solid foods, such as slicers, mixers, conveyors, formers, fillers for particulate foods and packaging machines, and small parts such as valves, gaskets, nozzles, blades and fittings, must be dismantled and cleaned by hand or in a cleaning-out-of-place (COP) system. A COP tank is a stainless-steel washer in which parts are immersed in heated, agitated detergent solution, often with recirculating jets, for a set time and temperature, then rinsed and sanitised; it brings some of the repeatability of CIP to small parts. Parts washers and tunnel washers for crates, trays, moulds and bins work on the same principle, with wash, rinse and sanitise zones.
Manual wet cleaning of open equipment and rooms follows the sequence given in chapter 1. Foam cleaning is widely used for walls, floors and the outside of equipment: foam generators mix detergent with air and apply a clinging foam that gives the chemical a contact time of perhaps 10 to 20 minutes on vertical surfaces, after which it is rinsed off; gels cling even longer. Brushes, pads and scrapers supply the mechanical action for the parts of equipment where soil is most stubborn. Pressure matters: low-pressure, high-volume rinsing removes loosened soil gently, while high-pressure hoses remove soil quickly but create aerosols and splash that can spread soil and organisms, including Listeria from floors and drains, onto clean equipment and product-contact surfaces. Many hygiene guidelines therefore recommend medium or low pressure, cleaning from the top down and from clean areas towards drains, never hosing floors while product is exposed, and never using hoses to clear drains. Cleaning tools are themselves a contamination risk; they are colour-coded by area and use, kept clean and dry, replaced when worn and never used on floors and then on food-contact surfaces.
In plants handling low-moisture foods, such as flour, cereals, milk powders, infant formula, chocolate, nuts, spices and dry pet food, water is the enemy. Pathogens such as Salmonella and Cronobacter survive for long periods in dry conditions but cannot multiply; water introduced during cleaning lets them grow in cracks, insulation and equipment, and some major outbreaks linked to peanut butter, infant formula and dry snacks were associated with water ingress or wet cleaning in dry areas. Dry cleaning methods are therefore preferred: scraping and brushing, industrial vacuum cleaners with high-efficiency filters (compressed air is avoided because it blows dust and organisms around), wiping with alcohol-based products that evaporate, dry steam in limited areas, and dry ice (solid carbon dioxide) blasting, which removes deposits without water. When wet cleaning of a dry-area component cannot be avoided, the part is taken to a separate wash room, cleaned and fully dried before it returns, or controlled wet cleaning is done with thorough drying afterwards and verification.
Allergen management is a major reason for manual and COP cleaning. When a line changes from a product containing an allergen, such as milk, egg, peanut, tree nuts, wheat, soy, sesame, fish or crustaceans, to one that does not, the changeover clean must remove allergenic residues to a validated level, and dry products are particularly difficult because fine powders spread widely. Allergen cleans often require more disassembly and are verified by specific tests (chapter 7). Throughout, people's safety is protected: machines are isolated and locked out and tagged out before guards are removed, staff are trained in chemical handling, eye-wash stations and showers are available, and slippery floors and hoses are managed. The quality of manual cleaning varies with people more than CIP does, so training, supervision, clear visual standards (photographs of what clean looks like), and verification by someone other than the cleaner are essential.
Two questions must be answered about any cleaning procedure. Validation asks whether the procedure, done as written, is capable of achieving the required result; it is done when a procedure is introduced or changed, by collecting evidence such as microbiological counts before and after cleaning, removal of a worst-case soil or allergen, coverage tests for spray devices, and a series of repeated trials. Verification asks whether the procedure was actually done correctly and worked on a particular occasion; it is done routinely, by visual inspection, monitoring records (such as CIP temperature, conductivity, flow and time), rapid tests and microbiological sampling. Monitoring is the ongoing observation of the controlled parameters, such as sanitiser concentration at each use. Codex and certification standards expect both validation and verification, and the distinction is a common examination topic.
Visual inspection is the first verification step. Before production starts, a trained person other than the cleaner inspects equipment with a torch for visible residues, water pooling, damage and foreign material, a pre-operational inspection. Visual cleanliness is necessary but not sufficient, because invisible films can carry microorganisms and allergens.
ATP bioluminescence is the most widely used rapid hygiene test. Adenosine triphosphate is present in all living cells and in most food residues. A swab of a defined area is placed in a reagent containing the firefly enzyme luciferase and its substrate luciferin; in the presence of ATP and magnesium, light is emitted in proportion to the amount of ATP, and a hand-held luminometer reads it in seconds as relative light units. Because it detects food residue as well as microbes, ATP testing measures overall cleanliness rather than microbial contamination, and its readings are not counts of bacteria. Each instrument brand uses its own scale, so pass, caution and fail limits are set for each surface from baseline data in the plant. Its strengths are speed, which allows re-cleaning before production starts, and trending; its limits are that some residues contain little ATP (for example highly processed or fermented products, some allergens such as purified proteins), that sanitiser residues can interfere with the reaction, and that low readings do not prove the absence of pathogens.
Microbiological verification uses swabs or sponges moistened with a neutralising buffer (to stop the sanitiser acting after sampling) over a defined area, such as 10 cm × 10 cm, or contact plates pressed onto flat surfaces, with culture for total aerobic counts, Enterobacteriaceae, coliforms, yeasts and moulds or specific organisms. Results take one or more days, so they confirm the hygiene standard over time rather than release a particular line. Rinse samples from CIP circuits, the final rinse water, are tested for counts and for chemical residues, and pH or conductivity of the final rinse checks that detergent has been removed.
Allergen verification uses tests for the specific allergen or for protein. General protein swabs change colour in the presence of protein residue and are cheap and fast, but they do not show which protein is present and are relatively insensitive. Specific immunochemical tests, lateral-flow devices and enzyme-linked immunosorbent assays (ELISA), detect proteins of a named allergen, such as peanut, milk (casein or β-lactoglobulin), egg, gluten or almond, on surfaces, in rinse water or in the first product made after the changeover, at levels in the low mg/kg range. Validation of an allergen clean usually combines these: swabs of worst-case locations, rinse-water tests and testing of the first product, against an action level set by the business's risk assessment, since in most jurisdictions there are no regulatory thresholds for allergen residues on surfaces.
A biofilm is a community of microorganisms attached to a surface and embedded in a matrix of extracellular polymeric substances (EPS) that they produce, made of polysaccharides, proteins, lipids and extracellular DNA. Most microorganisms in natural and industrial environments live this way. Formation follows stages: a conditioning film of organic molecules adsorbs to a clean surface within minutes; bacteria attach, first reversibly by weak forces and then irreversibly through adhesins and EPS; they grow into microcolonies; the biofilm matures into a three-dimensional structure with water channels; and cells or fragments detach and colonise new sites. Cell-to-cell signalling (quorum sensing) coordinates some of these steps. Mixed-species biofilms are common, and harmless organisms such as Pseudomonas can shelter pathogens such as Listeria monocytogenes and Salmonella.
In food plants, biofilms grow wherever moisture, nutrients and time combine with surfaces that are hard to clean: floor drains, conveyor belts and rollers, cracked or worn gaskets and seals, hollow framework, the undersides of equipment, water-cooled jackets, heat exchanger plates, membranes, and pipework with dead legs. Thermophilic spore-forming bacteria, such as Anoxybacillus flavithermus and Geobacillus species, form biofilms in the warm sections of milk-powder plants and evaporators and can shed into the product during long runs, a classic quality problem of dairy powders. Biofilms matter because the matrix protects the cells: they can be ten to a thousand times more tolerant of sanitisers than the same cells in suspension, partly because the sanitiser is neutralised or slowed in the matrix and partly because the cells are physiologically different. A sanitiser concentration that passes a suspension test can therefore fail against an established biofilm, and the persistent strains that cause repeated contamination of a plant over years are often biofilm residents of a particular niche.
Prevention is more effective than removal. Hygienic design comes first: smooth, non-porous surfaces (for food-contact stainless steel, hygienic-design guidance commonly specifies a surface roughness Ra of about 0.8 µm or less), continuous welds ground smooth, no crevices, gaps or hollow sections that collect liquid, self-draining equipment and replaceable seals. Operation follows: cleaning before biofilms mature, keeping surfaces dry between production runs, avoiding condensate dripping, replacing worn belts and gaskets, and limiting the length of production runs where biofilms build up.
Removal needs both mechanical and chemical action, because the EPS matrix shields cells from sanitisers. Alkaline and chlorinated alkaline detergents, often with surfactants and sometimes enzymes that degrade the matrix (proteases, polysaccharide-degrading enzymes, DNases), loosen and remove the biofilm; brushing, scrubbing and turbulent flow break it up; only then can a sanitiser reach the cells. Oxidising sanitisers such as peracetic acid, chlorine dioxide and chlorine are generally more effective against biofilms than quats, and heat helps. Persistent problems need a deeper approach: environmental sampling to locate the niche, investigation of equipment, sometimes taking machinery apart to find hidden harbourage (inside hollow rollers, behind name plates, under worn welds), and redesign or replacement of the item. Simply increasing sanitiser concentrations or rotating sanitisers does not reliably solve biofilm problems, and the evidence for routine sanitiser rotation preventing resistance is limited. Newer approaches studied for biofilm control include bacteriophages, competitive exclusion with benign cultures, antimicrobial surfaces and quorum-sensing inhibitors; some are used commercially in specific applications, but none replaces design and cleaning.
An environmental monitoring programme samples the processing environment, not the product, to find out whether pathogens or their indicators are present and whether sanitation and hygiene controls are working. It is a verification activity, and its value lies in finding problems before they reach the product. The programme is risk-based: it is most important where ready-to-eat food is exposed to the environment after a lethal step and before packaging, such as sliced cooked meats, soft cheeses, smoked fish, ice cream and fresh-cut produce for Listeria monocytogenes, and dry products such as powdered infant formula, chocolate, peanut butter and dry pet food for Salmonella and Cronobacter. Codex guidelines on the application of food hygiene principles to the control of L. monocytogenes in ready-to-eat foods describe environmental monitoring as a key element, and some national rules, such as the United States preventive-controls regulation for ready-to-eat foods exposed to the environment, require it.
Sampling sites are classed by zones of risk. Zone 1 is food-contact surfaces, such as slicers, conveyor belts, fillers and utensils. Zone 2 is non-food-contact surfaces close to zone 1, such as equipment frames, control panels and the exterior of machines. Zone 3 is non-food-contact surfaces farther away within the processing area, such as floors, walls, drains and forklift trucks. Zone 4 is outside the processing area, such as corridors, locker rooms and loading docks. Most samples are usually taken from zones 2 and 3, because finding organisms there gives warning before they reach zone 1. Target organisms are chosen for the hazard and the environment: Listeria species (all species, as an indicator of conditions that allow L. monocytogenes) in wet, cold ready-to-eat environments; Salmonella and Enterobacteriaceae (as a hygiene indicator) in dry environments; Cronobacter in infant-formula plants.
Samples are taken with sponges or swabs moistened with a neutralising broth over large areas (for example, up to about 900 cm² for zone 2 and 3 sponges), during production after several hours of running, when organisms dislodged from niches are most likely to be found, as well as at pre-operational times to verify cleaning. Sites are listed on a plant map, rotated so that every site is sampled over time, and supplemented by investigative samples from hard-to-reach places when equipment is dismantled. Samples from zones 2 to 4 may be composited to save cost, but zone 1 samples are often tested individually or in small composites so that a positive can be traced. Results are trended: an increase in Listeria-positive drains, for example, may come before a contact-surface positive.
Each positive triggers a predefined response that scales with the zone. A positive in zone 3 or 4 leads to re-cleaning and resampling of the site and its surroundings. A positive in zone 2 leads to intensified cleaning, vector swabbing (sampling outward from the positive site to find the source) and resampling, and checking nearby zone 1 surfaces. A positive in zone 1 is the most serious: product made on that line since the last negative result may be held and tested, the line is cleaned and sanitised intensively and often dismantled, root-cause investigation follows, and repeat positives may require product disposal, equipment redesign or regulatory notification depending on the jurisdiction. Positive Listeria species results in zone 1 are often treated as if they were L. monocytogenes unless further testing shows otherwise. The best programmes adopt a 'seek and destroy' philosophy: the aim is to find harbourage sites and eliminate them, not to report low positive rates. A programme that never finds anything is not necessarily evidence of a clean plant; it may be sampling the wrong places at the wrong times. Molecular typing of isolates, by pulsed-field gel electrophoresis in the past and whole-genome sequencing now, shows whether repeated positives are the same persistent strain from one niche or repeated new introductions, which call for different corrective actions.
Food handlers can carry and spread pathogens even when they feel well. Norovirus, the commonest cause of food-borne illness in many countries, is shed in enormous numbers in vomit and faeces and has a very low infectious dose; hepatitis A virus is shed before symptoms appear; Salmonella, including the typhoid serovar, Shigella and Shiga toxin-producing Escherichia coli can be carried after illness; and Staphylococcus aureus lives in the noses and on the skin of a large proportion of healthy people and in infected cuts and boils. Personnel hygiene programmes therefore control health, behaviour, clothing and movement.
Health controls require staff to report symptoms such as diarrhoea, vomiting, jaundice, fever with sore throat, and infected skin lesions, and diagnoses of specified infections, before starting work; affected staff are excluded from food handling or restricted until a specified symptom-free period has passed (commonly 48 hours after diarrhoea and vomiting stop for norovirus-type illness, though rules vary). Visitors and contractors are screened in the same way. Cuts are covered with coloured (often blue), detectable waterproof dressings. Behaviour rules prohibit eating, drinking, chewing gum and smoking in production areas, and spitting, sneezing or coughing over food; fingernails are kept short and unpainted, and jewellery and watches are removed except as permitted by the plant's rules (often a plain band). Protective clothing, hairnets and beard snoods, and dedicated footwear are worn in production areas, changed when soiled and not worn outside the plant or into toilets; clothing in high-care areas is often colour-coded and laundered by the company. Hygiene barriers at the entrance to production areas combine changing, handwashing, hand sanitising and boot washing or changing in a sequence that cannot be bypassed.
Handwashing is the single most important personal hygiene practice. Hands must be washed on entering food areas, after using the toilet, after breaks, eating or smoking, after touching the face, hair or a wound, after handling raw food, waste or cleaning chemicals, and whenever they become contaminated. Effective handwashing uses running water at a comfortable temperature, liquid soap, vigorous rubbing of all surfaces of the hands, between the fingers, the thumbs, the backs and under the nails for at least about 20 seconds, rinsing, and drying with single-use paper towels or a hygienic hand dryer; the drying step matters because wet hands transfer far more organisms. Handwash stations are placed where they are needed, with hands-free taps, soap, drying and waste bins, and are used for nothing else.
Alcohol-based hand sanitisers, typically containing about 60 to 80 per cent alcohol, reduce bacteria on clean hands quickly but are less effective on visibly dirty or greasy hands, and some non-enveloped viruses such as norovirus are relatively resistant to them; in food plants they supplement handwashing and do not replace it. Gloves do not replace handwashing either: they become contaminated like hands, can tear, and give a false sense of security, so hands are washed before putting on gloves and gloves are changed whenever a bare hand would be washed. Food safety culture, the shared attitudes and behaviours of everyone in the business, determines whether these rules are followed when no one is watching. Training at induction and at regular intervals, supervision, clear signs in the languages staff speak, adequate facilities and time, and leadership by managers who follow the rules themselves are the practical means. Many jurisdictions and certification schemes require that food handlers receive hygiene training appropriate to their work and that supervisors hold a recognised food-safety qualification.
Pests contaminate food with their bodies, hair, droppings and urine, spread pathogens such as Salmonella and Leptospira, damage packaging and buildings and can cause product rejection, recall and legal action. The main pests of food plants are rodents (the brown or Norway rat, the black or roof rat and the house mouse), cockroaches (especially the German cockroach), flies, stored-product insects (beetles such as flour beetles and weevils, and moths such as the Indian meal moth), birds, and in some regions ants and lizards. Each has its own behaviour: mice explore new objects, can enter through gaps of about 6 mm and need little water; rats are neophobic, cautious of new objects, need water daily and can enter through gaps of about 12 to 13 mm; German cockroaches hide in warm, humid crevices near food and water, such as motor housings and wall voids; stored-product insects can complete their life cycles inside bulk ingredients and packaging.
Integrated pest management (IPM) combines several methods, with chemicals as the last resort, on the principle that pests are attracted by food, water and shelter and enter through openings. Its elements are, in order: exclusion (pest-proofing), sanitation (denying food, water and harbourage), monitoring and inspection, physical and mechanical control, and chemical control only where needed and authorised. Exclusion means well-fitting doors with seals and closers, strip curtains or air curtains on openings that must stay open, screens on windows and vents, sealed holes for pipes and cables, intact walls and roofs, and inspection of incoming materials and pallets. Sanitation inside means cleaning up spillage promptly, storing materials off the floor and away from walls with an inspection gap, rotating stock (first expired, first out), and removing waste and clutter.
Monitoring uses devices placed on a site plan, inspected at a set frequency, and recorded: rodent stations around the outside of buildings and traps or monitoring blocks inside; insect light traps (electric fly killers or, preferably in food areas, sticky-board units that do not scatter fragments), placed where they do not attract insects into the building or over exposed product; pheromone traps for stored-product moths and beetles; and glue boards for crawling insects. Records of catches are trended to detect increases and identify sources. Signs of activity, such as droppings, gnaw marks, rub marks, tracks, nests, webbing and live or dead insects, are recorded during inspections by staff and by the pest-control contractor.
Control starts with non-chemical methods: snap traps and multi-catch traps for rodents, trapping and exclusion for birds, heat treatment of rooms or equipment (raising temperatures to around 50 to 60 °C for long enough to kill all insect stages), freezing or controlled atmospheres (low oxygen or high carbon dioxide) for infested commodities. Chemical control includes rodenticide baits in tamper-resistant, secured stations; many food-safety standards restrict or prohibit toxic rodenticide baits inside production and storage areas, where a poisoned rodent or spilled bait could contaminate food, so baits are mainly used outside. Insecticides are applied as targeted gel baits and crack-and-crevice treatments rather than sprays over open areas, and only products approved for use in food premises, by trained and, in most jurisdictions, licensed operators. Fumigation of commodities and structures with phosphine, sulphuryl fluoride or other permitted fumigants is a specialist operation; methyl bromide has been phased out for most uses under the Montreal Protocol because it depletes the ozone layer, with limited exemptions such as some quarantine treatments. Contractors provide a service, but responsibility for pest control remains with the food business, which agrees the scope, reviews reports and acts on recommendations.
Water is used in food plants as an ingredient, for washing raw materials and equipment, for cleaning, for steam and ice, and for cooling, and each use can contaminate food if the water is not of suitable quality. Water that contacts food or food-contact surfaces should be potable, meeting national drinking-water standards, which in many countries follow the WHO Guidelines for Drinking-water Quality: no Escherichia coli (or thermotolerant coliforms) detectable in a 100 mL sample, and chemical parameters within guideline values. A food business that takes water from its own well or treats water on site is responsible for its treatment and monitoring; one that uses mains water still monitors at points of use, because quality can deteriorate in storage tanks and pipework. The WHO approach of water safety plans, identifying hazards from source to tap and controlling them, applies well inside a plant.
Disinfection with chlorine is the most common treatment, and a measurable free chlorine residual at the point of use, commonly at least about 0.2 mg/L and often up to about 0.5 mg/L, indicates continuing protection. Water used to cool sealed containers after thermal processing, such as cans and retort pouches, is a particular hazard, because seams can draw in water as containers cool and contract; historical outbreaks of botulism and typhoid have been traced to contaminated can-cooling water, so it is chlorinated to a residual and monitored. Steam that contacts food (culinary steam) must not carry boiler chemicals unsuitable for food. Ice for food must be made from potable water and handled hygienically. Non-potable water, for fire-fighting or some cooling, runs in separate, identified pipes with no cross-connection to potable supplies, and backflow prevention devices (air gaps, reduced-pressure zone valves) protect the potable system wherever hoses and equipment could siphon contaminated water back. Hot-water and cooling-tower systems are managed to control Legionella, commonly by storing hot water at 60 °C or above, delivering it at 50 °C or above, keeping cold water below 20 °C, and treating cooling towers. Water hardness and quality also affect cleaning chemistry, scale and boiler operation.
Waste attracts pests, supports microbial growth, causes odours and can contaminate product. Waste inside production areas is collected in clearly identified, lidded containers, preferably foot-operated or hands-free, emptied at least at the end of each shift and more often as needed, and kept separate from food containers by colour or design. Waste leaves production areas by routes that do not cross clean product flows, and external waste bins and skips stand on hard, cleanable surfaces away from doors, with lids closed and the area cleaned regularly. By-products and animal by-products are handled according to their own rules, which in many jurisdictions control their storage, transport and use. Liquid waste goes to drains that are designed to flow from clean to less clean areas, never the reverse, with trapped gullies, removable gratings, and sufficient fall to prevent pooling; drains are cleaned on a schedule with dedicated tools, because they are among the most common sites of Listeria in wet plants. Effluent is treated on site or discharged to sewer under permit, as described in food-waste-valorisation-sustainability.
The surroundings of the plant are part of hygiene. Grounds are kept free of standing water, debris, unused equipment and pallets that could harbour pests; vegetation is cut back, and a clear strip, often of gravel or paving, about a metre or so wide around the building walls removes cover for rodents and makes inspection easier. Roads and yards are paved and drained to limit dust and mud. Outdoor lighting is placed so that it does not attract night-flying insects to doorways, for example by mounting lights away from doors and shining them towards the building. Neighbouring activities, such as farms, landfills or other industries, are assessed as possible sources of pests, odour, dust and contamination when a site is chosen and at intervals afterwards. Regular inspections of the external areas, recorded and followed up, complete the sanitation programme.
A student uses this subject in pilot-plant and laboratory work: preparing detergent and sanitiser solutions to a stated strength and checking them by titration, running and recording a small CIP cycle, swabbing surfaces and reading ATP and plate counts, and writing a cleaning procedure for a piece of equipment. In examinations, the frequently tested points are soil-detergent matching, HOCl and pH, the Sinner circle, CIP sequence, fouling types, sanitiser properties and EMP zones.
Five years into a quality or sanitation role, a technologist writes and validates SSOPs, sets ATP limits from baseline data, manages the sanitation crew's training and schedule, investigates Listeria or Salmonella positives with vector swabbing, chooses detergents and sanitisers with suppliers, verifies CIP records, manages pest-control contractors and prepares the sanitation evidence for audits.
A senior plant or technical manager with twenty-five years' experience decides on sanitation strategy and investment: hygienic redesign of lines with persistent harbourage, conversion of dry plants to dry cleaning, CIP automation and water and chemical reuse, the scale of the environmental monitoring programme, and the response to a positive pathogen finding, including product holds, recalls and communication with regulators.
A researcher at this level studies the science behind sanitation: biofilm ecology and tolerance mechanisms, persistence of pathogens in plant environments using genomic typing, kinetics of soil removal and fouling, efficacy of new sanitisers and non-chemical methods, and statistical design of environmental sampling programmes. Their work informs industry guidelines and regulatory expectations.
This manual teaches sanitation principles and typical practice. Chemical concentrations, temperatures, times, exclusion periods and sampling areas are typical ranges from textbooks and guidelines; the values approved for a particular product are set by the national regulator, the product label and plant validation. Hygienic design of equipment and buildings is only summarised here (food-plant-design-utilities), as are effluent treatment (food-waste-valorisation-sustainability) and HACCP and certification schemes (food-safety-management-systems). Specific registered sanitiser products, national pesticide approvals and occupational-safety rules are not covered.
Original practice questions written to the syllabus and pattern of the exams named in each question's examTags. They are not past papers and do not reproduce any board's questions.
These notes are free to read here, with no account.
What the Laisha app adds:
Free for ten days, then a subscription. We would rather write that here than have you find it later.