Food safety plans for restaurants: what your health inspector actually checks

A health inspector walks into your restaurant. They're not there because something went wrong. It's a routine visit. They ask to see your food safety plan.

What happens next depends entirely on whether you have one, and whether it describes what you actually do.

Why inspectors care about paper

Inspectors check two things: what they can see (your kitchen, your coolers, your handwashing stations) and what you can document (your plan, your logs, your training records). You can pass the visual check and still get cited for missing documentation.

The FDA Food Code, Section 8-201.13, requires food establishments to have a written food safety plan. Every state health department enforces some version of this. The specifics vary by jurisdiction, but the requirement is universal: if you serve food to the public, you need a written plan on file that explains how you prevent foodborne illness.

This isn't a suggestion. It's a scored item on your inspection.

What goes into a food safety plan

A food safety plan is built on HACCP principles. HACCP stands for Hazard Analysis and Critical Control Points. The FDA developed it as a structured way to identify where food safety problems happen and control them before they reach a customer.

There are seven HACCP principles. Your plan needs to cover all seven, but it's less complicated than it sounds.

1. Hazard analysis

Walk through every step of your operation, from receiving deliveries to serving the plate. At each step, identify what could go wrong:

• Biological hazards: bacteria (Salmonella, E. coli, Listeria), viruses (norovirus, hepatitis A), parasites
• Chemical hazards: cleaning products, sanitizers, pesticides, allergens
• Physical hazards: glass, metal fragments, hair, bandages

Be specific to your menu and your kitchen. A sushi restaurant has different hazards than a pizza shop. Write down the actual products you use and the actual processes you follow.

2. Critical control points

A critical control point (CCP) is a step where you can prevent, eliminate, or reduce a hazard to a safe level. Common CCPs in restaurants:

• Receiving: checking delivery temperatures (cold items at 41°F or below, frozen items frozen solid)
• Cooking: reaching minimum internal temperatures (poultry at 165°F, ground beef at 155°F, fish at 145°F)
• Cooling: bringing cooked food from 135°F to 70°F within two hours, then from 70°F to 41°F within four more hours
• Hot holding: maintaining food at 135°F or above
• Cold holding: maintaining food at 41°F or below

These specific temperatures come from the FDA Food Code, Chapter 3, and appear on every health inspection form in the country.

3. Critical limits

Each CCP needs a measurable limit. Not "keep it cold" but "hold at 41°F or below, measured with a calibrated probe thermometer." Inspectors want numbers, not descriptions.

For cooking, the limits are the minimum internal temperatures from the FDA Food Code:

4. Monitoring procedures

Who checks what, when, and how. Write this down. Your food safety plan should specify:

• Which employee takes the temperature readings
• What thermometer they use
• How often they check (every 2 hours for hot/cold holding is standard)
• Where they record the readings

Monitoring without records is monitoring that never happened, as far as an inspector is concerned.

5. Corrective actions

When something goes out of range, what do you do? Your plan needs to spell this out. If a cooler reads 47°F at the 2-hour check:

1. Check whether food has been above 41°F for more than 4 hours (if yes, discard)
2. Move food to a functioning cooler immediately
3. Check the cooler for mechanical issues
4. Record the incident, the time, and what action was taken

The corrective action has to match the hazard. For cooking temperatures that are too low, the answer is to continue cooking. For holding temperatures that have been in the danger zone too long, the answer is to throw the food away.

6. Verification

How do you know your plan is working? Verification includes:

• Calibrating thermometers regularly (weekly at minimum, using the ice-point method: 32°F in ice water)
• Reviewing temperature logs for patterns (if the same cooler drifts every Tuesday, something is wrong with the cooler, not the log)
• Periodic internal audits of your CCPs
• Reviewing the plan after any menu changes, equipment changes, or renovation

7. Record keeping

Keep your logs. Inspectors ask for them. The FDA Food Code doesn't specify how long you need to keep records, but state and local jurisdictions typically require one to three years. When in doubt, keep them for at least one year.

Records to maintain:

• Daily temperature logs (receiving, cooking, hot holding, cold holding)
• Thermometer calibration logs
• Corrective action records
• Employee food safety training records
• Supplier documentation (invoices, certifications, recall notices)

The five CDC risk factors

The CDC tracks what actually causes foodborne illness outbreaks, and five risk factors come up over and over. Health departments build their inspection forms around these. If your plan doesn't address them, the inspector will notice.

Improper holding temperatures

The single most common citation. Cold food above 41°F, hot food below 135°F, or food sitting in the danger zone (41-135°F) for too long. Your plan must document how you monitor temperatures and what happens when a reading is out of range.

Poor personal hygiene

Mostly handwashing. The FDA Food Code requires it after touching raw meat, after using the restroom, after handling garbage, after coughing or sneezing, and before putting on gloves. That list feels obvious, but it's the second most common citation for a reason. Your plan needs a written handwashing policy and records showing you trained people on it.

Also: bare hand contact with ready-to-eat food. Many jurisdictions require gloves, tongs, or deli paper for handling food that won't be cooked again before serving.

Contaminated equipment

Cutting boards, prep surfaces, utensils. Cross-contamination between raw chicken and the salad you're about to plate is the classic scenario here. Describe your cleaning and sanitizing procedures in the plan: which sanitizer, at what concentration, and how you verify it (test strips).

Food from unsafe sources

Every ingredient needs to come from an approved, inspected source. Describe what you check at receiving: temperatures, packaging integrity, expiration dates, signs of contamination. Keep the invoices. Inspectors sometimes ask for them.

Inadequate cooking

Cooking food to the wrong temperature, or (more commonly) not checking with a thermometer at all. List the minimum cooking temperatures for every protein on your menu and require probe thermometer verification for every batch.

What gets restaurants in trouble

Based on actual inspection data, these violations appear most frequently:

Critical violations (immediate health risk, can trigger closure):

• Food held in the temperature danger zone for more than 4 hours
• No handwashing sink available or accessible in prep areas
• Employee handling food while visibly sick (vomiting, diarrhea, jaundice)
• Raw meat stored above ready-to-eat food in the cooler
• No working thermometer in refrigeration units

Non-critical violations (must be corrected, usually on a timeline):

• Missing or incomplete temperature logs
• Thermometers not calibrated
• Cracked floor tiles or wall surfaces in food prep areas
• Food safety plan missing or not updated
• Employee food handler certifications expired

The difference between critical and non-critical matters for your score. Many jurisdictions use a point system where critical violations cost you significantly more points, and enough points trigger a follow-up inspection or public posting of a low grade.

State and local variations

The FDA Food Code is a model code. States adopt it, but many add their own requirements. A few examples:

California: Requires a Certified Food Protection Manager on-site during all hours of operation. The manager must pass an ANSI-accredited exam (ServSafe, NRFSP, or equivalent). Every food handler must have a California Food Handler Card within 30 days of hire.

Texas: Requires at least one Certified Food Manager per establishment. Food handler training is required within 60 days of hire through a state-approved program. Texas uses its own Food Establishment Rules (25 TAC Chapter 228) rather than directly adopting the FDA model code.

New York: NYC uses a letter grading system (A, B, C) posted in restaurant windows. Grades are based on violation points. An A requires fewer than 14 points. NYC also requires Food Protection Certificates for supervisory staff, obtained through a Department of Health-approved course.

Florida: Requires a Certified Food Manager at each establishment. Food handler training must be completed within 60 days of employment. Florida's Division of Hotels and Restaurants inspects at least once per year, with re-inspection required within 30 days for any high-priority violations.

Your food safety plan needs to meet the requirements of your specific jurisdiction. A plan that satisfies the FDA Food Code will usually satisfy state requirements too, but check for additional certifications, training timelines, or posting requirements that apply in your state.

Creating your plan from scratch

If you don't have a food safety plan yet, start with these steps:

1. Inventory your menu. List every item you serve. Group them by preparation method: raw (salads, sashimi), cooked and served (grilled items), cooked and held (buffet items, soups), complex prep (items that are cooked, cooled, reheated).

2. Map your process flow. For each group, trace the path from delivery to plate: receiving, storage, prep, cooking, cooling, reheating, holding, serving. This is your hazard analysis.

3. Identify your CCPs. At each step, ask: what could go wrong here, and can I control it at this point? Mark those steps as critical control points.

4. Set your critical limits. Use the FDA Food Code temperatures above. For other limits (sanitizer concentration, cooling times), use the values specified in your jurisdiction's food code.

5. Build your monitoring schedule. Create temperature log sheets. Assign responsibilities. Decide on check frequency.

6. Write your corrective actions. For each CCP, document what happens when a limit is exceeded.

7. Train your staff. Document the training: date, topics, attendees, trainer name.

8. Print it and file it. Your plan has to be accessible during an inspection. A binder at the manager's station is the most common approach.

The writing takes a few hours if you already know your menu and kitchen. The real investment is doing the logs every day. That's the part most restaurants skip, and it's the part inspectors check first.

---

ComplyKing generates food safety plans, HACCP documentation, and other compliance documents customized to your restaurant, state, and menu. Your first document is free.