Food Protection Trends - July/August 2022 - 341

meantime adjusted the requirements in their guidelines (In the
Netherlands Infosheet 85) to a maximum of 0.5 log growth. A
large producer of meat products was closed as a result.
Extra-connected organization
Within the food company, cooperation is based on the
Haeckel SIDA circle (Sense-Interpretate-Decide-Act). The
company works completely integrated and is holistically
designed as a real time learning organization. Also, within
the food company, cooperation is also based on the Deming
circle (Plan-Do-Check-Act), and everyone knows their role
and is part of the sense and respond (8) function regarding
the identification of opportunities and risks that could have
an impact on the company from the world. The company
knows why something is happening with an operational
technology function or a food safety theme and can
anticipate that something is going to happen. Regulatory
bodies in Europe and the United States all have processes
to share regulatory changes and guidance. For example,
The Food Safety Authority in the Netherlands publishes
in Infosheet 85 the desired method with which Listeria
monocytogenes must be controlled. This information sheet is
updated annually with new requirements regarding control.
Food companies must therefore organize themselves in such
a way that they are aware of changes in this Infosheet, so that
they continue to comply. This also applies to other themes,
such as the control of ethylene oxide in sesame seeds.
An Extra-Connected organization will also have active
monitoring of all systems, to include cyber systems
embedded within Operational Technology processes within
the firm and across supplier and customer systems. Cyber
risk management involves the same processes of hazard
identification, vulnerability assessment and risk reduction
steps as are employed in food safety risk reduction processes,
such as HACCP (5) and Vulnerability Analysis of Critical
Control Points (VACCP). Even network segmentation steps
to reduce to introduction of system contamination, such as
malware, are similar to food safety processes. The use of 3rd
party monitoring and certification is equally applicable to
OT cyber security and food safety processes. Building OT
resilience must be based upon both cyber risk reduction
and food safety processes. Moving forward we will find that
customers will demand the certification of both.
OT Resilience and Food Safety Compliance: learning
capability stages
These stages of connectivity can be used to characterize
the learning capability of the organization in the field of OT
resilience and Food Safety Compliance.
* Getting Connected
OT human and technology systems are actively monitored
for performance compliance and security. OT
system resilience and food safety management are both
process-driven, everyone works according to instructions
and functional regimes that apply to the department.
* Networking
OT and food safety management are systematically
managed, and attention is also paid to operational
controls monitoring and food chain safety assurance,
whereby we work according to cross-departmental
routines and agreements.
* Sense and Respond (8)
OT and food safety management is designed holistically
regarding the external risks that can have an impact on
the total performance of the company. This means that
both human and technology systems have feedback and
corrective action processes in place. OT cyber systems
are segmented to reduce introduction of malware and
to facilitate managed feedback systems to address
anomalies or intrusion attempts. (16)
OT Resilience and Food Safety Compliance: certification management (CM)
Getting Connected
Networking
The OT and food safety quality system is
set up in accordance with the standards
but is not aware of new doctrines. A
month before a 3rd party compliance
audit, all sails are pulled (Dutch
expression for doing your best), an
unannounced audit is not a good idea.
The OT monitoring and quality system is
set up in accordance with the standards
and the latest guidelines. Because the
company works systematically, an
unannounced audit can take place
without any problems. There is a central
action list for OT and food safety system
monitoring, security, compliance and
certification issues.
Sense and Respond
OT system performance and security
are monitored with built-in feedback
processes. The GFSI guidelines are
also monitored to be able to anticipate
changes in quality standards in time. The
company tracks auditor performance and
results because there is knowledge of the
standard and the complete certification
process.
July/August Food Protection Trends 341
Food Protection Trends - July/August 2022

Table of Contents for the Digital Edition of Food Protection Trends - July/August 2022
