Every food business in the United Kingdom is required by law to have a food safety management system (FSMS) based on the principles of HACCP. For restaurants, this means having a documented system that identifies food safety hazards, controls them effectively, and provides evidence that the controls are working. An effective FSMS protects your customers, your reputation, and your food hygiene rating. This guide walks you through how to build one from scratch.
What Is a Food Safety Management System?
A food safety management system is a structured set of policies, procedures, and records designed to ensure that the food you serve is safe. It encompasses everything from how you receive deliveries to how you serve the finished dish. At its core, an FSMS is built on the seven HACCP principles, but it also includes prerequisite programmes — the foundational hygiene practices that support your HACCP plan.
The legal requirement comes from Regulation (EC) No 852/2004, Article 5, which requires food business operators to put in place, implement, and maintain a permanent procedure based on HACCP principles. The FSA’s Safer Food Better Business (SFBB) pack is one way to meet this requirement for smaller operations, but many restaurants benefit from a more tailored approach.
Step 1: Assemble Your Food Safety Team
Your FSMS should be developed by people who understand your operation. In a small restaurant, this may be the owner/chef and one or two key staff. In a larger operation, form a team that includes the head chef, a manager, and a representative from front of house. At least one person should hold a Level 3 food safety qualification to bring the necessary technical knowledge.
Step 2: Describe Your Products and Processes
Before you can identify hazards, you need to understand what you are producing and how. Document:
- Your menu and the types of food you handle
- The flow of food through your kitchen — from delivery to service
- Key processes such as cooking, cooling, reheating, hot holding, and cold storage
- Who your customers are — including any vulnerable groups such as young children or elderly residents
Step 3: Conduct a Hazard Analysis
Walk through each step of your food flow and identify the hazards that could occur. Hazards fall into four categories:
- Biological — bacteria (salmonella, campylobacter, E. coli, listeria), viruses (norovirus), parasites
- Chemical — cleaning chemicals, pesticides, allergens, natural toxins
- Physical — glass, metal fragments, bones, plastic, hair
- Allergenic — the 14 major allergens and any additional allergens present in your ingredients
For each hazard, assess the likelihood and severity of harm. This helps you prioritise your controls and determine which hazards are significant enough to require a critical control point.
Step 4: Determine Critical Control Points
A critical control point (CCP) is a step in your process where a control measure is essential to prevent, eliminate, or reduce a food safety hazard to an acceptable level. Common CCPs in restaurants include:
- Cooking — ensuring food reaches a core temperature of 75°C to kill harmful bacteria
- Chilled storage — maintaining food at 5°C or below to prevent bacterial growth
- Cooling — reducing food temperature from 63°C to 8°C within a safe time frame
- Reheating — reaching 75°C core temperature before service
For each CCP, set critical limits (the measurable values that separate safe from unsafe) and define what to do if a limit is breached.
Step 5: Establish Prerequisite Programmes
Prerequisite programmes are the foundational hygiene practices that support your HACCP plan. They include:
- Cleaning and disinfection schedules
- Pest control arrangements
- Supplier approval and traceability
- Staff training and personal hygiene standards
- Maintenance of premises and equipment
- Waste management procedures
- Water supply safety
Step 6: Set Up Monitoring and Record-Keeping
Your FSMS is only effective if you can prove it is working. Set up daily monitoring routines:
- Temperature logs for fridges, freezers, cooking, and hot holding
- Delivery check records (temperature on arrival, use-by dates, packaging condition)
- Cleaning schedules signed off daily
- Corrective action records when something goes wrong
Our free HACCP template for restaurants includes ready-to-use monitoring forms that you can customise for your operation.
Step 7: Review and Verify
A food safety management system is a living document. Review it:
- At least annually as a matter of routine
- Whenever you change your menu, suppliers, equipment, or premises layout
- After any food safety incident, customer complaint, or EHO inspection finding
- When new legislation or guidance is published
Verification can include internal audits, external audits, microbiological testing, and reviewing records for trends and gaps. If you need expert support, our food safety consulting service can conduct an independent review of your system. Our HACCP plan development service can also build a bespoke system for you from the ground up. Start with our free risk assessment to identify the areas that need the most attention.
Frequently Asked Questions
Is Safer Food Better Business enough for a restaurant?
SFBB is accepted by the FSA as a valid food safety management system for many small to medium food businesses. However, restaurants with complex menus, high-risk processes (such as vacuum packing or sous vide), or multiple kitchen sections may benefit from a more detailed, bespoke HACCP plan that addresses their specific hazards.
How often should I update my food safety management system?
At a minimum, review your FSMS annually. You should also update it whenever you make changes to your menu, suppliers, equipment, premises, or staff structure. A system that has not been reviewed for several years is a red flag during EHO inspections.
Can I create my own FSMS or do I need a consultant?
You can create your own system, provided you have sufficient food safety knowledge. Having at least one team member with a Level 3 food safety qualification is strongly recommended. If you lack the expertise in-house, engaging a food safety consultant ensures your system is thorough, legally compliant, and practical for your team to follow on a daily basis.
Written by Carren Amoli, BSc (Hons), RSPH Registered
