7. Food Safety, Hygiene and Risk ManagementIntroduction and ContextFood safety is a central responsibility of modern catering operations. Hotels, restaurants, institutional kitchens, banqueting units, and food-service contractors do not merely produce meals; they manage biological, chemical, physical, and allergenic risks through a chain of purchasing, receiving, storage, preparation, cooking, holding, service, and disposal. A failure at any point may cause illness, reputational damage, financial loss, regulatory action, or loss of guest confidence. Food hygiene refers to the conditions and practices necessary to protect food from contamination and to maintain its suitability for consumption. Food safety is broader: it includes hygiene, process control, supplier assurance, allergen management, traceability, food defence, emergency preparedness, and continual improvement. Risk management provides the managerial method for identifying hazards, assessing their likelihood and severity, selecting controls, monitoring performance, and responding when controls fail. For a hotel, food safety is also a governance issue. Executive management must provide resources, competent personnel, suitable equipment, documented procedures, and a culture in which employees report hazards rather than conceal them. The objective is not simply to pass an inspection. It is to ensure that safe food is produced consistently, even during high occupancy, staff shortages, large events, equipment failure, or supply disruption. Learning ObjectivesAfter studying this chapter, the learner should be able to: 1. Distinguish food safety, food hygiene, sanitation, contamination, and foodborne illness. 2. Explain good manufacturing practices, good hygiene practices, and the HACCP system. 3. Identify biological, chemical, physical, and allergenic hazards in hotel food operations. 4. Design controls for purchasing, storage, temperature management, sanitation, and service. 5. Apply microbiological risk assessment to practical catering decisions. 6. Evaluate allergen, food-defence, traceability, and regulatory systems. 7. Analyse an incident and recommend corrective and preventive action. 8. Integrate digital monitoring, staff competence, auditing, and emergency response into a food-safety management system. The Risk Landscape of Catering OperationsA hazard is a biological, chemical, physical, or allergenic agent with the potential to cause harm. Risk is a combination of the likelihood that harm will occur and the severity of its consequences. A hazard may be significant in one operation but insignificant in another. For example, raw eggs, cooked rice, shellfish, ready-to-eat salads, and cream desserts present different risks depending on their handling, storage duration, and consumer population. Contamination may be: - Biological, involving bacteria, viruses, parasites, moulds, or toxins produced by microorganisms.
- Chemical, involving cleaning chemicals, pesticides, lubricants, naturally occurring toxins, or excessive food additives.
- Physical, involving glass, metal, stones, bones, plastic, or equipment fragments.
- Allergenic, involving unintended presence or cross-contact with substances such as cereals containing gluten, milk, eggs, peanuts, tree nuts, soy, fish, crustaceans, sesame, mustard, or other allergens recognised by applicable law.
Cross-contamination occurs when a hazard is transferred from one food, surface, utensil, person, or piece of equipment to another. It may be direct, such as raw poultry contacting salad, or indirect, such as a contaminated knife being used for ready-to-eat food. Cross-contact is the specific transfer of an allergenic protein to food that should not contain it. Foodborne illness may result from infection, intoxication, or toxin-mediated infection. In an infection, viable organisms are consumed and multiply or act in the host. In intoxication, a toxin already present in the food causes illness. The distinction matters because cooking may destroy some organisms but not all pre-formed toxins. Vulnerable consumers—including young children, older adults, pregnant persons, and immunocompromised individuals—may experience more severe outcomes. The Preventive Architecture: GMP, GHP and HACCPGood Manufacturing Practices and Good Hygiene PracticesGood Manufacturing Practices (GMP) are the broad operational conditions that support safe and consistent food production. They include suitable premises, hygienic equipment design, approved suppliers, pest control, preventive maintenance, calibration, waste management, and controlled processes. Good Hygiene Practices (GHP) focus more specifically on personal hygiene, cleaning and disinfection, water quality, handling practices, temperature control, and prevention of cross-contamination. GMP and GHP are prerequisite programmes for HACCP. HACCP cannot compensate for a leaking roof, inadequate handwashing facilities, uncontrolled pests, unsafe water, or untrained staff. A sound system therefore begins with the physical and organisational foundation before hazard analysis is attempted. Important prerequisite controls include: - zoning raw, cooked, ready-to-eat, waste, and allergen-handling areas;
- hygienic layout that supports one-way movement where feasible;
- potable water, protected ice, adequate drainage, and ventilated storage;
- food-contact surfaces that are smooth, cleanable, corrosion-resistant, and maintained;
- documented cleaning, pest-control, maintenance, calibration, and supplier procedures;
- illness reporting and restrictions on food handlers with relevant symptoms or infected wounds;
- protective clothing, effective handwashing, hair restraint, and controlled personal behaviour;
- receiving specifications and approved-supplier verification; and
- safe waste removal without exposing food or clean equipment.
HACCP as a Management SystemHazard Analysis and Critical Control Point (HACCP) is a preventive, science-based system. Its seven principles are: 1. Conduct a hazard analysis. 2. Identify critical control points (CCPs). 3. Establish validated critical limits for each CCP. 4. Establish monitoring procedures. 5. Specify corrective actions. 6. Verify that the system works as intended. 7. Establish documentation and records. A process flow diagram should represent the actual operation—from purchasing and receiving to service and disposal—and must be confirmed on site. The HACCP team should include culinary, stewarding, purchasing, engineering, housekeeping or front-of-house representatives where relevant, and a suitably competent food-safety leader. A critical control point is a step at which control is essential to prevent, eliminate, or reduce a food-safety hazard to an acceptable level. Not every hygiene activity is a CCP. Handwashing, supplier approval, and cleaning may be prerequisite controls; cooking, chilling, or final allergen verification may become CCPs depending on the hazard analysis. A critical limit is a measurable boundary separating acceptable from unacceptable performance. It may relate to time, temperature, pH, water activity, concentration, or another validated criterion. Operational targets should normally be stricter than critical limits, creating a margin for variation. Limits must be based on law, authoritative guidance, scientific evidence, or validation—not convenience. Monitoring must be timely enough to detect loss of control before unsafe food is released. Corrective action has two parts: controlling affected product and correcting the process. Verification includes record review, observation, calibration, internal audits, environmental testing, product testing where justified, and review after changes or incidents. Temperature Management and Process ControlTemperature control is one of the most important practical barriers against microbial growth. The risk is determined not only by the final temperature but also by the time food spends in conditions that permit growth. Each operation must follow applicable national regulations and validated procedures; numerical limits should not be copied without considering the food, equipment, process, and local law. Receiving staff should inspect the condition of vehicles, packaging, seals, dates, signs of thawing, product temperature, and supplier documentation. Chilled and frozen products must be transferred promptly to appropriate storage. Refrigerators should not be overloaded, and raw foods should be segregated from ready-to-eat foods, usually with raw items positioned below cooked or ready-to-eat products to reduce drip contamination. Cooking procedures should identify the coldest or slowest-heating point of the product. A calibrated probe should be cleaned and sanitised before and after use, inserted into the thickest portion, and used without touching bone, pan, or packaging. Large joints, stuffed items, poultry, minced products, and reheated foods require particular attention because heat penetration may be uneven. Cooling is a high-risk stage. Large volumes should be divided into shallow containers, exposed to clean cooling conditions, and monitored against a validated time-temperature procedure. Hot food should not be placed in a manner that raises the temperature of an entire refrigerator. Reheating should be rapid and controlled, and reheated food should not be repeatedly cooled and reheated. Hot and cold holding equipment should be preheated or precooled and checked during service rather than assumed to be effective. Temperature records are meaningful only when linked to action. A record showing an unacceptable temperature without documented product assessment and corrective action is evidence of paperwork, not control. Calibration checks using an appropriate reference method are necessary because an inaccurate thermometer can create false confidence. Sanitation: From Cleaning to VerificationCleaning removes food residues, soil, grease, and many microorganisms from a surface. Disinfection or sanitisation reduces microorganisms to a level considered safe. These are related but different activities. A surface that is sanitised without first being cleaned may remain unsafe because organic matter can shield microorganisms or reduce chemical effectiveness. An effective sanitation programme specifies the surface or equipment, cleaning frequency, method, chemical, concentration, contact time, water temperature where relevant, responsible person, safety precautions, and verification method. The usual sequence is removal of food debris, pre-rinsing where appropriate, application of detergent, mechanical action, rinsing, sanitising, and air-drying or controlled drying. Manufacturer instructions and chemical safety data must be followed. Cleaning chemicals must be labelled, stored away from food, dispensed safely, and never transferred into unmarked containers. Mixing chemicals can produce toxic gases. Special attention is required for slicers, blenders, ice machines, coffee equipment, drains, refrigerator seals, cutting boards, and high-touch points. A visually clean surface is not necessarily microbiologically safe. Verification may include direct observation, checklist review, ATP testing, protein or allergen swabbing, microbiological environmental sampling, and trend analysis. These tools support judgement; they do not replace it. Environmental sampling should be risk-based and interpreted with knowledge of the premises, organisms of concern, and sampling limitations. Allergen Control and Consumer ProtectionAllergen control is a system of information and process discipline. It begins with accurate ingredient specifications and continues through purchasing, recipe management, storage, preparation, service, and communication with guests. Menus and digital ordering platforms must identify allergens accurately, but verbal assurances should not be given unless the information has been verified. A robust programme includes an allergen matrix for recipes and purchased products, controlled recipe changes, clear labelling, segregated storage, dedicated or thoroughly cleaned utensils where appropriate, production scheduling, validated cleaning, and staff training. Ingredients may change because of supplier reformulation, so specifications require periodic confirmation. When a guest declares an allergy, the employee should record the request accurately, inform the chef or responsible manager, verify ingredients and preparation controls, and communicate the response without making absolute claims that cannot be supported. “Allergen-free” is a strong statement requiring validated control and compliance with applicable law. Buffet service presents special risks because utensils may be exchanged, dishes may be topped up, and guests may introduce allergens. Separate utensils, clear labels, supervision, and suitable service design reduce these risks. Microbiological Risk AssessmentMicrobiological risk assessment generally involves hazard identification, hazard characterisation, exposure assessment, and risk characterisation. In catering, the method is often qualitative or semi-quantitative. Managers consider the organism or toxin, food characteristics, processing steps, time-temperature history, consumption pattern, and vulnerability of the intended consumer. Factors supporting microbial growth include moisture, nutrients, favourable temperature, suitable pH, time, and absence of competing controls. Risk assessment should consider the whole chain rather than a single measurement. For example, a cooked food may be safe immediately after cooking but become hazardous through slow cooling, prolonged holding, contaminated utensils, or poor personal hygiene. Testing can confirm or investigate performance, but end-product testing alone cannot guarantee safety. A sample represents only a small portion of a batch and may miss uneven contamination. Preventive controls, environmental hygiene, supplier assurance, and process records are therefore more reliable foundations. When results are unsatisfactory, the organisation should investigate trends and root causes rather than merely discard one sample. Traceability, Food Defence and Regulatory ComplianceTraceability is the ability to follow the movement of food, ingredients, packaging, and relevant records through specified stages. In a hotel, practical traceability includes supplier details, delivery dates, batch or lot numbers where available, storage locations, production records, menu use, and disposal information. Traceability supports rapid withdrawal and investigation. Food fraud involves intentional deception for economic gain, such as substitution, dilution, or mislabelling. Food defence addresses intentional contamination or malicious interference. Defence measures include controlled access, visitor management, secure storage, staff awareness, delivery inspection, protection of water and ice, restricted access to chemicals, and reporting channels. Food defence is not the same as food safety: the former focuses on intentional acts, while the latter generally addresses unintended hazards, although controls may overlap. Regulatory compliance requires knowledge of the jurisdiction governing the establishment. Common obligations include licensing, approved premises, food-handler training, hygiene inspection, temperature and labelling rules, allergen declaration, potable water, waste disposal, pest control, incident reporting, and retention of records. Internationally recognised systems such as Codex HACCP principles and standards such as ISO 22000 may provide useful frameworks, but they do not replace local legal requirements. Compliance should be treated as a minimum standard. Ethical responsibility extends beyond literal compliance: food businesses should communicate honestly, protect vulnerable consumers, avoid concealing incidents, respect worker dignity, and ensure that commercial pressure does not override safety. Emergency Response and Incident ManagementAn emergency response plan should identify who has authority to stop production, isolate food, contact regulators, communicate with guests, manage media enquiries, and coordinate medical or technical support. Possible incidents include suspected food poisoning, allergen exposure, foreign-body discovery, chemical contamination, pest infestation, loss of refrigeration, flood, fire, water interruption, power failure, or malicious tampering. A practical response sequence is: 1. Protect people and stop the immediate hazard. 2. Isolate suspect food, equipment, ingredients, and records. 3. Preserve evidence and maintain chain of custody where relevant. 4. Assess who may have been exposed and seek medical or regulatory advice. 5. Trace affected batches, suppliers, recipes, and service periods. 6. Notify competent authorities when legally required. 7. Communicate accurately, without speculation or blame. 8. Correct the immediate cause and conduct a root-cause investigation. 9. Verify that corrective action is effective before restarting. 10. Review the system and update training, procedures, or design. A recall or withdrawal plan should distinguish food that has not left the operation from food already served or distributed. Mock exercises are useful because they reveal missing contact details, slow record retrieval, unclear responsibilities, and weaknesses in traceability. Digital Systems, Data and Emerging PracticeDigital temperature sensors, cloud-based checklists, electronic purchasing records, recipe-management platforms, allergen databases, QR-coded traceability, and automated alerts can strengthen control. Analytics may identify recurring refrigeration failures, late deliveries, repeated sanitation deviations, or departments with weak compliance. Artificial intelligence may assist with anomaly detection, forecasting, document search, and training simulations. Technology does not remove the need for competent judgement. Sensors can be incorrectly positioned, batteries can fail, data can be entered inaccurately, and automated alerts can be ignored. Digital systems require access control, cybersecurity, backup procedures, validated devices, data integrity, and clear escalation rules. The responsible manager must know what happens when the network fails or a reading is obviously inconsistent with physical conditions. Emerging practice increasingly emphasises food-safety culture: the shared values, beliefs, leadership behaviours, communication patterns, and resources that determine whether safe practices are genuinely followed. Sustainability also affects risk management. Reducing food waste, extending shelf life, using reusable packaging, and purchasing locally may be beneficial, but each change must be assessed for sanitation, traceability, temperature control, and allergen implications. Illustrative Case: A Banquet Service IncidentBackgroundA 180-room hotel scheduled a wedding banquet for 320 guests. The menu included roast poultry, rice, salads, a cream dessert, and a dessert labelled as containing no peanuts. The kitchen had recently introduced a new supplier and was operating with several temporary employees. SituationDuring preparation, raw poultry was delivered late and placed temporarily beside ready-to-eat salad ingredients. The blast chiller was heavily loaded, and cooked rice was placed in deep containers. A staff member used a shared blender for a dessert containing peanut paste and then prepared the allegedly peanut-free dessert without following the documented cleaning procedure. Temperature records were completed at the end of the shift rather than at the required times. After the event, several guests reported gastrointestinal symptoms. One guest with a known peanut allergy experienced a serious reaction. The hotel initially assumed that the complaints were unrelated because the final buffet temperature sheet appeared complete. AnalysisThe incident involved multiple control failures rather than one isolated mistake. Raw-to-ready-to-eat segregation failed; cooling capacity and container depth created a microbial risk; the allergen claim was not supported by validated controls; and retrospective record completion undermined traceability. Temporary staff were not adequately inducted, while production pressure discouraged escalation. The HACCP review identified cooking and cooling as process controls requiring closer monitoring. The allergen analysis identified dessert preparation and equipment cleaning as significant control steps. Management also discovered that the supplier’s product specifications had not been updated after a reformulation. Response and StrategyThe hotel stopped further service of implicated foods, preserved samples and records, identified staff and suppliers involved, and contacted the appropriate public-health authority. It established a guest communication channel and advised affected persons to seek medical assistance. The kitchen was temporarily restricted to lower-risk production while an investigation was conducted. Corrective actions included redesigned cooling procedures, smaller containers, additional chilling capacity, separation of raw and ready-to-eat preparation, validated allergen-cleaning checks, an updated ingredient matrix, supplier reapproval, competency assessment for temporary staff, and real-time digital temperature recording. A mock recall demonstrated that the hotel could identify the banquet menu and supplier lots, but could not initially determine which tables received particular dessert batches. Outcome and Learning PointsThe immediate response limited further exposure, but the case demonstrated that apparently complete documents do not prove control. The hotel strengthened its food-safety culture by requiring managers to observe critical activities, rewarding hazard reporting, and prohibiting retrospective completion of monitoring records. The principal lesson is that food safety is an integrated management system: purchasing, people, equipment, process design, information, and leadership must work together. Common Failures and Managerial ControlsCommon mistakes include treating HACCP as paperwork, using uncalibrated thermometers, accepting vague supplier assurances, storing chemicals near food, relying on visual cleanliness, failing to verify allergen information, overloading refrigerators, cooling large volumes slowly, allowing sick employees to handle food, and assuming that training attendance proves competence. Managers should focus on control effectiveness rather than document volume. Procedures must be practical during peak service, responsibilities must be unambiguous, and deviations must trigger action. Internal audits should examine actual behaviour, not merely the existence of forms. Root-cause analysis should ask why the system allowed an error: inadequate layout, unrealistic staffing, poor equipment, confusing instructions, weak supervision, or commercial pressure may be more important than individual blame. Best-Practice Framework for Hotel OperationsAn effective hotel food-safety system normally contains: - leadership commitment, defined accountability, and adequate resources;
- current process maps and risk-based HACCP plans;
- verified suppliers and controlled specifications;
- trained and competent food handlers;
- reliable temperature, sanitation, allergen, pest, and maintenance controls;
- calibrated equipment and meaningful records;
- traceability and tested withdrawal or recall procedures;
- food-defence and emergency-response arrangements;
- internal audits, trend analysis, and management review; and
- continual improvement based on incidents, near misses, complaints, science, and regulatory change.
The strongest systems are preventive, evidence-based, proportionate to risk, and embedded in everyday operational decisions. They combine technical controls with professional judgement and a workplace culture that treats safe food as a non-negotiable condition of hospitality. Chapter SummaryFood safety in catering is a preventive management responsibility covering hazards, processes, people, premises, suppliers, information, and emergency response. GMP and GHP provide the prerequisite foundation for HACCP, which identifies significant hazards, critical control points, critical limits, monitoring, corrective action, verification, and records. Temperature control, sanitation, allergen management, microbiological assessment, traceability, food defence, and regulatory compliance must operate as an integrated system. Digital tools can improve visibility and analysis, but they require validation, competent users, and contingency arrangements. Effective managers focus on food-safety culture, root causes, ethical communication, and continual improvement rather than inspection performance alone. Key TermsFood safety: Assurance that food will not cause harm when prepared and consumed as intended. Food hygiene: Practices and conditions that maintain food cleanliness and suitability. Hazard: A biological, chemical, physical, or allergenic agent capable of causing harm. Risk: The likelihood and severity of harm arising from a hazard. Cross-contamination: Transfer of a hazard between food, people, equipment, or surfaces. Cross-contact: Unintended transfer of an allergenic substance to another food. GMP: Broad practices and conditions supporting safe, consistent food production. GHP: Hygiene practices controlling contamination during food handling. HACCP: A preventive system based on hazard analysis and critical control points. Critical control point: A step where control is essential to prevent or reduce a significant hazard. Critical limit: A measurable boundary separating acceptable from unacceptable control. Monitoring: Planned observation or measurement of a control. Verification: Activities confirming that the food-safety system operates effectively. Validation: Evidence that a control measure is capable of achieving its intended result. Sanitation: Cleaning and disinfection practices that reduce contamination to acceptable levels. Traceability: Ability to follow food, ingredients, and records through the supply chain. Food defence: Protection against intentional contamination or malicious interference. Allergen matrix: A controlled record linking recipes or products with their allergens. Corrective action: Action taken to control affected food and restore a failed process. Review QuestionsShort Answer Questions1. Distinguish between a hazard and a risk in a hotel kitchen. 2. Why are GMP and GHP considered prerequisite programmes for HACCP? 3. What is the difference between cleaning and sanitising? 4. Define cross-contact and give one catering example. 5. State the purpose of traceability during a food incident. Long Answer Questions1. Explain the seven principles of HACCP and show how they may be applied to a banquet production process. 2. Discuss the design of an effective temperature-management system from receiving through service. 3. Examine the relationship between allergen control, recipe management, supplier assurance, and guest communication. 4. Describe how a hotel should organise emergency response to a suspected foodborne illness outbreak. 5. Evaluate the role of food-safety culture, leadership, auditing, and continual improvement in regulatory compliance. Analytical / Application Questions1. A kitchen records acceptable refrigerator temperatures, but inspection finds raw poultry stored above ready-to-eat desserts and frequent unexplained complaints. Analyse the likely system weaknesses and propose corrective and preventive actions. 2. A hotel introduces digital temperature sensors and automated alerts, yet unsafe holding temperatures continue during banquets. Evaluate why the technology has not solved the problem and design a stronger control approach. 3. A supplier changes the formulation of a dessert ingredient without notifying the hotel. Analyse the implications for allergen control, traceability, guest communication, and supplier governance. 22. Multiple Choice Questions with AnswersQuestion 1Which statement best explains the relationship between GMP, GHP and HACCP? A. HACCP replaces the need for GMP and GHP once critical limits are established. B. GMP and GHP provide prerequisite conditions on which an effective HACCP system depends. C. GHP applies only to personal hygiene, while GMP applies only to cooking temperatures. D. GMP and GHP are post-incident investigations conducted after HACCP failure. Correct Answer: B. GMP and GHP provide prerequisite conditions on which an effective HACCP system depends. Question 2A hotel identifies slow cooling of cooked rice as a significant hazard-control step. Which action most directly improves control? A. Covering deep containers tightly and leaving them at room temperature B. Dividing the rice into shallow containers and monitoring a validated cooling procedure C. Adding more seasoning before placing the rice in storage D. Recording the cooling temperature retrospectively at the end of the shift Correct Answer: B. Dividing the rice into shallow containers and monitoring a validated cooling procedure Question 3Which activity is most appropriately described as verification rather than monitoring? A. Measuring the temperature of a refrigerator during a shift B. Checking the concentration of sanitiser before use C. Reviewing records and conducting an internal audit to confirm the system works D. Observing the temperature of a cooked product at its coldest point Correct Answer: C. Reviewing records and conducting an internal audit to confirm the system works Question 4A guest reports a peanut allergy. What is the most appropriate immediate managerial response? A. Assure the guest that all hotel food is allergy-free B. Ask the guest to select food without visible peanuts C. Verify ingredients and preparation controls with the responsible chef before communicating a response D. Remove peanuts from the finished dish and serve it Correct Answer: C. Verify ingredients and preparation controls with the responsible chef before communicating a response Question 5Why is a completed temperature form not sufficient evidence that food was safe? A. Temperature records are never relevant to HACCP. B. Records may be inaccurate, completed retrospectively, or disconnected from corrective action. C. Only microbiological testing can establish any form of food safety. D. Temperature control applies only to frozen products. Correct Answer: B. Records may be inaccurate, completed retrospectively, or disconnected from corrective action. Question 6Which measure primarily addresses food defence rather than ordinary unintentional food safety hazards? A. Calibrating a cooking thermometer B. Separating raw poultry from salads C. Controlling access to storage areas and inspecting deliveries for tampering D. Using shallow containers for cooling rice Correct Answer: C. Controlling access to storage areas and inspecting deliveries for tampering Question 7A surface appears visually clean but gives an unsatisfactory allergen-protein swab. What does this indicate? A. Visual inspection alone has proven the surface safe. B. The surface may still contain allergenic residue and requires corrective cleaning. C. The swab result is irrelevant unless the surface contains visible grease. D. The food should be cooked at a higher temperature to remove the allergen. Correct Answer: B. The surface may still contain allergenic residue and requires corrective cleaning. Question 8Which sequence best represents a sound emergency response to suspected contaminated food? A. Continue service, complete paperwork, then investigate after the event B. Isolate suspect food, protect people, preserve evidence, assess exposure, and notify as required C. Destroy all records and replace the supplier immediately D. Publicly identify an employee before examining the process Correct Answer: B. Isolate suspect food, protect people, preserve evidence, assess exposure, and notify as required Question 9Why can end-product microbiological testing not replace preventive controls? A. Microbiological tests are useful only for chemical hazards. B. A sample may not represent the whole batch and can miss uneven contamination. C. Testing always makes food unsafe. D. Preventive controls are required only for legal documentation. Correct Answer: B. A sample may not represent the whole batch and can miss uneven contamination. Question 10Which managerial decision best reflects a mature food-safety culture? A. Rewarding employees for concealing deviations during peak service B. Focusing exclusively on inspection scores C. Encouraging hazard reporting, investigating root causes, and verifying corrective action D. Increasing the number of forms without changing procedures or supervision Correct Answer: C. Encouraging hazard reporting, investigating root causes, and verifying corrective action
|