The Invisible Foundation: Why Leadership Commitment Fails

The most overlooked requirement in food safety systems—from basic R.638 compliance to FSSC 22000 certification—is Senior Management Commitment and the meaningful execution of the Management Review. While QA managers spend thousands of hours refining Hazard Analysis and Critical Control Points (HACCP), the system often fails because leadership views food safety as a technical department responsibility rather than a core business strategy. In South Africa, where resource constraints and high staff turnover are common, this lack of oversight leads to the slow degradation of Prerequisite Programmes (PRPs) and eventual system collapse.

Management commitment is not an abstract concept; it is the physical provision of tools, the psychological backing of the QA team, and the financial investment in infrastructure. Without it, the HACCP plan becomes a "zombie document"—present on paper but dead in practice. When senior leadership fails to engage, the "person in charge" mentioned in South African law often delegates responsibility without delegating the authority or budget required to maintain standards.

Key Takeaways

  • Management Review is not just a meeting; it is a legal and certification requirement for resource allocation.
  • Section 10 of R.638 mandates that the person in charge ensures all workers are trained and facilities are compliant.
  • GFSI-benchmarked standards (FSSC 22000, BRCGS) now require measurable food safety culture objectives.
  • Overlooked requirements usually stem from a lack of "Internal Audit" depth regarding management activities.
  • Effective systems require a shift from "compliance for the auditor" to "commitment for the consumer."

Legal vs. Certification Requirements in South Africa

It is vital to distinguish between what the South African government requires by law and what international standards demand for export or retail readiness. Under the Foodstuffs, Cosmetics and Disinfectants Act 54 of 1972, specifically regulation R.638 (Regulations Governing General Hygiene Requirements for Food Premises), the "person in charge" holds the ultimate legal responsibility. This person must ensure that a Certificate of Acceptability is in place and that the premises meet strict hygiene standards. If an Environmental Health Practitioner (EHP) finds a facility in breach, the fine or closure order is directed at the business owner, not the QA officer.

In the South African context, the Environmental Health Practitioner (EHP) looks for basic structural integrity and hygiene. However, retailers like Shoprite, Pick n Pay, or Woolworths often demand FSSC 22000 or BRCGS certification. These standards go a step further, mandating a formal Food Safety Culture. This is no longer a "soft" requirement; it is a hard requirement where auditors look for evidence that senior management provides the budget for maintenance, training, and infrastructure. When you look at common food safety audit findings, the root cause is frequently a lack of resources—a direct failure of the management review process.

The Management Review: More Than a Minutes-Taking Exercise

Most South African food manufacturers treat the Management Review as a once-a-year tick-box exercise held two weeks before a big audit. This is the biggest mistake a QA Manager can make. A genuine review should occur at intervals frequent enough to address issues before they become non-conformities. If your facility is struggling with high micro-counts or repeated foreign body management issues, a yearly review is insufficient. In high-risk sectors like meat and poultry, quarterly reviews are the bare minimum to ensure the hazard analysis remains current against seasonal pathogens.

Expanded Management Review Input Checklist

Input Category Operational Detail Required South African Failure Mode Practical Fix
Resource Adequacy Review of the maintenance backlog, PPE availability, and sanitation chemicals. Cutting costs on food-grade lubricants or using inferior pest control providers. Link maintenance spending to root cause analysis of breakdowns.
Internal Audit Results Reviewing the effectiveness of internal audits performed during the quarter. Audits being too "kind" to colleagues, missing real floor-level risks. Use cross-departmental auditors or GMP audits by external consultants.
Supplier Performance Trend analysis of raw material quality and supplier approval status. Buying from unapproved local vendors because they are cheaper during cash-flow shortages. Enforce a strict approved supplier list that requires MD sign-off for bypass.
Food Safety Culture Reviewing survey results, staff feedback, and culture training effectiveness. Treating culture as "optional" rather than a business KPI. Set measurable goals, such as "reducing hygiene non-conformities by 20%."
Corrective Actions Checking if CAPAs are actually closing or just being postponed. The same findings appearing in every audit (e.g., "cracked tiles"). Management must assign capital expenditure (CAPEX) for structural repairs.

The "Person in Charge" and R.638 Compliance

In many SMEs, the owner is the "person in charge" but has never read the R.638 regulations. This creates a disconnect where the floor staff are told to follow prerequisite programmes, but the owner bypasses the footbath or wears jewellery in the high-care zone. This undermines the entire FSMS. According to R.638, the person in charge is legally bound to ensure that all food handlers are trained in food hygiene. If the MD doesn't sign off on the training budget, the facility is in breach of South African law.

This is where regulatory compliance consulting becomes essential. It bridges the gap between the technical requirements of the quality department and the commercial priorities of the boardroom. Leadership must understand that a single food recall in South Africa can cost millions in logistics, legal fees, and brand damage, far outweighing the cost of a preventive maintenance plan. For example, failing to manage batch traceability can turn a small product withdrawal into a full-scale public relations disaster.

Common Management Failure Modes and How to Fix Them

Understanding where management typically fails allows for targeted interventions. In the South African food industry, these failures often manifest in three specific ways:

1. The "Production First" Mentality

When production targets conflict with cleaning schedules, management often chooses volume over hygiene. The Fix: Integrate food safety into production KPIs. If a line is not cleaned according to the hygiene requirements, the production run should be flagged as "incomplete" or "at risk" in the management dashboard.

2. The Lack of Root Cause Depth

When a positive Listeria swab occurs in a dairy environment, the standard response is to re-clean. However, a robust root cause analysis often points higher. Was the cleaning chemical diluted too much to save money? Was the cleaning team rushed? These are management decisions. Use a fishbone diagram to show management how "Methods" and "Money" influence the biological risk.

3. The Silo Effect

Maintenance, Procurement, and HR often believe food safety is "QA's problem." The Fix: Include the Maintenance Manager and Procurement Head in the Food Safety Team workshop. Procurement must understand that buying cheaper, non-compliant ingredients increases the risk of food fraud and undermines the company's mitigation plan.

The Role of Internal Auditing in Driving Commitment

Many internal audits fail because they focus only on the factory floor and ignore the boardroom. An internal audit should include a review of the company's financial commitments to food safety. If the QA manager identifies a need for new temperature probes, but the purchase order is sitting on the CFO's desk for three months, that is a non-conformity against management commitment.

A thorough internal audit checklist should ask:

  • Did senior management attend the last HACCP review?
  • Are resources (personnel and equipment) available as required by the ISO 22000 clauses?
  • Is there evidence that management promotes a positive food safety culture?
If these are not being audited, the system is only being partially verified.

Food Safety Culture: The New Mandatory Frontier

Standards like BRCGS and FSSC 22000 (Version 6) have moved culture from a suggestion to a requirement. Management must now define and document a food safety culture plan. This includes:

  • Communication: How does management tell staff that safety is important?
  • Training: Is it just a video, or is there basic food safety training that changes behavior?
  • Feedback: Can a floor worker report a safety risk without fear of being fired?
Management must review food safety culture metrics such as the number of near-miss reports or the percentage of staff completing hygiene training on time. Neglecting this leads to major findings during a readiness audit.

"A food safety system is only as strong as the MD's willingness to stop the line when a risk is identified."

Bridging the Gap: Practical Steps for QA Managers

If you are a QA or Food Safety Manager, you must change how you report to leadership. Stop presenting purely technical data and start presenting risk and cost. Management speaks the language of Rands and Cents. Instead of saying "the floor is cracked," say "the floor condition is a breach of R.638 and increases the risk of a product recall by 40% due to pathogen harborage. The cost of a food recall in our sector averages R2 million, whereas the floor repair is R50,000." Utilise a structured audit readiness checklist that includes a section for management commitment. Ask to see the minutes of the last three production meetings—if food safety wasn't mentioned, your culture is at risk. Managers should be actively involved in the HACCP verification and validation process, not just signing the final page of the manual.

Key Elements of a Robust Management Review Meeting

  1. Frequency: At least quarterly for large manufacturers; bi-annually for SMEs. Do not wait for the annual audit.
  2. Attendance: Must include the CEO/MD and heads of Production, Maintenance, and HR. If they don't attend, the meeting should be rescheduled.
  3. Data-Driven: Reviewing trends in corrective actions (CAPA) and consumer complaints. Look for repeat offenders.
  4. Supplier Scrutiny: Review the supplier scorecard to ensure quality isn't being sacrificed for price.
  5. Action-Oriented: Every meeting must end with a list of tasks, assigned owners, and deadlines. Minutes must be signed off by the highest authority.

Moving Beyond the Paper System

The final reason this requirement is overlooked is that paper-based systems make it hard for management to see the big picture. When data is buried in lever-arch files, senior leadership remains disconnected from the daily risks. Transitioning to a digital approach, such as the QMSURE paperless system, allows for real-time dashboards that show management exactly where the risks lie. Visibility is the enemy of neglect. Digital food traceability ensures that management can see the status of a batch at a glance, rather than waiting for a manual report.

Whether you are pursuing FSSC 22000 certification or simply trying to maintain your COA under R638 regulations, remember that food safety starts at the top. The technical controls keep the food safe today, but leadership commitment ensures the food stays safe tomorrow. If management does not treat the HACCP audit as a business priority, the rest of the staff will follow suit.

Shilux provides specialized food safety consulting and training to help South African manufacturers bridge the gap between management and the factory floor. From conducting deep-dive gap audits to implementing digital quality management through QMSURE, we ensure your system is both compliant and sustainable. Contact our team to move your food safety system from a burden to a business advantage.