Scientific basis

4.1 Routine Activity Theory

This methodology is grounded in Routine Activity Theory, developed by Lawrence E. Cohen and Marcus Felson in 1979. The theory, which originates in criminology, holds that for a crime to occur three elements must converge in time and space:

1. An attractive target — In the context of food fraud: a product, ingredient or material with sufficient economic value to motivate adulteration.
2. A motivated offender — An actor in the supply chain with economic incentives to commit fraud.
3. The absence of a capable guardian — A lack of controls, testing, supervision or systems that prevent or detect fraud.

The theory has been adopted as the conceptual basis of the SSAFE model (developed by SSAFE in collaboration with Vrije Universiteit Amsterdam, PricewaterhouseCoopers and GFSI) and has been validated as a reference framework for assessing vulnerabilities to food fraud in multiple scientific publications (van Ruth et al., 2017; Spink et al., 2019).

4.2 Adaptation to food fraud: the three-dimensional model

Applying Routine Activity Theory to food fraud yields a three-dimensional model that assesses vulnerability as a function of three independent factors:

Vulnerability = f(Opportunity, Motivation, Countermeasures)

This model differs from traditional risk analysis approaches (probability × consequence) in one fundamental respect: it recognises that food fraud is a deliberate act committed by a rational human being, not a random event. The assessment must therefore consider not only the technical probability of occurrence, but also the human factors that drive fraudulent behaviour and the mechanisms that deter it.

The interaction of the three factors can be pictured as a balance:

• High opportunity + high motivation + low countermeasures = Maximum vulnerability
• Low opportunity + low motivation + high countermeasures = Minimum vulnerability

4.3 Justification of the quantitative approach

Purely qualitative approaches to assessing vulnerability to food fraud have significant limitations:

• Subjectivity: Different assessors may reach different conclusions from the same data.
• Limited reproducibility: Without numerical criteria, assessments are not comparable across periods or between organisations.
• Difficulty in prioritising: Without a numerical value, it is hard to establish a clear order of priority among vulnerabilities.
• Audit findings: The absence of a defined methodology with clear criteria is one of the most frequent findings in FSSC 22000 §2.5.4 audits.

This guide adopts a defined quantitative approach that assigns numerical scores (1-5) to each sub-factor of opportunity, motivation and countermeasures, with explicit descriptors for each level. The overall vulnerability score is calculated using a mathematical formula that produces a comparable, classifiable numerical value.