Presentation, licence and how to use this guide

Unlike HACCP, which has the codified methodology of the Codex Alimentarius, and TACCP, which rests on PAS 96, VACCP has until now lacked a standardised methodological reference with defined quantitative assessment criteria. This guide fills that gap.

It is grounded in Routine Activity Theory (Cohen & Felson, 1979), adopted by the three-dimensional SSAFE/GFSI model (Opportunity, Motivation, Countermeasures), and extends it with an explicit quantitative scoring system of 12 sub-factors assessed on a 1–5 scale, an overall vulnerability formula V = (O × M) / C, a decision tree for determining Vulnerability Critical Control Points (VCCPs), and a 12-step implementation framework analogous to the structure of HACCP.

The guide is compatible with the requirements of FSSC 22000, BRC, IFS Food and SQF, and includes a vulnerability-category assessment approach for organisations with extensive portfolios. It is addressed to food safety teams, auditors, consultants, regulatory authorities and any organisation in the food chain required to comply with food fraud mitigation requirements.

Keywords: VACCP, food fraud, vulnerability assessment, critical control points, food safety, GFSI, FSSC 22000, supply chain, economically motivated adulteration, routine activity theory, fraud mitigation.

License

© 2026 Israel Munguia (Beira Consultores). Beira VACCP Framework (BVF): Vulnerability Assessment and Critical Control Points for the Prevention of Food Fraud (v1.0).

This work is distributed under the Creative Commons Attribution-ShareAlike 4.0 International licence (CC BY-SA 4.0).

You are free to share and adapt this material for any purpose, including commercially, provided that:

1. Appropriate credit is given to the original author: Israel Munguia, Beira Consultores (beira.com.mx).
2. A link to this licence is included.
3. Any changes made are indicated.
4. Derivative works are distributed under the same CC BY-SA 4.0 licence.

https://creativecommons.org/licenses/by-sa/4.0/deed.en

Preface

This guide establishes a structured methodology for assessing vulnerabilities to food fraud and determining Vulnerability Critical Control Points (VCCPs). It has been designed as a practical, scientifically grounded tool that enables organisations in the food chain to systematically identify, assess, mitigate and monitor the risks associated with economically motivated food fraud.

Audience

This guide is addressed to:

• Food safety and quality teams
• Purchasing and supply chain managers
• Internal and external auditors of food safety management systems
• Food safety consultants
• Regulatory authorities and certification bodies
• Any organisation in the food chain that needs to comply with food fraud mitigation requirements

How to use this guide

The guide is organised into four parts:

• Part 1 — Fundamentals: Defines the scope, the normative references and the key terms.
• Part 2 — Theoretical framework: Establishes the scientific basis and the principles of the methodology.
• Part 3 — Implementation: Describes the 12 steps for carrying out the assessment and the mitigation plan.
• Part 4 — Support: Covers incident management, records, regulatory compatibility and appendices.

Reading Parts 1 and 2 is recommended in order to understand the fundamentals before applying the steps in Part 3. The appendices provide practical tools (matrices, decision trees, templates) to be used directly during implementation.