The seven principles of the methodology

The VACCP methodology described in this guide rests on seven guiding principles, analogous to the seven principles of the Codex Alimentarius HACCP system but adapted specifically to address vulnerabilities to food fraud. These principles establish what the VACCP system must achieve; their operationalisation, that is how to put them into practice, is developed in Part 3 through the 12 implementation steps and the supporting sections of Part 4.

Principle 1 — Conduct a vulnerability analysis

Identify and assess all food fraud vulnerabilities associated with each product, ingredient, material and process within the defined scope, considering the three pillars (Opportunity, Motivation, Countermeasures) in a systematic and documented manner.

Principle 2 — Determine Vulnerability Critical Control Points (VCCPs)

Identify the points, steps or procedures at which controls can be applied that are essential to prevent, eliminate or reduce significant food fraud vulnerabilities to an acceptable level.

Principle 3 — Establish mitigation measures with performance criteria

For each VCCP and significant vulnerability, define specific mitigation measures (preventive, detective and corrective) with measurable, verifiable performance criteria that allow the effectiveness of the measures to be evaluated.

Principle 4 — Establish a monitoring system

Implement planned, systematic monitoring procedures to verify that the mitigation measures are applied correctly and remain effective over time.

Principle 5 — Establish corrective actions

Define the corrective actions to be taken when monitoring indicates that a mitigation measure is not working as intended, or when a food fraud incident is detected or suspected.

Principle 6 — Establish verification procedures

Implement verification activities (internal audits, analytical testing, review of records, assessment of intelligence) that confirm the VACCP system works as designed and is effective in preventing food fraud.

Principle 7 — Establish a documentation and record-keeping system

Maintain documentation and records demonstrating the effective application of Principles 1 to 6, including the vulnerability assessment, the mitigation plan, monitoring results, corrective actions, verification results and periodic reviews.

The twelve steps at a glance

This is the full route of Part 3. It serves as a contents list and, if you are implementing, as a progress check: whatever you tick is kept in your browser.

Checklist0 of 12

Prepare the assessment

Steps 1-5

• Step 1 — Form the VACCP team
• Step 2 — Define the scope of the assessment
• Step 3 — Describe products and map the supply chain
• Step 4 — Gather food fraud intelligence
• Step 5 — Identify vulnerabilities

Assess and score

Steps 6-9

• Step 6 — Assess Opportunity
• Step 7 — Assess Motivation
• Step 8 — Assess Countermeasures
• Step 9 — Calculate the overall vulnerability and classify

Mitigate and verify

Steps 10-12

• Step 10 — Determine significant vulnerabilities and VCCPs
• Step 11 — Develop the mitigation plan
• Step 12 — Verification, review and continual improvement