Understand the reliability of your supplier

A supplier risk review assesses how confident you can be in a supplier’s understanding and management of allergens.While the raw material risk review focuses on understanding the ingredient, the supplier risk review focuses on understanding the controls behind the information being provided.

The objective is to determine:

  • Whether the supplier understands allergen risks
  • Whether effective allergen controls are in place
  • Whether allergen information can be relied upon
  • Whether additional verification is required

How to review a supplier

A supplier review has four parts.

1. Review the supplier’s allergen management capability

Consider:

  • Do you know who the supplier is, or are you buying from a distributor?
  • Does the supplier have an allergen management program?
  • Do they understand applicable allergen regulations? Their location may help you assess this.
  • How do they manage allergen segregation?
  • How do they manage cleaning?
  • How do they prevent cross contact?
  • How do they manage change?

Why this matters:

Suppliers may approach allergen management differently. Understanding their systems helps establish confidence in the information being received.

2. Assess supplier controls

Information that may assist includes:

  • Level of certification
    • None
    • GFSI (Global Food Safety Initiative) recognised certification
    • Food safety program certification
  • Supplier questionnaires
  • Audit findings (if they have been certified)
  • Allergen policies
  • Cleaning validation studies
  • Testing programs

Higher levels of evidence generally increase confidence in supplier information. Once assessed, this can be documented and reviewed periodically based on risk. Suppliers with high confidence are likely to be reviewed less often than suppliers with low confidence.

3. Identify higher-risk suppliers

Suppliers may present increased risk where:

  • Information is limited
  • Responses are inconsistent
  • Allergen knowledge is poor
  • Certification is absent
  • Data gaps exist
  • Changes are poorly managed

If a supplier is higher risk:

Higher-risk suppliers may require increased oversight, testing or review frequencies. Or it may be appropriate to try to source a different supplier.

4. Develop a supplier confidence rating

Many businesses find it useful to document a supplier confidence or supplier allergen risk rating. This allows review activities to be prioritised based on risk and supports a risk-based supplier management program.

More than approving suppliers

The purpose is not simply to approve suppliers. The purpose is to understand which suppliers may require additional verification activities before confidence can be established.

Outcome of the risk review

At the completion of the review you should understand:

  • How well the supplier manages allergens
  • The reliability of allergen information provided
  • Areas of uncertainty or risk
  • Whether additional controls are required
  • How frequently the supplier should be reviewed

Where this information is used

This information supports supplier and material approval decisions and determines the level of ongoing verification required.

Useful Resources