Risk assessment decides whether microbiological, physical and chemical testing of own brand or own produced products is needed to verify legal or specified requirements. A risk-based test plan covering internal and external testing exists, spanning raw materials, semi-finished and finished goods, equipment and packaging and, where needed, the environment, with results recorded; customer-requested analyses are written into the plan and done to defined requirements with results held on site. Safety-relevant analyses are preferably done by ISO 17025 accredited laboratories, otherwise internal or non-accredited results are regularly verified by accredited ones; internal testing uses recognised methods with reliability shown by ring or proficiency tests, qualified staff and suitable equipment and premises; results are evaluated promptly with corrective measures for poor results; and the test plan is updated, or other measures taken, in response to information on product risks including adulteration and fraud.
This control maps to 1 controls across 1 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.
The graph holds this control, the 1 it maps to, and the evidence behind each claim, over MCP and REST.