ServSafe Manager · Management of Food Safety Practices · 7 min read
Variances, Food Defense and Crisis Response
- Identify specialized food processing methods that require a variance and a HACCP plan under regulatory standards.
- Apply the FDA A.L.E.R.T. system and Employees FIRST tool to protect operations from intentional contamination.
- Execute active managerial procedures for handling foodborne illness outbreaks and imminent health hazards.
Specialized Processing Methods and Regulatory Variances
A variance is a written document issued by the regulatory authority that allows a regulatory requirement to be waived or modified. When a food service establishment plans to use specialized processing methods, the manager cannot simply alter procedures on their own. Instead, the manager must submit an application and obtain an approved variance from the regulatory authority before executing these processes. State and local rules may use different Food Code editions, impose different variance, manager-certification, or food-handler-card requirements, or even completely prohibit certain specialized processes. As part of active managerial control, the person in charge must verify local requirements before implementing any non-standard culinary technique.
For a process requiring a variance, the manager must obtain the variance and have and implement the required HACCP plan before starting; submit the plan for regulatory review when the regulatory authority requires it. This plan must thoroughly identify food safety hazards, critical control points (CCPs), critical limits, monitoring procedures, corrective actions, verification protocols, and recordkeeping practices. Curing food, smoking food for preservation, using additives or components to preserve food or render it non-TCS, sprouting seeds or beans, and operating a display tank for live molluscan shellfish offered for consumption require a variance and a HACCP plan; obtain regulatory review or approval of the plan when required. Furthermore, custom-processing animals for an individual's personal use requires a variance and a HACCP plan, and the manager must ensure that the resulting food is not offered to the public.
Certain packaging operations carry distinct safety regulations. Before using ROP, including cook-chill, sous vide, or modified atmosphere packaging, the manager must determine whether the Food Code requires a variance and HACCP plan; qualifying ROP of TCS food can operate without a variance under § 3-502.12, and its specified 48-hour exception does not require a HACCP plan. Managers must follow the applicable ROP requirements: qualifying methods may operate without a variance but generally require a HACCP plan, except where the Food Code’s 48-hour exception applies. For juice packaged at a food establishment, the manager must either follow a HACCP plan for the required 5-log pathogen reduction or, where warning labeling is permitted, apply the required warning label; the manager must check applicable requirements for the intended method of sale, especially distribution beyond direct retail sale. Once any approved variance is granted, managers must maintain the monitoring, corrective-action, and verification records required by the plan and make them readily available to the regulatory authority upon request.
| Specialized Food Process | Variance Required? | HACCP Plan Required? | Key Managerial Condition |
|---|---|---|---|
| Smoking food for preservation | Yes | Yes | Required when preserving food; not required if smoking only for flavor. |
| Curing meats or other foods | Yes | Yes | Must have regulatory approval before beginning operation. |
| Adding components (e.g., vinegar) to alter TCS status | Yes | Yes | Using additives or components to preserve food rather than merely enhance flavor requires a variance and HACCP plan, even if the food remains TCS; using them to make a food non-TCS also requires both. |
| Reduced-Oxygen Packaging (ROP / sous vide / cook-chill) | Varies | Yes | A variance is required unless a Food Code exception applies; a HACCP plan is generally required for ROP of TCS food, except under the specified 48-hour exception. In the ROP table row, set “HACCP Plan Required?” to “Varies”; qualifying ROP generally requires a HACCP plan, but the specified 48-hour exception does not. |
| Sprouting seeds or beans | Yes | Yes | Must be approved before offering sprouts to customers. |
| Displaying live molluscan shellfish in a display tank | Yes | Yes | Applies to tanks holding shellfish intended for consumption. |
| Packaging juice on-site for later sale | No | Conditional | Use a HACCP plan for the required 5-log pathogen reduction, or use the required warning label when that alternative is permitted for the juice and method of sale. |
Common mistakes
- Discarding suspected food during a foodborne illness complaint instead of segregating, holding under temperature control, and labeling it 'Do Not Use' and 'Do Not Discard'.
- Assuming that packaging juice on-site always requires a variance, or that a warning label can replace the required pathogen-reduction HACCP process regardless of how the juice is sold.
- Failing to notify the regulatory authority during an emergency because operations were only partially closed rather than fully shut down.
- Admitting liability or fault to an ill customer over the phone instead of remaining polite, listening attentively, and recording the factual details of their visit and symptoms.
Key points
- Curing, smoking for preservation, specified use of additives, sprouting, and operating a live molluscan shellfish display tank require a variance and HACCP plan; ROP requirements vary, and regulatory approval of a HACCP plan is not universal.
- Juice packaged on-site requires a HACCP plan for the required 5-log pathogen reduction or, when permitted for the method of sale, the required warning label; a variance is not automatically required.
- Food defense counters intentional tampering using FDA tools: management applies A.L.E.R.T. (Assure, Look, Employees, Reports, Threat) and front-line workers follow Employees FIRST (Follow, Inspect, Recognize, Secure, Tell).
- An outbreak is generally two or more illnesses from a common food, but a single confirmed case of botulism or chemical poisoning is also treated as an outbreak.
- During an outbreak investigation, managers must secure evidence labeled 'Do Not Use' and 'Do Not Discard', gather tracking data, audit employee illness logs, and report diagnoses of the Big Six pathogens.
- Imminent health hazards (sewage backups, extended power loss, water loss, fire, flood) require immediate regulatory notification and discontinuation of affected operations.
- During power failures, discard cold TCS food known to have been above 41°F (5°C) for more than four hours; obtain regulatory approval before resuming operations discontinued because of an imminent health hazard.
Practice this section
Explained ServSafe Management of Food Safety Practices questions, no account needed. ServSafe Management of Food Safety Practices practice test
The full lesson continues with 3 more sections with exam tips, audio in English and Spanish, 5 Check yourself questions and 20 flashcards.
- 1 month
$38.99$19.49 - 3 months
$113.99$56.99 - Lifetime
$233.99$116.99
One payment, no subscription.
See ServSafe plansAlready a member? Log in
Sample lesson: Foodborne Illness, High-Risk Groups and the Person in Charge25 practice questions on this exam
Each ServSafe practice test has 25 original questions with the answers explained. No account needed.
Open the ServSafe practice testsOriginal lesson written for ServSafe Manager practice · updated October 31, 2026. Exam names are trademarks of their owners; tests.global is not affiliated with them.