BrydgeOne
Book a demo
  1. Home
  2. Modules
  3. Food defense & food fraud
Food defense & food fraudFood & feed

Threats and fraud vulnerabilities under control, with proof

This module records TACCP and VACCP assessments. TACCP maps deliberate threats such as sabotage, intentional contamination and insider threats, VACCP the vulnerabilities to economically motivated fraud such as dilution, substitution and counterfeiting. For each threat you assess likelihood and impact, record the controls and monitor the residual risk.

Features

What you do with Food defense & food fraud

TACCP and VACCP together

Counters show how many assessments of each type you have. If one type is missing, a warning appears, because FSSC 22000 requires both a TACCP and a VACCP assessment.

Threats by category

For each threat or vulnerability you record the category, such as sabotage, cybersecurity, substitution or false origin, with a description, location or process step and the actor, source or supplier.

Likelihood times impact

The system calculates the score of likelihood (1 to 5) times impact (1 to 5) right away. From 15 upwards a threat counts as high risk and an additional control measure is required.

Assess and accept residual risk

After the measure you rate the residual likelihood and impact and record whether the residual risk is acceptable. You set the threat status to Controlled or Accepted.

Measure straight to action

With one button you add a measure to the central action list as an action or CAPA, so its implementation is followed up.

Linked to processes and suppliers

If you use Processes or Supplier management, you link a threat to a process step or the source of a vulnerability to a supplier in your register.

In practice

How it works

  1. 1

    Create an assessment

    With New assessment you choose TACCP or VACCP and record the title, date, scope and reassessment date.

  2. 2

    Add threats

    With Add threat you describe each threat or vulnerability and rate its likelihood and impact.

  3. 3

    Record controls

    You describe existing controls and the additional control measure and assess the residual risk.

  4. 4

    Adopt and reassess

    With a conclusion you set the assessment to Adopted. At least once a year you update threats and scores, and the reassessment date appears in the calendar.

Standards and legislation

Where it helps you

BrydgeOne contains no text of the standards. Here you see which topics from standards and legislation this module helps you with.

FSSC 22000

The TACCP and VACCP assessments serve as evidence for the FSSC requirements on food defense (2.5.3) and food fraud (2.5.4).

Glossary

Terms related to Food defense & food fraud

Frequently asked questions

Questions about Food defense & food fraud

What is the difference between TACCP and VACCP?

TACCP looks at deliberate attacks on your product or process: the perpetrator wants to cause harm. VACCP looks at economically motivated fraud: the perpetrator wants to profit without being caught. FSSC 22000 requires both assessments.

When is a threat high risk?

At a likelihood times impact score of 15 or more. An additional control measure is then required, and the threat stays marked red until it has been recorded.

Who may accept the residual risk?

Your own organization decides. Record the acceptance with the residual risk field and the Accepted status, and explain the trade-off in the assessment's conclusion.

How often do we need to reassess?

At least once a year, as FSSC requires. Record the reassessment date and set how many days in advance you want to be warned.

Start small

Start with just Food defense & food fraud and expand when you want

You do not have to set up everything at once. Switch this module on, add other modules later and keep using the same data and the same app. BrydgeOne fits every organisation, from a small company to enterprise, and you only pay for what you switch on, from € 49 per month.

See Food defense & food fraud in your own situation

You only pay for the modules you switch on, from € 49 per month. In a demo we show how it works with your own processes.