Water Safety in Food Plants: A Risk-Based Water Safety Plan
How to manage water, ice and steam as food safety hazards using a risk-based water safety plan
Key takeaways
- Water is an ingredient, a cleaning agent and a processing aid; contaminated water can affect every product on site.
- Potable water from a public supply is not automatically safe at the point of use: storage tanks, dead legs and backflow create risks inside the site.
- A water safety plan maps the system from source to tap, identifies hazards and sets control measures, monitoring and verification.
- Microbiological and chemical testing should be risk-based, covering sampling points across the network, not just the incoming supply.
- Ice and culinary steam in contact with food must meet the same safety expectations as water.
1. Why water deserves its own plan
Water problems are often invisible. A backflow from a cleaning-in-place (CIP) system, biofilm in an unused pipe section, or a contaminated storage tank can introduce microbiological or chemical hazards into product, rinse water or ice. Food safety schemes and the ISO 22002 prerequisite programmes require water used as an ingredient or in contact with food to be potable or otherwise safe for its intended use, and they expect monitoring that is based on risk.
2. Map the system
Start with an up-to-date water distribution plan showing:
- Sources: public supply, wells, tankers, on-site treatment.
- Storage tanks and their access, covers and cleaning.
- Treatment: filtration, softening, chlorination, UV, reverse osmosis.
- Distribution pipes, with potable and non-potable systems clearly identified.
- Points of use: ingredient water, hand wash, CIP, cooling, ice machines, steam generation.
- Sampling points, numbered on the plan.
- Backflow prevention devices.
3. Hazards to consider
| Hazard | Possible source | Typical control |
|---|---|---|
| Pathogenic bacteria, viruses, parasites | Contaminated source, tank ingress, backflow, biofilm | Disinfection, tank integrity, backflow prevention, flushing |
| Legionella | Warm water systems, cooling towers | Temperature control, flushing, risk assessment by competent people |
| Chemical contamination | Cleaning chemicals via backflow, pipe materials, treatment chemicals | Air gaps or approved backflow devices, approved materials, dosing control |
| Physical contamination | Sediment, scale, pipe debris | Filtration, maintenance |
| Excess treatment residues | Chlorine overdosing | Dosing control and residual monitoring |
4. Control measures
- Source protection: documented supply status, supplier certificates for tankered water.
- Storage: covered, secure, inspected and cleaned at defined intervals.
- Treatment: validated for the intended effect; dosing and residuals monitored.
- Distribution: no cross-connections between potable and non-potable systems; dead legs removed; backflow prevention at CIP, hoses and chemical dosing points.
- Points of use: hoses stored off the floor, ice machines cleaned and sanitised.
- Change control: plumbing changes reviewed by the food safety team.
5. Monitoring and verification
| Activity | Typical approach |
|---|---|
| Residual disinfectant | Routine checks at representative points where chlorination is used |
| Microbiological testing | Indicator organisms (e.g. coliforms, E. coli, enterococci, total viable counts) at a rotating set of points, frequency based on risk |
| Chemical testing | Periodic analysis against drinking water parameters relevant to the source and treatment |
| Ice | Microbiological testing of ice in contact with food |
| Steam | Assurance that boiler additives are suitable where steam contacts food |
| Laboratory | Tests performed by competent laboratories, accredited for food-safety-critical analyses where schemes require it |
Results should be trended, and limits and responses defined in advance.
6. When results fail
- Assess whether product or food contact surfaces may have been affected since the last good result.
- Hold or assess affected product.
- Investigate the source: tank, treatment, backflow, sampling technique.
- Correct, flush and disinfect as needed.
- Re-sample and confirm before releasing the system for use.
7. Common audit findings
- No current water distribution plan, or one that does not match the site.
- Sampling only at the incoming supply, never at points of use.
- Hoses lying on the floor in wet areas, creating backflow and contamination risk.
- Storage tanks without cleaning records.
- Ice machines not included in cleaning schedules or testing.
Conclusion
A water safety plan treats water as what it is: an ingredient that touches almost everything in a food plant. Mapping the system, controlling backflow and storage, and testing across the network turn an invisible risk into a managed one.
Ask for your water distribution plan and check: when were the sampling points last tested, and do they include the furthest point of use?