CFSQA Certified CPGP Certified RAC Certified PCQI Trained

Food GMP Consultant — 21 CFR Part 117 & FSMA Compliance

Navigate FSMA Preventive Controls with a Certified Food Safety & Quality Auditor. From hazard analysis to supply chain verification, we build food safety systems that pass FDA inspections and third-party audits.

Jared Clark, JD, MBA, CFSQA, CPGP, RAC -- one of the few GMP consultants certified across food safety, pharmaceutical GMP, and regulatory affairs.

200+
Clients Served
100%
Audit Pass Rate
CFSQA
Food Safety Auditor
7
Credentials

Understanding 21 CFR Part 117

21 CFR Part 117 is the FDA regulation that governs current Good Manufacturing Practice, Hazard Analysis, and Risk-Based Preventive Controls for Human Food. It is the backbone of the Food Safety Modernization Act (FSMA) and applies to nearly every food facility in the United States.

Unlike the older approach that relied on reacting to contamination after it happened, FSMA shifted FDA's framework to prevention. Under Part 117, food manufacturers must proactively identify hazards, implement controls to prevent them, monitor those controls, and verify the entire system is working. The regulation has three core components:

1

Subpart B: Current Good Manufacturing Practice

Baseline requirements for personnel, buildings, equipment, production, warehousing, and distribution. These are the foundational hygiene and facility controls that every food manufacturer must meet -- regardless of size or product type.

2

Subpart C: Hazard Analysis & Preventive Controls

Requires a written food safety plan with hazard analysis, preventive controls for identified hazards (process, allergen, sanitation, supply chain), monitoring procedures, corrective actions, and verification activities. A Preventive Controls Qualified Individual (PCQI) must oversee the plan.

3

Subpart G: Supply Chain Program

When a hazard is controlled by your supplier rather than your own facility, you must establish a risk-based supply chain program. This includes approved supplier verification activities, onsite audits, testing, and documentation requirements.

Who Must Comply with Part 117?

Part 117 applies to all facilities that manufacture, process, pack, or hold human food for US sale. This includes food manufacturers and processors, co-packers, warehouses and distribution centers, importers, ingredient suppliers, bakeries, snack manufacturers, and beverage producers. Limited exemptions exist for very small businesses, farms, and facilities under other FDA rules (seafood HACCP, juice HACCP).

FDA enforcement is active. Since FSMA Preventive Controls became fully effective, FDA has issued warning letters and import alerts to facilities lacking compliant food safety plans. Non-compliance puts your ability to manufacture and distribute food at risk.

Food GMP Consulting Services

End-to-end food safety consulting -- from initial gap analysis through audit day and beyond

FSMA Preventive Controls Implementation

Complete implementation of FSMA Preventive Controls for Human Food. We develop your written food safety plan, identify and evaluate hazards, and establish process controls, allergen controls, and sanitation controls tailored to your operation.

Hazard Analysis & Critical Control Points

Rigorous hazard analysis covering biological, chemical (including radiological), and physical hazards at every step of your process. We identify hazards requiring preventive controls and establish critical limits, monitoring frequencies, and corrective action procedures.

Supply Chain Programs

Build a compliant supply chain program under 21 CFR 117 Subpart G. We establish approved supplier lists, verification activities, and Foreign Supplier Verification Program (FSVP) procedures for imported ingredients. Ensure every ingredient entering your facility meets safety standards.

GMP Documentation & SOPs

Develop your complete documentation system: standard operating procedures, sanitation schedules, pest control programs, equipment maintenance logs, recall procedures, and complaint handling protocols. Every document is written to satisfy both FDA inspectors and third-party auditors.

Employee Training & Food Safety Plans

Build a food safety culture from the ground up. We develop training curricula for all personnel -- from line workers to quality managers. Training covers cGMP requirements, allergen awareness, personal hygiene, and your specific preventive controls. All training is documented and audit-ready.

Audit Preparation (SQF, BRC, FSSC 22000)

Get audit-ready for third-party food safety certifications. We prepare your facility for SQF, BRC Global Standards, and FSSC 22000 audits -- all GFSI-benchmarked schemes that major retailers and food service companies require. Includes mock audits with detailed finding reports and FDA inspection preparation.

GMP: The Foundation for Food Safety Certifications

Every major food safety certification builds on top of GMP compliance. Without a solid cGMP foundation, third-party certifications are impossible to achieve -- or maintain.

Layer 3: GFSI Certifications

Market Access

SQF, BRC, FSSC 22000 -- the certifications that major retailers, foodservice companies, and international buyers require. These are your competitive advantage.

Layer 2: FSMA Food Safety Plan

FDA Requirement

Hazard analysis, preventive controls, monitoring, corrective actions, verification. The written food safety plan is your legally mandated system under 21 CFR 117 Subpart C.

Layer 1: cGMP (21 CFR 117 Subpart B)

Foundation

Personnel practices, facility design, sanitary operations, equipment maintenance, process controls, warehousing, and distribution. This is the non-negotiable baseline.

Why GMP Comes First

Many food manufacturers try to jump straight to a GFSI certification like SQF or BRC without first establishing robust cGMP practices. This approach fails. Third-party auditors assess your GMP foundation as part of every certification audit. If your facility lacks proper sanitation programs, equipment maintenance, or personnel hygiene practices, you will not pass -- regardless of how polished your food safety plan looks on paper.

We build your compliance from the ground up. Starting with cGMP fundamentals in 21 CFR 117 Subpart B, then layering on your food safety plan with preventive controls, and finally preparing you for whichever GFSI-benchmarked certification your customers require. This layered approach is why our clients achieve certification on the first attempt.

Cross-Industry Advantage

Most food safety consultants only know food. Jared Clark consults across dietary supplements, pharmaceutical and OTC drug manufacturing, cosmetics, and food. This cross-industry perspective creates tangible advantages for food manufacturers.

Pharmaceutical GMP (21 CFR 210/211) is among the most rigorous quality frameworks in the world. When you work with a consultant who understands pharma-grade quality systems, you benefit from that rigor applied to your food operation. The result is documentation, training, and process controls that exceed what food-only consultants deliver.

Pharma-Grade Documentation

SOPs, batch records, and quality procedures built to pharmaceutical standards -- far exceeding what most food auditors expect. Your documentation becomes a competitive asset.

Cross-Contamination Expertise

Experience with pharmaceutical cleanroom controls and supplement allergen programs translates directly to food allergen management and sanitation validation.

Regulatory Intelligence

A JD and RAC certification mean we understand the legal and regulatory context behind FDA food safety rules -- not just the letter of the regulation, but the enforcement trends and inspection priorities.

CFSQA

Certified Food Safety & Quality Auditor

ASQ

CPGP

Certified Pharmaceutical GMP Professional

ASQ

RAC

Regulatory Affairs Certification

RAPS

JD

Juris Doctor

Law Degree

CMQ-OE

Certified Manager of Quality

ASQ

MBA

Master of Business Administration

Business

Food GMP & FSMA: Frequently Asked Questions

21 CFR Part 117 is the FDA regulation that establishes current Good Manufacturing Practice (cGMP) requirements, hazard analysis, and risk-based preventive controls for human food. It applies to all facilities that manufacture, process, pack, or hold human food for sale in the United States -- including domestic manufacturers, co-packers, warehouses, and importers. Only certain exemptions exist for very small businesses, farms, and facilities regulated under other specific FDA rules like seafood HACCP or juice HACCP.
HACCP focuses primarily on identifying critical control points in the production process. FSMA Preventive Controls under 21 CFR Part 117 is broader in scope. It requires a written food safety plan, hazard analysis covering biological, chemical, and physical hazards, preventive controls (process, allergen, sanitation, and supply chain), monitoring procedures, corrective actions, and verification activities. FSMA effectively supersedes traditional HACCP for most food manufacturers, though HACCP remains the standard for seafood and juice processors.
Yes. Under 21 CFR Part 117 Subpart C, every food facility subject to preventive controls must have a Preventive Controls Qualified Individual (PCQI). The PCQI is responsible for developing, implementing, and overseeing the food safety plan. This person must have successfully completed training in preventive controls that is at least equivalent to the FDA-recognized standardized curriculum, or have equivalent job experience. Your PCQI can be an employee or an outside consultant -- we can serve as your PCQI or train your team member to fill this role.
Most food manufacturers can develop and implement a compliant food safety plan within 3 to 6 months with expert guidance. The timeline depends on your facility's complexity, number of product lines, existing quality systems, and supply chain structure. Simple operations with a few products may complete implementation in 8 to 12 weeks. Complex facilities with multiple processing lines, allergen programs, and extensive supply chains may need 6 months or more. We recommend starting well before any scheduled FDA inspection or third-party audit.
The most common third-party food safety certifications are SQF (Safe Quality Food), BRC (British Retail Consortium Global Standards), and FSSC 22000, all of which are GFSI (Global Food Safety Initiative) benchmarked. The right choice depends on your market. Major US retailers often require SQF. If you export to the UK or Europe, BRC is typically preferred. FSSC 22000 is popular internationally. All three build on a foundation of GMP compliance under 21 CFR Part 117, so getting your cGMP right is the essential first step before pursuing any certification.

Ready to Build Your Food Safety System?

Schedule a free consultation with Jared Clark, CFSQA, CPGP, RAC. We will assess your current 21 CFR Part 117 compliance, identify gaps in your food safety plan, and map a clear path to FDA and third-party audit readiness.