How to pass a food safety inspection — operator playbook.

This article is educational, not legal advice. If you have already received a Form 483, a CFIA Corrective Action Request, or a state health-department violation list, get a regulatory professional involved before you respond in writing.

01The mindset

What an inspector is actually doing in your facility.

My first CFIA inspection at the Brantford mushroom facility was not the disaster I had been imagining for six months. The inspector walked in, asked for my licence, asked to see my Preventive Control Plan, and then did something I did not expect. She put the binder down and started walking the room.

She opened the walk-in. She looked at the thermometer. She pulled a temperature log off the wall and counted backwards through the dates, checking for blanks. She asked the person who happened to be standing at the inoculation table what she did when the room temperature drifted above the set point. The whole inspection was an hour-long test of one question: does the system on paper match what is actually happening on the floor.

That is the mental model the rest of this article is built on. A food safety inspection — whether it is the FDA, the CFIA (Canadian Food Inspection Agency), USDA-FSIS (the United States Department of Agriculture's Food Safety and Inspection Service), or your local health department — is not a pop quiz on the regulation. It is a check on whether the system you say you run actually runs when nobody is watching. The inspector is not trying to catch you out on a clause number. They are trying to confirm that your monitoring, your records, and your physical conditions all tell the same story.

This is the universal playbook. It covers the four kinds of inspectors who could walk through your door — FDA, USDA-FSIS, CFIA, or state and local health — because the failure patterns are the same across all four. For the parent context, see the audit prep hub. For what happens when an inspection has already gone badly, the FDA Form 483 response guide is the sibling article on the enforcement side.

02Who shows up

The four kinds of inspector — and what each one can do.

Operators sometimes lump every food inspection into one mental bucket. They are not the same. The universal playbook in this article works for all four, but the cadence, the powers, and the post-inspection process are different.

1. 01

   FDA — registered food facilities, US

   Inspects facilities that manufacture, process, pack, or hold human food under the Food Safety Modernization Act (FSMA). Minimum cadence is every three years for high-risk domestic facilities and every five years for non-high-risk under FSMA — FDA can inspect more often. Output is an Establishment Inspection Report classified as NAI (No Action Indicated), VAI (Voluntary Action Indicated), or OAI (Official Action Indicated). Observations are issued on FDA Form 483. Response window is 15 business days, FDA policy not statute.

2. 02

   USDA-FSIS — meat, poultry, and egg products, US

   A federal inspector is physically present every day a slaughter or processing plant operates. There is no scheduled audit because the inspection is continuous. Output is a Noncompliance Record (NR). Chronic NRs can escalate to suspension of inspection — which means the plant has to stop running. Appeals must be filed within 30 calendar days under FSIS Directive 13000.3.

3. 03

   CFIA — Safe Food for Canadians licensees, Canada

   Inspects SFCR licence holders against the Preventive Control Plan using risk-based scheduling. High-risk profiles get visited more often. Tools include product detention, licence suspension, and Administrative Monetary Penalties. If corrective action is not taken within 90 days of a suspension, the licence may be cancelled.

4. 04

   State and local health — retail food, US

   Inspects restaurants, retail food stores, and food trucks against the state-adopted edition of the FDA Food Code. Cadence is risk-tiered — full-menu high-risk operations are visited two to four times a year, lower-risk less often. Violations are categorized as Priority (P) (directly cause illness, fixed on-site or within 72 hours), Priority Foundation (Pf) (systems supporting Priority items, fixed within ten days), or Core (general sanitation, longer windows).

Two more rarely make the food-inspection list but can shut you down anyway. Fire department checks suppression tags, fire extinguisher service dates, hood-cleaning certificates, and exit signage. OSHA (Occupational Safety and Health Administration) inspects worker safety but can flag chemical labeling or slip hazards your health inspector skipped. An out-of-cert backflow preventer flagged by the plumbing inspector will sink your health inspection too.

The universal piece: whichever one shows up, the failure patterns are the same five things. Which leads to the next section.

03The five risk factors

What inspectors are actually looking for: the CDC's five risk factors.

Every food inspection — federal, provincial, state, or local — is built on the same epidemiology. The CDC (Centers for Disease Control and Prevention) identified five food-handling behaviors most frequently linked to foodborne illness outbreaks, and the FDA has been measuring compliance against those five since 1998 through the Retail Food Risk Factor Study. Every other rule in the Food Code is a way of controlling one of these five.

1. 01

   Food from unsafe sources

   Buying from an unapproved supplier. No shipping records. Foods that should never have been served — home-canned low-acid foods at a farmers' market, wild-foraged mushrooms without an approved-source attestation, raw milk where the law prohibits it.

2. 02

   Inadequate cooking

   Pathogens not killed by the cook step. FDA Food Code 2022 minimums: poultry 165 degrees Fahrenheit (74 Celsius) for 15 seconds; ground meat 155 (68) for 17 seconds; whole-muscle pork or fish 145 (63) for 15 seconds; eggs cooked for immediate service 145.

3. 03

   Improper holding temperatures

   The danger zone. TCS (Time and Temperature Control for Safety) food held between 41 degrees Fahrenheit (5 Celsius) and 135 (57). Cold must be at or below 41. Hot must be at or above 135. Cooling rule: 135 down to 70 within two hours, then 70 down to 41 within the next four hours, for a maximum of six hours total.

4. 04

   Contaminated equipment

   Cross-contamination from utensils, cutting boards, or food-contact surfaces. Inadequate cleaning and sanitizing. Includes any food-contact surface that wasn't sanitized between raw and ready-to-eat use.

5. 05

   Poor personal hygiene

   Sick employees working. Inadequate handwashing. Bare-hand contact with ready-to-eat food (which is illegal in most jurisdictions). No written employee health policy. No way to send people home when they should be home.

In the FDA's own data, the two factors most frequently out of compliance at retail are improper holding temperatures and poor personal hygiene. Those two account for the largest share of cited violations every year. If you fix nothing else, fix those.

The five factors are the conceptual scaffolding for the seven most common failures, which is what the next section walks through. Every common failure maps back to one of the five.

04The seven failures

The seven most common failures — and the fix for each.

These are compiled from CDC EHS-Net (Environmental Health Specialists Network) data, state health department violation logs, FDA Form 483 observations for human food (FY 2019 to 2023), and CFIA Preventive Control Inspection findings. Roughly in order of how often they get cited.

Failure 1 — Temperature abuse.

The single most-cited category nationwide. Failure modes I see most often: cold-hold at 45 to 50 degrees Fahrenheit because the cooler is overloaded and the air can't circulate; hot-hold at 120 because someone turned the steam table down and nobody verified; six-gallon batches of soup that take eight hours to drop through the danger zone; chicken cooked to "looks done" instead of 165 with a probe.

The fix: a calibrated probe thermometer on every line, not in a drawer. A weekly calibration log (ice-point check or boiling-point check). A written cooling SOP that calls out the two-stage rule (135 to 70 in two hours, then 70 to 41 in four). Ice baths, blast chillers, or shallow pans for cooling — not deep tubs. A cold-holding audit during prep, not at end-of-shift. The supporting log is the refrigerator temperature log plus the cooking and cooling logs from the same hub.

Failure 2 — Cross-contamination.

Raw chicken on a shelf above ready-to-eat salad. The same cutting board used for raw poultry and tomato slicing in the same shift. The wiping cloth that touched a raw surface and then a food-contact surface. Shared utensils across allergen and non-allergen prep.

The FDA Food Code's cooler storage hierarchy from top to bottom is: ready-to-eat or cooked food at the top, then raw seafood, then raw whole-muscle beef or pork, then raw ground meat, then raw poultry at the bottom shelf where drips can't reach anything below. Color-coded boards and utensils. A storage diagram posted on the cooler door. Sanitizer buckets at every station with verified concentration (50 to 100 ppm chlorine, 150 to 400 ppm quat ammonium, 12 to 25 ppm iodine — verify with test strips that haven't expired). Written cleaning frequency for food-contact surfaces: every four hours of continuous use, between raw and ready-to-eat tasks, and any time contamination is suspected.

Failure 3 — Personal hygiene and the sick-employee policy.

Hand sink blocked by a stack of bus tubs. No soap. No paper towels. Bare-hand contact with ready-to-eat food where it is prohibited. Employees working through vomiting, diarrhea, or jaundice symptoms because they need the shift. No written employee health policy on file.

The Food Code's Big 6 reportable illnesses are Norovirus, Typhoid fever (Salmonella Typhi), Shigellosis, STEC (Shiga toxin-producing E. coli) O157:H7, nontyphoidal Salmonella, and Hepatitis A. Symptomatic employees are excluded. Diagnosed employees are excluded. A written employee health policy — most operators use FDA Form 1-A as the template — signed by every food employee at hire is what the inspector wants to see on file. "I ask them every shift" does not satisfy the rule. Stocked, unobstructed hand sinks. Gloves and tongs at every ready-to-eat station. A Person In Charge (PIC) who is empowered to send people home.

Failure 4 — Cleaning and sanitizing.

The dish machine at the wrong final-rinse temperature or sanitizer concentration. A three-compartment sink with no test strips in the drawer. Sanitizer buckets that have been sitting since prep and are now well below the target ppm. Food-contact surfaces cleaned but not sanitized — the two are not the same thing.

21 CFR §117.35 requires registered food facilities to be maintained in a clean and sanitary condition and that cleaning and sanitizing protect against allergen cross-contact and against contamination. The fix: a daily dish machine temperature and sanitizer check log; test strips at every bucket; a Master Sanitation Schedule with daily, weekly, monthly, and quarterly tasks signed off by the person who did them; ATP swabs or APC (Aerobic Plate Count) swabs where realistic.

Failure 5 — Pest control.

The single top FDA Form 483 category for food facilities in the FY 2019 to 2023 window is 21 CFR §117.35(c) — pest control. Failure modes: rodent droppings under equipment that nobody moves. Flying insects in the prep area. Gaps under exterior doors. Dumpster too close to the receiving door. Bird nests on the loading dock. Pest control reports signed but the service not actually performed (an inspector who calls the pest company to verify will find this).

The fix: an Integrated Pest Management contract with monthly service reports filed in the binder. A trap map for the facility. An exclusion repair log with dates — door sweeps replaced, holes patched, dock leveler gaps sealed. No-harborage practices: no cardboard storage in prep, FIFO (first in, first out) rotation, dumpster lids down, exterior trash area clean.

Failure 6 — Records incomplete or falsified.

This is the failure that turns a VAI into an OAI. Once an inspector suspects that records have been falsified — that temperature logs were filled in at end-of-shift in one handwriting, or that pest control "verification" signatures were back-filled — every other answer in the room gets questioned.

The pattern: temperature logs in one handwriting and one pen color across two weeks of shifts. Calibration logs that have been blank since the last inspection. Training certificates that expired six months ago. Deviation logs with no corrective action noted. Pest control reports as a stack of unfiled paper instead of a tracked monthly record.

The fix is the only one in this article I'd call non-negotiable. Real-time logging — paper or app, but at the time of the reading, by the person who took the reading. Supervisor verification within 24 hours, signed and dated. Probe thermometer calibration on a weekly schedule with an ice-point or boiling-point check recorded. A deviation log where every out-of-spec event is entered and signed by the PIC before the end of the shift. A monthly binder audit by someone other than the daily recorder.

I will say the quiet part out loud. There is a real temptation, after a missed reading or three, to fill the log in at the end of the day and write "all good." Every operator has felt it. Inspectors have seen every version of the same handwriting trying to look like four different people, and they will spot it in 30 seconds. The fix is not to get better at faking. The fix is to build the system so the readings happen on time, and when one doesn't, the deviation gets logged honestly. Honest deviations get fixed. Falsified records get warning-lettered.

Failure 7 — Allergen mismanagement.

The US Big 9 allergens — milk, eggs, fish, crustacean shellfish, tree nuts, peanuts, wheat, soybeans, and sesame as of 2023 under the FASTER Act — are the regulated list for FDA-jurisdiction food. Failure modes: shared fryer for breaded (wheat-containing) and gluten-free items with no validation that changeover cleaning eliminates residue. Menu labeling that hasn't been updated since the chef changed the bread supplier. Missed supplier label changes — a co-packer adds soy lecithin to a formulation and the menu doesn't update.

The fix: a written Allergen Control Program with an ingredient-by-product matrix, a segregation plan for storage and prep, and a validated changeover cleaning procedure. A scheduled menu re-review tied to any recipe or supplier change. A supplier specification change-control SOP so a label revision triggers a menu review. Documented allergen training per employee, refreshed annually.

These seven cover roughly what every inspector everywhere is checking. State health-department reports show temperature control as the top violation nationwide. CDC EHS-Net data identifies handwashing and cross-contamination as the two areas where a Certified Food Protection Manager most consistently reduces violation rates. FDA's top 483 observations for food facilities are dominated by pest control, sanitary operations, hazard analysis, equipment design, and personnel.

“

I'm not trying to catch you. I'm trying to confirm that the records and the floor tell the same story.

”

What the inspector said at my third CFIA visit/Brantford, Ontario

05The five-minute walkthrough

The five-minute walkthrough — daily, before service or first shift.

This is the most important habit I have built into my own facility, and it is the single piece of advice I would give an operator who has an inspection on the calendar this week. Five minutes, every day, walking the same path an inspector would walk, asking the same questions an inspector would ask.

The mental model: an inspection is just a check on whether your system works. If you walk the five-minute path every morning and find nothing wrong, the inspector will find nothing wrong. If you walk it and find something wrong, you fix it before opening — not after the inspector arrives.

1. 01

   Exterior and receiving door

   Dumpsters closed and the ground around them clean. No pest signs (droppings, grease tracks, bird activity). Door sweeps intact. Receiving area clean and the door closed when not in use.

2. 02

   Hand sinks

   Every hand sink stocked with soap and paper towels. Water runs at the required temperature (at least 100 degrees Fahrenheit at a hand sink, at least 110 at warewashing). No bus tubs, prep containers, or chemicals blocking the sink. The sink is being used for hand washing only — not as a rinse station.

3. 03

   Cold storage

   Walk-in temperature at or below 41 degrees Fahrenheit. The ambient temperature log for yesterday is signed and today's first reading is entered. Storage hierarchy is correct (ready-to-eat on top, raw poultry on the bottom). Open product is dated and within the date-marking window.

4. 04

   Hot holding and prep line

   Hot held at or above 135. Cold prep at or below 41. The calibrated probe thermometer is present at the line, not in a drawer in the office.

5. 05

   Warewashing

   Dish machine final rinse at the right temperature (typically 160 to 180 degrees Fahrenheit surface for high-temp machines) or sanitizer at the correct concentration for chemical machines. Test strips visible at every sanitizer bucket and unexpired.

6. 06

   Records

   Today's logs are already started — not blank waiting to be filled in at end-of-shift. Yesterday's logs are signed by the PIC. The deviation log shows any out-of-spec events from yesterday with a corrective action noted.

If any of those six fails the five-minute check, that is the issue to fix before opening — not after the inspector arrives.

Beyond the five-minute daily check, the cadence is:

• Daily: opening and closing checks; temperature logs every four hours; sanitizer concentration each shift; allergen station setup; line-cook health check by the PIC.
• Weekly: Master Sanitation Schedule weekly tasks; thermometer calibration (ice-point or boiling-point); pest sighting log review; review of last week's deviations.
• Monthly: mock self-inspection using a state-equivalent or FDA Food Code checklist; review of training expirations; supplier specification review; binder audit by someone other than the daily recorder.
• Quarterly: internal audit against your HACCP, Food Safety Plan, or Preventive Control Plan; recall procedure tabletop drill; environmental monitoring swab if you're an FDA-regulated ready-to-eat manufacturer.
• Annually: plan reassessment; mock recall (forward and backward, target under four hours); supplier verification refresh; full document binder rebuild.

That cadence is what the inspection-ready checklist at the end of this article formalizes into one printable page.

06The binder

The document binder — what to have ready before the inspector asks.

After "may I see your licence?" the second question an inspector asks is almost always "may I see your food safety plan?" A complete, current, organized binder is half the battle. The contents are the same across regulators with minor differences in retention period.

1. 01

   Licence, registration, permits

   SFC (Safe Food for Canadians) licence for CFIA operators; FDA food facility registration confirmation; state or local health permit; fire safety report; backflow preventer test certificate.

2. 02

   Food Safety Plan, HACCP, or PCP

   The full written plan — hazard analysis, CCPs (Critical Control Points), critical limits, monitoring procedures, corrective actions, verification procedures, recordkeeping, flow diagrams, product descriptions. See the HACCP pillar for what a complete plan looks like.

3. 03

   Monitoring records, last 90 days minimum

   Temperature logs (cold storage, hot holding, cooking, cooling), sanitizer concentration checks, dish machine logs, receiving logs, allergen changeover verification. This is where the inspector spends the most time.

4. 04

   Sanitation

   Master Sanitation Schedule with sign-off; SSOPs (Sanitation Standard Operating Procedures); cleaning chemical labels and Safety Data Sheets.

5. 05

   Training

   Food Handler cards, CFPM (Certified Food Protection Manager) certificate, PCQI (Preventive Controls Qualified Individual) certificate, allergen training records, HACCP team training, refresh dates.

6. 06

   Supplier documentation

   Approved supplier list, specifications, letters of guarantee, Certificates of Analysis, and FSMA 204 (Food Safety Modernization Act Section 204) traceability records where applicable.

7. 07

   Recall and withdrawal plan

   The written plan plus the most recent mock recall results (forward and backward).

8. 08

   Calibration

   Probe thermometer calibration log, pH meter calibration, scale calibration, sanitizer test strip lot and expiration record.

9. 09

   Pest control

   Monthly Integrated Pest Management service reports, trap map, exclusion repair log with dates.

10. 10

    Corrective action and deviation logs

    Every out-of-spec event signed by the PIC, with the corrective action and the verification of effectiveness.

11. 11

    Environmental monitoring

    For FDA-regulated ready-to-eat manufacturers under 21 CFR §117.165 — sampling sites, results, and corrective actions.

12. 12

    Allergen Control Program

    Ingredient-by-product matrix, segregation plan, validated changeover procedure, label-review SOP.

Retention periods, by regulator:

• FDA-regulated facilities under 21 CFR Part 117: two years.
• USDA-FSIS: one year for slaughter and refrigerated, two years for frozen, preserved, or shelf-stable.
• CFIA under SFCR §86: two years for most records.

07Inspection day

Inspection day — what to say and what not to say.

The inspector is at the door. The next 90 to 180 minutes will produce the report that determines whether you get an NAI, a VAI, or an OAI — or, for retail, whether you get a clean inspection or a list of priority violations. The single biggest variable at this stage is not the state of your binder. It is how you behave.

The first 15 minutes.

The inspector will identify themselves, usually with FDA Form 482 (Notice of Inspection) at an FDA inspection or with a CFIA inspector ID card and the relevant authority documentation at a CFIA inspection. Ask to see credentials. Sign them in. Designate a single point person — usually the QA lead, the PCQI, or the most senior manager on duty — who will accompany the inspector for the entire visit. Page the rest of management to be available but not in the way.

Open a parallel notebook. The inspector takes notes. You take notes. Write down every area visited, every record requested, every photograph taken, every question asked, and every answer given. The parallel notebook is your record of the inspection and the source document for any disagreement that comes up later.

The walkthrough.

Walk the inspector through the facility in the order they want to walk it. Do not try to redirect. If they want to start in the receiving area, start there. If they ask a question, answer accurately. If you don't know the answer, the only correct response is "I don't know, let me find out." Never guess. Never speculate. A guessed wrong answer is worse than an honest "I don't know."

If you can correct a finding on the spot — recalibrate the probe, replace the missing paper towels, sweep the loading dock — do it while the inspector is still there. Corrected on-site is the most powerful annotation in inspection language. At an FDA inspection, ask the inspector to mark it "corrected and verified at the time of inspection" in the close-out. At a state health inspection, the report should reflect that the violation was corrected on-site. Do not argue about whether something is or isn't a violation in the moment. Fix it. Note your disagreement separately if you still have one after.

The closeout meeting.

At the end, the inspector will summarize what they found. Take notes. Ask clarifying questions. If something on the list is factually wrong (the inspector wrote "no calibration log" but the log exists and you can produce it), this is the moment to surface that — politely, with the document in hand. If something is ambiguous, ask for the exact language they will use in the report.

Do not sign anything you disagree with. At an FDA inspection, you do not have to sign the Form 483 to accept it; you only need to acknowledge receipt. Note objections in writing. Request a copy of every document the inspector took or photographed.

What never to say.

A short list, from people who have learned the hard way:

• "We've always done it this way." This is the phrase the inspector hears as "we are not going to change." It is also the phrase that ends up quoted in warning letters.
• "But that's not actually a violation." If you disagree, note it in writing in your response. Arguing in the moment makes the closeout adversarial and the report worse.
• Any offer of food, drink, or a gift. This includes the bottle of water and the muffin you give to every vendor. With an inspector, it reads as a bribery attempt.
• Anything correcting a staff member in front of the inspector. Wait until the inspector has left the area.
• Anything volunteered. Answer the question that was asked. Do not lead the inspector to areas they haven't asked about.

The biggest single mistake is defensiveness. Inspectors expect to find observations — that is the job. An operator who says "thank you, we'll fix that today" almost always gets a better outcome than one who says "but that's not actually a violation."

08After the inspection

After the inspection — by regulator.

The post-inspection process is different for each regulator. The pattern is the same: honest, fast, evidence-backed corrective action wins. Slow, vague, or defensive responses escalate.

FDA Form 483 response.

15 business days. Business days, not calendar. Address every observation. State whether you concur or contest. For every concurred observation, document the immediate corrective action with a date, the root cause analysis, the systemic CAPA (Corrective and Preventive Action), and the effectiveness verification plan. Attach evidence — photographs, records, signed training certificates, updated SOPs. Send by certified mail or via the FDA district office's submission system. The full structure is in the Form 483 response guide. A weak or late response is the single best predictor of escalation to a warning letter.

CFIA Corrective Action Request.

The CFIA inspection report identifies the non-compliance, sets a corrective action timeline, and warns that failure to act can result in licence suspension. If a suspension is issued and corrective action is not completed within 90 days, the licence may be cancelled. Respond in writing with the corrective action, the verification of effectiveness, and the timeline you committed to.

USDA-FSIS Noncompliance Record.

The establishment provides written corrective and preventive actions; the inspector verifies. Appeals must be filed within 30 calendar days under FSIS Directive 13000.3. Chronic NRs in a single category can escalate to a Notice of Intended Enforcement Action and, if unresolved, suspension of inspection.

State or local health department.

Priority violations are typically corrected on-site or within 72 hours. Priority Foundation within ten days. Core violations get longer. Some health departments auto-schedule a re-inspection; others require you to call when corrections are complete. The re-inspection result is what closes the loop, not the response letter.

09The records-honesty pivot

The hardest part — making the records honest.

There is one shift in operator mindset that, more than any other, separates the facilities that pass inspections cleanly from the ones that escalate. It is the move from "filling out the logs" to "running the system the logs record."

Early on at my facility, I had the same temptation every small operator has. A reading gets missed at the busy part of the day, then another, then the supervisor signs off the shift at the end and the logs get back-filled to look complete. It feels harmless. It feels like the food was fine anyway. The reading would have been in spec, probably.

The first CFIA inspector who really walked my records pulled three weeks of refrigerator logs and pointed out, gently, that every entry from the busiest week was in the same handwriting and in the same blue ink. She did not accuse me of anything. She did not have to. The point landed.

The fix was operational, not paperwork. I rebuilt the routine so that the reading happened at the time it was supposed to happen, and when it didn't, the deviation got entered honestly. The deviation log filled up for a couple of weeks while we sorted out which readings were hard to hit on time and why. Then it emptied out, because the schedule fit the reality. The next inspection went better than the first one — not because the records looked cleaner, but because they were true.

That is the entire game. The records are not the inspection. The records are evidence of the system. If the system runs, the records will be honest, and the inspection will reflect the system. If the system doesn't run, no amount of careful pen-work will fool an experienced inspector for more than 30 seconds.

10FAQ

Questions operators ask before an inspection.

1. 01

   How often does the FDA inspect a registered food facility?

   Under FSMA, high-risk domestic facilities at least every three years, non-high-risk at least every five. FDA can inspect more often based on risk, complaints, or a follow-up to a previous observation.

2. 02

   What's the difference between a Priority violation and a Core violation?

   Priority violations directly contribute to foodborne illness and have to be corrected on-site or within 72 hours. Priority Foundation violations are systems supporting Priority items and get up to ten days. Core violations are general sanitation and facility maintenance with longer windows.

3. 03

   Can a restaurant be closed on the spot after a failed inspection?

   Yes, under state law, for an imminent health hazard — sewage backup, no hot water, active rodent infestation. State and local health inspectors can suspend a permit on the spot. For non-imminent issues, you usually get a re-inspection window before any closure.

4. 04

   How long do I have to respond to a Form 483?

   15 business days. The response is technically voluntary under FDA policy, not statute, but a late or missing response is the single best predictor of escalation to a warning letter. See the Form 483 response guide for the structure.

5. 05

   Can I refuse an inspection?

   Refusing access in any of the four regimes (FDA, USDA-FSIS, CFIA, state and local) triggers escalated process — warrants, seizure orders, licence suspension — that ends worse than the inspection that would have happened anyway. Cooperation is the right move every time.

6. 06

   What records does an inspector typically ask for first?

   The food safety plan (HACCP, Food Safety Plan, or PCP), the licence or registration, and the last 30 to 90 days of monitoring logs — temperature, sanitation, cooking, cooling. Have those three sections at the front of the binder.

7. 07

   What happens if my CFIA licence is suspended?

   You stop the regulated activity immediately. You submit a corrective action plan that addresses the reason for suspension. CFIA verifies the corrective action and lifts the suspension. If corrective action is not completed within 90 days of suspension, the licence may be cancelled.

8. 08

   How do I prepare for an unannounced inspection?

   By running the five-minute daily walkthrough so that the answer to "what does the inspector see in the first five minutes?" is always "everything that should be there." An unannounced inspection is only scary if your daily reps aren't running.

9. 09

   What's the difference between an FDA 483 and a warning letter?

   A Form 483 is an inspector's observations at the close of inspection, not the FDA's final position, and not posted publicly. A warning letter is the FDA district office's formal enforcement step weeks or months later, citing the specific regulations the FDA believes you violated, and is posted on fda.gov. Most 483s do not become warning letters; the ones that do almost always involve a missed or weak 15-day response.

11Templates

The logs and checklists to walk this week.

If your inspection is on the calendar, start with the supporting logs. The single most common 483 observation, the single most common state health violation, and the single most common CFIA non-conformance all map to one of the logs below. Get these filled in honestly for 14 consecutive days and most of the work of passing the inspection is already done.

The scheme-specific and regulator-specific audit checklists — FDA inspection readiness, CFIA SFCR inspection, restaurant inspection, food truck inspection — live on the audit checklist hub. The corrective action and deviation log templates live at the records hub. For the foundational plan behind all of it, the HACCP pillar explains what a complete plan contains and how the 12-step framework maps to the records the inspector asks for.

Footnotes

1.FDA — Retail Food Risk Factor Study — fda.gov

2.FDA Food Code 2022 — fda.gov

3.FDA — Form 483 Frequently Asked Questions — fda.gov

4.FDA — Inspection Classifications (NAI / VAI / OAI) — fda.gov

5.FDA — Risk-Based Approach to Inspections — fda.gov

6.21 CFR Part 117 — Preventive Controls for Human Food — ecfr.gov

7.21 CFR §117.35 — Sanitary operations — ecfr.gov

8.FDA — Employee Health and Personal Hygiene Handbook — fda.gov

9.FDA — FASTER Act and Sesame — fda.gov

10.FSIS Directive 13000.3 — Industry Appeal of NRs — fsis.usda.gov

11.CFIA — Suspending and reinstating a food licence — inspection.canada.ca

12.CDC EHS-Net — Certified Kitchen Managers and Critical Violations — cdc.gov

Andrew Langevin·CFIA-licensed facility, Brantford ON· Published 2026-06-04· 13 min read· Wikidata Q139112497