Writing your sanitary control plan (PMS): required content and method
The sanitary control plan — in French the plan de maîtrise sanitaire (PMS) — is the first document a DDPP inspector asks for, and the one many operators discover… on inspection day. Good news: a PMS is not a thesis. It is a documentation set organised around three pillars, which you can build methodically in a few weeks. Here is what it must contain and the order in which to work.
The PMS in one definition
The sanitary control plan describes all the measures your establishment takes to guarantee the safety of its production. It translates into practice the obligations of the EU “hygiene package” — notably regulation (EC) no. 852/2004, which requires every operator to run procedures based on HACCP principles. In France it is also the centrepiece of the sanitary approval file for establishments supplying other businesses with foods of animal origin, under the ministerial order (arrêté) of 8 June 2006.
The PMS is not a single document but a binder (paper or digital) built on three pillars: good hygiene practice, HACCP-based procedures, and traceability with non-conformity management. The whole mechanism is presented on our page HACCP and the sanitary control plan.
Pillar 1 — Good hygiene practice (the French BPH)
Good hygiene practice is the foundation: the baseline conditions without which no hazard analysis holds. Your plan must cover, with short, operational procedures:
- staff hygiene and health: workwear, handwashing, what to do when ill;
- cleaning and disinfection schedule: for each area and item of equipment — who, what, when, with which product, at which dose;
- temperature control: cold and hot holding targets, rapid cooling, defrosting;
- pest control plan: devices in place, any service contract, bait-station map;
- water: exclusive use of potable water, upkeep of water points;
- goods-in and storage: delivery checks, storage rules (forward flow, clean/dirty separation, protection of foods);
- waste and used-oil management;
- maintenance of premises and equipment;
- staff training in hygiene — including, in commercial catering, the regulatory 14-hour course for at least one person on staff (see our page food-hygiene training).
Method tip: start from the good-hygiene-practice guide (GBPH) for your sector. These guides, written by trade bodies and validated by the French administration, already contain the bulk of your trade’s hygiene practice and hazard analysis. Relying on them is explicitly provided for by the regulation — the safest route for a very small business.
Pillar 2 — Procedures based on HACCP principles
On top of the foundation comes the hazard analysis itself. Concretely, your plan must contain:
- the description of your products and their intended use (including sensitive consumers);
- your process diagrams, from goods-in to service, for each product family;
- the hazard analysis (biological, chemical — allergens included —, physical) at each step;
- the identification of critical control points (CCPs) with their limits, monitoring arrangements and pre-defined corrective actions;
- the verification arrangements (records review, calibration, any self-testing).
We unpack this machinery in the 7 HACCP principles applied concretely. Keep the sizing rule in mind: in a direct-service business, a few well-chosen CCPs (cooking, rapid cooling, hot/cold holding…) monitored without fail beat an over-engineered system. Research backs this: the study by Baş, Ersun and Kıvanç published in 2006 in Food Control on the implementation of HACCP and prerequisite programs shows failures stem first from weak prerequisites (your hygiene practice) and insufficient training — not from having too few critical points.
Pillar 3 — Traceability and non-conformity management
The last pillar, often neglected: proving you know where your foods come from, where they go, and what to do when something goes wrong.
- Upstream traceability: keeping delivery notes and supplier invoices, labels of sensitive products.
- Internal traceability: labelling of made or opened products (date, shelf life you have defined), lot identification where relevant.
- Downstream traceability (if you supply professionals): identifying delivered lots and their recipients.
- Non-conformity management: simple forms recording a discarded product, a refused delivery, a cold-room failure — with the corrective action taken.
- Withdrawal-recall procedure: whom to alert, how to block a lot, how to inform customers if needed.
The method in six steps
Here is the build order that works, especially for a small team:
| Step | Deliverable |
|---|---|
| 1. Describe the business | Product list, floor plan, process diagrams |
| 2. Get the sector’s GBPH | Validated base of hazard analysis and hygiene practice |
| 3. Write the hygiene procedures | Short procedures + record sheets at each workstation |
| 4. Run the hazard analysis as a team | CCPs, limits, monitoring, corrective actions |
| 5. Close the traceability loop | Archiving, internal labelling, non-conformity forms, recall |
| 6. Keep it alive | Daily records, monthly check, annual review and at every change |
Two traps to avoid at all costs. First: writing a perfect document alone at night that nobody will apply — involve the people who run the workstations; they know the real weak points and they are the ones who will fill in the sheets. Second: the plan for show. The work of Fotopoulos, Kafetzopoulos and Psomas published in 2009 on the critical factors of effective implementation is unambiguous: without management commitment and genuine staff training, the paperwork stays dead letter — and it shows during inspections.
What the inspector reads in your plan
During an inspection, the officer does not read your binder like a novel: they cross-check the document against reality. Does the cleaning schedule list the products actually under the sink? Are the temperature logs filled in this morning, or miraculously all completed in the same handwriting? Does the process diagram match the current menu? Gaps between paper and practice weigh heavily in the assessment — published since 2017 on Alim’confiance, France’s public hygiene-rating site. We detail the inspection flow and possible outcomes in DDPP inspection: preparing your sanitary control plan.
Take action
A solid sanitary control plan is built over a few weeks of methodical work — not the night before an inspection. Our page HACCP and the sanitary control plan gathers the obligations, the step-by-step approach and the frequent questions, and our free guide gives you the week-by-week build plan.
Frequently asked questions
+Is the sanitary control plan mandatory for a small restaurant?
Yes. Every food-business operator must be able to demonstrate control of sanitary hazards: good hygiene practice, procedures based on HACCP principles and traceability. The regulation does, however, allow a proportionate approach: in a small business, a plan built on the sector's validated good-hygiene-practice guide (GBPH) with simple records is enough — provided it is genuinely applied.
+Can you buy a ready-made sanitary control plan?
A template can be a starting point, but a generic, unadapted plan is a classic non-conformity: process diagrams that don't match what is actually produced, a cleaning schedule listing products absent from the premises. The inspector always compares the document with real practice; adapting it to your business is not optional.
+How often must the sanitary control plan be updated?
At every significant change — new menu or product, new equipment, new premises, new sensitive supplier — and at least at an annual review. A plan dated several years back with no trace of revision signals a system that isn't alive, which colours an inspection unfavourably.