An environmental health officer arrives on a Wednesday at half past ten, unannounced, which is how it works. Your chef assumes she will want to look at the walk-in, and starts moving things.
She does not go to the walk-in. She asks whether you have a food safety management system, and then she asks to see the diary. Five minutes later she knows roughly what your rating is going to be, because the last eleven days are blank.
The plan is a legal requirement and it has to be written down
Article 5 of retained Regulation (EC) No 852/2004 on the hygiene of foodstuffs requires food business operators to put in place, implement and maintain a permanent procedure based on hazard analysis and critical control points, and to keep documents and records appropriate to the nature and size of the business.
That is the whole legal basis and it says two things. It has to be based on HACCP principles, and it has to be documented. A very good chef who does everything right and writes nothing down is not compliant, which sounds petty until you consider that the officer has no other way of knowing what happened last Tuesday.
The seven principles are: identify the hazards, determine the critical control points, establish critical limits at each one, establish monitoring, establish corrective action when a limit is breached, establish verification, and keep records. For a large manufacturer that becomes a substantial document. For a café with four staff it should not.
You also have to register the food business with the local authority at least 28 days before you open. It is free, it cannot be refused, and not doing it is an offence. It is also how the authority knows you exist and puts you in the inspection programme, which is why some people skip it and why skipping it is a poor idea.
Safer Food Better Business is the version that works for a small kitchen
The Food Standards Agency publishes Safer Food, Better Business, a free pack designed so that a small caterer can meet the HACCP requirement without hiring a consultant. There are versions for caterers, retailers, childminders and residential care, and translations. Scotland has CookSafe, Northern Ireland has Safe Catering.
The pack works by doing the hazard analysis for you. It sets out the safe methods for the things that go wrong in kitchens, cross contamination, cleaning, chilling and cooking, and asks you to confirm how you do each one in your kitchen and what you do if it goes wrong. That is the analysis. The daily diary is the monitoring.
The diary is where almost every business fails. It asks for opening checks, closing checks, and anything that went wrong, every day. It takes about four minutes. It has to be done on the day, by someone who actually looked, and it has to include the times you found a problem, because a diary with no problems in it for six months is not evidence of a well-run kitchen. It is evidence that nobody is checking.
There is also a four-weekly review built into the pack, where you confirm the system is still right and note any changes to menu, staff or equipment. Doing those twelve times a year is the single cheapest thing you can do for your rating.
The critical limits are numbers, and a probe settles them
The control points that matter in almost every kitchen are receipt, storage, cooking, cooling, hot holding and reheating. The limits are numbers, and a thermometer removes the argument.
In England, Wales and Northern Ireland, food that needs refrigeration must be kept at or below 8 degrees Celsius. That is the legal maximum, not a target. Industry practice runs fridges at 5 degrees or below so that a door left open does not immediately breach the law. Scotland operates under the Food Hygiene (Scotland) Regulations 2006, which frames chill requirements differently, so check the regime you are actually in.
Cooking guidance is 75 degrees in the thickest part for 30 seconds, or an equivalent combination such as 70 degrees for two minutes. Hot holding is at or above 63 degrees, with a limited exemption of up to two hours for service and display. Cooling is the one that is most often ignored and most often causes illness: get cooked food from hot to chilled quickly, and record it, because bacteria multiply in the middle of that range and a stockpot left on the side overnight is a genuine outbreak risk rather than a technicality.
Two-stage verification is worth building in. Probe the food, and separately record the fridge and freezer air temperatures twice a day. A data logger costs very little now and produces a record nobody has to remember to write.
What the officer is really scoring
The Food Hygiene Rating Scheme, which post-inspection produces the number in your window, scores three things. Hygiene and food handling. The condition and cleanliness of the structure. And confidence in management, which means the documented system, the training records, and whether the person in charge understands their own controls.
Confidence in management is the one that is entirely within your control and costs the least to fix. It is also the one that caps you, because the rating depends on your worst score as well as the total. A spotless kitchen with no records does not get a five.
Two things reliably improve it. Training records that show who did what and when, including induction for new starters before they touch food, rather than a certificate from 2019 for someone who left. And a supplier list with traceability, showing where each product came from, since traceability is a legal requirement in its own right under retained Regulation (EC) No 178/2002 and it is the first thing asked for in a recall.
Ratings are published in England, Wales and Northern Ireland, and display is mandatory in Wales and Northern Ireland. England has consulted on mandatory display for years and it remains voluntary, which is itself a signal about how customers read a business that does not display one.
Where this shows up in the game
Restaurants are part of Business Baron's full game, and cafés and pubs are free to run. Each inspection regime visits on its own risk rating, pulled forward by complaints, and asks for the records you actually kept. A diary with three weeks missing is a record too, and the grade that follows is public.