This article was originally published in 2018, and has been updated as of Sept. 2026.
An FDA investigator just walked into your facility unannounced. Your quality manager is pulling records, your production supervisor is answering questions, and somewhere in that scramble, someone needs to understand the food safety plan well enough to explain how it was developed, implemented, and verified. Your PCQI plays a critical role in making sure the facility is prepared for that moment.
Each year, roughly 48 million Americans get sick from foodborne illness, resulting in 128,000 hospitalizations and 3,000 deaths. That's why FSMA's Preventive Controls for Human Food (PCHF) rule requires every FDA-registered facility to designate at least one Preventive Controls Qualified Individual. And matters is what that person does every day.
What a PCQI actually is (and what FDA evaluates)
Under 21 CFR Part 117, your PCQI must have successfully completed appropriate training in risk-based preventive controls at least equivalent to that received under a standardized curriculum recognized as adequate by FDA, or be otherwise qualified through relevant job experience.Because the regulation also allows qualification through relevant job experience, facilities relying on that pathway should be prepared to demonstrate that the individual's experience provides the necessary knowledge to develop and apply a food safety system.
What the FDA actually evaluates is the quality of your food safety plan. According to FDA's own FAQ guidance, deficiencies in the food safety plan indicate the PCQI may need additional training, regardless of documented experience. The qualification gets you to the table. The plan quality keeps you there.
HACCP and GFSI-related credentials provide valuable background, but they do not automatically establish that an individual meets the PCQI qualification requirements.
The 7 core PCQI responsibilities
1. Preparing or overseeing the food safety plan
Your PCQI must prepare or oversee the food safety plan. Not necessarily execute every step personally, but own it. The plan is the foundational document FDA inspectors will review, and it has to cover:
- Hazard analysis (what could go wrong and why)
- Process controls with defined critical limits
- Food allergen controls, including sesame as of the updated FSPCA Version 2.0 curriculum
- Sanitation controls
- Supply chain controls (more on this below)
- A written recall plan
If your food safety plan was built for a different facility or copied from a template without site-specific adaptation, that's a problem your PCQI owns. One PCQI can cover multiple locations under FSMA, but each site requires its own site-specific food safety plan. For mid-market manufacturers running three or four facilities, that coordination burden is substantial. The PCQI has to know each operation well enough to defend each plan independently.
For a deeper look at where food safety plans typically break down, see our guide on food safety plan pinch points.
2. Hazard analysis
This is the analytical foundation everything else rests on. Your PCQI has to assess each known or reasonably foreseeable hazard, determine whether it requires a preventive control, and document that reasoning. "We've never had a problem with X" is not a hazard analysis. FDA wants to see the logic, not just the conclusion.
Note that FSMA's PCHF rule and traditional HACCP differ in meaningful ways. PCQI training addresses those differences directly. If your quality team's background is HACCP-only, review our breakdown of food safety plan vs. HACCP differences before assuming your existing analysis covers the PCHF requirements.
3. Validation (21 CFR 117.160)
Validation is one of the most commonly misunderstood PCQI responsibilities. Validation must be completed before your food safety plan is fully implemented, and it must be conducted under PCQI supervision. The question it answers: do your preventive controls actually work to control the hazards you've identified?
FSMA does allow a 90-day extension to complete validation work after plan implementation begins, which gives facilities some operational flexibility. When validation is not completed within the applicable regulatory timeframe, the facility may face a significant compliance gap. eCFR uses this language "Letting this window close without action carries serious operational and regulatory risks."
"One of the challenges I've seen throughout my work in food safety and quality systems is the gap between having a well-designed process and having the documentation to demonstrate that it's working as intended. Strong validation records should clearly show what was evaluated, under what conditions, and whether the control achieved the intended result. Having that information accessible and connected to the broader quality system is just as important as creating the process itself."
4. Monitoring preventive controls (21 CFR 117.145)
Written monitoring procedures are required for every preventive control. That means documented frequency, method, and responsible party for each control point. Not "we check temperatures regularly." Defined intervals, defined thresholds, defined records.
In practice, monitoring is where paper-based programs break down first. When an investigator asks for monitoring records for a specific date range, your team has to find them. If records are difficult to locate or retrieve consistently, that may signal a documentation or records-management weakness worth addressing before an inspection.
5. Corrective actions (21 CFR 117.150)
When a preventive control doesn't perform as intended, your PCQI is a critical person to oversee the corrective action process. The food safety plan must establish appropriate corrective action procedures, with the PCQI playing an important role in reviewing applicable corrective action records as part of verification.
This is exactly where root cause analysis capability matters. A corrective action that says "retrained operator" without explaining why the deviation occurred in the first place may not adequately demonstrate to an FDA investigator that the underlying cause was identified and addressed. For more on building a CAPA process that holds up under inspection, see our guide on root cause analysis and CAPA.
6. Recordkeeping
Records are your PCQI's most visible accountability. Under 21 CFR Part 117, required records include:
- The written food safety plan itself
- Monitoring records for each preventive control
- Verification activity records
- Validation documentation
Retention periods matter. Most records must be kept for at least two years. Some supply chain program records require three years. During an FDA inspection, investigators typically pull monitoring records first, then corrective actions, then validation. If any of those are missing or incomplete, the food safety plan itself comes into question.
Most plants we work with have the preventive controls. What they don't have is a way to prove it at 7 AM when an FDA investigator walks in. Facilities that have moved their records to a digital system report dramatically reduced inspection prep time. Sokol, for example, automated their audit preparation process and cut the manual burden that had previously consumed days of their quality team's time. See how they did it.
7. Records review and verification oversight
Your PCQI also has defined responsibilities for reviewing, or overseeing the review of, certain records used to verify that the food safety system is being implemented as intended.
This is a different activity from monitoring. Monitoring asks "is the control operating right now?" Verification asks "is our overall approach still sound?" Your PCQI needs to own both questions.
Supply chain controls: a growing piece of the PCQI's scope
Supply chain controls are a named component of your food safety plan, and your PCQI has to oversee them. That means a written supplier verification program, risk-based evaluation of each supplier, and documented verification activities before using ingredients or materials from that supplier.
For importers, FSMA's FSVP rule adds a parallel requirement: a separate "Qualified Individual" (distinct from the PCQI role) must develop and perform FSVP activities. The overlap between PCQI and FSVP QI responsibilities creates coordination complexity that mid-market operations often underestimate. (See FDA's FSVP final rule for the full scope of that parallel obligation.)
Managing supplier verification manually across multiple ingredients and suppliers is where PCQI burden accumulates fastest. Digital supplier compliance tools can take the tracking load off the PCQI and surface verification gaps before they become inspection findings.
Who should consider PCQI training?
Don't just hire a PCQI and treat it as a staffing checkbox. The people who understand your operation best, and who can defend decisions under inspection pressure, are your internal managers. The employees worth considering for PCQI training:
- Plant managers
- Quality managers
- Sanitation supervisors
- Production managers
- Maintenance managers
FSPCA's Preventive Controls for Human Food course (now Version 2.0, with the Version 1.2 curriculum retired as of June 30, 2025) runs approximately 2.5 days, offered in instructor-led and virtual formats. Budget roughly 15-22 contact hours. The updated curriculum incorporates FDA's 2024 draft guidance on hazard analysis and updated allergen requirements including sesame.
The FSPCA was developed in collaboration with the FDA and IIT's Institute for Food Safety and Health, with input from industry, academia, and scientific associations. Its curriculum is FDA-recognized, which is the practical standard most facilities use when evaluating whether a PCQI's training meets the regulatory threshold.
Third-party PCQIs and consultants are available, but they shouldn't replace internal knowledge. A consultant can help build your initial food safety plan. Technically, the FDA does not say this person has to be an employee; your facility would still benefit from strong internal knowledge of the processes, hazards, controls, and records.
What changes when PCQIs have the right systems behind them
From my professional experience, I watched quality managers with strong PCQI knowledge struggle under the operational weight of manual records management. The knowledge was there. The systems weren't. They'd spend hours before an audit locating monitoring logs, reconstructing corrective action timelines, and chasing down supplier verification records. That time is better spent on actual food safety work.
PCQIs who have real-time access to monitoring data, corrective action histories, and supplier records don't just perform better during inspections. They catch problems earlier, close corrective actions faster, and build food safety plans that reflect what's actually happening in the facility. Facilities that digitize their FSQA programs report measurable ROI from both compliance and operational efficiency, as outlined in SafetyChain's Q&A with CEO Dean Brown on food safety digitization.
The PCQI's job doesn't get easier as your operation grows. But the right documentation infrastructure makes it manageable.
Ready to see how SafetyChain supports PCQI recordkeeping, corrective actions, and audit readiness? Talk to our team or explore our FSMA compliance resources.
Frequently asked questions about PCQI responsibilities
Preventive Controls Qualified Individual. It's the designation FDA requires for the person responsible for preparing or overseeing your facility's food safety plan under the FSMA Preventive Controls for Human Food rule.
All facilities required to register under Section 415 of the FD&C Act must have a PCQI, unless they qualify for a specific exemption. Some small and very small manufacturers may qualify for modified requirements under 21 CFR 117.201.
Yes. FDA allows a single PCQI to serve multiple locations. However, your PCQI must prepare or oversee a site-specific food safety plan for each facility. For operations with three or more sites, this creates real coordination complexity.
No. HACCP certification and GFSI credentials are relevant background but don't satisfy the PCQI requirement on their own. FDA evaluates adequacy based on the quality of your food safety plan, not the credentials listed on a resume.
The current FSPCA Preventive Controls for Human Food course (Version 2.0 as of June 2025) covers hazard analysis, preventive controls development and implementation, monitoring, corrective actions, verification, and validation. It runs approximately 2.5 days and is available in instructor-led and virtual formats.
Inspectors typically start with monitoring records, then corrective actions, then validation documentation. Missing or incomplete records in any of these areas will raise questions about your food safety plan's overall effectiveness.
Validation establishes that applicable preventive controls are capable of effectively controlling the identified hazard. Verification confirms they're continuing to work over time. Your PCQI is responsible for overseeing both.
