18 September 2026 · 5 min read
How to Classify a Food Safety Incident: A Severity Framework
How to Classify a Food Safety Incident: A Severity Framework
Short answer: Classify a food safety incident by working out how serious it is across five risk dimensions, then setting one of four response levels. The five dimensions are consumer safety, operational, reputational, regulatory and financial risk. The four levels are Awareness, Manage, Mobilise and Crisis. The point of classifying is not paperwork. It is to make sure the whole team runs at the right pace from the first minute, without over-reacting to a minor issue or under-reacting to a serious one.
Here is the framework we use, and how to apply it in the moment.
Why severity classification matters
Using the wrong level of response causes damage in both directions. Over-react to a minor complaint and you burn the team out and lose credibility. Under-react to a genuine safety risk and you lose the hour that mattered. A shared classification means everyone, from the person who takes the complaint to the person who authorises a recall, understands the same thing at the same time.
Severity is not a single number. It is a structured risk profile. The same incident can be low on one dimension and high on another, and the overall level reflects the worst of them.
The five risk dimensions
Assess every incident across these five. You do not need a precise score. You need to know which dimensions are elevated and why.
1. Consumer safety risk
Potential harm to consumers. Usually the highest-priority dimension in food and drink. Risk rises when there is an undeclared allergen, reported illness, confirmed contamination, a vulnerable consumer group, product still in the market, product already consumed, incomplete traceability, or multiple affected batches.
2. Operational risk
Disruption to continuity and internal stability. Risk rises when production is still running despite uncertainty, the root cause is unknown, multiple lines or suppliers are involved, stock location is unclear, or operational dependencies are unresolved.
3. Reputational risk
Likelihood of external trust damage. Risk rises with retailer escalation, media attention, accelerating social media traction, influencer amplification, a fast rise in complaints, inconsistent public communication, or major brand exposure.
4. Regulatory risk
Likelihood of regulator involvement or a reporting obligation. Risk rises when a legal threshold is breached, an allergen or contamination is confirmed, the regulator is already notified, export markets are involved, a reporting deadline is active, or there is a history of previous incidents.
5. Financial risk
Potential commercial impact. Risk rises when a recall is likely, production is halted, retailer penalties are possible, stock destruction is required, multiple SKUs are affected, or major customer relationships are at stake.
The four severity levels
Once you know which dimensions are elevated, set the overall level. Each level is a distinct action posture, with an at-a-glance colour.
| Level | Colour | Meaning | What it triggers |
|---|---|---|---|
| Awareness | Green | Eyes open, watch for signals, no immediate action | Monitor, gather information, assign an owner |
| Manage | Amber | Active response underway | Departmental escalation, structured investigation, response team lead informed, actions log started |
| Mobilise | Red | Full response needed | Full response team, external advisors, communications plan prepared, operational containment |
| Crisis | Navy | Immediate action, all hands | Executive escalation, regulator readiness, immediate intervention, crisis workflow active |
How to apply it in the moment
- Take the facts you have. Do not wait for the full picture. Classify with what is in front of you and re-classify as facts arrive.
- Scan the five dimensions. For each, ask whether the risk is low, rising or high, and note why.
- Set the level to the worst dimension. If consumer safety risk is high, the incident is at least Mobilise, regardless of how contained everything else looks. One high dimension carries the whole.
- Write down the reason. Severity must be explainable. "Raised to Crisis because an undeclared allergen is confirmed, product remains in the market, illness is reported and the retailer has escalated." Anyone should be able to see why.
- Re-assess as it develops. Severity moves. A Manage-level incident becomes a Mobilise the moment a retailer escalates or a second batch is implicated. Keep the level honest.
A worked example
A consumer reports an allergic reaction to a product that does not declare the allergen in question.
- Consumer safety risk: high. An undeclared allergen with a reported reaction.
- Operational risk: rising. You do not yet know if it is a formulation error, a supplier issue or a labelling fault, so the root cause is unknown.
- Reputational risk: moderate and watch closely. One report today, but allergen incidents travel fast.
- Regulatory risk: high. Undeclared allergens are a common trigger for regulator involvement and recall.
- Financial risk: rising. A recall looks likely.
Overall level: Crisis, driven by consumer safety and regulatory risk. The response runs accordingly from the first minute.
A note on what this framework is, and is not
This is a structured aid to human judgement, not a replacement for it. The level you reach is a starting point that any experienced operator can adjust up or down with a reason. Deterministic, explainable logic should do the heavy lifting, and a person should always own the final call. A severity classification you cannot explain is one you should not trust.
Frequently asked questions
What are the levels of a food safety incident? We use four: Awareness, Manage, Mobilise and Crisis. They double as a response mode, telling the team how hard to run, not just how bad the situation looks on paper.
How do you assess the severity of a food safety incident? Across five risk dimensions, consumer safety, operational, reputational, regulatory and financial, then set the overall level to the most serious dimension. Document the reason so the classification is explainable.
Is severity the same as whether it is a recall? No. Severity is how serious the situation is. Recall, withdrawal or market action is what you do about the product in the market. They are related, a recall is almost always high severity, but they answer different questions. We cover the recall distinctions in a separate article.
Can severity change during an incident? Yes, and it should. Re-assess as facts arrive. A second affected batch, a retailer escalation or a media pickup can move an incident up a level in minutes.
This framework is one of the operational models behind Friday4:30, the coordination layer for food and drink incidents. The platform applies it as structured, explainable logic on every incident, and always leaves the final call with a person. If you want to see it, get in touch.