Implementing ASC Food Fraud Vulnerability Assessments

Regulatory context and food fraud prevention rationale

Seafood supply chains face significant risks from economic adulteration, species substitution, and fraudulent origin claims. Under Part A, Section 5.8.1 of the ASC Chain of Custody Module v1.1, organisations holding certification for ASC-certified farmed seafood must maintain a documented food fraud vulnerability assessment procedure covering all farmed seafood products, alongside an up-to-date intervention plan. The primary objective is to increase organisational awareness of potential fraud risks, establish preventive controls, and drive continuous improvement across supply chain operations.

This mandate applies to all ASC Chain of Custody certificate holders, including primary processors, contract packers, wholesalers, and pure trading entities. Part D of the ASC Module defines seafood fraud as the deliberate misrepresentation of seafood products or ingredients for financial or economic gain to deceive customers. Unlike environmental traceability checks, food fraud vulnerability assessments focus proactively on operational, supply chain, and economic vulnerabilities that expose a facility to intentional deception.

Core requirements for vulnerability procedures and intervention plans

Under Clause 5.8.1, the food fraud vulnerability assessment procedure must evaluate potential vulnerabilities affecting every farmed seafood product or ingredient within the organisation's handling scope. Guidance 5.8.1 explains that the assessment provides a structured framework to prioritise prevention and mitigation strategies. Concurrently, the intervention plan must identify specific controls and operational interventions needed to reduce identified vulnerabilities and detail how these measures will be implemented in practice.

Organisations must conduct the vulnerability assessment procedure at least once per year as part of their normal internal management cycle. Similarly, the intervention plan must follow an annual review cycle, ensuring it stays up to date to reflect emerging supply chain risks and actual fraud cases. While food safety requirements under the ASC Module offer size-based exemptions for smaller entities, Clause 5.8.1 mandates that food fraud vulnerability assessments apply universally to all ASC certificate holders without volume or turnover exemptions.

Integration with existing quality schemes and recognised tools

Guidance 5.8.1 clarifies that organisations certified to Global Food Safety Initiative recognised schemes or ISO 22000 may utilise their existing food fraud procedures. The vulnerability assessment procedure and intervention plan may be identical to those required by GFSI schemes, provided the scope explicitly covers all handled farmed seafood products. Furthermore, the assessment procedure may encompass existing elements of an organisation's Vulnerability Assessment Critical Control Points or Threat Assessment Critical Control Points frameworks.

To support implementation, Guidance 5.8.1 identifies recognised tools and industry resources that organisations may adopt. Approved frameworks include the GFSI Food Fraud Technical Document, the SSAFE Food Fraud Vulnerability Assessment tool, the United States Pharmacopeia Food Fraud Mitigation Guidance, and Campden BRI Guideline 72 for TACCP and VACCP. Small or less developed businesses may reference BRCGS START, the GFSI Global Markets Programme, or SALSA guidelines, provided the chosen tool satisfies the core objectives of vulnerability identification and mitigation planning.

Conformity assessment body evaluation and ineligibility criteria

During third-party audits, conformity assessment body auditors evaluate the documentation and execution of the food fraud vulnerability assessment under Section 5.8. Auditors verify that the procedure covers all active farmed seafood lines and that the intervention plan actively addresses identified risks. In addition, under Clause 5.5.2.1, certificate holders must permit auditors, scheme owners, or designated agents to collect physical seafood samples for product authentication testing and species verification.

Failing to maintain an effective food fraud vulnerability assessment or engaging in fraudulent activity carries severe certification penalties. Under Part B, Clause 6.2.8.1(ii) of the ASC CoC Module, conformity assessment bodies shall not certify, nor continue to certify, any organisation involved in fraudulent activities such as seafood fraud or forged documents. Under Guidance 6.2.8.1, entities disqualified under ineligibility criteria may only reapply after twenty-four months, provided they demonstrate adequate root cause analysis and proven implementation of effective corrective actions.

What to do now

• Formalise a written food fraud vulnerability assessment procedure covering 100 percent of farmed seafood products handled on site under Clause 5.8.1.
• Develop a documented intervention plan establishing operational controls for every identified supply chain vulnerability under Clause 5.8.1.
• Align existing VACCP, TACCP, or GFSI food fraud documentation with the specific requirements of the ASC Chain of Custody Module under Guidance 5.8.1.
• Schedule annual management review dates to update the vulnerability assessment and intervention plan prior to external audits under Guidance 5.8.1.
• Train procurement and quality control personnel to evaluate supplier risk factors, document authenticity, and species verification protocols under Principle 5.

Reference documents

• ASC Chain of Custody Module v1.1
• MSC Chain of Custody Standard: Default Version v5.1
• MSC Chain of Custody Standard: Group Version v2.1
• MSC Chain of Custody Certification Requirements v3.2
• MSC General Certification Requirements v2.6