SQF Environmental Monitoring: A Practical 2026 EMP Guide

SQF environmental monitoring is the program that looks for pathogens, or the conditions that let them persist, in your plant before they reach product. In the SQF Food Safety Code: Food Manufacturing, Edition 10, it is element 2.4.8, and it is one of the 11 Core Clauses. Its first requirement, 2.4.8.1, carries the Mandatory flag on its own, which means every site needs at least the risk-based assessment, whatever that assessment concludes.

Because 2.4.8 is a Core Clause, SQF environmental monitoring findings cost more at the certification audit. Under Part A, A2:19 a Core Clause minor deducts 2 points instead of 1, and a major deducts 7 instead of 5. An SQF environmental monitoring program (EMP) that samples a lot but cannot explain why is an easy place to lose them.

This guide walks through what 2.4.8 asks of SQF environmental monitoring, then builds a program in order: risk assessment, zones, target organisms, sites and frequency, acceptance limits and responses, and trending. The sampling numbers and frequencies here are examples only. Your own risk assessment sets them. For the broader edition change, see our SQF Edition 10 guide.

What 2.4.8 requires for SQF environmental monitoring

Element 2.4.8 (Environmental Monitoring) has three requirements. SQFI’s change document marks all three as changed in Edition 10. In our own words:

SQF environmental monitoring records also appear on Edition 10’s new program records list (2.2.3.5), and 2.9.1.3 includes environmental monitoring among the programs whose staff need instruction. The people taking swabs are part of the SQF environmental monitoring program.

US sites have a second layer. Under the preventive controls rule, 21 CFR 117.165(a)(3) requires environmental monitoring when contamination of a ready-to-eat food with an environmental pathogen is a hazard requiring a preventive control, and 117.165(b)(3) sets out what the written procedures must contain (21 CFR 117.165). Edition 10 already expects food safety plans to meet a nationally prescribed method as well as Codex (2.4.3.18), so in the same spirit design one SQF environmental monitoring program that satisfies both SQF and the rule.

Step 1: the risk assessment behind SQF environmental monitoring

The assessment is the Mandatory part of SQF environmental monitoring, and the logical first document to have ready for an auditor. Cover every process and the areas around it: lines, ingredient and packaging stores, wash bays, corridors and the warehouse. For each, work through questions like these:

• Is the product ready to eat? Exposed ready-to-eat product has no later step to remove contamination picked up from the plant.
• Is product exposed after the kill step? Exposure between a lethal step and sealing is the window the program protects.
• Does the product support pathogen growth or survival? Moisture, pH and storage temperature all matter.
• Is the area wet or dry? Wet cleaning, condensation, leaks and drains change the picture.
• What do the ingredients bring in? Raw agricultural ingredients can carry pathogens into the plant.
• How do people and equipment move? Traffic from raw to finished areas is a transfer route.
• What is the history? Previous positives, complaints, construction and roof or drain failures.

The outcome is a risk level and a program level for each area. A low-risk site can conclude it needs a minimal program, but it must be able to show the reasoning. Record the assessment where your other risk assessments live, and re-run it after a zone 1 or 2 positive, an adverse trend, a new product or line, a new wet process, or construction.

Step 2: zones and sampling sites

As we read it, the SQF Code asks for defined sampling locations and rotation but does not prescribe a zone scheme. The four-zone model is a well-established way to organize sites by closeness to exposed product. FDA’s draft guidance on control of Listeria monocytogenes in ready-to-eat foods (January 2017, non-binding) gives it as an example:

Number every site on a plant map. Sample known harborage points, such as drains, hollow rollers, cracked floors and the underside of conveyors, every round. Rotate the rest so each listed site is covered over a defined period, and add sites after equipment changes or a positive.

Step 3: choose organisms and indicators by product type

2.4.8.2 says the target organisms come from the hazard analysis. Keep the choice tied to your products and process conditions:

• Listeria in wet, refrigerated ready-to-eat environments. FDA’s 2017 draft guidance notes that L. monocytogenes is widespread in processing environments, particularly cool damp areas, can grow slowly at refrigeration temperatures, and can persist in harborage sites. It recommends testing environmental samples for Listeria spp., because a positive points to a site where L. monocytogenes could also be harbored.
• Salmonella in low-moisture ready-to-eat environments. FDA’s January 2025 draft guidance on sanitation programs for low-moisture ready-to-eat foods treats a low-moisture food as one with a water activity of 0.85 or below. It describes Salmonella as able to become established in dry production environments and links water, even small or brief amounts, to its growth and spread.
• Indicators. Hygiene indicators can tell you about conditions in the plant, but they are not a stand-in for a pathogen test everywhere. The same 2025 draft states FDA is not aware of information supporting an indicator organism for Salmonella environmental monitoring in dried foods. If you use an indicator, record what it is meant to show.

One site can need both: a dry bakery line can still have a wet wash bay where Listeria is the organism of concern. Map the organism to the area, not just to the product.

Step 4: number, frequency and timing

For SQF environmental monitoring, the Code asks you to define how many samples, how often and when. It does not give numbers. Set them from the risk assessment and write down the reasoning. For orientation only, FDA’s 2017 draft Listeria guidance gives an example for a ready-to-eat food that supports Listeria growth: food-contact surfaces on the lines sampled at least weekly, with every food-contact surface covered monthly; zone 2 sites weekly, zone 3 every two weeks and zone 4 monthly, with every non-food-contact site covered quarterly. That is one regulator’s example for one risk profile, not an SQF requirement.

Timing matters as much as frequency. The same guidance recommends sampling several hours into production, or just before cleanup, so that organisms have time to work out of harborage sites. It also warns that samples taken too soon after sanitizing can be affected by residual sanitizer. Post-sanitation swabs verify cleaning; in-process swabs test the environment as it is actually used. A program can use both, as long as each result is labeled for what it shows.

Step 5: acceptance limits and responses

Write the SQF environmental monitoring acceptance criteria and responses before the first positive arrives. The table is an example structure; your escalation must match your own risk assessment and product.

Vector swabbing means taking extra samples around a positive in several directions to find the source. Every positive becomes a corrective action under 2.5.3, which is itself a Core Clause. Where product may have reached the market, link the response to your product recall procedure and remember SQF’s 24-hour notice to SQFI and the certification body for qualifying food safety events (2.6.3.3).

One more control sits outside the EMP. If you test in house, the laboratory works to the relevant parts of ISO/IEC 17025 with proficiency testing (2.4.4.2). If you use an outside laboratory, it holds ISO/IEC 17025 accreditation or an equivalent with the test in its scope (2.4.4.5).

Step 6: trending and annual review

For SQF environmental monitoring, 2.4.8.3 asks for trends, not just pass and fail. A trend should trigger root cause analysis even when no single result fails. Useful trend rules include repeat positives at one site, positives in the same area across zones, indicator results rising over several rounds, and positives that follow a pattern such as one shift or after maintenance.

Review SQF environmental monitoring results monthly, by site, zone, line and shift. Adverse trends belong in the monthly management update under 2.1.2.2, and the year’s trends belong in the annual review. Our SQF management review guide covers both. Then re-evaluate the whole program at least annually under 2.4.8.1, using the year’s data to move sites, change frequencies or add organisms.

What an auditor-ready SQF environmental monitoring file contains

• the signed risk-based assessment and its latest annual evaluation;
• a zone map with numbered sites and a rotation plan;
• the schedule: organisms, sample numbers, frequency, timing and method by zone;
• acceptance criteria and the written response for each result type;
• laboratory reports and the laboratory’s accreditation scope;
• a trend log and monthly reviews;
• investigation and corrective action records for every positive;
• instruction records for the people who take samples.

Cleaning sits alongside the SQF environmental monitoring file, not inside it. 11.2.5, Cleaning and Sanitation, is also a Core Clause, and it requires verification of cleaning effectiveness. Keep the two linked: a cluster of positives can point to a sanitation problem.

The SQF Edition 10 Toolkit includes an Environmental Monitoring Program built around the 2.4.8.1 assessment, and an Environmental Monitoring Zone Map, Schedule and Trends workbook for site lists, schedules and trend charts. Our SQF internal audit guide shows how to audit the SQF environmental monitoring program twice a year as a Core Clause.

SQF environmental monitoring FAQ

Is SQF environmental monitoring required at every site?

Every Food Manufacturing site needs the risk-based assessment under 2.4.8.1, because that clause is Mandatory. The assessment decides how much monitoring follows. A site that concludes it needs little must be able to show why.

How often should we swab for SQF environmental monitoring?

SQF does not set a frequency. You set it from your risk assessment and record the reasoning. FDA’s 2017 draft Listeria guidance gives example frequencies for higher-risk ready-to-eat foods, which can serve as a reference point.

Should we test food-contact surfaces for pathogens?

It depends on your risk assessment and how you will act on a positive. Options include testing zone 1 for indicators, or testing it for pathogens with the product held until results are back. Decide the rule before sampling, and write it into the program.

Is SQF environmental monitoring the same as sanitation verification?

No. Sanitation verification under 11.2.5 confirms surfaces were cleaned effectively. Environmental monitoring under 2.4.8 looks for organisms in the environment during use and tracks trends over time. Both are Core Clauses and both need their own records.