What Is a Risk Management Programme (RMP)? A Guide for NZ Food Manufacturers

If you process animal products in New Zealand, your business runs on a Risk Management Programme. It’s the document that defines how you keep your products safe, how you prove it, and what happens when something goes wrong. And yet, a surprising number of operators treat their RMP like a filing cabinet artefact rather than a living system.

This guide covers what an RMP actually is, who needs one, what it should contain, and how the compliance landscape is shifting towards digital record-keeping.

What Is a Risk Management Programme?

A Risk Management Programme is a documented system required under the Animal Products Act 1999 for businesses that process animal products in New Zealand. It’s your operation’s plan for identifying food safety hazards, controlling them, and demonstrating that control to regulators.

Think of it as the rulebook your operation writes for itself, based on the specific risks in your process. A poultry processing plant has different hazards to a honey packing facility, so their RMPs look different. But the underlying structure is the same: identify what can go wrong, put controls in place, monitor those controls, and keep records that prove the system is working.

MPI (the Ministry for Primary Industries) is the regulator. Not your local council. MPI directly oversees RMP businesses through their verification programme, sending recognised verifiers to audit your operation on a scheduled basis.

Your RMP must be registered with MPI before you can legally operate. It’s not optional, and it’s not a suggestion. If you’re processing animal products without a registered RMP, you’re operating illegally.

Who Needs an RMP?

The short answer: any business that processes, manufactures, or handles animal products for sale or export in New Zealand.

That includes:

• Meat processors and slaughterhouses. Beef, lamb, pork, venison, and other red meat operations.
• Poultry processors. From primary processing (slaughter) through to further processing (portioning, marinating, cooking).
• Dairy manufacturers. Milk processing, cheese making, butter, yoghurt, and other dairy product manufacturing.
• Seafood processors. Fish, shellfish, and other marine products.
• Honey producers. Extraction, packing, and blending operations.
• Egg producers and processors. Grading, packing, and processing.
• Exporters. Any business exporting animal products needs an RMP regardless of the product type. Export markets have their own requirements layered on top.

This is separate from the Food Control Plan (FCP) system that applies to restaurants, cafes, bakeries, and other food businesses under the Food Act 2014. If you’re a food manufacturer working with non-animal products only, you likely need a custom FCP rather than an RMP. But if animal products are part of your process, the Animal Products Act takes precedence for those products.

Some businesses need both. A facility that manufactures ready meals containing chicken would have an RMP for the poultry processing and potentially an FCP for the non-animal components. It depends on how your operation is structured and what MPI determines during registration.

What Does an RMP Cover?

Your RMP is built around several core components. If you’ve worked with HACCP-based systems, the structure will feel familiar, but an RMP goes further.

Hazard analysis. You identify every biological, chemical, and physical hazard relevant to your operation. This isn’t a generic list copied from a template. It needs to reflect your actual process, your actual ingredients, your actual facility. A poultry plant dealing with Salmonella and Campylobacter risks has a very different hazard profile to a dairy factory managing Listeria.

Critical Control Points (CCPs). These are the steps in your process where you can eliminate or reduce a hazard to an acceptable level. Cooking temperatures, chilling rates, metal detection, pasteurisation. Each CCP has defined critical limits, and if those limits aren’t met, the product is not safe.

Monitoring procedures. How you check that each CCP is under control. Temperature logging, visual inspections, equipment calibration checks. The frequency and method must be defined, and someone specific must be responsible for each check.

Corrective actions. What happens when monitoring shows a CCP has gone out of control. You need predefined responses: what to do with affected product, how to bring the process back into control, and who has the authority to release or reject product.

Verification schedules. Internal checks that confirm your system is actually working as designed. This includes things like environmental swabbing programmes, product testing schedules, and internal audits. Verification is separate from monitoring. Monitoring tells you the process is under control right now. Verification tells you the whole system is sound.

Record-keeping. Everything above must be documented. Every temperature reading, every corrective action, every calibration check, every verification result. Records are the proof that your system works. Without them, you have nothing to show a verifier.

Operator verification. Your internal programme of checks, reviews, and audits. You don’t wait for MPI to find problems. You run your own verification programme and fix issues before they become non-conformances.

Independent verification by MPI. MPI-recognised verifiers audit your operation on a regular schedule. They review your records, observe your processes, and assess whether your RMP is being followed as written. This is the bit that most people think of as “the audit,” but it’s really just one part of the whole verification picture.

RMP vs Food Control Plan: What’s the Difference?

This trips people up, especially businesses that sit at the boundary between the two systems. Here’s the breakdown.

Different legislation. RMPs operate under the Animal Products Act 1999. Food Control Plans operate under the Food Act 2014. Two separate pieces of law, two separate regulatory frameworks.

Different regulators. RMP businesses are verified directly by MPI through their network of recognised verifiers. FCP businesses are verified by agencies appointed by their local council (or MPI, for custom FCPs). The oversight model is fundamentally different.

Different scope. RMPs cover animal product processing from primary processing through to export. FCPs cover food businesses more broadly, including hospitality, retail food, and non-animal food manufacturing.

Different complexity. An RMP for a meat processing plant is a detailed, technical document that can run to hundreds of pages. It covers everything from livestock receival through to dispatch. A template FCP for a cafe might be 20 pages. Custom FCPs for food manufacturers sit somewhere in between, but they still tend to be less complex than a full RMP.

When you need which. If you process animal products, you need an RMP. If you run a food business that doesn’t process animal products, you need an FCP (either template or custom, depending on your risk category). If you do both, you may need both. MPI makes the call during registration.

The key practical difference for day-to-day operations: MPI verification of RMP businesses tends to be more rigorous and more frequent than FCP verification. The expectations around record-keeping, traceability, and corrective action documentation are higher. If you’ve come from an FCP background and you’re stepping into an RMP environment, expect the bar to be significantly higher.

What Happens If You Fail an MPI Verification?

This is where things get expensive. And the most common reason businesses fail is not dramatic food safety breakdowns. It’s incomplete or missing records.

When an MPI verifier finds non-conformances during a verification visit, several things happen depending on severity:

Increased audit frequency. A compliant business gets verified every 12 months. If issues are found, MPI can move you to a 9-month, 6-month, or even 3-month cycle. Each verification visit is billed at $230.50 per hour, and a typical visit takes several hours. Going from annual to quarterly verification can add $5,000+ to your yearly compliance costs just in verification fees.

Corrective Action Requests (CARs). You’ll receive formal CARs that must be addressed within a defined timeframe. These aren’t suggestions. You need to identify the root cause, implement corrections, and provide evidence that the issue has been resolved.

Escalation and penalties. For serious or repeated non-conformances, MPI can issue compliance notices, impose conditions on your RMP, or suspend your registration. Fines under the Animal Products Act range from $13,000 for individuals to $149,000 for body corporates. In the worst case, your operation gets shut down until you can demonstrate compliance.

Export market access. If you’re an exporter, non-conformances can affect your eligibility to export to specific markets. Some markets have zero tolerance for certain types of findings. Losing export market access even temporarily can be financially devastating.

The pattern I see repeatedly is this: the food safety systems are actually pretty good. The processing is under control. But the records don’t reflect it. Someone forgot to log a temperature. A corrective action was taken but nobody wrote it down. The cleaning schedule was followed but the sign-off sheet is blank for two weeks. When a verifier walks in and sees gaps in your records, they can’t assume everything was fine. No record means no evidence. No evidence means non-conformance.

Managing RMP Compliance: Paper vs Digital

Most RMP businesses in New Zealand still run on paper. Clipboards on the production floor. Folders of completed forms in the office. Binders of records stored in a back room or shipping container somewhere.

It works, technically. But it comes with real costs that most operators have just accepted as normal.

Time. QC staff in a typical processing plant spend 3 to 4 hours per week just on paperwork management. Filling in forms, filing completed records, collating documents for verification visits, tracking down missing sign-offs. That’s time not spent on the floor doing actual quality work.

Missing records. Paper gets lost. Forms get wet. Someone takes a clipboard home in their pocket. A page falls behind a bench and sits there for six months. When you’re pulling records for a verification visit and you can’t find Tuesday’s temperature logs from three months ago, you’ve got a problem that no amount of searching will fix.

Audit preparation. The week before an MPI visit is usually frantic. Pulling records, organising folders, filling in gaps (or discovering gaps that can’t be filled), making sure everything matches up. This panic cycle repeats on every audit cycle.

Legibility. Gloves, wet environments, cold rooms, and rushed production schedules are not kind to handwriting. A verifier who can’t read a record is going to treat it the same as a missing record.

The shift towards digital record-keeping is being driven by several forces. EU and UK export markets increasingly expect electronic traceability and record-keeping systems. MPI has signalled that digital systems make verification more efficient. And frankly, the businesses that have already moved to digital compliance report that audit preparation drops from days to minutes.

Digital doesn’t have to mean complicated. It means your records are captured at the point of work, timestamped, stored securely, and retrievable instantly. When a verifier asks for last month’s CCP monitoring records, you pull them up on a screen instead of digging through a filing cabinet.

How the Custom FCP / RMP App Helps

The AXELLARIS Custom FCP / RMP App is built specifically for NZ food manufacturers operating under RMPs and custom FCPs. It puts 16 compliance forms on a tablet on your production floor, configured for your operation.

Temperature logs, corrective actions, pre-operational hygiene checks, receiving inspections, traceability records. All captured digitally, all timestamped, all exportable as audit-ready reports when your verifier walks in.

The Custom FCP / RMP App was built by a QC manager working in a poultry processing plant. The forms and workflows reflect what actually happens on a production floor, not what a software developer imagined might happen.

If you’re spending hours on paperwork that should take minutes, or you’re tired of the pre-audit scramble, take a look at what it includes or check pricing to get started.