A record of the risk management programme should be
retained with the risk assessment to demonstrate due
diligence. This may be shared, as appropriate, with
enforcement agencies and customers to demonstrate
how risks have been managed and reduced. This should
include details of how the programme is validated,
and ongoing verification. Internal compliance with
instructions and procedures for control of allergen risks
should be verified regularly by trained internal auditors.