Latest / From Kitchen to C-Suite™ / The Post-Storm Rush to Reopen : Why Good Intentions Don’t Equal Safe Service
Transcript
- Brad Peters: In the rush to reopen after a storm, good intentions can sometimes overlook critical safety. You know, I wanna just set a scene for you right out of the gate today. please do. Set the stage. If you are an operator or a chef or, you know, an executive in this industry, this is a scene you either know incredibly intimately or it's just one that haunts your absolute worst nightmares. Yeah, the post disaster reality check. Exactly. It's rough. So the storm has passed, right? The skies outside are finally clearing up. They're taking on that weird, bruised purple color you get after a hurricane. Right. But the air inside is just awful. It is stagnant. It is so heavy. The air inside your building is still charged with that static, that post-disaster tension. yeah. And out back, you've got the emergency diesel generator humming. It's that loud, just constant vibration. vibrating thrum in the floorboards. Just a constant physical reminder that you are entirely off the grid. Yes. The municipal lifelines are totally severed. And the cell networks are just, and I mean just starting to flicker back online. And we all know what happens the exact second you get service. The second your phone catches a single bar of 5G, it starts vibrating right off the stainless steel prep table. You look down and it's the C suite. Of course it is. It's ownership. They are sitting in some climate controlled office, you know, three states away. They are looking at the financial hemorrhage of the past forty eight hours on their dual monitors. Bleeding cash. Just bleeding cash. And they are asking you one single echoing question, which is when do the doors open? And that right there, that is the ultimate pressure cooker moment in hospitality. It really is. Because the reality gap between the person making that phone call and the person receiving it. I mean, it's a massive chasm. Right. On their end of the line, they are looking at spreadsheets. You know, they see lost revenue projections, they see a dip in quarterly earnings. But you are standing on a loading dock that is slick with humidity. Exactly. You're staring at pallets of totally questionable inventory. You are smelling the stagnant air of a facility that hasn't had proper HVAC circulation in two solid days. It's a completely different, deeply physical reality on the ground. Totally. And that intense high stakes friction, like the collision between the boardroom and the loading dock, is exactly why we are doing something completely unprecedented today. I am so excited for this. Me too. This is a special crossover deep dive into our source material. We are taking my world, bridging the high level revenue, the operational pressures, and the executive strategies of from kitchen to C suite. And we are slamming it headfirst. Into my world. Yes, we are. The ground level, absolutely non negotiable compliance and safety protocols of Mise en plus culture first. Because for you, the listener, whether you are the regional VP who is aggressively pushing for the reopen, or you're the general manager standing in the dark with a flashlight and a clipboard, we are going to navigate that friction. The absolute friction between the financial urgency to get cash flowing again and the sacred legal duty to serve safe food. It is a phenomenal crossover mission. It really is. Because what we are analyzing today, it isn't just theory, right? It's not best practices drafted in some vacuum. Aaron No, we are digging into the raw mechanics of emergency operations. Aaron We've got a massive stack of sources today. We are looking at the FDA Food Code twenty twenty six. The big one. Yep. We are using state level mandates. we're specifically anchoring our discussion today in Florida statutes on food service protection. Just to understand how the law actually views a post storm kitchen. Because Florida deals with this constantly. Exactly. Plus, we've got state specific emergency action plans from Mississippi, Maine, and Virginia. And we are incorporating third party audit data from the Safe Quality Food Institute. SQFI. Right, SQFI. We're using that to see exactly what regulators and auditors zero in on when the normal rules of operation have just been completely blown away by a category three hurricane. Okay. Let's unpack this. Because before we can even talk about saving the food in the walk-in or you know flipping the breakers back on. Or turning the knee on open sign on. Right. Before any of that, we have to talk about a massive psychological and operational shift. We have to talk about who is actually in charge when the lights go out. This is huge. Because here is a reality that I know terrifies corporate boards. The moment a disaster hits, normal corporate titles essentially just vaporize. They absolutely dissolve. It's wild. And this is a legal and operational reality that heavily centralized corporate structures really, really struggle to accept in the heat of the moment. they fight it tooth and nail. They do. According to the disaster preparedness playbook protocols in our sources, there is a specific, measurable trigger for what is called the operational pivot. Okay, lay that out for us. Well, the standard commercial hierarchy does not just fade away gradually. It snaps. It snaps. Yes. And that snap happens the exact moment sustained tropical storm force winds exceed thirty-nine miles per hour. Wait, hold on. Let me just get this straight. You are telling me that a random anemometer reading on the roof literally strips a chief operating officer of their authority. That is exactly what I'm telling you. So when the wind hits thirty-nine miles per hour, the CEO, the regional director, the VP of operations. Their direct operational authority over that specific physical building is just legally paused. It is paused. I can hear the executives listening right now just grinding their teeth into dust. I'm sure they are. But it is paused for a very, very good reason. Okay, explain that. So at that thirty-nine mile per hour threshold, the facility shifts immediately into an incident command structure or ICS. ICS, right. This is a framework borrowed directly from emergency services and military logistics. It's not a corporate thing. No, it's a survival thing. Exactly. In an ICS, the general manager or, you know, whoever the designated highest ranking person physically on the property happens to be, they become the incident commander. The absolute boss. Yes. And in this framework, the incident commander holds absolute single point authority over the entire facility. So it's not a democracy anymore. It is definitely not a committee. It is not a collaborative consensus where we like get everyone on a Zoom call to vote on what to do. Because the internet's probably down anyway. Aaron Right. It is a command structure designed strictly for rapid life or death emergency response. I want to linger on the psychology of that shift for a second because it is massive. That's a huge burden. You take a general manager, right? Someone who on a normal, sunny Wednesday, might have to get three levels of corporate approval and sign off in triplicate just to change the brand of paper towels in the guest bathrooms. Yeah, totally micromanaged. Right. Suddenly the wind hits thirty nine miles per hour, the power drops, and that same GM is now the supreme allied commander of a multi million dollar property. It's a wild transition. They are making unilateral decisions about asset destruction, life safety, structural integrity. And under this incident commander, the normal org chart breaks down into specialized operational leads, correct? Precisely. You no longer have a marketing director or a sommelier. Those Jobs don't exist during a hurricane. Right. Beneath the commander, the structure crystallizes into four vital operational leads. You've got guest relations, safety and security, facilities and engineering, and food and beverage. Just the core pillars of survival. Exactly. And each of these leads assumes direct, uncompromising authority over their specific core facility functions. So what does that look like in practice? Well, guest relations, they're no longer worried about Yelp reviews. You know? No. They are handling emergency communications, rooming manifests, and triaging the special medical needs of guests or staff who might be trapped on site. Makes sense. And safety and security? They aren't checking IDs at the bar anymore. They are doing access control. They're doing continuous floor sweeps for structural damage. Because the building might literally be falling apart. Right. And they're doing fire watches because guess what? The automatic sprinkler system might be totally offline. That's terrifying. It is. And then you have facilities and engineering. They are monitoring the diesel generators, calculating fuel burn rates, assessing structural integrity. But the one we really, really need to put under the microscope today, the one that causes the absolute most friction with the C suite, is that food and beverage lead. absolutely. Because their job in an emergency is completely unrecognizable from their day job. It's night and day. Let's be real. On a normal Tuesday, the F and B director is worried about table turn times, upselling the specials, making sure the wine pairings are on point. Normal hospitality stuff. Right. But during a post-storm recovery, they are basically running battlefield logistics. That is the perfect term for it. Battlefield logistics. They are tasked with protecting raw inventory from temperature abuse, rationing potable water supplies, securing drinking water distribution, and this is the crazy part. Trying to maintain sanitary dining operations without any municipal utility service whatsoever. And that transition from hospitality to battlefield logistics, that brings us right to the core conflict of our discussion today. The friction. The massive friction. The corporate office is looking at a dashboard. They see a building that survived the storm. The roof is intact, the windows aren't broken, the generator is running. So in their minds they're good to go. Right. They want cash flow. To offset the massive disaster loss as they are bleeding across the rest of the region. But the incident commander and the F and B lead. They are on the ground. So how does that play out legally? Well Because I have been in those boardroom meetings, I know the pressure. An executive will say, look, we have a generator, we have food, we have hungry people in the community who genuinely need to eat. We are doing a public service by opening. Get the doors open. Right. They frame it as a moral imperative. Exactly. It's good intentions mixed heavily with a desperate need for revenue. But good intentions or corporate pressure do not override the health code. They do not. And the law is entirely on the side of the incident commander here. Let's anchor this in a specific, highly relevant regulatory reality for the listeners. Let's do it. Let's look at Florida statute three eight one point zero zero seven two. Okay. This governs food service protection. And the statute explicitly states that the Department of Health may determine that a food service establishment is an imminent danger to the public health and they can require its immediate closure. Just instantly shut it down. Instantly. It does not matter if you have a generator. If the facility fails to comply with sanitary standards, which by the way are almost impossible to maintain during a municipal grid failure, and if it presents a threat to the public's health, safety, and welfare, The state has the ultimate authority. No matter what the CEO says. Exactly. They can legally mandate that you cease operations, stop all sales, and they can even mandate and supervise the proper destruction of your entire food inventory. I have to challenge the reality of that though. I want to play devil's advocate for the operators listening. Go for it. Imminent danger sounds very dramatic, right? If I am an operator and my walk-in cooler is holding temp perfectly because of the generator, But my dining room is dark and I'm just serving cold sandwiches out the back door to line workers. Am I really an imminent danger? You might be, and that is exactly the point. Imminent danger isn't just about the food itself, it is about the environment surrounding the food. Okay, explain that. Do you have hot running water to wash your hands? Probably not. Are your dish machines achieving sanitizing temperatures? Are your employees tracking mud and floodwater bacteria into the prep areas every time they walk in the back door? I see. The regulatory authorities across the country use variations of this exact protocol. A food establishment that was ordered or otherwise required to cease operations due to an emergency event like a hurricane may not reopen until authorization has been expressly granted by the regulatory authority. So it's not up to you? No. You don't get to just decide you're open because the corporate board wants to hit Q three projections and you think you can wing it with sandwiches. So the friction is incredibly real and the stakes are existential. You know I've always thought of the restaurant during a disaster like a surgical theater during an earthquake. that's a brilliant analogy. Right. Normally you have this incredibly controlled environment. Sterile tools, perfect lighting, a team of specialists executing this highly choreographed routine. Everything is pristine. Exactly. And the hospital administration, the C suite, budgets for those surgeries and expects a certain number of operations a day. Right. But when the earthquake hits, the lights go out, the sterile field is totally compromised, the tools are contaminated with dust. The administration can demand you keep performing surgeries to hit the daily quota, but the surgeon in the room knows that opening a patient up in a non-sterile environment isn't healthcare anymore. No, it's malpractice. Exactly. It's malpractice. That is a much more accurate way to frame it. The environment inherently compromises the process itself. But here is the real world dilemma, right? How does an operator on the ground, a GM, who relies entirely on that corporate office for their paycheck, for their family's health insurance, for their bonuses? How do they politely but firmly tell the C-suite that their financial timeline is completely irrelevant and that opening would be regulatory malpractice? If we connect this to the bigger picture, the operator has to speak the language of the boardroom. You have to translate it. Exactly. You have to reframe the conversation from lost revenue to existential brand risk. executives love the phrase brand risk. They do. Because the C suite doesn't want to hear about the nuances of hand washing sinks or dish machine temps. They speak the language of risk management and liability. Right. So you tell them, if we open prematurely without regulatory clearance, and we serve compromised food, we are no longer just dealing with a weather event. We are actively creating a man made public health crisis. And that's when the lawsuits start. Exactly. You're looking at class action lawsuits, total brand destruction in that specific market, and potentially criminal liability under statutes like 381.0072 and If you knowingly misrepresent food safety to the public. So you frame it as protecting them. The incident commander's job is actually to protect the C suite from their own urgency. Protecting them from their own urgency. Man, that is a powerful phrase. It changes the dynamic completely from insubordination to fiduciary duty. Exactly. You're doing your job as a leader. Okay, so establishing who makes the call is the foundational step. The incident commander is the law on the ground. But having the authority is one thing. Executing it is a whole other beast. The execution is where it gets really painful. Because the very first thing that incident commander has to do is step onto the floor, walk into that dark, humid, echoing kitchen, open the walk and cooler doors, and make the absolute most painful financial decision in the entire hospitality business. Deciding what lives and what dies. Yes. Deciding what inventory survives and what gets dragged out to the dumpster. And this is where the strict science of food safety just completely ruthlessly strips away any emotion, any hope, or any financial attachment you have to your inventory. It doesn't care how much it costs. It does not care. We are talking about the cold chain collapse. When the power grid fails and the internal temperature of those coolers begins to rise, an invisible biological clock starts ticking immediately. Ticking on what specifically? on what regulators call time temperature control for safety foods or TCS foods. TCS foods. Okay. Let's make sure everyone listening is visualizing exactly what is at stake here because we are not talking about bags of flour or cans of tomato paste, right? No, dry goods are generally fine. According to Universal Health Codes, we are talking about raw meat, poultry, seafood, dairy products, cooked vegetables, cooked rice, and notably cut melons and cut leafy greens. Correct. These are foods with a high moisture content and a neutral to slightly acidic pH. A bacterial playground. Exactly. In other words, they are the perfect biological petri dish. They require strict temperature controls to prevent the rapid explosive growth of infectious microorganisms or toxigenic bacteria. And what is the rule there? The universal standard across almost every single regulatory body we looked at, Minnesota DOH, Chester County, you name it, is the four hour rule. The four hour rule. If TCS foods are held in the danger zone, which is above forty one degrees Fahrenheit and below 135 degrees Fahrenheit for more than four hours, they must be destroyed. Period. No exceptions. There is absolutely no negotiation. There's no sniff test. There is no well, you know, it still feels a little cool to the touch. Right. If it has been above forty one degrees for four hours in one minute, it is biologically hazardous waste. Here's where it gets really interesting though, because this is exactly where operators try to negotiate with the thermometer. No, they always bargain. Let me play devil's advocate here, speaking for literally every chef who has ever stared down a massive financial loss in the walk-in. I'm ready. Let's say I have a $5,000 shipment of A5 Wagyu beef sitting in my walk-in. Ouch. The power went out. The power I temp the cooler. It's sitting at 45 degrees. And let's say I know for an absolute fact Because I checked my logs that it has been at forty five degrees for exactly four hours and fifteen minutes. It's done. But wait, you are telling me there is absolutely no scientific leeway. I can't just take that wagyu, throw it on a roaring grill, cook it well past one hundred sixty five degrees, kill all the bacteria, and serve it. Why is four hours the magic unbreakable threshold if I'm just going to incinerate the bacteria anyway? I deeply understand the pain of that scenario. Tossing wagyu hurts the soul. But the science is entirely unforgiving here. Walk us through the science. The reason four hours is the absolute limit is because of the bacterial growth curve, specifically the exponential or log phase of reproduction. Okay. When bacteria like Savonella, E. coli, or Listeria find themselves in that danger zone above forty-one degrees, they begin to multiply through binary fission. One becomes two, two becomes four. Exactly. One cell becomes two. Two become four, four become eight. For the first hour or two, the total numbers might still be low enough that a healthy human immune system could handle it without getting sick. But at four hours. Around that four hour mark, the population curve goes completely vertical. You are suddenly dealing with millions or billions of colony forming units. Okay. I hear that. But again, if I cook it to one hundred sixty five degrees, I kill those millions of bacteria, right? Dead bacteria can't infect you. You kill the vegetative cells, yes. Right. But here is the critical flaw in that logic. And this is why the health code doesn't care about how hot your grill gets. Toxigenic bacteria. Toxigenic. Okay, break that down. Pathogens like Staphylococcus aureus or Bacillus serious don't just multiply. As they multiply in that warm environment, they produce and excrete toxins into the food. Like a byproduct. Exactly. And those toxins are highly heat stable. Wow. Yeah. You can take that wagyu beef, incinerate it, cook it to 200 degrees, and yes, you will definitely kill the staphylococcus bacteria. But the toxin they left behind is still there. It's perfectly intact. It is perfectly intact. And that toxin will cause severe, rapid onset food poisoning within hours of consumption. You literally cannot cook out a heat stable toxin. That is why the four hour rule is absolute. That is the clarification that every single operator needs to hear. You aren't just fighting the bug, you are fighting the venom the bug leaves behind. That's a great way to put it, yes. Okay, so that's the cold side of things. Let's look at the other end of the thermometer. Let's say you were in the middle of a massive Friday night dinner service when the transformer blew. The worst timing. You've got prime rib roasting in the hot holding boxes, you have eighty quarts of clam chowder on the line. What happens to the hot food? Does the same biological ticking clock apply? The exact same strict time parameters apply, just in reverse. Okay. If the power drops, the very first thing the PIC, the person in charge, needs to do, before they even grab a flashlight, is look at their watch and note the exact time the power failed. Get the timestamp. Yes. Because you must discard all hot held potentially hazardous food four hours after its internal temperature drops below one hundred and thirty five degrees Fahrenheit. Because it's entering that same danger zone. Exactly. Once it dips below 135, it enters that exact same temperature window where bacterial proliferation begins. But with hot food, you do have a little more tactical flexibility, don't you? Like if you act quickly. You do. If you have the resources, you can use an alternate heat source. Like chafing dishes? Right. You can immediately transition the food to chafing dishes powered by canned heat or chafing fuel. You actively maintain that 135 degree threshold. And you must monitor and log that temperature hourly. And what if the power comes back on? If the power miraculously returns within that four hour window, you are allowed to rapidly reheat the product to 165 degrees Fahrenheit to essentially reset the clock. Okay, that's a relief. But and this is a massive but, the margin for error is zero. If you lose track of time in the chaos, if you can't definitively prove exactly when it dropped below one hundred thirty five, it's gone. Which brings us to what I think is the most painful but necessary rule in all of hospitality. When in doubt, throw it out. Yes. When you are auditing that post-storm kitchen and the timeline is fuzzy, you have to default to the ultimate rule. If the facility was vacated, meaning you evacuated your staff for the storm, nobody was there to tempt the food, and you have no idea how high the temperature spiked over the last forty-eight hours, every single piece of potentially hazardous food must be discarded. Yep. The ultimate rule from Bernard's Township Guidelines. And basically everywhere else. When in doubt, throw it out. And you have to throw it out with extreme administrative prejudice. Administrative prejudice. I like that. Because you aren't just throwing away food, you are dealing with massive financial liability and insurance claims. Let's talk about the administrative side of throwing away food. Because this is where the C suite and the kitchen really collide hard. big time. Say an operator comes back, the power is out, the walk in is sitting at sixty degrees. It's warm. They do the right thing. They drag four hundred pounds of prime rib, two hundred pounds of lobster, and fifty gallons of dairy directly to the dumpster. Heartbreaking but necessary. Right. They feel absolutely sick about it, but they protected the public. But in their exhaustion, in the dark, they didn't log the temperatures. No. They didn't write down the exact time the product was temped, the specific item weights, or the explicit reason for disposal. They just chucked it all. I'm wincing just hearing this. What happens when the C suite tries to file the insurance claim? The claim is denied. Flat out. Flat out. Or at the very least, it is going to be severely contested and delayed for months. And this is a massive point for the executives listening right now. Throwing away food without a meticulous, irrefutable paper trail is a double loss. A double loss. Yes. You lose the physical food, which costs you thousands of dollars. And you lose the business interruption or spoilage insurance payout that was supposed to make the company whole. Because the insurance adjuster is not your friend. They are definitely not your friend. They require empirical evidence. They need the temperature logs. They need the timeline. They need photographs of the temperature readings if at all possible. Wow, even photos. yeah. If the GM just panicked and tossed it all without documentation, the corporate office is going to absorb that entire financial blow directly to their bottom line. Meticulous logging isn't just about appeasing the local health inspector. It is the absolute non negotiable foundation of your financial recovery. So write it down every single pound, every single degree. Everything. Okay. Let's pivot to a scenario where you've managed the internal inventory, you've ruthlessly audited your walk-ins, but you still need product to open. Right. You need stuff to sell. This introduces a whole new layer of risk, which we see highlighted in the third party audit data from the Safe Quality Food Institute as QFI. We are talking about supply chain traceability during a disaster. This is such a critical failure point. Let's look at the data presented by Leanne Chuboff. she's the Vice President of Technical Affairs at SQFI. Right. She tracks what regulators and auditors actually find when they inspect facilities. And on a normal, sunny day with no hurricanes anywhere in sight, the number one FDA inspection failure is developing foreign supplier verification programs, or FSVP. And how many failures was that? Seven hundred and Eighty-nine recorded failures. The second highest is sanitary operations, way down at one hundred ninety one failures. Let's pause and unpack FSVP for the listener because seven hundred and eighty nine failures is a staggering number for a single category compared to the rest. That's massive. What exactly is a foreign supplier verification program and why are operators failing it so consistently? So the FSVP rule is a core component of the Food Safety Modernization Act, or FSMA. Okay. Essentially, it requires importers or operators who are acting as their own importers to perform certain risk based activities to verify that food imported into the United States has been produced in a manner that meets applicable US safety standards. Meaning you can't just buy cheap produce from an unverified overseas farm and assume it's safe. Exactly. You have to have documented proof of their safety audits, their hazard analyses, and their compliance history. The reason there's seven hundred and eighty nine failures is because operators try to save money by buying off contract from secondary unverified suppliers and they just don't do the paperwork to prove that supplier is safe. Now inject that existing failure rate into the total chaos of a post storm recovery. It's a nightmare. This is terrifying. Imagine your primary, deeply vetted, broadline distributor is flooded out. Their massive warehouses underwater. Their trucks physically cannot get to your restaurant. Right. But the C suite is screaming at you to open. So You, the desperate operator, start calling secondary suppliers. You call local guys. You call a guy named local Bob who says he has a refrigerated box truck full of chicken and he can be there in an hour. That right there is the absolute danger zone. Because a municipal grid failure does not grant you amnesty from federal traceability laws. The FDA doesn't care that there was a storm. They don't. They still require you to maintain KDEs and CTEs, key data elements and critical tracking events, under FSMA section two hundred four. Let's define those acronyms for the operators on the floor. What does a KDE and a CTE actually look like on a clipboard on a loading dock? Sure. A critical tracking event, or CTE, is an event in the supply chain involving the food, like receiving it, transforming it, or shipping it. Okay. A key data element, or KDE, is the specific piece of information you must record during that event. For example, If you receive a shipment of fresh seafood from an alternate supplier, the KDEs you must log include the traceability lot code, the quantity and unit of measure, the product description, the location description of where you received it, and the exact date and time of receipt. So going back to local Bob with his truck full of chicken. Right, Bob. If you buy that chicken to get your doors open and you don't collect those KDEs, what happens? If you don't verify his supply chain. You're legally taking on all of his liability. Wow. If Bob's refrigerated truck broke down for five hours yesterday and that chicken sat at sixty degrees and he didn't log it, and then he delivers it to you and you serve it, you own the outbreak. Because you broke the chain of traceability. Yes. The health department isn't going to care that your primary distributor was flooded. They are going to look at your logs, see a gap in traceability, and hold you entirely responsible for For introducing a pathogen into the community. So to summarize the cold chain in the dock, you have to be absolutely ruthless with your own inventory documenting every degree and every ounce you throw away. Ruthless. And you have to be equally ruthless with any new inventory coming in, demanding perfect traceability even when you are desperate for product. Precisely. Okay, let's assume you've navigated all of that perfectly. The cold chain is secured. The bad food is in the dumpster, the new food is tracked and logged. The power finally flickers back on. Hallelujah. The lights buzz to life. You think, Okay, we survived. Let's prep the line and open the doors. But wait. But then your phone buzzes again. It's the County Health Department. The local municipality just issued a widespread mandatory boil water advisory. And just like that, you're back to square one. And suddenly your entire kitchen is a hidden, highly complex minefield. A boil water advisory or BWA. Is arguably one of the most misunderstood, underestimated, and poorly executed emergencies in the entire food service industry. Really? More than power outages? definitely. We see this consistently in the emergency action plans from municipalities across the country, Gallian City, Virginia DOH, PA Bureau, Food Safety. A BWA does not just mean you have to boil the water you use to make soup or cook pasta. Right. It is a fundamental systemic failure of your facilities infrastructure. Let's explain the mechanics of why the water is compromised because I think a lot of people just assume a pipe broke somewhere and some dirt got in. What actually happens during a power grid failure that triggers a BWA? It's actually really interesting. A municipal water system relies on continuous high pressure to keep the water flowing outward and to keep contaminants out of the pipes. Just pushing constantly. Exactly. So when a massive storm knocks out the power grid, the municipal water pumping stations fail. Right. When the pumps fail, The water pressure inside the massive underground pipes drops to zero, or it even creates a vacuum. A vacuum. Okay, so it starts pulling things in. Yes. When that happens, groundwater, soil, and potentially raw sewage from compromised adjacent sewer lines are literally sucked into the clean drinking water pipes through microscopic cracks or structural fractures. So you aren't just dealing with dirty water. You are dealing with water that has been potentially cross contaminated with raw sewage? Exactly. The municipal water supply is now potentially contaminated with severe biological pathogens. The emergency action plants specifically highlight pathogens like E. coli, cryptosporidium, and giardia. NAS bugs. Very nasty. A BWA means that every single drop of water coming out of your taps is a potential biohazard. Which is why the mandatory shutoffs are so terrifying when you actually read the list. People always forget the hidden water lines. It is not just about taping off the hand washing sinks. The guidelines require the immediate, verified shutoff of ice machines, drinking fountains, bottled water refill stations, soft drink fountains connected to water lines. Basically anything tapped into the municipal line. And this is the one that gets people. Produce misters and running water dipper wells. Yes, we absolutely need to focus on those hidden traps because this is where cross contamination thrives in a commercial environment. Let's talk about produce misters. Let's take produce misters in a grocery store or a retail salad bar setting. If the PIC does not sprint to the shutoff valve the absolute second that advisory is issued, you are literally taking municipal water, which we just established might contain raw sewage and E. coli, and you are mechanically spraying it, aerosolizing it directly onto fresh, ready to eat leafy greens and vegetables. And those vegetables are likely not going to be cooked. No, they're salads. You are literally creating a pathogen delivery system. You are aerosolizing pathogens onto a surface that will be consumed raw. The risk profile is catastrophic. And the dipper wells. Are for the listener who might not be familiar with the term, a dipper well is that little constantly running sink at the ice cream station or behind the coffee bar where you drop the scoops to keep them clean between uses. Right. The water just constantly overflows. The water just runs continuously over the utensils. In a boil water advisory, a running dipper well goes from being a sanitation tool to a massive liability. It's just a constant stream of bacteria. It is just a constant flow of contaminated water washing over the exact tool you are using to serve ready to eat ice cream to children. This raises an important question though. And it's the operational nightmare of a BWA. How do you actually clean and sanitize your facility, your pots, your pans, your cutting boards if the tap water itself is the hazard? I always tell operators trying to run a full, normal, complex menu during a boil water advisory is like trying to perform open heart surgery in a sandbox. Wow, that's a great visual. It does not matter how skilled the surgeon is or how sharp the scalpel is, the environment itself is inherently fundamentally compromised. The air, the tools, the water you use to scrub in, it's all working against you. That is a perfect analogy, and it perfectly explains the regulatory mandates. Because you cannot use the tap water for sanitation. So what do you do? You must use water that has been at a rolling boil for at least one minute, or you must purchase commercially bottled water for all food preparation and washing. That's incredibly slow and expensive. It is. You also have to completely discard all ice and any mixed beverages like fountain sodas or iced teas that were made with the contaminated water prior to the advisory being issued. You can only use commercially packaged ice brought in from outside the affected area. Which is exactly why a BWA almost always requires a drastic strategic menu reduction. You have to simplify. You simply cannot maintain a massive prep list if you have to boil every single drop of water you use. You have to eliminate anything that requires heavy water use for washing or prep. Like no big pasta pots, no washing huge batches of greens. You have to shift to single service disposable utensils and paper plates. Why? Because your commercial dish machine might not be able to achieve the required sanitizing temperatures or chemical concentrations if the municipal water pressure is compromised. In fact, many health department manuals state this plainly if inadequate pressure or no water is available, permitted establishments must close. Period. It does not matter if you went out and bought fifty pallets of bottled water for drinking, if you do not have adequate. pressurize running water to operate your flush toilets or to push through your chemical sanitizing dish machine, you cannot operate a commercial food facility safely. Because the baseline infrastructure required for basic human sanitation is gone. Exactly. You can't just have employees not using the restroom or not washing their hands properly. And we have to remember the recovery phase too, the psychological relief when the municipality finally lifts the advisory and says the water is safe again. People think it's over then. You can't just turn the taps back on, cheer, and start cooking. Not even close. When the advisory is lifted, you enter a mandatory, highly documented flushing phase. What does that entail? You must completely flush every single water line in the building. You have to run every faucet hot and cold for five minutes. You have to completely empty, clean, and chemically sanitize the ice machine bins, and then run three complete cycles of ice and throw them all away. Just to purge the lines. Exactly. You must change every single water filter. In your beverage dispensers, your coffee machines, and your prep sinks. And you have to completely sanitize every food contact surface that might have been touched by the bad water over the last few days. And once again, returning to our recurring theme of who is actually in charge, the local water department lifting the advisory is only step one. Yes. The local water authority manages the pipes in the street. The health department manages your kitchen. Your local regulatory authority still has to clear the facility before you can legally serve a single guest. Navigating the coal chain collapse. Executing the dock audits, managing the traceability of alternate suppliers, policing the hidden traps of a boil water advisory, and executing a facility wide sanitization flush. It's exhausting just listing it. It requires an incredible, almost superhuman amount of vigilance and attention to detail. But here is the stark reality check. The executives in the C suite aren't the ones checking the temperature of the cut melons in the dark. No, they're not. The incident commander, the GM, is likely tied up dealing with FEMA, coordinating with the insurance adjusters, or trying to find a diesel supplier for the generator. They're fighting fifty fires at once. So who, practically speaking, is actually verifying that the exhausted, stressed out, emotionally drained line cooks are following these highly modified, incredibly strict emergency rules? This brings us to the most critical human element in the entire regulatory framework. It brings us to the PIC, the person in charge. The pick. Let's dive incredibly deep into this because the 2026 FDA Food Code heavily emphasizes this role, and it is the linchpin of everything we've discussed today. It really is. What exactly is the PIC's duty under these extreme post-disaster conditions? So the FDA Food Code defines the duty and the legal expectation of the PIC through a very specific concept called active managerial control. Active managerial control. I cannot stress this enough. Active managerial control is not a passive title you hold just because your name is on the schedule that day. It's not a badge you wear. No. It is not about having a dusty three ring binder full of HACCP plans and emergency protocol sitting on a shelf in the back office. Right. The binder nobody reads. Exactly. Active managerial control is a continuous, dynamic process. It means that when a health inspector walks into your post storm kitchen, they determine compliance not just by asking the PIC a few questions, but by verifying. Through direct observation that safety systems and controls are actually being implemented by the staff on the floor in real time. I've always been fascinated by how different states evaluate this. If you look at the state level rules, they are ruthless about this observation piece. Alabama, Mississippi, they don't play around. There are statutes that state explicitly this item must be marked out of compliance when there is a pattern of noncompliance, an obvious failure by the PIC to ensure employees are complying. It explicitly states that marking this out of compliance requires judgment by the inspector. The inspector is actively evaluating your leadership. They are watching to see if your prep cooks are washing their hands when you aren't looking directly at them. Exactly. It's an assessment of leadership under fire. Let's look at the core reopening conditions after a facility has been closed for an imminent health hazard. Okay, let's look at Mississippi's rules for this. To even begin the conversation about reopening, the permit holder. Must prove three things to the health department complete elimination of the hazard, comprehensive deep cleaning and sanitization of all affected areas, and total food disposal of any compromised materials. And who coordinates all that? The PIC is the one who has to orchestrate that entire complex symphony of remediation. And they have to do it while the staff is likely operating on three hours of sleep, sweating in a hot kitchen, and dealing with immense personal stress. And the risk level during this time is completely off the charts. It's not a normal Tuesday. No, the risk matrix totally shifts. Let's look at that SQFI hazard analysis risk matrix from the audit data. It plots the likelihood of a hazard occurring against the severity of that hazard on a scale. Right. On a normal day, the likelihood of a massive cross-contamination event, say a major allergen cross-contact with sesame, which is now a major focal point. might be classified as rare or unlikely. Because on a normal day, you have a dedicated prep station, dedicated cutting boards, good lighting, everyone is rested. Exactly. But during a storm recovery Completely different story. When you've had to throw away half your cutting boards because they were contaminated during the water outage, when you've altered your prep lines, condensed your menu, and your staff is exhausted and working under battery powered lanterns. The likelihood of that sesame cross contact jumps from unlikely to likely or even almost certain. And because the severity of a major allergen exposure or a major foodborne pathogen outbreak is always classified as catastrophic or major, that overall risk score immediately jumps into the red zone. It becomes critical. It becomes critical. The underlying mathematical probability of a catastrophic event changes entirely during a disaster. Aaron This is exactly where kitchen culture Truly meets C suite risk management. The ultimate intersection. The PIC on duty is the ultimate frontline shield for the entire corporate brand. If the PIC bends to the pressure of the C suite, if they hear the regional manager yelling on the phone about lost sales, and they decide to cut a corner, to salvage that borderline chicken that tempted at forty five degrees, or to turn the produce misters back on a little too early just to make the displays look nice. They risk everything. Their risk of foodborne outbreak. And the financial, legal, and reputational costs of a post-disaster outbreak will absolutely dwarf the lost revenue of remaining closed for one more Tuesday. I want to push back on the reality of this though. Okay, let's hear it. I understand the theory of active managerial control. I understand the risk matrix, but I have been that exhausted operator. We both have. How does a PIC actually foster this flawless culture first environment? When the staff is physically broken. It's incredibly hard. When a line cook might be dealing with a flooded basement at their own home, they haven't seen their family in two days, and they are just trying to mindlessly push through a twelve hour shift in a hot kitchen. How do you demand perfection from people who have literally nothing left to give? It is the hardest leadership challenge in the industry. But it is exactly why we say that true culture is built in times of crisis, not in times of peace. That's a profound point. You don't build culture when everything is easy, the lighting is perfect, and the profit margins are high. You build it and you reveal it when the power's out and the pressure's on. I completely agree. To me, the ultimate, undeniable proof of a flawless food safety culture isn't a perfect audit score on a sunny day. No, anyone can do that. The ultimate proof is when a 19-year-old prep cook making hourly wages walks into a dark, warm walk-in cooler, tempts a five hundred dollar piece of prime steak. Sees that it's been in the danger zone for five hours and throws it directly into the dumpster. Yes. And they do it without pausing to ask for a manager's permission and without a single ounce of fear of reprimand. Because they know. Because they know fundamentally in their bones that the company values public safety and integrity over that five hundred dollar piece of meat. That is the perfect illustration of active managerial control internalized by the staff. Internalized, yes. If the PIC has to hover over that 19-year-old cook to make sure they throw it away, you don't have a safety culture. You have micromanagement, which will fail the exact second you look away. So true. If that cook is terrified of being yelled at for high food cost waste and tries to hide the steak or worse, tries to cook it off and serve it to salvage the numbers, your culture is fundamentally broken. And your brand is at immense immediate risk. The PIC's job during a disaster isn't just to check temperatures. Their job is to act as a psychological umbrella for the entire staff. A psychological umbrella. I love that. They have to absorb the rain. They have to shield the prep cooks and the line workers from the C suite's financial panic so the staff can focus purely on safety, sanitation, and execution. Right, clear the noise. The PIC has to be the one to say, I will take the heat from corporate for the food cost. You just focus on keeping the food safe. Aaron So if we synthesize everything we have covered today from this massive stack of emergency management plans, the FDA codes, the state statutes, and the SQFI audit data. We can distill this crossover deep dive into a final non negotiable leadership checklist for the listener. Let's do it. Whether you are in the boardroom or the kitchen, these are the pillars of post disaster recovery. Let's lay it out clearly. Number one on the checklist. Number one. Defer entirely to the incident commander. The ultimate boss. The moment the wind hits 39 miles per hour or the grid completely fails, the standard corporate hierarchy dissolves. The person on the ground holding the ICS authority makes the calls regarding life safety and facility operations. The C suite must transition from directing operations to supporting the incident commander. Number two, audit the cold chain ruthlessly. Log the temperatures, log the time, and when in doubt, throw it out. Uncompromising adherence. We are talking strict, uncompromising adherence to the four hour rule for TCS foods above forty-one degrees or below one hundred and thirty-five degrees. And remember the financial reality here. Throwing away food without a detailed temperature log isn't just a physical loss of inventory. It actively destroys your insurance claim. Document everything or you pay for it twice. Right. What's number three? Number three, respect boil water advisories to the absolute letter of the law. It's not just boiling water. It is a systemic infrastructure failure, not a minor inconvenience. It is not just about boiling pasta water. You must identify and physically shut down the hidden traps for cross contamination, the ice machines, the produce misters, the running dipper wells. And the water pressure. And remember, if you do not have adequate pressurized running water to safely operate your flush toilets and your chemical dish machines, you must close the doors. Bottled water does not replace municipal pressure. And number four, the human element. Support the PIC in maintaining active managerial control. The psychological umbrella. The corporate office must explicitly empower the person in charge to make the hard, incredibly expensive decisions about inventory destruction without any fear of retaliation or penalty. Because at the end of the day, emergency compliance is not an operational roadblock to revenue. What is it then? It is the fundamental bedrock of your brand's trust and long term valuation. Think about the community you operate in. If you cut corners, if you brush the reopening, and you end up poisoning a community while they are already vulnerable, stressed, and recovering from a natural disaster. It's game over. Your brand will never, ever recover in that market. The community will not forgive you, and the regulatory authorities will certainly not protect you. So what does this all mean? We spend an incredible amount of time in this industry and on these shows talking about how to help a restaurant or a facility survive a disaster. We plan for it constantly. We run tabletop exercises in boardrooms, we spend hundreds of thousands of dollars on backup generators, we write extensive multivolume contingency plans. But I want to leave you with this provocative thought. Let's hear it. If a kitchen team can seamlessly execute active managerial control, if they can perform a perfect hazard analysis on the fly, and if they can demonstrate an absolute unwavering food safety culture while running on a vibrating diesel generator, In the humid, chaotic, exhaust fume filled aftermath of a category three hurricane? What excuse in there? Exactly. What possible excuse is there for a critical health code violation on a perfectly sunny, seventy degree Tuesday afternoon? Wow. That's a heavy question. Think about it. Does surviving a disaster actually reveal what your restaurant and your leadership was capable of all along?