vaayaa Inclusive Education
Hospitality risk assessment

Bakery, Dessert and Confectionery Operations Risk Assessment: Allergen, Hygiene and Service Controls

A worked example of how a small bakery and dessert counter finds, scores and controls the risks that threaten guest safety, product quality, staff wellbeing, payments and guest trust across production, retail and custom orders.

Updated November 2026 8 hazards assessed Review every 6 months Highest risk: Critical to Medium
See the Bakery, Dessert and Confectionery Operations course

Executive summary

This assessment shows how a small bakery and dessert operation can find, rate and control the risks that matter most to guest safety, product quality, staff wellbeing, payments and trust. Eight risks were chosen because they are plausible in everyday production, retail and custom order work. Allergen cross contact is the highest inherent risk because a single error can harm a guest, while fire and equipment hazards are less likely but serious. Each risk is scored before controls and again after existing and additional controls. Most risks fall to Medium or Low once additional controls are in place, but allergen risk remains Medium because the harm is severe. The first actions are a labelled allergen matrix checked at each batch, a temperature log for cold storage, a rota that limits consecutive peak shifts and a written process for custom order details. The site is a teaching example, so every score illustrates method, not a real business.

Focus area
Bakery, dessert and confectionery operations
Setting
Independent bakery with a retail counter, a dessert kitchen and custom cake and confectionery orders
Method
Five by five likelihood and impact risk register

Scope

This assessment covers a small bakery and dessert operation, from ingredient receiving and production to display, retail sale, custom orders and cleaning. It looks at risks to guests, staff, food quality, cash, bookings and guest data. It does not cover a real business, a specific premises or any licensing decision. Jurisdiction, premises layout, equipment and payment systems are assumptions made for teaching.

Context

The site has a head baker, a pastry lead, four production and counter staff and a front of house manager. Products include breads, laminated pastries, plated desserts, chocolates and sugar work, and custom celebration cakes ordered in advance by phone, online and in person. Ovens, proofers, tempering machines, fryers and a walk in cooler are in daily use. Payments are taken at a counter terminal and by an online form for custom orders. Each risk is scored before controls to show its natural level, then after the existing controls and the additional controls that should be added.

Objectives, assets and stakeholders

The objective is to produce safe, accurate and appealing food, serve all guests fairly including those with access needs, protect cash and guest data, and keep the confidence of guests, staff and the local community. The assets in scope are ingredients and finished products, ovens, mixers, tempering equipment and the walk in cooler, the point of sale terminal, custom order records, guest contact details and the brand reputation. Stakeholders include guests with allergies or dietary needs, production and counter staff, the head baker and front of house manager, owners, suppliers, the local food safety authority and the card payment provider. Every risk has one owner role, and the head baker keeps the register current and reports to owners each quarter.

Risk matrix: before and after controls

Each cell shows hazard numbers placed by likelihood and impact. Compare the two grids to see how controls move each hazard.

Before controls

Inherent risk

Risk before controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely Likelihood 4, impact 3, score 12, high: H04 Likelihood 4, impact 4, score 16, high: H08 Likelihood 4, impact 5, score 20, critical: H01
3 Possible Likelihood 3, impact 2, score 6, medium: H07 Likelihood 3, impact 3, score 9, medium: H05 H06 Likelihood 3, impact 4, score 12, high: H02
2 Unlikely Likelihood 2, impact 5, score 10, high: H03
1 Rare

After controls

Residual risk

Risk after controls: rows are likelihood from almost certain to rare, columns are impact from insignificant to catastrophic. Cells list hazard numbers.
1
Insignificant		 2
Minor		 3
Moderate		 4
Major		 5
Catastrophic
5 Almost certain
4 Likely
3 Possible Likelihood 3, impact 2, score 6, medium: H04
2 Unlikely Likelihood 2, impact 2, score 4, low: H05 H06 H07 Likelihood 2, impact 3, score 6, medium: H02 H08 Likelihood 2, impact 4, score 8, medium: H01
1 Rare Likelihood 1, impact 4, score 4, low: H03
  • Low 1 to 4
  • Medium 5 to 9
  • High 10 to 16
  • Critical 17 to 25

Hazard register

A summary first, then the detail for each hazard.

Summary of hazards with scores before and after controls
No.HazardBeforeAfterOwner
H01 Allergen cross contact and mislabelled products 20 Critical 8 Medium Head baker
H02 Food hygiene and temperature control failures 12 High 6 Medium Production lead
H03 Fire, oven, fryer and hot sugar burn hazards 10 High 4 Low Operations manager
H04 Staff shortages and fatigue during peak production 12 High 6 Medium Front of house manager
H05 Supplier failure or substitution of key ingredients 9 Medium 4 Low Purchasing lead
H06 Payment system outage and cash handling errors 9 Medium 4 Low Operations manager
H07 Privacy breach of custom order and guest contact details 6 Medium 4 Low Operations manager
H08 Custom order errors and inaccessible service 16 High 6 Medium Front of house manager
H01

Allergen cross contact and mislabelled products

Safety Before 20 After 8

Shared equipment, sprinkled toppings or a handwritten label put an allergen into a product sold as free from it, so a guest with an allergy is exposed without warning.

Who or what is affected: Guests with allergies, counter staff and kitchen staff

Causes

Shared equipment, sprinkled toppings, rushed label changes and recipe updates not passed to counter staff.

Consequences

Serious allergic reaction, emergency care, legal claims and loss of guest trust.

Existing controls

  • Recipes list the main allergens for each product.
  • Nut and sesame products are made on a separate bench on set days.

Control gaps

The matrix is not checked at the counter, and handwritten labels are used when the printer fails.

Additional controls

  • Prevent: Use a labelled allergen matrix checked and signed at every batch, with a colour code for each allergen.
  • Detect: Spot check labels and displays at each opening and record any mismatch.
  • Respond: Withdraw any product with a doubtful label and brief counter staff before the next sale.
Likelihood 4 x impact 5 before; 2 x 4 after Owner: Head baker Target: Within 30 days Early warning: A product sold with a missing or handwritten allergen label.
H02

Food hygiene and temperature control failures

Legal and compliance Before 12 After 6

Cream, custard and dairy products are cooled, held or displayed outside safe time and temperature limits, allowing bacteria to grow before the product reaches a guest.

Who or what is affected: Guests, production staff and the owner

Causes

Busy peaks, cooling large batches of custard and cooler doors left open.

Consequences

Food poisoning, closure orders, fines and damage to reputation.

Existing controls

  • Staff hold basic food hygiene training and wash hands at set points.
  • Cream, custard and dairy products are stored in a logged cooler.

Control gaps

Readings are taken once a shift and holding times are not displayed at the counter.

Additional controls

  • Prevent: Write cooling and holding times for each product and train staff on them each year.
  • Detect: Check cooler and display temperatures twice a shift and record the readings.
  • Recover: Discard any product held outside its time limit and log the decision.
Likelihood 3 x impact 4 before; 2 x 3 after Owner: Production lead Target: Within 30 days Early warning: Cooler readings above the agreed limit or cooling logs left blank.
H03

Fire, oven, fryer and hot sugar burn hazards

Safety Before 10 After 4

Hot oil, molten sugar, unattended ovens and worn gas fittings can cause burns or a fire that spreads through the kitchen and forces an evacuation.

Who or what is affected: Staff, guests and neighbouring premises

Causes

Hot oil, molten sugar, unattended ovens and worn gas fittings.

Consequences

Burns, fire, evacuation, closure and insurance claims.

Existing controls

  • Ovens and fryers are serviced by a qualified engineer each year.
  • A fire blanket and extinguisher are kept near the fryers.

Control gaps

Drill records are not kept and the gas isolation point is not labelled.

Additional controls

  • Prevent: Keep a written procedure for hot sugar, fryer oil and gas valves, and check it each quarter.
  • Respond: Practise an evacuation and fire drill with staff and record attendance.
Likelihood 2 x impact 5 before; 1 x 4 after Owner: Operations manager Target: Within 45 days Early warning: A gas smell, a fryer thermostat fault or a missed service date.
H04

Staff shortages and fatigue during peak production

People Before 12 After 6

Early starts and heavy custom order peaks leave too few skilled staff, so tired workers make mistakes at the bench, on the line and at the counter.

Who or what is affected: Production and counter staff, guests

Causes

Early starts, weekend custom peaks and reliance on one or two skilled bakers.

Consequences

Production mistakes, injuries, lateness and poor guest service.

Existing controls

  • A weekly rota is posted on Friday.
  • Experienced staff train new starters on the production line.

Control gaps

No cover list exists, and fatigue is not reported until someone is off sick.

Additional controls

  • Prevent: Cap consecutive peak shifts and build a cover list for sick leave.
  • Detect: Review overtime hours and sickness each month with the team.
  • Respond: Reduce the product range on short staffed days and say so on the counter board.
Likelihood 4 x impact 3 before; 3 x 2 after Owner: Front of house manager Target: Within 45 days Early warning: Staff working more than three consecutive peak shifts.
H05

Supplier failure or substitution of key ingredients

Supplier Before 9 After 4

A key supplier fails, recalls a product or changes an ingredient without notice, leaving gaps in the menu or a new allergen entering the kitchen unnoticed.

Who or what is affected: Production staff, guests and suppliers

Causes

A single supplier, product recalls, seasonal price changes and unannounced recipe changes.

Consequences

Menu gaps, new allergens entering the kitchen, cost overruns and late custom orders.

Existing controls

  • Ingredients are bought from named wholesale suppliers with written specifications.
  • Delivery notes are checked against orders at receiving.

Control gaps

Specification changes are not compared with the allergen matrix.

Additional controls

  • Prevent: Hold a second approved source for flour, cocoa, dairy and eggs and review it each quarter.
  • Detect: Check labels and certificates at receiving against the recipe specification for changes.
  • Recover: Agree a menu swap list that keeps allergen controls for each substitute.
Likelihood 3 x impact 3 before; 2 x 2 after Owner: Purchasing lead Target: Within 60 days Early warning: A supplier label or ingredient list that differs from the last delivery.
H06

Payment system outage and cash handling errors

Financial Before 9 After 4

A terminal fault, network drop, unrecorded refund or miscounted cash drawer stops sales or hides money that should have been banked.

Who or what is affected: Counter staff, owners and card customers

Causes

Terminal faults, network drops, refunds given without a record and cash counted by one person.

Consequences

Lost revenue, unexplained shortfalls and disputes with guests or card providers.

Existing controls

  • Card payments use a reputable terminal with chip and PIN.
  • End of day cash is counted by two people and recorded.

Control gaps

Refund reviews are not done and the paper backup routine is not practised.

Additional controls

  • Detect: Reconcile till totals and card settlements each day and investigate gaps above a set amount.
  • Respond: Switch to cash only sales with a paper order book during an outage and log each sale.
  • Prevent: Restrict refunds and voids to a manager login and review them weekly.
Likelihood 3 x impact 3 before; 2 x 2 after Owner: Operations manager Target: Within 30 days Early warning: Unexplained till differences or more than a set number of refunds in one shift.
H07

Privacy breach of custom order and guest contact details

Technology and data Before 6 After 4

Order sheets, shared spreadsheets or phone messages holding guest names, phone numbers and addresses are seen or copied by people who should not have them.

Who or what is affected: Guests, staff and celebration hosts

Causes

Shared spreadsheets, messages left on personal phones and unlocked screens.

Consequences

Guest harm, privacy complaints, legal duties and lost bookings.

Existing controls

  • Order forms collect only a name, phone number and delivery date.
  • Paper order sheets are kept in a locked drawer and shredded after collection.

Control gaps

No retention period is set for old order records.

Additional controls

  • Prevent: Limit access to the order system to named staff and remove accounts when people leave.
  • Detect: Review the order system access list each quarter and record the result.
  • Respond: Tell affected guests and the data protection lead if a list is lost or shared.
Likelihood 3 x impact 2 before; 2 x 2 after Owner: Operations manager Target: Within 60 days Early warning: An order list found outside the secure system or shared by message.
H08

Custom order errors and inaccessible service

Reputational Before 16 After 6

Verbal orders, unclear design photos and busy counters lead to wrong sizes, flavours or delivery times, while counters, signs and seating are hard for some guests to use.

Who or what is affected: Guests including those with access needs, counter staff and owners

Causes

Verbal orders, unclear design photos, busy counters and no record of access needs.

Consequences

Refunds, wasted product, poor reviews and loss of repeat custom.

Existing controls

  • Custom orders are checked against a written order sheet before baking.
  • Counter staff read back the order and delivery date to the guest.

Control gaps

Feedback is informal, and accessibility needs are not recorded at booking.

Additional controls

  • Prevent: Add a confirmation step for design, size, delivery time and allergy needs before a deposit is taken, and keep counter signs in large print.
  • Detect: Collect short guest feedback on each custom order and review it weekly.
  • Respond: Offer a remake or refund within a set policy and record the cause of each complaint.
Likelihood 4 x impact 4 before; 2 x 3 after Owner: Front of house manager Target: Within 60 days Early warning: Two or more complaints about the same product type in one month.

Rating method and evaluation

Each risk is rated on two five-point scales. Likelihood runs from Rare to Almost certain, and impact runs from Insignificant to Catastrophic. Multiplying the two gives a score from 1 to 25, which falls into one of four bands: Low from 1 to 4, Medium from 5 to 9, High from 10 to 16 and Critical from 17 to 25. The score is a guide for ordering work, not a measurement. Inherent risk is the score before any controls, and residual risk is the score after the existing and additional controls. Impact considers guest harm first, then product loss, staff injury, money, time to recover and damage to trust. Food safety and allergen risks are never rated down only because they have not yet happened. Anything still High needs senior attention and a dated plan, anything Medium needs routine controls with a named owner, and anything Low is accepted and watched. Staff who make the product should challenge the ratings, and any rating is reviewed when an indicator reaches its escalation threshold or when a new product or piece of equipment is added.

Likelihood, impact and rating bands

Likelihood

  • 5 Almost certain: Expected to happen in most circumstances.
  • 4 Likely: Will probably happen in many circumstances.
  • 3 Possible: Could happen at some time.
  • 2 Unlikely: Not expected, but it could happen.
  • 1 Rare: Only in exceptional circumstances.

Impact

  • 1 Insignificant: No lasting effect. Handled within routine work.
  • 2 Minor: Small effect that is quickly corrected.
  • 3 Moderate: Noticeable effect that needs managed effort to correct.
  • 4 Major: Serious effect on people, delivery or reputation.
  • 5 Catastrophic: Severe or lasting effect that threatens the whole activity.

Bands (likelihood x impact)

  • Low (1 to 4): Accept and monitor.
  • Medium (5 to 9): Manage with routine controls.
  • High (10 to 16): Senior attention and a treatment plan.
  • Critical (17 to 25): Act first. Do not proceed until reduced.

Monitoring, escalation and review

Review this assessment every 6 months, and sooner when an indicator below reaches its threshold.

Early-warning indicators and escalation thresholds
Indicator to watchEscalate when
Batches released without a completed allergen check or with an unlabelled item.Escalate to the head baker at once and hold the batch from sale until the check is complete. Repeated cases go to the owner.
Cold storage readings above the agreed limit for more than 30 minutes.Escalate to the production lead immediately, move stock to the backup unit, and inform the owner if product is discarded.
Staff working more than three consecutive peak shifts or reporting fatigue.Escalate to the front of house manager within the shift, and to the owner if the pattern continues for a week.
Custom orders with missing allergy, delivery or contact details at confirmation.Escalate to the operations manager before the order is baked, and hold the order until the details are confirmed.
Supplier changes to ingredient specifications or bank details without written confirmation.Escalate to the purchasing lead at once and pause the order until the change is confirmed through a known contact.

Contingency arrangements

If a guest reports a suspected allergic reaction or illness, staff stop service of the item, call emergency services where needed, keep the product and batch record, and inform the head baker and owner at once. For a fire or gas smell, staff raise the alarm, shut off the fuel supply if safe, evacuate and call the fire service, with no one returning until cleared. If the cooler fails, stock is moved to a checked backup unit and the temperature history is recorded. Payment or booking system outages move to cash only sales and a paper order book, with guest data kept under the same privacy rules. Specialist advice is sought for any incident that involves illness or regulators.

Prioritized action plan

  1. Introduce a labelled allergen matrix checked at every batch, owner head baker, within 30 days.
  2. Set up a cold storage temperature log with alarms and a backup unit plan, owner production lead, within 30 days.
  3. Publish a rota rule limiting consecutive peak shifts and a cover list for sick leave, owner front of house manager, within 45 days.
  4. Verify supplier specification changes and keep a second source for key ingredients, owner purchasing lead, within 60 days.
  5. Confirm custom order data is kept only as long as needed and test the payment outage routine, owner operations manager, within 60 days.

Conclusion

Safe bakery and dessert work depends on a few steady habits: labelled allergen checks at every batch, logged cold storage, fair shift patterns, verified supplier changes and clear custom order records. The highest scores sit with allergen cross contact, hygiene and staffing fatigue, and each has actions that bring the residual score down. Treat the register as a living record, review it on the stated cycle, and seek qualified advice for any real food safety, fire, privacy or legal question.

Assumptions and limitations

Assumptions

  • Jurisdiction and food safety rules are not specified, so legal duties are described in general terms only and must be checked locally.
  • The premises hold a written food handling process and allergen list, and staff have basic food hygiene training.
  • Custom orders are taken through one online form and a counter terminal run by a third party payment provider.
  • Ingredients are bought from a small number of named wholesale suppliers with written specifications.

Limitations

  • The scores are examples for learning and do not describe any real bakery, customer or incident.
  • Food safety, allergen, fire and privacy rules differ by place and change over time, so specialist review is needed.
  • This is educational content and does not replace a formal site-specific risk assessment, allergen review or licensed advice.

Related frameworks to study

  • Hazard analysis and critical control point principles
  • Allergen management plan approach
  • Hierarchy of controls
  • Three lines model of risk ownership
  • Privacy by design principles

Hospitality Risk Assessment

China, India, United States, Indonesia, Pakistan, Nigeria, Brazil, Bangladesh, Russia, Japan, Mexico, Philippines, Vietnam, Egypt, Turkey, Germany, United Kingdom, France, Italy, Canada, South Korea, Australia, Spain.

For Learning Reference Only: This assessment demonstrates how risk assessment principles are applied in a practical setting, providing a useful reference for learning and understanding. Actual assessments may be adapted to suit specific site conditions and circumstances.

Keep learning

Study the subject behind this assessment.

Bakery, Dessert and Confectionery Operations course Read the best practices for this course

More Hospitality risk assessments

Hourly Active: 39,047 Learners