Define Recipe Cost Spreadsheet Masters

01 / CONTEXT

Define the control decision

A restaurant may hold costing drafts, approved recipes, supplier-price updates, yield tests and menu scenarios. Record the authoritative workbook, location, owner, approval date and supported spreadsheet application before applying restrictions.

02 / PROCEDURE

Run the control sequence

1. 01

   Name the recipe-cost owner and authorized approver.

2. 02

   Record workbook, worksheet set, recipe scope and approval date.

3. 03

   Separate supplier-price imports and working scenarios from the master.

4. 04

   Test only with fictional ingredients, prices and yields.

5. 05

   Publish revision, menu-pricing and recovery owners.

03 / EVIDENCE

Preserve proof without personal data

A defensible control record identifies the costing owner, recipe scope, price date, authoritative path, permitted accounts, restriction mode, version ID, formula review, checksum evidence, recovery owner and next review date. It should not contain confidential recipes, live supplier prices, credentials or personal data. Use fictional ingredients, prices and yields during every technical test.

Recheck the arrangement after changes to Windows, spreadsheet software, workbook formulas, costing workflow, storage, Folder Protect, permissions, service accounts or restaurant roles. Confirm both usability and recovery: an authorized operator should read the approved cost master, an unauthorized account should not alter it, and the recovery owner should restore a separately held copy without depending on the protected folder. Preserve unexpected behavior before changing controls.

Keep the claim narrow. Local restrictions may reduce accidental writing, deletion or access on a tested Windows path, but they do not encrypt data, establish recipe accuracy, food-safety compliance or menu-price authorization, administer identities, create culinary, allergen or costing-approval evidence, provide version history or replace backup. Escalate those requirements to the platform and accountable owner designed to meet them.

Ask a second operator to follow the written procedure without verbal help. Record whether that person can identify the approved cost master, create a working copy, recognize the version ID, interpret denied access and find the recovery owner. This usability check reveals ambiguous paths, hidden service-account dependencies and undocumented knowledge before a spreadsheet, costing workflow, storage or staff change. Correct the procedure, repeat the test with fabricated data and retain only minimal evidence.

04 / BOUNDARY

State what the control cannot prove

A protected workbook does not establish recipe accuracy, food safety, allergen compliance, correct ingredient pricing, yield validity or menu-price approval.

Validate the exact Windows account, spreadsheet application, costing workflow, storage path and current product release. If encryption, recipe approval, food-safety control, immutable history, identity governance or regulated retention are required, select systems designed for those jobs rather than broadening a desktop restriction claim.

05 / SOURCES

Primary references

• FDA: Food safety guidance
• NIST SP 800-53 Rev. 5

References support specific controls and do not imply endorsement.