Hazard Analysis Critical Control Point

Food Safety


  1. Introduction
  2. Overview
  3. Global adoption
  4. Benefits
  5. Auditing
  6. Choosing a registrar
  7. Route to registration
  8. Costs
  9. Contributing editor


HACCP, or the Hazard Analysis Critical Control Point system, is a process control system that identifies where food safety hazards may occur in a food production process and puts into place stringent controls to prevent the hazards from occurring. By strictly monitoring and controlling each step of the process, there is less chance for hazards to occur and in this way a food business is able to assure the safety of the food products they produce.

HACCP is used internationally and has been adopted by the joint FAO/WHO Food Standards Programme as the best approach to take to control food borne disease.   The Codex Alimentarius Commission was been created under this Programme to develop food standards, guidelines and related texts, one of which is the Codex Basic Food Hygiene Texts which contain the 7 Codex Alimentarius HACCP Principles, and details how they can be applied through the adoption of a 12 step logic sequence.  Essentially, it is a food safety system consisting of two main components: the pre-requisite programs and the HACCP plan.
HACCP can be applied to all businesses throughout the food chain and forms the basis of a proactive food safety management system.  When effectively implemented, HACCP will control biological, physical, chemical and allergen hazards within a food operation.

Implementing a HACCP plan helps assure regulatory authorities and customers that the food business is taking every reasonable precaution to assure food safety. As a proactive approach to managing food safety, it also helps reduce contamination-related food losses and associated costs, and will protect and enhance brands and private labels.

There is no internationally recognized auditing standard for HACCP and while all seven HACCP principles are included in the ISO 22000 standard, HACCP can be implemented as a separate risk management system, or as part of a certification to ISO 9000.


HACCP is a science based systematic system which identifies specific hazards and measures for their control to ensure the safety of food. HACCP is a tool to assess hazards and establish control systems that focus on prevention rather than relying mainly on end-product testing. Any HACCP system must be capable of accommodating change, such as advances in scientific knowledge about food safety hazards, equipment design, processing procedures or technological developments.

HACCP can be applied throughout the food chain from primary production to final consumption and its implementation should be guided by scientific evidence of risks to human health. As well as enhancing food safety, implementation of HACCP can provide other significant benefits. In addition, the application of HACCP systems can aid inspection by regulatory authorities and promote international trade by increasing confidence in food safety.

The successful application of HACCP requires the full commitment and involvement of management and the work force, along with the implementation of Pre-requisite programmes and HACCP.  A HACCP system splits down into 4 distinct stages:  Design and development of the plan, validation, verification and review.

Before implementing HACCP, food businesses must already be operating to standards of good hygiene practice by having in place appropriate pre-requisites. HACCP can then be used to control steps in the business which are critical in ensuring the preparation of safe food.

Prerequisites include measures to control the following basic environmental operating conditions:

  1. Cleaning and Disinfection
  2. Maintenance
  3. Personnel Hygiene and Training
  4. Pest Control
  5. Plant and Equipment
  6. Premises and Structure
  7. Services (compressed air, ice, steam, ventilation, water etc.)
  8. Storage, Distribution and Transport
  9. Waste Management
  10. Zoning (physical separation of activities to prevent potential food contamination)

Once the Pre-Requisites have been developed and implemented, the Codex 12 step logic sequence can be used to apply the & Codex HACCP  Principles.  The codex approach is to identify significant food safety hazards which may occur in the food process and control them.

The 12 step logic sequence is as follows:

  1. Assemble a HACCP team, with a team leader to lead in designing and implementing HACCP. The team must have a good knowledge of the business. Initially, the team will be required to spend a reasonable amount of time and effort to develop and implement the HACCP system.
  2. Describe the product(s) 
  3. Define the intended end user
  4. Draw up a flow diagram to show each step of your operation.
  5. Validate the flow diagram by walking  through the operation to confirm that the flow diagram is correct and check that it covers all the products produced in the particular process being studied.

Once these steps have been completed enough information will have been gathered to apply the 7 Codex principles:

  1. Identify the hazards - Look at each step (e.g. purchasing, delivery, storage, preparation, thermal processing, chilling etc.) in the food process and identify what can go wrong e.g. Salmonella in a cooked chicken product due to cross contamination with raw meat (microbiological hazard), contamination of uncovered food with detergent (chemical hazard) or a piece of broken glass falling into uncovered food (physical hazard).
  2. Determine the critical control points (CCPs) - Once hazards have been identified the team must ensure that they are adequately controlled. In general, the majority of hazards are controlled by effective prerequisite programmes, i.e. good hygiene practices. A Critical Control Point (commonly referred to as ‘CCP’) is a step in food processing where a control procedure must be applied to prevent a food safety hazard occurring or reduce it to a safe level. It is the last chance to control a hazard in the process. For example, cooking chicken to a minimum core temperature of 70°C for 2 minutes or equivalent (e.g. 75°C instantaneously) will kill Salmonella  and other vegetative pathogens.
  3. Establish critical limit(s) - Set limits to identify when a CCP is out of control e.g. the temperature at the centre of the chicken following cooking must reach a minimum 70°C for 2 minutes, or equivalent (e.g. 75°C instantaneously).
  4. Establish a system to monitor control of the CCP - When CCPs and critical limits have been identified it is important to have a way to monitor and record what is happening at each CCP. Typically, monitoring will involve measuring parameters such as temperature and time. Monitoring should in all cases be simple, clear and easy to use e.g. recording the final cooking temperature and time for cooking chicken.
  5. Establish the corrective action to be taken when monitoring indicates that a particular CCP is not under control  When monitoring indicates that a CCP is not under control, corrective action must be taken (e.g. the temperature of cooked meat in a refrigerator rises to >10°C for over 24 hours due to a technical fault in the refrigerator. The cooked meat is destroyed and the refrigerator is repaired by the manufacturer to maintain new cooked meat supplies at the correct temperature of >5°C).
  6. Establish procedures for verification to confirm the HACCP system is working effectively - The system must be audited regularly and reviewed and whenever changes are made to the operation.  If necessary the system may need updating or correcting.
  7. Establish documentation concerning all procedures and records appropriate to these principles and their application - For the successful implementation of HACCP, appropriate documentation and records must be kept and be readily available. e.g. cooking temperatures, delivery or cleaning records. It is unrealistic to operate HACCP or to demonstrate compliance with the current legislation without providing evidence such as written records. As with HACCP itself, the complexity of the record keeping will very much depend on the nature and complexity of the business. The aim should be to ensure control is maintained without generating excessive paperwork. The application of HACCP is compatible with the implementation of quality management systems, such as the ISO 9000 series, and is the system of choice in the management of food safety within such systems if ISO 22000 has not been adopted.

Is HACCP relevant to your organization?

HACCP can be used by any organization directly or indirectly involved in the food chain and pharmaceutical industry including:

  • Farms, fisheries and dairies
  • Processors of meats, fish and feed
  • Manufacturers of all types of food products
  • Food service providers such as restaurants, fast food chains, hospitals and hotels and mobile caterers
  • Manufacturers of prescription and non-prescription drugs and remedies

Global adoption

Global adoption is difficult to measure as there is no single International HACCP Standard for auditing purposes.


  • Improved food safety
  • Increased business awareness of food risks
  • Greater product and raw ingredient traceability
  • Increased buyer and consumer confidence
  • Consistency in inspection criteria
  • Promotion of internal review of processes
  • Supports business leadership through the direction of resources to safety critical elements of the process
  • Compliance with food law
  • Reduction in complaints
  • Reduced risk of negative publicity
  • Improved responsiveness to problems through devised corrective action


HACCP certification will generally be against the requirements of the Codex Alimentarius Basic Food Hygiene Tests, however this is not an internationally recognized standard for auditing , as in the same way as ISO standards. Therefore depending on country and geographical area, many certification and regulatory bodies will certificate against their own HACCP standard, which generally is based around the Codex HACCP principles. There will however be a requirement for internal auditing of the HACCP system by the organization and an external audit by the certification body.

Choosing a registrar

There are over 1000 certification bodies globally. It is important to select an approved certification body and to ensure they comply with the following criteria:

  • Ensure the company is accredited to ISO/IEC 17021:2006, and the certification body accreditation is issued by a recognised competent body
  • Receive quotations from several certification bodies
  • Do not select the cheapest as their auditing or service may be below standard
  • Ensure the certification body is recognised by your customers and they relevant sector experience for your industry sector

Route to registration

There are various phases to registration:

  1. Pre-audit Assessment
    • Check documentation with your auditor
      Together, you and your Auditor will review your documentation. This will ensure that all documented procedures cover the requirements of the HACCP standard. In some instances this may happen at the initial assessment.
    • Determine date of assessment
      Together with your Assessor you will agree a date for initial assessment.
  2. Initial Assessment
    • An initial assessment will be conducted by your auditor. You will be informed of his recommendation at the closing meeting.
  3. Registration Confirmation
    Following your auditors recommendation, your registration will be confirmed.
    • Certificate Issue
      Your certificate of registration will arrive soon after your registration has been confirmed.
  4. Reassessment
    This will generally take place annually.

Note: The route to registration can vary depending on the certification body chosen.


There are costs to both implement and to maintain your HACCP certification.

Implementation Costs

In terms of costs to implement, if you choose a full do-it-yourself approach, the only real costs will be the time for resources dedicated to the implementation process and in time spent writing documents and training your staff. If you have little experience with HACCP, or have limited internal resources, you might choose to get some outside professional help through a management system consultant.  If you choose to use external help, costs will vary depending on your country, the typical day rate in the United Kingdom will vary between £400 - £1000 plus depending on the consultant.  There are advantages by recruiting a consultant as you are able to guarantee your registration within a given period; however it is essential you research their credentials prior to engaging them.

Certification Costs

Costs of registration are dependent on the size of your organization. Most registrars charge a certain rate per day to be on-site at your facility. This day rate will vary depending on your country, the typical day rate in the United Kingdom will vary between £300 - £800.00 auditor day depending on the registrar. Small companies with less than 20 staff could expect one auditor on site for 1-3 days; Large companies can expect several auditors on site for up to up to 10-15 days.

Other fees include application fees, certificate fees or annual licence fees.

To maintain your certification, the registrar must return annually to audit a portion of your system. These costs will be less than the original visit, since the time spent will be shorter. Once every three years, the registrar returns to audit your entire system.

Contributing editor

Ruth Bell, MSc FIFST
AF Associates – International Food Safety Management Specialists

Established in 1995, AF Associates is a leading provider of Food Safety Management System Consultancy and Auditing to all sectors of the Food Chain. 

The Advisory Team is led by Ruth Bell, a specialist food safety management system practitioner and auditor, who has a wealth of experience in all fields of the food industry, both in the UK and internationally.  Having gained experience from working in the food industry in product development, technical and quality management roles, Ruth’s particular areas of specialism are Food Safety Management Systems based around HACCP, ISO 22000 and private quality assurance schemes.  Ruth has worked on a number of projects helping organizations throughout the food chain to design, develop, implement and verify manageable food safety systems tailored to their needs.  Ruth is well known for her practical quality and HACCP knowledge as a consultant and auditor.

Based in the UK, the Company specializes in providing a comprehensive range of services to assist clients both large and small, nationally and internationally in the development and implementation of robust food safety management systems in line with standards, legislative and customer requirements.

Find a Standard

Find a Consultant