HACCP and Critical Control Points

HACCP stands for Hazard Analysis Critical Control Point. It is a preventive system: rather than checking finished food and hoping, it identifies the specific steps where a hazard can be controlled and puts a measurable limit, a monitoring routine, and a planned response at each one. It was developed to keep food safe for NASA astronauts, and the same logic now runs commercial kitchens.

What is a critical control point?

A critical control point, or CCP, is a step in the flow of food where a control measure can be applied to prevent, eliminate, or reduce a food safety hazard to a safe level, and where losing control would likely result in unsafe food.

Two words in that definition do the work. Critical means that if this step fails, nothing later fixes it. Control means you can actually do something measurable here. A step that is important but not the last chance to catch the hazard is a control point, not a critical control point.

Take grilled chicken. Receiving matters, storage matters, prep matters. But cooking is the step where Salmonella is destroyed, and if the chicken leaves the grill undercooked, no later step will make it safe. Cooking is the CCP.

The CCPs that come up most often in food service:

Notice that all of them are time and temperature steps. That is not a coincidence. Temperature and time are the two conditions a kitchen can measure and control, so they are where critical limits can be set.

A common exam distractor names a step that is genuinely good practice but is not the point of control for the hazard in question: washing hands, labeling a container, checking an invoice. Each is a prerequisite program, not a CCP.

The seven principles, in order

The order is testable on its own. Each principle depends on the one before it.

1. Conduct a hazard analysis. Draw a flow diagram for each menu item, from receiving through service, and at each step ask what could go wrong. Consider biological, chemical, and physical hazards, then judge how likely each is and how severe it would be.

2. Determine critical control points. From the hazards you found, identify the steps where control is essential.

3. Establish critical limits. A critical limit is the measurable minimum or maximum value that must be met at a CCP. It must be based on regulation or science, and it must be something a person on the line can actually measure.

A critical limit is not the same as an operating limit, which is a stricter internal standard that gives you a margin. Setting cold holding at 38F when the critical limit is 41F means you find the problem before it becomes a violation.

4. Establish monitoring procedures. Monitoring specifies what is measured, how, when, and who does it. Vague monitoring is the most common weakness in a real plan. "Check temps regularly" is not a procedure. "The line cook probes each batch of chicken with a calibrated thermistor before it leaves the grill and records it on the cook log" is.

5. Identify corrective actions. A corrective action is decided in advance, not improvised. It must address two things: what happens to the food that missed the limit, and what gets fixed so it does not happen again. Discarding the food alone is not a complete corrective action.

6. Verify that the system works. Verification is separate from daily monitoring and should be done by someone other than the person monitoring. It includes calibrating thermometers, reviewing logs, observing staff, and auditing the plan periodically.

7. Establish record keeping and documentation. The hazard analysis, the plan itself, monitoring logs, corrective action records, and verification records all get kept for the period the regulatory authority requires. Records are what prove the system worked, both to an inspector and in an illness investigation.

When is a HACCP plan actually required?

Most operations never need a written HACCP plan. That surprises candidates, and an answer option claiming every operation needs one is a standard trap. What every operation needs is active managerial control. HACCP is one comprehensive way of achieving it.

A plan is generally required when an operation is requesting a variance from a code requirement, or is using a specialized processing method. In practice that means:

• Smoking food as a method of preservation
• Curing food
• Using food additives to preserve food or to render it non-TCS
• Packaging food using reduced oxygen packaging
• Custom processing animals
• Sprouting seeds or beans
• Offering live shellfish from a display tank

In those cases the plan is written, submitted to the regulatory authority for approval, and all records are maintained. The regulatory authority decides.

HACCP also does not stand on its own. It sits on top of prerequisite programs: personal hygiene, supplier selection, cleaning and sanitation, facility and equipment maintenance, training, quality control, standard operating procedures, and pest control. An operation that writes a plan without those underneath it produces a document with correct numbers and no way to execute them.

Food Handler versus Manager: how deep to go

Food Handler candidates need very little of this. Know that HACCP is a food safety system, know roughly what a critical control point is, and know that cooking, cooling, and holding are the steps that matter most. The Food Handler exam concentrates on tasks rather than systems.

Manager candidates need the seven principles by name and in order, the definition of a CCP and a critical limit, the difference between a critical limit and an operating limit, the four elements of a monitoring procedure, the two-part corrective action, who performs verification, what records are kept, when a plan is required, and how HACCP relates to active managerial control. This is heavily weighted material on the Manager exam.

Practice set

1. What is a critical control point? A. Any step in the flow of food B. A step where a control measure can be applied to prevent, eliminate, or reduce a hazard to a safe level C. The temperature at which bacteria die D. The point where an inspector begins an inspection

2. Which of these is most likely to be a CCP for grilled chicken? A. Receiving the invoice B. Washing hands before prep C. Cooking to 165F D. Labeling the container

3. What are the seven HACCP principles in order? A. CCPs, hazard analysis, monitoring, limits, verification, corrective actions, records B. Hazard analysis, CCPs, critical limits, monitoring, corrective actions, verification, record keeping C. Monitoring, hazard analysis, CCPs, records, limits, verification, corrective actions D. Critical limits, CCPs, hazard analysis, monitoring, records, corrective actions, verification

4. A critical limit must be: A. Set by the manufacturer B. Measurable and based on regulation or science C. Stricter than the operating limit D. Reviewed annually by the CDC

5. A cook pulls chicken from the grill at 150F. Which HACCP principle covers what happens next? A. Principle 3, critical limits B. Principle 4, monitoring C. Principle 5, corrective actions D. Principle 7, record keeping

6. A corrective action must address which two things? A. The food and the guest B. The food and the process that failed C. The employee and the inspector D. The temperature and the time

7. Calibrating thermometers and reviewing monitoring logs are examples of: A. Monitoring B. Hazard analysis C. Verification D. Corrective action

8. Which operation most likely needs a written HACCP plan? A. A cafe reheating soup for hot holding B. A deli slicing cooked meats to order C. A restaurant packaging food using reduced oxygen packaging D. A pizzeria holding sauce at 135F

Answers

1. B. Control is essential at that step, and losing it means unsafe food. A is too broad, since most steps are not critical. C describes a critical limit, not a CCP. D is unrelated.

2. C. Cooking is the kill step for Salmonella in poultry. A, B, and D are prerequisite programs and good practice, but they are not the point of control for the pathogen hazard.

3. B. Hazard analysis, CCPs, critical limits, monitoring, corrective actions, verification, record keeping. A, C, and D scramble the sequence.

4. B. It must be measurable and grounded in regulation or science. A is wrong because critical limits come from the code and the science, not the vendor. C reverses the relationship, since the operating limit is the stricter one. D is invented.

5. C. A predetermined corrective action, in this case continuing to cook to 165F, then finding out why it came off early. A is the limit that was missed, B is the check that found it, and D is where it gets written down afterward.

6. B. What to do with the food, and how to stop the failure recurring. A, C, and D each cover only part of one of those, or neither.

7. C. Verification, and it should be done by someone other than the daily monitor. A is the routine measurement itself. B happens before the plan exists. D is the response to a failure.

8. C. Reduced oxygen packaging creates an anaerobic environment suited to Clostridium botulinum, and it is one of the specialized processes that triggers the requirement. A, B, and D are ordinary operations that need active managerial control, not a written HACCP plan.

This hub is study material for candidates preparing for ServSafe certification exams. It is not affiliated with, endorsed by, or connected to the National Restaurant Association Educational Foundation, and it does not certify anyone. Certification is issued only by the exam provider.