The Complete HACCP Guide: What It Is, 7 Principles, 12 Steps and How to Implement It
If you work in the food industry, sooner or later you will encounter HACCP. Whether a customer requires it, you want to export, or you simply understand that food safety is non-negotiable, this article brings together everything you need to know to understand and implement the Hazard Analysis and Critical Control Points system.
This guide consolidates the fundamentals, methodology and practical considerations of HACCP in one place. Where you need to go deeper on a specific topic, you will find links to dedicated articles throughout the text.
1. What Is HACCP?
HACCP (Hazard Analysis and Critical Control Points) is a preventive, systematic approach designed to identify, evaluate and control hazards that may compromise food safety.
Unlike reactive approaches — where the finished product is inspected hoping to catch problems — HACCP focuses on preventing hazards during the production process. It acts before a problem reaches the consumer.
Origin and History
HACCP was born in the 1960s as a result of the collaboration between the Pillsbury Company, the United States Army and NASA. The original goal was to guarantee 100% safe food for astronauts in the space program, where a foodborne illness could jeopardize the entire mission.
In 1993, the Codex Alimentarius Commission (a joint body of FAO and WHO) adopted the HACCP guidelines, establishing them as the international reference for food safety. These guidelines were revised and updated in 2003 and remain the technical basis upon which more comprehensive systems are built.
Where Can HACCP Be Implemented?
HACCP applies across every link in the food chain: primary production, manufacturing, transport, storage, distribution, food service, and retail. Company size does not matter — the principles adapt to the scale and complexity of each operation.
2. HACCP Within the Food Safety Standards Ecosystem
It is important to place HACCP in the broader context of available standards and certification schemes. HACCP does not operate in a vacuum: it is the technical core upon which more complex management systems are built.
| System | Scope | GFSI Recognition | Best For |
|---|---|---|---|
| HACCP | Hazard analysis + control at critical points | ❌ No | Companies starting their food safety journey |
| ISO 22000 | Full management system (HACCP + management + PRPs + continual improvement) | ❌ No (on its own) | Companies seeking a robust management framework |
| FSSC 22000 | ISO 22000 + sector-specific PRPs (ISO 22002-#) + additional requirements | ✅ Yes | Companies requiring GFSI recognition |
For a detailed comparison of these three systems, see Differences Between HACCP, ISO 22000 and FSSC 22000.
The advantage of starting with HACCP is that everything you implement remains valid when migrating to ISO 22000 or FSSC 22000. The 7 HACCP principles are embedded in both standards, so no work is wasted — it is only complemented.
3. Prerequisite Programs: The Foundation Before HACCP
Before thinking about hazard analysis or critical control points, the facility needs functioning Prerequisite Programs (PRPs). PRPs are the basic conditions and activities that maintain a hygienic environment throughout the food chain.
Without adequate PRPs, HACCP simply does not work. It is like trying to build a building without foundations.
Examples of PRPs
- Good Hygiene Practices (GHP): hand washing, proper attire, personnel conduct.
- Pest control: monitoring, physical barriers, corrective actions.
- Cleaning and sanitation: documented programs by area and equipment.
- Water and air control: process water quality monitoring, air filtration in sensitive zones.
- Preventive maintenance: of facilities and equipment to prevent physical contamination.
- Supplier control: evaluation and approval of raw materials and inputs.
- Personnel training: ongoing education in food safety and operating procedures.
- Cross-contamination control: zone separation, product flows, allergen management.
For a deeper dive into this topic, visit our guide on Good Hygiene Practices (GHP) for the Food Industry.
Reference Standards for PRPs
The ISO 22002 standards (formerly ISO/TS 22002) define sector-specific PRPs across the food chain. In 2025, new versions were published, elevating these technical specifications to full international standards. You can review all the details in Updates in the ISO/TS 22002 Prerequisite Programs Series.
4. The 12 Steps of HACCP (5 Preliminary + 7 Principles)
HACCP is implemented following 12 sequential steps. The first 5 are preliminary activities that prepare the necessary information. The last 7 correspond to the HACCP principles themselves.
Preliminary Steps
Step 1: Assemble the HACCP Team
The team should be multidisciplinary: production, quality, maintenance, engineering, and when necessary, external experts. It is not about assigning the task to a single person, but about gathering the knowledge needed to understand every aspect of the process.
Key considerations:
- Define the scope of the study (which product or production line does it cover?).
- Ensure the team has the authority to make decisions.
- Designate a team leader with HACCP training.
Step 2: Describe the Product
Document all relevant information about the finished product:
- Composition and ingredients.
- Physicochemical characteristics (pH, water activity, etc.).
- Applied treatments (pasteurization, sterilization, freezing...).
- Packaging type and materials.
- Storage and distribution conditions.
- Shelf life.
Step 3: Identify the Intended Use
Determine how the product will be used by the end consumer:
- Does it require cooking before consumption?
- Is it intended for vulnerable populations (children, the elderly, immunocompromised individuals)?
- What are the expected consumer handling conditions?
This information is critical because it directly influences the severity of the hazards identified.
Step 4: Construct the Flow Diagram
Build a diagram that represents all stages of the process, from raw material receiving to finished product distribution. It should include:
- Each unit operation (receiving, storage, mixing, cooking, cooling, packaging, etc.).
- Relevant inputs and outputs at each stage (water, additives, packaging materials, by-products).
- Rework or product return points.
Step 5: On-Site Verification of the Flow Diagram
The team must physically walk through the facility and confirm that the diagram matches the actual operation. Office knowledge is not enough: on-site verification reveals steps that are omitted, informal practices, or conditions that were not documented.
The 7 HACCP Principles
Principle 1: Conduct the Hazard Analysis
This is the heart of HACCP. It consists of:
-
Listing all potential hazards associated with each process stage. Hazards are classified into three types:
- Biological: pathogenic bacteria (Salmonella, Listeria, E. coli O157:H7), viruses, parasites.
- Chemical: pesticide residues, undeclared allergens, cleaning agents, heavy metals.
- Physical: metal fragments, glass, plastic, stones, bones.
-
Evaluating each hazard based on likelihood of occurrence and severity of harm to the consumer.
-
Identifying control measures for each significant hazard.
For more on hazard identification and contamination types, see Food Safety: Foodborne Illnesses, Microorganisms and Contamination.
Principle 2: Determine Critical Control Points (CCPs)
A CCP is a process step where a control can be applied that is essential to prevent, eliminate, or reduce a food safety hazard to an acceptable level.
Not every step with a hazard is a CCP. The Codex Alimentarius decision tree helps distinguish between steps controlled by PRPs and those requiring monitoring as CCPs.
Common CCP examples:
- Cooking meat to a minimum internal temperature of 74°C (165°F).
- Metal detection before packaging.
- Milk pasteurization at 72°C (161°F) for 15 seconds.
Principle 3: Establish Critical Limits
For each CCP, critical limits must be defined: measurable values that separate acceptable from unacceptable. These limits must be scientifically validated.
| CCP | Hazard | Critical Limit |
|---|---|---|
| Cooking | Salmonella survival | Internal temperature ≥ 74°C (165°F) |
| Pasteurization | Pathogen survival | 72°C (161°F) for 15 s |
| Metal detector | Physical contamination | Ferrous ≥ 1.5 mm, Non-ferrous ≥ 2.0 mm, Stainless steel ≥ 3.0 mm |
Principle 4: Establish a Monitoring System
Monitoring is the scheduled measurement or observation of a CCP relative to its critical limits. It must answer four questions:
- What is monitored?
- How is it monitored? (method and instrument)
- How often?
- Who is responsible?
Monitoring must generate records that serve as evidence that CCPs are under control.
Principle 5: Establish Corrective Actions
When monitoring indicates a CCP has deviated from its critical limit, predefined corrective actions must be executed that include:
- Immediate correction: bring the process back to control (adjust temperature, reprocess, etc.).
- Affected product disposition: hold, evaluate, and decide (release, reprocess, or destroy).
- Root cause analysis: investigate why the deviation occurred.
- Action to prevent recurrence.
- Documentation of all of the above.
Principle 6: Establish Verification Procedures
Verification confirms that the HACCP system is working as intended. It includes activities such as:
- Review of monitoring records.
- Product sampling and analysis (microbiological, physicochemical).
- Calibration of measuring instruments.
- Internal audits of the HACCP system.
- Validation that critical limits effectively control the hazard.
Principle 7: Establish a Documentation and Record-Keeping System
The entire HACCP system must be documented. Documentation includes:
- The HACCP plan (hazard analysis, CCPs, limits, monitoring, corrective actions).
- Monitoring records for each CCP.
- Corrective action records.
- Verification records.
- Team training records.
Records are the evidence that the system works. Without records, in front of an auditor or regulatory authority, it is as if nothing was done.
For a step-by-step guide to implementing these principles, see How to Develop a HACCP Plan: The 7 Principles Step by Step.
5. Common Mistakes in HACCP Implementation
After years of working with companies on food safety system implementation, these are the mistakes I see most frequently:
Confusing a PRP with a CCP
If a hazard is adequately controlled by a prerequisite program (for example, cleaning and sanitation), it does not need to be a CCP. Identifying too many CCPs dilutes resources and complicates monitoring of the ones that truly matter.
Not Validating Critical Limits
A critical limit that is not backed by scientific evidence, regulations, or validation studies is just a number on paper. Validation must demonstrate that the limit truly controls the hazard.
Documenting for the Sake of Documenting
The HACCP documentation system should be useful, not voluminous. A record that nobody reviews or uses for decision-making is bureaucracy, not food safety. Every document should have a clear purpose.
Skipping On-Site Verification of the Flow Diagram
Step 5 (verifying the diagram on the plant floor) is frequently skipped. The result: hazard analyses based on a process that does not reflect reality.
Not Involving Operational Personnel
The HACCP team cannot consist solely of office staff. Operators know the practical details of the process that rarely appear in written procedures.
6. HACCP as a Starting Point, Not a Destination
HACCP is a solid, proven system, but it is important to understand its limitations. As it is not recognized by the GFSI (Global Food Safety Initiative), it does not satisfy the requirements of many international customers, retail chains, or large-scale food manufacturers.
If your company needs to advance, the natural paths are:
- ISO 22000: incorporates HACCP within a formal management system with a focus on continual improvement and risk management.
- FSSC 22000: adds additional requirements and sector-specific PRPs on top of ISO 22000. It is GFSI recognized.
In both cases, all the work you have done in HACCP remains applicable. There is no wasted effort in starting here.
7. Additional Resources
If you are considering HACCP implementation or want to explore specific topics, here is a recommended learning path:
- What Is HACCP? Definition and Practical Examples — Introduction with applied examples.
- Good Hygiene Practices for the Food Industry — Everything about hygiene PRPs.
- Food Safety: Foodborne Illnesses, Microorganisms and Contamination — Scientific basis for hazard analysis.
- How to Develop a HACCP Plan Step by Step — Practical implementation of the 7 principles.
- Differences Between HACCP, ISO 22000 and FSSC 22000 — To decide your next step.
Explore all content in our Free HACCP Learning Center.
With AdminISO, digitize and centralize your HACCP plan: hazard analysis, CCP monitoring, corrective actions and all documentation in one place. Discover AdminISO for HACCP →