HACCP Plan development is one of the most effective ways to prevent food safety problems before they occur. Preventing hazards is far easier than correcting them after unsafe food has been prepared, sold or served.
Quick Overview
This guide explains how to create, implement and maintain an effective HACCP Plan to manage food safety risks before they reach customers. It covers the purpose of HACCP, the key requirements, the HACCP plan steps in order, and how businesses can apply the system in real food operations.
This guide covers:
✅ What a HACCP Plan means and how it supports effective food safety management
✅ The HACCP plan steps in order and why each stage is important
✅ The five preliminary tasks and seven HACCP principles explained with practical examples
✅ How hazards, Critical Control Points (CCPs), critical limits and monitoring procedures work together
✅ HACCP plan requirements, documentation, verification and record-keeping practices
✅ HACCP plan templates, restaurant applications, review processes and UK food safety considerations
The purpose of a HACCP Plan is to identify significant food safety hazards in advance, establish controls at the most critical stages of the process, and ensure staff understand what to monitor and the actions to take if a control measure fails.
HACCP applies throughout the food chain, from receiving ingredients and storing stock to food preparation, cooking, cooling, reheating, packaging and service. For a small café, the system may be relatively straightforward. However, a food manufacturer, care-home kitchen or business using more complex processes may require a more detailed HACCP study supported by technical evidence and documented procedures.
This guide explains how to create a HACCP Plan step by step. It covers the five preliminary tasks, the seven HACCP principles, an illustrative restaurant example, a practical template, and the process for reviewing and maintaining the completed HACCP Plan to help support consistent food safety management.
What is the HACCP Plan? A HACCP Plan is a documented system for identifying food safety hazards and controlling them before food reaches the customer.
The HACCP plan meaning becomes clearer when the term is broken down. HACCP stands for Hazard Analysis and Critical Control Point:
A HACCP Plan records the control measures, critical limits, monitoring procedures, corrective actions, verification activities and records needed to manage those hazards effectively.
A HACCP Plan is based on prevention. Rather than relying mainly on testing the finished product, it evaluates each stage of the process to identify where food safety can be controlled most effectively. For example, a business preparing raw chicken should not wait until the meal is served to address the risk of bacterial contamination. Instead, it should control supplier approval, refrigerated storage, cross-contamination and cooking temperatures throughout production.
A HACCP Plan normally forms part of a broader food safety management system. While the HACCP Plan focuses on significant hazards and critical control points, the wider system includes everyday food safety procedures such as cleaning, handwashing, pest management, allergen control, equipment maintenance and staff training.
These supporting procedures are commonly known as prerequisite programmes (PRPs) or good hygiene practices (GHPs). They provide the essential foundation on which HACCP operates. A business cannot compensate for poor cleaning, damaged equipment or unsafe staff practices simply by creating a detailed CCP table.
A HACCP Plan must also be specific to the individual business. A generic template can provide useful guidance, but it cannot accurately reflect a business's premises, menu, equipment, suppliers, customer base or day-to-day operating procedures.
The core HACCP Plan requirements are based on the seven internationally recognised HACCP principles. A business must identify significant hazards, determine the relevant Critical Control Points (CCPs), establish critical limits, monitor those limits, take corrective action when necessary, verify that the system is working effectively, and maintain appropriate records.
However, these seven principles are only part of an effective HACCP system. Before developing a HACCP Plan, a business should establish robust prerequisite controls covering areas such as supplier approval, cleaning and sanitation, personal hygiene, temperature control, pest management, allergen management, equipment maintenance and traceability.
The HACCP system also requires a clearly defined scope. The HACCP team should identify which products, processes, premises and production stages are included. For example, a restaurant may use one HACCP Plan for meals prepared and served immediately and a separate process for food that is cooked, cooled, stored and reheated. Likewise, a food manufacturer may group products together only where their ingredients, hazards and production methods are sufficiently similar.
Management commitment is essential to the successful implementation of a HACCP Plan. Staff must have suitable equipment, adequate time to complete monitoring activities and the authority to take corrective action when a critical limit is exceeded. Monitoring records have little value if employees are expected to ignore failed results or complete documentation without carrying out the required checks.
A completed HACCP Plan should normally identify:
Documentation should be proportionate to the size and complexity of the business rather than unnecessarily complicated. A small food business may be able to use an official HACCP-based pack, whereas a technically complex operation may require multiple product-specific HACCP Plans, scientific validation and more detailed monitoring systems.
Ultimately, the purpose of a HACCP Plan is to provide clear, documented evidence of how food safety hazards are identified, controlled and monitored, while demonstrating that appropriate controls are consistently implemented in practice.
People often ask, “What are the 7 steps of the HACCP plan?” The seven HACCP principles are the main control stages used within a food safety system, but an effective HACCP Plan begins with five essential preliminary tasks.
The HACCP plan meaning becomes clearer when these foundations are understood. Before identifying hazards and establishing critical controls, a business must first understand its products, processes, people and operating environment.
The five preliminary tasks are:
These preliminary tasks form the foundation of the HACCP plan steps in order. The fourth and fifth tasks are closely connected because creating and confirming the process flow diagram are both essential for understanding how food actually moves through the operation.
The first step in developing a HACCP Plan is to bring together people who understand the food, the processes and the working environment.
A small restaurant may not require a large committee. Its HACCP team may consist of the owner, head chef and kitchen supervisor. A larger food operation may involve employees from production, quality assurance, engineering, procurement, cleaning, maintenance and distribution.
Collectively, the team should understand ingredients, recipes, equipment, storage methods, processing stages, hygiene controls and customer use. The team should also be capable of identifying microbiological, chemical, physical and allergen hazards.
One person should normally coordinate the HACCP study, but the plan should not be created in isolation without consulting employees who carry out the work. Front-line staff often have practical knowledge of where delays, substitutions, equipment limitations or alternative working methods occur during busy periods.
At this stage, the team should define the scope of the HACCP Plan. For example, it may cover:
A clearly defined scope helps prevent uncertainty about whether activities such as delivery, takeaway packaging, transport, outsourced processes or customer reheating instructions are included.
Where a business does not have sufficient technical knowledge to assess a complex product or process, it should seek competent advice. A generic HACCP template may provide guidance, but it must always be reviewed and adapted to reflect the actual operation.
The HACCP team should then prepare an accurate description of the food or product group covered by the plan.
For a packaged product, the description may include composition, processing methods, packaging details, shelf life, storage requirements and distribution conditions. For a restaurant dish, the description may be shorter but should still identify the key characteristics that influence food safety.
A useful product description may include:
For example, a chicken curry prepared in a restaurant may be described as chilled raw poultry that is prepared and cooked on site, combined with a prepared sauce, served immediately or cooled for later use, refrigerated and reheated before service.
This information is important because an immediate-service route presents different hazards from a process involving cooling, storage and reheating. Each process route must be assessed separately where risks differ.
The product description must be reviewed whenever changes occur. A substituted ingredient may introduce a new allergen risk. A different container size may affect cooling performance. Extending shelf life may change the likelihood of bacterial growth.
The HACCP team must define how the food is expected to be used and who is expected to consume it.
Some products are ready to eat, while others require cooking or reheating before consumption. Food may be supplied directly to customers, delivered to another business or prepared for specific groups such as care-home residents, hospital patients or young children.
Vulnerable consumers require particular consideration because the consequences of foodborne illness can be more severe. The team should assess whether the intended users include older people, pregnant women, young children or individuals with weakened immune systems.
The team should also consider reasonably foreseeable misuse. Customers may store chilled food for longer than recommended, fail to follow reheating instructions or handle products incorrectly after purchase. Although a business cannot control every action after sale, clear labelling and practical instructions can help reduce predictable risks.
The intended-use statement must be based on realistic assumptions. For example, stating that “the customer will cook the product thoroughly” is not a sufficient safety measure unless clear instructions are provided and the cooking process has been designed to make the food safe.
A process flow diagram shows the sequence of activities through which food moves within a business. It provides the structure needed for the later hazard analysis stage of the HACCP Plan.
A simple restaurant process may look like this:
Purchase → delivery → refrigerated storage → preparation → cooking → service
However, many businesses operate multiple process routes. The same food may be served immediately, hot-held, cooled, chilled, reheated or delivered to customers. Each relevant route should be included.
Depending on the operation, the process flow diagram may need to show:
After the diagram has been created, the HACCP team must verify it by checking the process on site. This confirms that the documented process reflects actual working practices.
The team should observe normal production activities and, where possible, busy operating periods. Employees should be asked whether processes differ during evenings, weekends or high-demand periods.
The team should check practical details such as:
The final process flow diagram should represent the actual operation rather than an ideal version of how the business should operate. It should be dated, approved, reviewed regularly and updated whenever significant changes occur.
Understanding these preliminary tasks is essential before applying the HACCP plan requirements and progressing through the recognised HACCP principles that form the complete food safety management system.
The HACCP plan steps in order are:
These seven HACCP plan steps transform the information gathered during the preliminary tasks into a structured food safety control system. They provide the foundation for creating an effective HACCP Plan that identifies hazards, manages risks and demonstrates how food safety controls are maintained.
The HACCP plan first step is to conduct a detailed hazard analysis. The HACCP team should examine every stage shown on the verified process flow diagram and identify the hazards that could reasonably occur.
Food safety hazards are generally considered under four main categories:
Microbiological hazards include harmful bacteria, viruses, parasites, moulds and microbial toxins. Examples include Salmonella associated with raw poultry or bacterial growth caused by storing food at unsuitable temperatures for extended periods.
Chemical hazards may include cleaning chemicals, pesticides, excessive use of additives, naturally occurring toxins or contamination from equipment and packaging materials.
Physical hazards include unwanted objects such as metal, glass, stones, hard plastic or fragments from damaged utensils and equipment.
Allergen hazards include allergens missing from customer information or unintentionally transferred to another product through cross-contact.
The HACCP team should describe hazards accurately. Instead of recording only “foreign object”, the plan should identify a specific risk, such as “metal fragment from a damaged slicing blade”. This makes the source of the hazard and the required control measure easier to understand.
Not every possible hazard will require a HACCP control. The team should assess the likelihood of occurrence and the potential severity of the consequences. Factors such as supplier controls, food type, processing conditions, previous incidents and the intended consumer group should be considered.
For each significant hazard, the team should identify suitable control measures. These may include approved suppliers, separation of raw and ready-to-eat foods, refrigeration, sieving, validated cooking processes or accurate allergen information.
Some hazards may be controlled through prerequisite programmes, such as cleaning and hygiene procedures. Others may require further assessment as possible Critical Control Points (CCPs). The reason for each decision should be documented so that the HACCP Plan can be understood and reviewed effectively.
A Critical Control Point (CCP) is a stage where control is essential to prevent, eliminate or reduce a significant hazard to an acceptable level.
Cooking raw poultry is a common HACCP example. If the cooking stage fails, harmful microorganisms may survive, and there may be no later step capable of making the food safe.
Not every important food safety activity is a CCP. Cleaning, personal hygiene, pest control and staff training are essential controls, but they are generally managed through prerequisite programmes rather than being classified as individual CCPs.
A decision tree can help the HACCP team consider questions such as:
The decision tree supports professional judgement but does not replace food safety knowledge and experience. Classifying every stage as a CCP can make the system unnecessarily complicated and reduce focus on the controls that require the greatest attention.
If a significant hazard has been identified but cannot be adequately controlled at any stage, the business may need to modify the product, process or method of preparation.
A critical limit defines the boundary between acceptable and unacceptable control at a CCP.
The limit should be measurable or clearly observable. Depending on the process, a critical limit may relate to:
An instruction such as “cook properly” is unsuitable because employees may interpret it differently. A HACCP Plan should define limits that allow staff to determine whether a process remains under control.
Critical limits must have a reliable foundation. They may be based on legislation, official guidance, scientific evidence, recognised industry guidance or a properly conducted validation study.
The selected limit must also reflect the actual food product and equipment being used. A time and temperature combination suitable for one recipe cannot automatically be applied to a different product, portion size or cooking method.
Many businesses establish operational targets that are stricter than the critical limit. This provides an additional safety margin and allows staff to take action before control is lost.
Monitoring is the planned observation or measurement of a CCP to confirm that it remains within the established critical limit.
A monitoring procedure should clearly explain:
For example, a HACCP Plan for restaurant operations may require a chef to use a clean, calibrated probe thermometer to check the internal temperature of cooked chicken before service.
Monitoring frequency must be appropriate for the risk. A weekly check would not provide sufficient control for a cooking process that occurs several times each day.
Employees should complete records at the time checks are performed. Completing monitoring sheets from memory at the end of a shift weakens the reliability of the evidence and prevents immediate action when problems occur.
Monitoring equipment, including thermometers, must be suitable, maintained and checked according to the business’s procedures.
Corrective actions define what staff must do when monitoring shows that a critical limit has not been achieved.
The response should address two areas:
For example, if a batch of chicken does not meet the required cooking temperature, the corrective action may allow further cooking and retesting where this can be completed safely. If control cannot be achieved or food safety is uncertain, the product should be isolated and disposed of appropriately.
The business should also investigate the cause of the failure. Possible causes may include overloaded equipment, incorrect settings, inadequate procedures or inaccurate measuring equipment.
Corrective-action records should include:
Repeated failures indicate that the HACCP system may need improvement. Correcting individual incidents without addressing underlying causes does not provide effective long-term control.
Verification confirms that the HACCP plan system is implemented correctly and continues to work as intended.
Verification is different from monitoring. Monitoring checks specific CCPs during food production, while verification evaluates whether the overall HACCP Plan, procedures and records remain effective.
Verification activities may include:
Testing of products or the environment may support verification where appropriate, but testing should not replace effective preventive controls.
Validation and verification are closely connected but have different purposes. Validation provides evidence that a control measure and critical limit are capable of controlling a hazard. Verification confirms that the validated controls are being applied correctly in daily operations.
For example, a business may validate a cooking limit using suitable technical evidence. It then verifies the process by reviewing temperature records, observing staff practices and checking thermometer accuracy.
Documentation demonstrates what the business planned, what employees checked and how food safety issues were managed.
A suitable HACCP plan template or HACCP plan format may include:
Records may be maintained electronically or on paper. The system should be practical for employees to complete while providing reliable evidence that controls have been followed.
Documentation should be proportionate to the size and complexity of the operation. A small café may require a simple HACCP document, while a larger manufacturer may need detailed product-specific records and supporting technical evidence.
A regular HACCP Plan review is essential to ensure the system remains accurate when changes occur, such as new equipment, updated menus, different suppliers, revised processes or changes in customer groups.
A well-designed HACCP Plan example should demonstrate not only the identified hazards and controls but also how the business applies, monitors and improves its food safety system in practice.
The following simplified HACCP Plan example covers part of a restaurant’s cooked-chicken process. It is intended to demonstrate the structure and decision-making process of a HACCP system rather than provide universal limits that apply to every business.
| Process stage | Hazard and control | CCP decision | Monitoring | Corrective action |
| Receiving raw chicken | Contamination or bacterial growth controlled through approved suppliers, suitable packaging and delivery checks | Usually managed through prerequisite controls | Check condition, date and temperature where required | Reject unsuitable deliveries and record the reason |
| Refrigerated storage | Growth of harmful microorganisms controlled through refrigeration and stock rotation | Depends on the outcome of the hazard analysis | Check storage conditions at defined intervals | Restore suitable storage conditions, assess exposure time and discard food if safety cannot be confirmed |
| Preparation | Cross-contamination controlled through separation, handwashing and cleaned equipment | Usually managed through prerequisite programmes | Supervisor observation and hygiene checks | Stop work, clean and disinfect surfaces, replace contaminated utensils and assess affected food |
| Cooking | Survival of harmful microorganisms | Commonly a CCP | Measure each batch against the validated cooking limit | Continue cooking and retest where safe; otherwise isolate or discard the food |
| Hot holding | Bacterial growth caused by inadequate temperature control | May be a CCP depending on the process | Check temperatures at established intervals | Restore control, assess time and temperature exposure, and discard food if safety cannot be demonstrated |
A complete HACCP Plan would also address additional areas such as cooling, reheating, allergen controls, cleaning procedures, service practices, staff responsibilities and verification activities.
A practical HACCP plan template should begin with clear document-control information. This may include the business name, site details, scope of the study, products covered, HACCP team members, document version number, approval date and planned review date.
The main hazard-analysis and control table within the HACCP plan format should include headings such as:
A suitable template should also include a change log showing what was amended, why the change was required, who approved the update and when affected staff were informed.
Supporting documents may include supplier specifications, equipment instructions, calibration records, technical guidance and validation evidence.
A template helps provide consistency, but it cannot complete the hazard analysis automatically. The HACCP team must adapt the document to reflect the actual ingredients, preparation methods, premises, equipment and customer groups involved.
A HACCP plan for restaurant operations should reflect the menu, kitchen layout and different routes food follows from delivery to service.
Food prepared and served immediately may involve different risks from food that is cooked, cooled, refrigerated and reheated. Additional processes such as buffets, takeaway delivery, off-site catering, sous-vide cooking and vacuum packaging may require further hazard assessment.
Restaurants should give particular attention to:
For example, replacing a sauce, garnish or ingredient may introduce an allergen that is not included in existing customer information.
For many smaller catering businesses, an official HACCP-based system may be more practical than creating a highly complex manufacturing-style document. Businesses in England and Wales may use resources such as Safer Food, Better Business, while Northern Irish caterers may refer to Safe Catering and Scottish businesses may use CookSafe.
However, these resources must still be adapted to the individual business. Using a blank document does not create an effective food safety system. Staff must understand the procedures, complete required monitoring records and update the HACCP Plan when menus, equipment or working practices change.
The plan must also remain practical during busy service periods. Monitoring forms should be easy to access, suitable equipment such as calibrated thermometers should be available, and responsibilities should be clearly assigned to specific roles.
Food safety training can help employees understand HACCP principles, including hazard control, cross-contamination prevention and allergen management.
When choosing a training course, learners should check the course content, assessment method, certificate issuer, accreditation status and suitability for their specific role. A training course can improve knowledge and awareness, but it does not replace practical competence, site-specific hazard analysis or the food business operator’s responsibility to maintain an effective HACCP system.
A well-trained team is an important part of successful HACCP implementation because employees need to understand why controls are required and how to respond when problems occur.
A HACCP plan review should take place at planned intervals and whenever significant changes occur that could affect food safety.
Common review triggers include:
A HACCP Plan review should involve more than simply reading the existing document. The HACCP team should revisit the process, observe working practices, examine monitoring records and confirm that the flow diagram still represents actual operations.
Repeated deviations require particular attention because they may indicate that a critical limit is unclear, equipment is unreliable, staff require additional training or the process itself needs improvement.
The review should always be recorded, even where no changes are necessary. If amendments are made, the business should update the document version, remove outdated forms and ensure affected employees understand the revised procedures.
The HACCP plan steps in order provide a structured approach from the initial hazard analysis through to ongoing review. The HACCP plan first step begins with understanding the hazards within the process, but an effective HACCP system depends on every stage working together.
By following the recognised HACCP plan steps, maintaining suitable records and regularly reviewing the system, businesses can create a practical food safety management approach that reflects their actual operations.
Creating a reliable HACCP Plan requires more than completing a standard form or downloading a generic document. A business must understand its products, map its actual processes, identify significant food safety hazards and determine where control is genuinely critical.
The five preliminary tasks provide the foundation for this assessment. The seven HACCP principles then transform this information into measurable limits, monitoring responsibilities, corrective actions, verification activities and reliable records.
A completed HACCP Plan should be proportionate, practical and specific to the individual operation. It should also remain a living document that is reviewed and updated when changes occur. New ingredients, equipment, suppliers, customer requirements, complaints or process changes may affect existing hazards and control measures.
A HACCP Plan is most effective when employees understand why each control check is important and management takes appropriate action when problems are identified. The purpose is not simply to create paperwork for an inspection, but to maintain effective food safety controls that protect customers consistently.
Following the recognised HACCP plan steps in order, supported by suitable documentation such as a HACCP plan template or appropriate HACCP plan format, helps businesses create a system that reflects their real working environment. Whether developing a HACCP plan for restaurant operations, catering services or food production, the focus should always remain on identifying hazards, controlling risks and maintaining safe practices.
A HACCP Plan is used to identify significant food safety hazards and establish control measures that prevent, eliminate or reduce those hazards to acceptable levels. It also explains how controls will be monitored, verified and recorded.
The seven HACCP plan steps are:
These steps form the recognised structure for developing and maintaining an effective HACCP system.
The HACCP plan first step involves assembling a competent HACCP team and defining the scope of the study. The first formal HACCP principle is conducting a hazard analysis to identify significant food safety risks.
UK food businesses are expected to have food safety management procedures based on HACCP principles. The level of detail required should be proportionate to the size, type and risk level of the operation.
A small café may require a simpler system, while a large manufacturer or high-risk food operation may need a more detailed HACCP approach.
A HACCP plan example from another business may provide useful guidance, but it should not be copied without adaptation. Different ingredients, premises, equipment, suppliers, customers and preparation methods can create different food safety hazards.
A suitable HACCP Plan must reflect the actual operation where food is prepared, stored or served.
No. Not every food safety activity is a Critical Control Point. Many important controls, such as cleaning, personal hygiene and pest management, are usually managed through prerequisite programmes.
A CCP is a specific stage where control is essential to prevent, eliminate or reduce a significant hazard to an acceptable level.
There is no standard number of CCPs required. The hazard analysis should determine which stages require classification as Critical Control Points.
Including unnecessary CCPs can make the system more difficult to manage and may reduce attention on the controls that are genuinely critical.
Monitoring frequency must be sufficient to identify a loss of control before unsafe food reaches customers. The appropriate frequency depends on the process, the type of food and the specific CCP being monitored.
A HACCP plan review should be carried out at planned intervals and whenever relevant changes occur, such as:
Regular review ensures that the HACCP Plan continues to reflect current working practices.
A HACCP course can provide valuable knowledge of food safety principles, but competence also depends on practical experience and understanding of the specific product, process and working environment.
Complex or higher-risk operations may require additional technical expertise, validation evidence or specialist support to ensure the HACCP Plan is suitable and effective.
