Food Safety Management Systems
Hazard Analysis and Critical Control Points (HACCP)
HACCP is a systematic approach to identifying, evaluating, and controlling food safety hazards throughout the production process. Rather than relying on testing the final product and hoping nothing went wrong, HACCP is proactive: it targets potential hazards at each step before they become a problem.
- Consists of seven principles that guide the development and implementation of an HACCP plan
- Widely recognized and adopted by the food industry worldwide, including by the Codex Alimentarius Commission, the FDA, and the USDA
- Requires a thorough understanding of the entire food production process and the specific hazards associated with each step
Good Manufacturing Practices (GMPs) and ISO 22000
GMPs are a set of guidelines that outline the basic operational and environmental conditions required for producing safe food. Think of them as the baseline rules every food facility needs to follow before layering on more advanced systems like HACCP.
GMPs cover areas such as:
- Personnel hygiene (hand washing, protective clothing, illness policies)
- Facility design (sanitary layout, adequate lighting, ventilation)
- Equipment maintenance (cleaning schedules, calibration)
- Pest control (monitoring, exclusion methods, documentation)
ISO 22000 is an international standard that specifies requirements for a food safety management system. It incorporates the principles of both HACCP and GMPs, but adds requirements for management responsibility, communication across the supply chain, and continual improvement. If GMPs are the foundation and HACCP is the framework, ISO 22000 wraps them together into a single, auditable management system.
HACCP Principles
Risk Assessment and Critical Control Points
The first two of the seven HACCP principles are conducting a hazard analysis and identifying critical control points (CCPs).
Principle 1: Hazard Analysis. You examine every step of the food production process and identify potential hazards in three categories:
- Biological (e.g., pathogenic bacteria like Salmonella or Listeria)
- Chemical (e.g., allergens, pesticide residues, cleaning agents)
- Physical (e.g., metal fragments, glass, bone)
For each hazard, you assess how likely it is to occur and how severe the consequences would be.
Principle 2: Identify CCPs. A critical control point is a step in the process where a control measure can be applied to prevent, eliminate, or reduce a hazard to an acceptable level. Common examples include cooking (kills pathogens), metal detection (catches physical contaminants), and pH adjustment (inhibits microbial growth). Not every step is a CCP. A decision tree is often used to determine which steps truly qualify.
Monitoring, Corrective Actions, and Verification
The remaining five principles build the system that keeps CCPs under control and confirms everything is working.
Principle 3: Establish Critical Limits. Each CCP needs a measurable boundary that separates safe from unsafe. For example, a cooking step might have a critical limit of 74°C internal temperature for poultry.
Principle 4: Establish Monitoring Procedures. You need a plan for how and how often you'll check that each CCP stays within its critical limits. This could mean scheduled temperature checks, pH measurements, or visual inspections.
Principle 5: Establish Corrective Actions. These are predetermined steps taken when monitoring shows a CCP has drifted out of control. Examples include reprocessing the product, adjusting equipment, or disposing of affected product. The key word is predetermined: you decide what to do before a problem happens, not in the moment.
Principle 6: Verification. Verification activities confirm that the entire HACCP system is working as intended. This includes record review, product testing, equipment calibration checks, and internal audits. Verification is different from monitoring: monitoring watches individual CCPs in real time, while verification steps back and evaluates whether the overall system is effective.
Principle 7: Record Keeping. Covered in the next section.
Record Keeping
Documentation and Food Safety Standards
Accurate, complete record keeping is what ties the entire food safety management system together. Without documentation, you can't prove your controls are working, and regulators can't verify compliance.
HACCP-specific records include:
- The written hazard analysis and CCP determination
- Critical limits for each CCP
- Monitoring logs (e.g., temperature logs, pH readings)
- Corrective action reports
- Verification records (e.g., calibration records, audit results)
Beyond HACCP, facilities also maintain GMP documentation such as sanitation logs, pest control reports, and employee training records.
Regulatory frameworks like the FDA Food Safety Modernization Act (FSMA) and certification programs under the Global Food Safety Initiative (GFSI) often require extensive documentation. Proper records serve three purposes: they demonstrate compliance during inspections and audits, they enable traceability (tracking a product back through the supply chain if something goes wrong), and they support continuous improvement by revealing trends and recurring issues over time.