Global experts in pest control for the food industry. Call us at 1300 882 911  or Contact us today

Hazard Analysis Critical Control Point (HACCP)


HACCP (Hazard Analysis and Critical Control Point) is a systematic approach to food safety that focuses on preventing contamination from biological, chemical, physical and radiological hazards using common sense application of scientific principles.

It is accepted worldwide as a suitable system for ensuring food safety and is a legal requirement or recommended for food business in most developed countries.

Examples of hazards assessed by an HACCP system include bacteria, viruses, insects, natural toxins, pesticides, drug residues, decomposition, parasites, allergens, unapproved food and colour additives, chemical contaminants from equipment and building maintenance, radioactive compounds, glass, wood, stone, bone, plastic and metal fragments and objects.

What is HACCP?

HACCP is used at all stages of food production, from raw material production, procurement and handling, to manufacturing, distribution and consumption of the finished product.

Each food processing or handling business should develop an HACCP system or equivalents and tailor one to its individual product, processing and distribution conditions.

An HACCP system is reliant on facilities, equipment and good practices already being in place to keep the analysis and resulting control methods manageable.

It also relies on the motivation of managers and employees to reduce risk factors and ensure good practices are regularly maintained. These are called prerequisite programs.

The Origins of HACCP

HACCP was first developed by the Pillsbury Company in the late 1950s for the design and manufacture of food for the US space programme. The concern then was the prevention of crumbs floating around in the space capsules in zero gravity and making food taken into space free of pathogens and toxins.

It was later brought into the general processing of food throughout the supply chain.


A food business should first develop and implement the facilities and procedures that establish basic food safety conditions and provide the foundation for a food safety management system.

The ability to implement an HACCP plan depends on how well these foundations are built and maintained.

A prerequisite programme can include:

  • vendor certification programs;
  • training programs;
  • allergen management;
  • buyer specifications;
  • recipe/process instructions;
  • first-in-first-out (FIFO) procedures;
  • standard operating procedures (SOPs) to protect products from contamination by biological, chemical and physical food safety hazards and control bacterial growth;
  • standard operating procedures for maintaining equipment, such as:
    • food contact utensils and surfaces are clean, hygienic and maintained in good condition;
    • devices and equipment are routinely checked, maintained and calibrated;
    • staff toilet and hygiene facilities are suitable and maintained.

Business advantages of HACCP

Implementation of HACCP benefits both the consumer and the business processing or preparing food. The FDA lists the following advantages for businesses:

  • reduction in product loss;
  • increase in product quality;
  • better control of product inventory;
  • consistency in product preparation;
  • increase in profit; and
  • increase in employee awareness and participation in food safety.

Adherence to HACCP principles also opens new markets for businesses in supplying companies requiring high quality products and in international trade where compliance with internationally recognised standards is required.

Application of HACCP

There is no single correct application of HACCP and it is recognised that it should be flexible to apply to different types and size of business.

In the US, use of the system is voluntary for retail and food service businesses and adaptable to the size of the business, though an equivalent food safety management system is expected to be in place.

The Malaysian Certification Scheme for Hazard Analysis and Critical Control Point system was developed to provide a uniform certification scheme for HACCP system in food industries. The scheme consists of certification and surveillance activities of the HACCP system and provides formal recognition to food premises that have effectively implemented the HACCP system. With the introduction of the scheme, the Ministry of Health (MOH) hopes to encourage the implementation of HACCP system in food industries in line with global trends in food safety.

But whichever system is used, the ultimate responsibility for food safety resides with the business processing or preparing food.


An HACCP system is applied in a logical sequence with a set of preparation stages:

  1. Assemble the HACCP team. The appropriate knowledge and expertise should be made available by assembling a multidisciplinary team from onsite or offsite sources that can develop an HACCP plan.
  2. Describe the product, including its composition, physical and chemical structure, packaging, durability, storage conditions and distribution methods.
  3. Identify intended use by the end user or consumer.
  4. Construct a flow diagram covering all steps in the processing of a specific product.
  5. Confirm the flow diagram onsite.
  6. List all potential hazards associated with each step, conduct a hazard analysis and consider measures to control the hazards.

Seven principles of HACCP

There are seven principles recognised in an HACCP system:

1. Conduct a hazard analysis

This lists all the hazards that may occur at each step from primary production, processing, manufacture, and distribution until the point of consumption. It requires knowledge of how the people, equipment, methods, and foods affect each other.

It assesses the likely occurrence of hazards and severity of their adverse health effects; a qualitative and/or quantitative evaluation; survival or multiplication of biological hazards; production or persistence in foods of toxins, chemicals or physical agents.

2. Identify critical control points (CCPs)

Identify which steps in the process are needed to ensure food safety and if a control measure is missing modify the process to include a control measure.

3. Establish critical limits for CCPs

Each critical control point must have validated measurable limits that define boundaries to ensure food safety. One CCP can have more than one limit, for example, temperature, moisture level, pH, time.

4. Establish monitoring procedures

Monitoring involves scheduled measurement or observation of a CCP that can detect a process moving outside the critical limits. Ideally it should enable action to be taken before a critical limit is reached. Measurements often have to be rapid therefore physical and chemical measurements are usually preferred.

5. Establish corrective actions

There should be plans for corrective action to be taken for when CCPs are breaching limits and staff should be ready and trained to implement them.

6. Establish verification procedures

Verification procedures confirm that all elements of the systems of hazard control are working effectively.

Verification procedures include: review of the HACCP plan and records; review of deviations and product dispositions; confirmation that CCPs are controlled.

It can also involve checking people and processes are working correctly and that monitoring equipment is working correctly.

7. Establish record-keeping and documentation procedures

An effective HACCP system requires efficient and accurate record keeping and documentation to show that the system is active and effective. This includes the HACCP plan itself and any monitoring, corrective action or calibration records produced in the operation of the HACCP system.

Risk management

It has long been recognised that the management of food safety could be improved by including a risk analysis approach. This uses a science-based analysis of food safety factors and tying the system to public health outcomes.

Risk analysis is established in the Codex Alimentarius and has passed into the EU General Food Law Regulation.

In the US in the more recent Food Safety and Modernization Act (FSMA) requires certain food processing businesses to implement an HACCP system with risk analysis, which the FDA calls Hazard Analysis and Risk-Based Preventive Controls (HARPC).

Codex Alimentarius approach

The objective of applying risk analysis to food safety is the protection of human health. Codex Alimentarius recommends that it is established as an integral part of national food safety systems. Risk analysis should be:

  • applied consistently;
  • open, transparent and documented; and
  • evaluated and reviewed as appropriate in the light of newly generated scientific data.

Risk-analysis methods for food safety have been developed jointly by WHO and FAO and implemented in the Codex Alimentarius for many years. These are used as the basis for food safety standards by food standards bodies.

Three staged structured approach to risk analysis:

1. Risk assessment

The scientific evaluation of known or potential adverse health effects from exposure to foodborne hazards using the following steps:

  • Hazard identification: the identification of known or potential health effects associated with a particular agent.
  • Hazard characterization: qualitative and/or quantitative evaluation of the nature of the adverse effects associated with biological, chemical, and physical agents which may be present in food.
  • Exposure assessment: qualitative and/or quantitative evaluation of the degree of intake likely to occur.
  • Risk characterization: integration of the previous steps into an estimation of the adverse effects likely to occur in a given population, including attendant uncertainties. It includes quantitative and qualitative assessment, as well as an indication of the attendant uncertainties.

2. Risk management

Risk management follows a structured approach to determine and implement the appropriate options. It consists of four components:

  • Preliminary risk management activities. The establishment of a risk profile to provide as much information as possible to guide further action.
  • Evaluation of risk management options. This involves assessing the options for managing a food safety issue taking account of scientific information on risks and other factors. Optimization of the efficiency, effectiveness, technological feasibility and practicality of food control measures at selected points throughout the food-chain is an important goal.
  • Implementation of the risk management decisions. Implementation involves regulatory food safety measures, such as the use of an HACCP system. It is essential to continuously verify the application of food safety measures.
  • Monitoring and review. This consists of gathering and analyzing data to give an overview of food safety and consumer health. Monitoring should identify new food safety problems as they emerge and indicate where redesign of food safety measures is needed to achieve the required public health goals.

3. Risk communication

Communication is an integral part of the risk analysis and all stakeholder groups should be involved from the start to exchange information and opinion and ensure the process, outcomes, significance and limitations are understood.

Stakeholders include risk assessors, risk managers, and other interested parties.

The identification of interest groups and their representatives should comprise a part of an overall risk communication strategy.

  • When the risk analysis process has identified the hazards and decided on and assessed the appropriate risks, then this information should be prepared and disseminated to stakeholders.
  • This will be followed by further discussions with stakeholders, to identify corrections, amendments, and additions as appropriate, and then produce the final risk assessment and risk analysis reports.


Global HACCP Guidelines

Malaysian Certification Schemes for HACCP