How to write a HACCP plan from scratch.

I wrote my own HACCP-shaped Preventive Control Plan for my CFIA-licensed (Canadian Food Inspection Agency) mushroom production facility in Brantford, Ontario. The first version was wrong in three or four places I didn't catch until I walked the floor with the plan in my hand. That walk rewrote half the document. This article is the order I'd do it in if I were starting over today, with the time each step actually takes, the deliverable each step produces, and the parts I got wrong the first time.

01Before the first page

What you need before you write a single word.

Most operators searching "how to write a HACCP plan" have already been told by someone — a buyer, an inspector, a co-packer, a local health department — that they need one. The question isn't "is this required." The question is "what does the work actually look like on a Tuesday morning, and how long will it take."

The honest answer: 40 to 80 hours of writing time for a small operation with one to three products, spread across roughly four to eight weeks. On top of that, you need to be trained before you start. A Preventive Controls Qualified Individual (PCQI) course — required if you operate under the U.S. Food Safety Modernization Act (FSMA) — is a 20-hour curriculum from FSPCA (Food Safety Preventive Controls Alliance). A meat-and-poultry HACCP course at Penn State or Cornell runs about 16 classroom hours plus pre-reading. You don't have to have a credential before you start writing, but you do have to know the framework. Don't try to learn HACCP by writing a HACCP plan.

Before you open a blank document, figure out which regulation applies to you. The framework is the same; the language differs.

The 12-step framework comes from Codex Alimentarius CXC 1-1969 (formerly CAC/RCP 1-1969), the international General Principles of Food Hygiene. The same structure appears in the FDA's National Advisory Committee on Microbiological Criteria for Foods (NACMCF) 1997 guidance, the FSIS HACCP guidelines, and the CFIA's PCP guide. Twelve steps everywhere. The first five are preliminary — the prep work. The last seven are the principles that go into the written plan itself. Below is the sequence.

02The 12 steps in order

The framework, one line each.

1. 01

   Assemble the HACCP team

   Pick the people who will write and own the plan. At a small operation this might be you and one other person — Codex and NACMCF both allow it. Document who is on the team and what each person knows.

2. 02

   Describe the product

   One to two pages per product: ingredients, formulation, pH, water activity, shelf life, packaging, distribution conditions, sales channel, labeling.

3. 03

   Identify the intended use and consumers

   Who eats it and how. Vulnerable populations — infants, elderly, immune-compromised — change which hazards matter most.

4. 04

   Construct the process flow diagram

   Every step from receiving raw ingredients to shipping finished product. Boxes, arrows, decision diamonds. One diagram per product or product family.

5. 05

   Verify the flow diagram on-site

   Walk the production floor during normal operation with the diagram in your hand. Fix every step that doesn't match what's actually happening. This is the step operators skip most often and auditors catch most reliably.

6. 06

   Conduct the hazard analysis (Principle 1)

   For each step on the verified diagram, list every biological, chemical, physical, and radiological hazard you can think of. Score severity and likelihood. Decide which are "significant" enough to require a control.

7. 07

   Determine the Critical Control Points (Principle 2)

   Apply the 2023 Codex four-question decision tree to each significant hazard. Most hazards will be controlled by prerequisite programs. The remainder become your CCPs.

8. 08

   Establish critical limits at each CCP (Principle 3)

   The measurable number — temperature, time, pH, water activity — that separates safe from not safe. Backed by a validated scientific source, not invented.

9. 09

   Establish a monitoring procedure (Principle 4)

   What you measure, how you measure it, how often, who does it, what they write down. One procedure per CCP.

10. 10

    Establish corrective actions (Principle 5)

    What happens when the limit is missed — how the product is held, who decides what to do with it, how the root cause is found and fixed. Written before you need it.

11. 11

    Establish verification and validation (Principle 6)

    The activities that prove the plan is working: calibrations, internal audits, record reviews, finished-product testing, annual reassessment.

12. 12

    Establish recordkeeping (Principle 7)

    Which documents are kept, where, for how long, who can access them. The records are the only proof your plan worked.

The rest of this article walks through each step — what it produces, what I got wrong the first time, and what to put on your calendar.

03Step 1

Step 1 — Assemble the HACCP team.

Time: 1 to 2 hours. Deliverable: signed HACCP Team Roster.

The first task in writing the plan is figuring out who is writing it. Codex calls for a team of people "with the specific knowledge and expertise appropriate to the product and process." NACMCF says the same. In a large facility that's a production lead, a QA lead, sanitation, maintenance, and an outside microbiologist or process authority for any thermal or fermentation step. In a small operation it might be you, full stop.

If you're a one-person QA function, Codex and NACMCF both let you build the team out of named external resources. Your team roster would list you as team leader, your training credentials (PCQI cert, HACCP coordinator cert), and the named extension agent or process authority you'll call when you need specialized validation. At my Brantford facility the "team" was me, my production lead, and a process authority at an Ontario food science extension service whose name and contact went on the roster. The roster has to be a real document with signatures, not a verbal arrangement.

The deliverable is a signed page that includes: each team member's name, their role on the team, their relevant training and credentials, and a signature with date. Update it whenever someone leaves or joins. The team leader signs the final plan.

04Step 2

Step 2 — Describe the product.

Time: 3 to 5 hours per product. Deliverable: one to two page product description form per product or product family.

The product description is what an inspector reads first to understand what you make. It has to capture every characteristic of the product that affects food safety. Standard fields:

1. 01

   Product name and product code

   Including any private-label or co-packer names if you sell under different brand names from the same kitchen.

2. 02

   Full formula and ingredients

   Each ingredient with its supplier or supplier category. Include incidental additives (sanitizer rinse, processing aids).

3. 03

   Product characteristics

   pH, water activity (a_w), salt percentage, preservatives, atmosphere (vacuum, modified, regular). These numbers drive your hazard analysis.

4. 04

   Packaging

   Primary container, secondary packaging, atmosphere if applicable, material in contact with food.

5. 05

   Shelf life and storage conditions

   "Keep refrigerated below 4 degrees Celsius (40 degrees Fahrenheit), use within 14 days of pack date." Specific, measurable, written on the label and in the plan.

6. 06

   Distribution channel

   Direct-to-consumer, retail, foodservice, export. A product sold to hospital foodservice has different consumer assumptions than one sold at a farmers market.

7. 07

   Labeling and allergen statement

   The Big 9 allergens (milk, eggs, fish, crustacean shellfish, tree nuts, peanuts, wheat, soybeans, sesame). Canada adds mustard and added sulphites above 10 parts per million.

8. 08

   Special handling instructions

   "Keep refrigerated." "Discard if frozen." "Not for infant feeding." Anything the consumer needs to do.

If you make multiple products with very similar processes and the same hazards, you can group them under one description — a "product family." If the hazards differ in any meaningful way, write separate descriptions and eventually separate plans. The rule of thumb: same flow diagram and same hazard analysis equals same plan. Different flow or different hazards equals different plan.

05Step 3

Step 3 — Identify intended use and consumers.

Time: 1 to 2 hours. Deliverable: one-paragraph intended-use statement appended to each product description.

Short step. The point is to document who eats the food and how, because that determines which hazards matter most. A pasteurized juice sold to hospital foodservice is going to vulnerable consumers — infants, elderly, immune-compromised, pregnant — and the hazard analysis treats Listeria and Cronobacter differently than the same juice sold at a farmers market to a general adult population.

Capture three things: (1) the target consumer (general population, vulnerable subgroup, both), (2) how the food will be consumed (eaten as-is, cooked, reheated), and (3) the worst-case consumer behavior you're assuming ("consumer may not refrigerate after opening," "consumer may not cook to recommended internal temperature"). The last one matters more than people expect — your plan is allowed to assume reasonable consumer handling, but if you know your product is being eaten cold by people who skip the cooking step, you have to plan for that.

06Step 4

Step 4 — Construct the process flow diagram.

Time: 3 to 6 hours per product. Deliverable: one date-stamped, signed flow diagram per product.

The flow diagram is the most important visual in the plan. NACMCF describes it as "a clear, simple outline of the steps involved in the process." Every later step — hazard analysis, CCP determination, monitoring — references the diagram. Get this wrong and the rest of the plan is wrong.

The standard symbols are ANSI X3.5: rectangles for process steps (Receive, Store, Cook, Cool, Package), diamonds for decision points ("temperature at or above 74 degrees Celsius?"), arrows for flow, circles or ovals for start and end, parallelograms for inputs and outputs, parallel lines for rework loops.

What has to be on the diagram:

1. 01

   Every raw material and packaging receiving step

   One arrow per type of incoming material. Include water, ice, air, and any utility that contacts product.

2. 02

   Every storage step with temperature and hold-time

   "Cold storage, 2 to 4 degrees Celsius, up to 14 days." Not "refrigerator." The temperature is part of the diagram.

3. 03

   Every unit operation in order

   Mix, grind, cook, cool, fill, seal, label, case, palletize. Each one is its own box.

4. 04

   Every rework or reprocessing loop

   If a sub-spec batch goes back through any step, draw the arrow. Unmarked rework is a recurring audit finding.

5. 05

   Every cross-contamination opportunity

   Where raw and ready-to-eat product paths cross. Where employees move between zones. Where shared equipment is used for multiple products.

Tools: paper and pencil works. Free digital options include draw.io, Google Drawings, and Lucidchart's free tier. Visio is paid. For my first diagram I used draw.io. The point isn't the tool — it's that the diagram is "simple enough to use for hazard analysis" per Codex. Don't over-engineer it. One page, one product, one direction of flow.

07Step 5

Step 5 — Verify the flow diagram on-site.

Time: 2 to 4 hours. Deliverable: dated, signed on-site verification record.

This is the step I got wrong on my first plan. I drew the diagram from memory, signed off on it, and moved on to the hazard analysis. About a week later, doing an unrelated walkthrough at end of day, I noticed my staff was doing a quick wipe-down between batches that wasn't on the diagram. Then I caught a different intermediate transfer step. Then a third. By the time I finished re-walking the floor on a normal production day with the diagram in hand, the diagram had three missing steps and one step that was running in a different order than I'd drawn it.

Codex is explicit: "The HACCP team should confirm the processing operation against the flow diagram during all stages and hours of operation and amend the flow diagram where appropriate." Walk the line during normal production — not during cleanup, not during downtime, not during a slow Tuesday. Confirm every box. Note every operator shortcut, every undocumented rework, every difference between shifts. Then update the diagram and re-sign it.

In a facility with multiple shifts, verify each shift separately. Operators on night shift often do things in a slightly different order than day shift, or use a piece of equipment that day shift doesn't use, or skip a step that day shift does. That's not laziness — it's the floor optimizing for its own constraints. The plan has to describe what the floor actually does, not what you wish it did. If the night-shift version is wrong and the day-shift version is right, the corrective action is to fix the night shift. If the night-shift version is fine but undocumented, the corrective action is to add it to the diagram.

The deliverable is a signed, dated record stating: who walked the line, when, during which shift and which products, what changes were made to the diagram as a result, and the version number of the updated diagram. Re-verify annually and after any process change.

“

The HACCP team should perform an on-site review of the operation to verify the accuracy and completeness of the flow diagram. Modifications should be made to the flow diagram as necessary and documented.

”

NACMCF, 1997, via the FDA HACCP Principles & Application Guidelines

08Step 6

Step 6 — Conduct the hazard analysis (Principle 1).

Time: 8 to 15 hours. The single biggest block in the plan. Deliverable: Hazard Analysis Worksheet, one row per process step per hazard.

The hazard analysis is the intellectual core of the plan. It's required by 21 CFR §117.130 (FSMA), 21 CFR Part 123 (seafood), 21 CFR Part 120 (juice), 9 CFR §417.2 (meat and poultry), and SFCR Part 5 (Canada). FSMA in particular requires a written hazard analysis "regardless of its outcome" — even if you conclude there are zero significant hazards at every step, you have to write that conclusion down.

For every step on your verified flow diagram, walk through four hazard categories:

1. 01

   Biological hazards

   Pathogens that grow in or contaminate food. The usual suspects: Listeria monocytogenes, Salmonella, E. coli O157:H7, Campylobacter, Cronobacter, Clostridium botulinum, parasites (Trichinella, Anisakis), viruses (Norovirus, Hepatitis A).

2. 02

   Chemical hazards

   Natural toxins (mycotoxins, marine biotoxins), pesticide or drug residues, heavy metals (lead, cadmium), food allergens (the Big 9 plus sesame, plus mustard and sulphites in Canada), sanitizer residue, unapproved additives.

3. 03

   Physical hazards

   Glass, metal fragments, hard plastic, stones, bone fragments. Anything that could cut, choke, or injure.

4. 04

   Radiological hazards

   Added explicitly by FSMA. For most operations the analysis ends in "no significant radiological hazard identified," but you still have to document the conclusion.

For each identified hazard at each step, you evaluate two dimensions per 21 CFR §117.130(b)(1): "the severity of the illness or injury if the hazard were to occur and the probability that the hazard will occur in the absence of preventive controls." That's the 3 by 3 severity-likelihood matrix.

Multiply severity by likelihood for a 1-to-9 score. Most operators use a threshold of 4 or 6 to flag a hazard as "significant" and therefore requiring a control. Below the threshold, document why and move on. Above it, the hazard goes to Step 7 for CCP determination. The 3 by 3 is industry-standard, not regulatory — pick a threshold, document it, and apply it consistently.

The deliverable is a Hazard Analysis Worksheet with four to five columns: Process Step, Hazard Type, Hazard, Significant (Y or N with score), Justification and Control Measure. The FSIS Generic HACCP Models are the canonical format — copy that structure even if you don't make meat. One row per hazard per step. A small operation's worksheet will run 30 to 80 rows.

09Step 7

Step 7 — Determine the Critical Control Points (Principle 2).

Time: 3 to 6 hours. Deliverable: CCP Determination Worksheet using the 2023 Codex decision tree.

A Critical Control Point is "a step at which control can be applied and is essential to prevent or eliminate a food safety hazard or reduce it to an acceptable level" (NACMCF). The key word is essential. If you can control the hazard with a prerequisite program — sanitation, allergen control, supplier verification — it's not a CCP.

The current authoritative tool is the 2023 Codex CCP decision tree, adopted in February 2023 and published in CXC 1-1969 Rev. 2022. The 2023 tree is four questions instead of the older 1997 four-question tree, and it pushes more hazards out of the CCP column into prerequisite programs. Many free templates still use the 1997 tree — be aware which one you're applying.

The 2023 tree, applied to each significant hazard at each process step:

1. 01

   Q1 — Can the significant hazard be controlled to an acceptable level at this step by prerequisite programmes?

   If yes, this step is NOT a CCP — control via prerequisite program (sanitation, allergen labeling, supplier approval). If no, proceed to Q2.

2. 02

   Q2 — Do specific control measures for the identified significant hazard exist at this step?

   If no, modify the step, product, or process to introduce a control measure, then return to Q1. If yes, proceed to Q3.

3. 03

   Q3 — Will a subsequent step prevent or eliminate the identified significant hazard or reduce it to an acceptable level?

   If yes, this step is NOT a CCP — the later step is, and the analysis moves to it. If no, proceed to Q4.

4. 04

   Q4 — Can this step specifically prevent or eliminate the identified significant hazard or reduce it to an acceptable level?

   If yes, this step IS a CCP. If no, modify and return to Q1.

The big practical change from the older tree: new Q1 lets prerequisite-controlled hazards exit the analysis immediately. Hand-washing, sanitation, allergen labeling, glove changes — all things operators used to call CCPs — are prerequisites under the 2023 tree, not CCPs. The word "specifically" in Q2 and Q4 also matters: a step that contributes to control isn't enough; the step has to specifically prevent, eliminate, or reduce the hazard.

The practical result for most small operations: 1 to 3 CCPs total. Not ten. Not fifteen. Common CCPs are a cook step (pathogen kill), a cooling step (preventing toxin production by Clostridium perfringens or Staphylococcus aureus), a pH adjustment step in acidified foods, and metal detection on packaged product. When I worked through the tree on my own plan, the first version had hand-washing flagged as a CCP. Under the 2023 tree it's a prerequisite. The plan got shorter and the CCP table got more focused.

The deliverable is the CCP Determination Worksheet: one row per significant hazard at each step, columns for Q1 through Q4 answers, and a final CCP-or-not decision with the reason. Keep the worksheet in the plan — auditors will trace your logic.

10Step 8

Step 8 — Establish critical limits (Principle 3).

Time: 3 to 6 hours. Deliverable: CCP Summary Table with limit, source, and operating target per CCP.

NACMCF: "A critical limit is the maximum or minimum value to which a biological, chemical or physical parameter must be controlled at a CCP to prevent, eliminate or reduce to an acceptable level the occurrence of a food safety hazard."

Two requirements. First, the limit has to be measurable. Temperature, time, pH, water activity, concentration, weight. "Cook thoroughly" is not a critical limit. "Internal temperature at or above 73.9 degrees Celsius (165 degrees Fahrenheit) held for at least 15 seconds at the geometric center of the largest piece" is. Second, the limit has to come from a validated scientific source: the FDA Food Code, USDA FSIS Compliance Guides, peer-reviewed challenge studies, a letter from a registered process authority. You don't invent the number; you cite it.

Common limits with their sources:

1. 01

   Poultry cooking: 73.9°C (165°F) for 15 seconds

   FDA Food Code §3-401.11(A)(2). USDA FSIS Appendix A gives the time-and-temperature combination table for whole muscle.

2. 02

   Ground beef cooking: 68.3°C (155°F) for 17 seconds

   FDA Food Code §3-401.11(A)(1)(c).

3. 03

   Two-stage cooling: 57°C to 21°C in 2 hours, 21°C to 5°C in next 4 hours

   FDA Food Code §3-501.14. Six hours total. The most-failed log in the Food Code.

4. 04

   Acidified foods: pH ≤ 4.6

   21 CFR Part 114. Process authority validation required.

5. 05

   Shelf-stable dry product: aw ≤ 0.85

   FDA Bad Bug Book threshold for Salmonella growth inhibition.

The mistake most operators make at this step is confusing the safety limit (the regulatory floor — the number you can't drop below) with the operating target (the number you actually aim for on the line). If the Food Code says 73.9 degrees Celsius for poultry, you don't write 73.9 as your operating target — you'd be one tiny variation away from a deviation. Write 75 or 76 as the target and 73.9 as the limit. The operating target keeps you off the limit; the limit keeps you off the violation.

The deliverable is a CCP Summary Table — one row per CCP, columns for hazard controlled, critical limit, source citation, operating target, and tolerance. This table becomes the headline page when an auditor asks "show me the CCPs."

11Step 9

Step 9 — Establish a monitoring procedure (Principle 4).

Time: 3 to 5 hours. Deliverable: monitoring SOP plus blank log form per CCP.

NACMCF defines monitoring as "a planned sequence of observations or measurements to assess whether a CCP is under control and to produce an accurate record." For every CCP, the monitoring procedure has to answer five questions. Use the What / How / When / Who / Records frame:

1. 01

   What is being measured

   The exact parameter — internal temperature, pH, time, water activity. Not "doneness." Not "color." A specific measurement against the critical limit.

2. 02

   How it is being measured

   The instrument and the location. "Internal temperature at the geometric center of the thickest piece using a calibrated Thermapen with a 1.5 mm probe, inserted at least 1 cm." Bluetooth probe integration helps eliminate transcription errors.

3. 03

   When (how often)

   Continuous is ideal for thermal CCPs — a chart recorder or a wirelessly-logging probe. Where continuous isn't possible, the frequency has to be "often enough to catch a deviation before product moves." A once-per-shift check on an 8-hour cook means up to 8 hours of out-of-spec product before you catch it. Build the frequency to your batch size.

4. 04

   Who does it

   Named, trained, signed. The person checking has to know what the limit is and what they're doing if it's missed.

5. 05

   What record is generated

   The form, where it lives, how long it's retained. Time-stamped automatically if possible.

The deliverable is a one-page monitoring SOP per CCP plus the blank log form that matches it. The log form is what shows up at audit, every time.

12Step 10

Step 10 — Establish corrective actions (Principle 5).

Time: 2 to 4 hours. Deliverable: Corrective Action SOP plus blank Corrective Action Form.

When a critical limit is missed, the plan has to specify in advance what happens next. 21 CFR §117.150, 9 CFR §417.3, and 21 CFR §123.7 all require four elements:

1. 01

   Correct the deviation immediately

   Hold the affected product. Divert it from distribution. Decide whether to rework, reprocess, downgrade, or destroy. The decision authority is documented.

2. 02

   Identify the root cause

   Why did the limit get missed? Equipment failure, training gap, supplier change, recipe change, operator shortcut. The root cause goes on the form.

3. 03

   Take action to prevent recurrence

   A procedure, equipment, or training change that fixes the cause. "Re-trained operator" is not enough if the equipment is failing. "Replaced thermocouple, recalibrated, added quarterly preventive maintenance to schedule" is.

4. 04

   Document everything

   Date, time, product code, deviation observed, affected product quantity, disposition decision, root cause, preventive action, names, signatures.

The recurring audit finding here is the corrective action documented without the root cause addressed — same deviation appearing in three consecutive audits because the SOP says "rework," never "replace the thermostat." The form has to force the root cause field, not just the disposition.

The deliverable is a blank Corrective Action Form that has fields for every element above, plus a one-page SOP describing how the form is used. Pre-print a few copies and keep them next to each CCP monitoring station.

13Step 11

Step 11 — Establish verification and validation (Principle 6).

Time: 2 to 4 hours. Deliverable: Verification Schedule.

Verification is one of the most confused terms in HACCP. The plain-language distinction:

NACMCF identifies four verification activities to schedule:

1. 01

   Validation

   The one-time scientific evidence that your critical limits actually control the hazard. Required at initial implementation and after any major change. For a cook step, validation might be citing FSIS Appendix A. For an acidified food, it's a process authority letter. For a novel process, it's a published challenge study.

2. 02

   CCP verification

   The ongoing checks at each CCP: probe calibration (typically monthly to quarterly against an ice bath or NIST-traceable reference), record review (someone other than the person making the log reviews it weekly), targeted product testing.

3. 03

   HACCP-system verification

   Internal audit of the whole plan — usually quarterly or semi-annually. Environmental monitoring swabs for Listeria in ready-to-eat facilities. Complaint trending.

4. 04

   Reassessment

   An annual full review of the plan, required by 21 CFR §117.170 and 9 CFR §417.4, plus a re-review any time something changes: new product, new supplier, new equipment, new packaging, new distribution channel, new hazard information from a recall or outbreak.

The deliverable is a Verification Schedule — a calendar showing which activity runs when, who does it, and what record it produces. The schedule itself is a verification record.

14Step 12

Step 12 — Establish recordkeeping (Principle 7).

Time: 3 to 5 hours setup. Deliverable: records matrix plus 5 to 10 blank log forms.

The plan only counts as a plan if you can produce the records. NACMCF, 21 CFR §117.305, and 9 CFR §417.5 all require:

1. 01

   The signed, dated HACCP plan itself

   Including the hazard analysis worksheet and all supporting documents.

2. 02

   CCP monitoring records

   The day-to-day logs from Step 9.

3. 03

   Corrective action records

   Every deviation, every form filled out.

4. 04

   Verification records

   Calibration logs, internal audit reports, validation studies, environmental monitoring results.

5. 05

   Training records

   Who's been trained on what, when, and by whom.

6. 06

   Supplier documents

   Certificates of analysis, supplier approval files.

Retention varies by regulation. Memorize the table:

The deliverable is a records matrix — a table listing every record the plan generates, where it's stored, the retention period, and who can access it — plus the 5 to 10 blank log forms (monitoring logs for each CCP, corrective action form, calibration log, training log, supplier verification form). Pre-print the forms and stock them at the workstations where they're used. If you go digital, the same logic applies — set up the templates, the storage location, and the retention rules.

15Signatures and reassessment

Signing and reassessing the plan.

Time: 2 to 4 hours for the internal review and sign-off.

The plan has to be signed and dated by the most responsible individual on site — 21 CFR §117.126(c), 21 CFR §123.6(c), 9 CFR §417.4(a). At initial implementation, after every modification, and at every annual reassessment.

Annual reassessment is required at a minimum. Any of the following also triggers a reassessment outside the annual cycle: a new product, a new formulation, a new ingredient or supplier, a process change, an equipment change, a packaging change, a distribution change, a new intended consumer, or new hazard information from a recall, outbreak, or published study. Document the reassessment as a verification record — what was reviewed, what was found, what was changed, who signed off.

The first time I reassessed my plan after going live, I caught a new supplier change I'd made three months earlier that I hadn't pushed through the hazard analysis. That's typical — the day-to-day operation moves faster than the plan, and the reassessment is what keeps them aligned.

16Mistakes

Six mistakes that get plans flagged at audit.

The recurring audit findings, synthesized from industry mistake lists, my own catches at Brantford, and what I've heard from operators in the comments:

1. 01

   Generic copy-pasted hazard analysis

   If your worksheet doesn't reference your own water activity, your own supplier, your own equipment, your own hold times, the auditor will assume you didn't actually do the analysis. Cite your specific numbers.

2. 02

   Critical limits at the regulatory floor with zero margin

   If FDA says 73.9°C, your operating target should be 75 or 76 with the limit at 73.9. Operating exactly at the limit guarantees recurring deviations.

3. 03

   Monitoring frequency too low

   A check once per shift on an 8-hour cook means 8 hours of bad product before you catch a problem. Match the frequency to the batch.

4. 04

   Corrective actions without root cause addressed

   "Reworked product, restarted line" is a disposition, not a corrective action. The form has to force the root cause field.

5. 05

   Flow diagram not verified on-site

   The Step 5 catch. If your night shift runs a different sequence than your diagram, that's a finding the auditor will get to before you do.

6. 06

   Records illegible, missing, or back-dated

   The largest single category of FSIS recordkeeping findings. Time-stamped electronic records eliminate the category. If you stay on paper, write at the time of the check, not at the end of the shift.

17Restaurants

A note on writing a HACCP plan for a restaurant special process.

The article so far has been written for a processor or producer — the operator with a facility, a registration or a licence, and a continuous-inspection cadence. Restaurants are different. A restaurant operates under the FDA Food Code as adopted by your state, not 21 CFR Part 117. FSMA §117.5(g) explicitly exempts retail establishments. A HACCP plan is required only for a "special process" under Food Code §3-502.11: sous vide, reduced-oxygen packaging, smoking for preservation, curing, acidification, fermentation, sprouting, custom-processing animals, or juicing for off-site sale.

When a restaurant special process triggers the requirement, the plan covers the special process, not the whole menu. The same 12 steps apply, scoped to that one process. The plan is submitted to your local health department along with a variance application. Realistic timeline: 20 to 40 hours of writing plus 4 to 12 weeks of back-and-forth with the local health department on the variance.

The sample restaurant special-process templates I publish here cover sous vide, ROP, smoking, fermenting, sprouting, and on-premises juicing — pre-built around the Food Code structure so you start with the variance application format rather than reformatting a producer plan. See the HACCP plan template hub for the vertical-specific starting points.

18Your first week

What to do this week — the 4 to 6 hour Day 1 sprint.

You don't have to wait to start. The first three steps are no-cost, no-equipment, and combined take 4 to 6 hours. They're the foundation that decides whether you can write the rest of the plan yourself, hire help, or use software.

1. 01

   Hour 1 to 2 — write the HACCP Team Roster

   Your name, your role, your credentials. Add one other person if there is one. List any external resources you'll rely on for validation. Sign it.

2. 02

   Hour 3 to 5 — write the Product Description

   One product, one to two pages. Ingredients, pH, aw, packaging, shelf life, distribution. If you make several products, pick the highest-volume one and start there.

3. 03

   Hour 6 — write the Intended Use Statement

   One paragraph. Who eats it, how, and what worst-case consumer behavior you're assuming.

After Day 1, the next two-week block is the flow diagram and the on-site verification (Steps 4 and 5). That's the block where the plan moves from theoretical to real. Then the hazard analysis (Step 6, the longest block). Then CCPs, limits, monitoring, corrective actions, verification, recordkeeping. Six to eight weeks of evenings if you're a solo QA function. Less if you have help.

Footnotes

1.Codex Alimentarius CXC 1-1969 (formerly CAC/RCP 1-1969), General Principles of Food Hygiene, HACCP Annex — fao.org

2.FDA — HACCP Principles & Application Guidelines (NACMCF 1997) — fda.gov

3.21 CFR §117.130 — Hazard analysis (FSMA Preventive Controls) — law.cornell.edu

4.9 CFR §417.5 — Records (USDA FSIS HACCP) — law.cornell.edu

5.21 CFR Part 123 — Fish and Fishery Products — ecfr.gov

6.CFIA Preventive Control Plan Guide — inspection.canada.ca

7.FSPCA Preventive Controls for Human Food (PCQI 2.0) — fspca.net

8.FSIS Generic HACCP Model — Poultry Slaughter (worksheet format reference) — ehaccp.org

Andrew Langevin·CFIA-licensed facility, Brantford ON· Published 2026-06-04· 14 min read· Wikidata Q139112497