HACCP worksheet templates.

01The build-stuck moment

If you got stuck mid-build, this is the page.

If you landed here you probably read the seven principles of Hazard Analysis and Critical Control Points (HACCP) last week, started writing your plan this week, and got stuck on the hazard analysis worksheet. The free templates you found online were either filled in for a product you don't make, watermarked with a “subscribe for $39 a month” banner over the rest of the rows, or built around the old Codex decision tree from 2003.

I went through that drill in 2022, building my first HACCP plan for my Canadian Food Inspection Agency (CFIA) licensed mushroom facility in Brantford, Ontario. Of the six free templates I downloaded, two were watermarked teasers, two used the 2003 decision tree, one was for ham sandwich production, and the cleanest was a kombucha example from Riverside County, California public health. I rebuilt my own in Excel using that structure plus the Food Safety Preventive Controls Alliance (FSPCA) workbook format.

This page is the worksheets I wished I'd had — eighteen analytical artifacts, organized by the twelve-step Codex framework, current to the 2022 decision tree, with the hazard categories your specific regulation expects.

“

Worksheets are not bureaucracy. They are where a real hazard either gets flagged and controlled, or gets missed and becomes a recall.

”

What every HACCP-trained Preventive Control Qualified Individual eventually learns

02Worksheets vs plans vs records

Three different artifacts, one shelf.

Three things live near each other on the same binder shelf. Sort them out early or an inspector will ask for the “plan” and you'll hand them a stack of temperature logs.

1. 01

   A plan is a forward-looking governance document.

   Your written HACCP plan, your Food Safety Plan (FSP) under the Food Safety Modernization Act (FSMA), or your Preventive Control Plan (PCP) under the Safe Food for Canadians Regulations (SFCR). It says what you intend to do. Lives in /templates/plans/.

2. 02

   A record is operational data, generated as the plan runs.

   A daily refrigerator temperature log, a sanitizer ppm reading, a corrective-action entry from last Tuesday. Lives in /templates/records/.

3. 03

   A worksheet is the analytical artifact you fill out while building the plan.

   A populated hazard analysis matrix, a Critical Control Point (CCP) decision-tree walkthrough, a critical-limits table. You build it once per product or process and revise it at annual reassessment or whenever something changes. The completed worksheet becomes an appendix to the plan. This page is about these.

The federal rule at 21 CFR §117.130 calls it a “hazard analysis”; the National Advisory Committee on Microbiological Criteria for Foods (NACMCF) 1997 calls it a “table”; Codex Alimentarius CXC 1-1969 Rev 2023 calls it a “worksheet.” Same artifact, different vocabulary.

03The 18 worksheets

What a complete HACCP plan needs, in order.

The spine of this page is the Codex twelve-step framework — five preliminary tasks before the seven HACCP principles. Built in this order, the worksheets feed each other. Product description shapes process flow. Process flow shapes the hazard analysis. The hazard analysis shapes the decision tree. The decision tree shapes the critical-limits table.

Preliminary tasks (Codex steps 1 through 5)

1. 01

   Product description worksheet

   Intended use, packaging, distribution (frozen, refrigerated, ambient), shelf life with a science citation, labelling claims, target consumer including vulnerable populations per the Food and Drug Administration (FDA) Food Code 2022 Annex 3. One sheet per product family.Step 2

2. 02

   HACCP team and training matrix

   Team roster — names, roles, scheme-certified status (Preventive Control Qualified Individual for FSMA, HACCP-trained per 9 CFR §417.7, PCP-competent per SFCR §73), refresher dates. Doubles as your training summary under 21 CFR §117.4.Step 1

3. 03

   Process flow diagram worksheet

   Every step from receiving to shipping, numbered, with rework loops, holding times, temperature transitions, and an allergen-segregation flag. If you operate a restaurant, this is what the ServSafe Manager Coursebook calls the “Flow of Food” — same artifact.Step 4

4. 04

   On-site verification statement

   A signed cover sheet attesting the team walked the flow diagram on the floor and verified every step matches reality. One page; an inspector looks for the signature and the date.Step 5

Principle 1 — Hazard analysis (step 6)

1. 01

   Hazard analysis worksheet (3×3 or 5×5 risk matrix)

   The centerpiece. Columns: process step, identified hazard (Biological, Chemical, Physical, and Radiological for FSMA), likelihood, severity, risk score = L × S, significant yes/no, justification, control measure, CCP yes/no, and the Codex 2022 tree answer.§117.130

2. 02

   Ingredient hazard profile

   One row per ingredient. Biological, chemical, physical, radiological, and allergen hazards. Source country, historical recall flag, supplier-controlled versus in-house controlled. Feeds the hazard analysis upstream.

3. 03

   Allergen matrix

   The Big 9 allergens (milk, eggs, fish, crustacean shellfish, tree nuts, peanuts, wheat, soybeans, sesame — sesame added by the Food Allergy Safety, Treatment, Education and Research Act effective January 1 2023) across rows, your products or formulas across columns. Covers may-contain cross-contact. Undeclared allergens drive roughly half of Class I food recalls per FDA recall data — when this worksheet is underbuilt, this is what causes the recalls.FASTER Act 2023

Principle 2 — CCP determination (step 7)

1. 01

   Codex 2022 four-question CCP decision tree worksheet

   The current tree adopted at the 45th Codex Alimentarius Commission session in November 2022, codified in the CXC 1-1969 Rev 2023 Annex II. Both a logic-flow diagram version and a tabular per-hazard version. The four questions are walked in detail in section 5 below.

Principle 3 — Critical limits (step 8)

1. 01

   Critical limits table

   CCP number, parameter, critical limit, validation source, operational limit (the tighter number you actually run to so you don't hit the critical limit), measurement tool, frequency. Validation sources need to be specific. “Cooking per Food Safety and Inspection Service (FSIS) Appendix A, document FSIS-GD-2021-0014” — not “USDA guidance.” Critical limits must be measurable. A critical limit that says “cook thoroughly” is not a critical limit.

Principle 4 — Monitoring (step 9)

1. 01

   Monitoring procedure worksheet

   CCP number, what you monitor, how (calibrated probe, chart recorder, pH meter, visual check), when and how often, who (named role with their training reference per 21 CFR §117.4 or 9 CFR §417.7), where the record lives.

Principle 5 — Corrective action (step 10)

1. 01

   Corrective action template

   Pre-defined responses per deviation. Four required elements per 9 CFR §417.3 and Codex §6.2.6: identify and eliminate the cause; restore control; decide disposition of affected product (hold, evaluate, rework, divert, destroy); prevent recurrence with root cause analysis.§417.3

2. 02

   Deviation investigation worksheet

   Single-deviation drill-down for when a CCP fails. Date, time, who detected, what happened, immediate action, product affected, disposition, root cause, prevent-recurrence action, signature.

3. 03

   Customer complaint investigation worksheet

   Pairs with the customer complaint record at /templates/records/. Severity, allergen flag, illness flag (illness may trigger Reportable Food Registry consideration under 21 CFR §1.510).

4. 04

   Root cause analysis worksheet (5 Whys plus Fishbone)

   Two techniques, two tabs. Section 8 walks both. Required as a practice by 21 CFR §117.150(b)(3), 9 CFR §417.3(d), and Codex §6.2.6.

Principle 6 — Verification (step 11)

1. 01

   Verification schedule

   A calendar per CCP — records review (FSIS requires within one week or prior to shipping per 9 CFR §417.4(a)(2)(iii); FSMA per 21 CFR §117.165), direct observation, finished-product testing, environmental testing.

2. 02

   Calibration cadence (per instrument)

   Inventory of every probe thermometer, pH meter, water-activity meter, refractometer, metal detector, scale, and chart recorder. ID, location, frequency, method (ice-point at 32°F for probes; pH 4.0, 7.0, 10.0 buffers; certified test pieces for the metal detector), responsible person, last and next due.

3. 03

   Validation study worksheet

   One per CCP that needs scientific validation (cook step, kill step, pasteurization, acidification, water activity, metal detection sensitivity). Hazard, control measure, validation method, citation, date, revalidation trigger. See section 7 for why this isn't the verification worksheet.§117.160

4. 04

   Reanalysis schedule and internal audit cadence

   Annual reanalysis trigger per 9 CFR §417.4(a)(3) (every three years per 21 CFR §117.170), change-triggered reanalysis, internal audit cadence (SQF Edition 9 §2.5.4 annual; BRCGS Issue 9 §3.4 at least four per year; FSSC via ISO 22000 §9.2 “planned intervals”).

Cross-cutting worksheets (not numbered in the Codex framework but plan-required)

1. 01

   Supplier approval worksheet

   Initial approval: risk tier, ingredient hazard analysis, Global Food Safety Initiative (GFSI) certification status, allergen declaration, country of origin, Foreign Supplier Verification Program (FSVP) applicability.

2. 02

   Supplier verification activity worksheet

   Ongoing per 21 CFR §117 Subpart G. Certificate of Analysis review cadence, on-site audit cadence, sampling and testing plan.

3. 03

   Environmental monitoring sampling plan and swab map

   Zone 1 through Zone 4 sampling, frequency, organism (Listeria monocytogenes most common; Salmonella in low-moisture; pathogenic Escherichia coli in produce). Includes vector-study procedure after a positive and the trend-analysis method.

4. 04

   Recall plan and mock recall results

   Notification tree, traceback procedure, effectiveness check. The mock captures account-reach percentage, product-reach percentage, time to isolation, and any gaps.

04The risk matrix

Scoring likelihood times severity — the 3×3 (and 5×5).

The analytical core of the hazard analysis worksheet is a risk matrix that scores each identified hazard as Likelihood multiplied by Severity. Two formats are common.

Auditors do not care which matrix you use. They care that your significance threshold is documented as a rule in writing, applied consistently row by row, and that the resulting CCPs are defensible. Pick one and stick with it.

05The decision tree

The 2022 Codex CCP decision tree — the centerpiece.

The CCP decision tree is the single most-asked-for worksheet in food safety. Its history is messy. The classic tree appeared in 1997, was revised in 2003, was removed entirely from CXC 1-1969 Rev 5 in 2020 when the Codex Committee on Food Hygiene couldn't reach consensus, and was reinstated in revised form at the 45th Codex Alimentarius Commission session in November 2022 (often called CAC45). The 2022 tree is what current Safe Quality Food (SQF) Edition 10 audits (beginning January 2027), British Retail Consortium Global Standards (BRCGS) Issue 9, and Foundation FSSC 22000 V6 look for.

The four questions, in order:

1. 01

   Q1 — Can the significant hazard be controlled to an acceptable level at this step by the operator's prerequisite programs (PRPs), such as good hygiene practices?

   If YES, the hazard is controlled by the PRP. Not a CCP. Document the PRP. If NO, proceed to Q2.2022 tree

2. 02

   Q2 — Do specific control measures for the identified significant hazard exist at this step?

   If YES, proceed to Q3. If NO, modify the step, the product, or the process so a control measure can be applied.

3. 03

   Q3 — Will a subsequent step prevent or eliminate the identified significant hazard or reduce it to an acceptable level?

   If YES, this step is NOT the CCP — the later step is. Document the chain. If NO, proceed to Q4.

4. 04

   Q4 — Can this step specifically prevent or eliminate the identified significant hazard or reduce it to an acceptable level?

   If YES, this step IS a CCP. Document and proceed to Principle 3 (critical limits). If NO, modify the step, the product, or the process.

The biggest change from 2003 is the order. The 2003 tree led with the existence of a control measure (now Q2). The 2022 tree leads with PRP coverage (now Q1), aligning with how Codex Rev 5 elevated good hygiene practices to the foundation that HACCP sits on.

Operationally, the Q1 change catches a very common over-CCP error in legacy plans. The first draft of my hazard analysis listed end-of-shift sanitation as a CCP. When I walked the 2022 tree, Q1 caught it — sanitation in my operation is controlled by the prerequisite program (cleaning standard operating procedures, plus verification, plus adenosine triphosphate swab testing), not a CCP. If you are reworking a plan built before 2022 you will probably find one or two “CCPs” that are actually PRP-controlled.

06Hazard categories

Three categories, or four — depending on your regulation.

Different regulations recognize different hazard categories. If you pick the wrong number of categories for your jurisdiction, an auditor will flag your hazard analysis as incomplete.

1. 01

   NACMCF 1997 — three categories

   Biological (pathogens, toxins, parasites, viruses), Chemical (allergens, mycotoxins, cleaning chemicals, pesticides, heavy metals, antibiotics), Physical (glass, metal, plastic, wood, stones, bone fragments, pests).B / C / P

2. 02

   FSMA Food Safety Plan rule — four categories

   The fourth category is Radiological. Rare but real — radionuclide contamination of imported product (the 2011 Fukushima incident still has measurable downstream effects), naturally occurring radioactive materials in some mineral-rich categories. Most operators legitimately conclude radiological hazards are not significant for their product, but FSMA requires the conclusion to be DOCUMENTED — not silently omitted.§117.130(b) · B / C / P / R

3. 03

   Codex CXC 1-1969 Rev 2023 — three categories

   Same B / C / P as NACMCF. Canadian SFCR §86 PCP follows Codex (three categories). FSIS at 9 CFR §417 follows three categories plus economic adulteration as a separate consideration.

If you sell into both U.S. (FSMA) and Canadian or USDA-jurisdiction markets, default to the four-category superset. The honest answer in most rows is “not significant — no exposure pathway.” Auditors are looking for the documented conclusion, not for radiological to be a real risk.

07Validation vs verification

The single most-confused pair in HACCP.

Operators routinely mark “we calibrate our probe thermometer monthly” as validation when calibration is verification. Or they run finished-product Salmonella testing and call it validation when finished-product testing is verification. Both NACMCF 1997 and Codex §6.2.7 distinguish the two cleanly.

Print one reference card distinguishing the two and tape it inside the front cover of your plan binder. The day an auditor asks “show me your validation for the cook step,” you do not want to hand them your weekly calibration records.

08Root cause

5 Whys plus Fishbone — one worksheet, two techniques.

Root cause analysis (RCA) is required by every modern food safety framework. 21 CFR §117.150(b)(3) requires corrective actions to “reduce the likelihood that the deviation will recur.” 9 CFR §417.3(d) requires “appropriate measures to prevent recurrence.” Codex §6.2.6, SQF §2.5.4, BRCGS §3.7, and FSSC ISO 22000 §10.2 all require documented RCA for non-conformances. The two most-used techniques are old, simple, and free.

1. 01

   5 Whys — iterative drill-down

   Developed by Sakichi Toyoda in the 1930s. Ask “why” five times. Example: (1) Why did the metal detector miss the contamination? The start-of-shift test-piece check wasn't done. (2) Why? The line lead forgot. (3) Why? The start-of-shift checklist was revised last month and the metal detector check moved to a different page. (4) Why wasn't the revision trained? The SOP revision didn't trigger a training record. (5) Why? The change-management procedure doesn't link to the training matrix. Root cause: missing linkage between change-management and training matrix. Fix that and you prevent a whole class of future deviations.

2. 02

   Fishbone (Ishikawa) — categorical bucket analysis

   Developed by Kaoru Ishikawa in 1968. Draw the head of the fish (the problem), then six bones — the “6Ms”: Manpower, Method, Machine, Material, Measurement, Environment. Brainstorm causes under each. Use Fishbone for breadth (have all categories been considered?), 5 Whys for depth (what's the actual root?).

For most deviations, run 5 Whys first. If you can't find a clear chain, switch to Fishbone to make sure you're not missing a category. Save Fishbone for systemic patterns at internal audit — the “we keep seeing low sanitizer ppm on Tuesday closes” pattern.

09Canadian operators

SFCR Preventive Control Plan overlay.

The Canadian SFCR §86 Preventive Control Plan is closely aligned with the U.S. Food Safety Plan but uses CFIA's five-element framework: description, hazard analysis, control measures, monitoring and corrective actions, verification and records. Every worksheet on the page transfers to a PCP with minor framing changes.

1. 01

   Three categories, not four

   CFIA follows Codex. Biological, chemical, physical. No radiological column required. (If you also sell into the U.S., keep the four-category version.)

2. 02

   Two-year record retention

   All worksheets and downstream records retained two years from creation.SFCR §87

3. 03

   One-up one-back traceability

   The traceability worksheet (one supplier up, one customer down per lot) lives in /templates/records/ and cross-references the ingredient hazard profile.SFCR §90

4. 04

   Canadian priority allergens list

   Health Canada's priority allergens overlap with the U.S. Big 9 but include mustard as a tenth. Add a Canadian priority allergens column when you operate in both markets.

5. 05

   My CFIA portal upload

   Your PCP is uploaded to the My CFIA portal with the worksheets attached as appendices. The portal accepts PDF and Excel.

10Failure cases

Three recent recalls where the worksheet was the gap.

The worksheets exist because of failures like these. None of these are old news; all three are within the last three years.

1. 01

   Gold Medal flour, April 2023 — the hazard analysis worksheet

   Salmonella Infantis outbreak tied to a major flour brand. 14 illnesses across 13 states. Before 2023 many bakery HACCP plans listed flour as a “raw agricultural commodity” without a Salmonella row. The 2023 recall (plus 2016 and 2019 precedents) changed the calculus. Flour-borne Salmonella is now a known significant hazard, and a 2026 bakery hazard analysis that omits the row is auditor-flaggable.

2. 02

   Boar's Head, summer 2024 — environmental monitoring sampling plan and reanalysis worksheet

   A Listeria monocytogenes outbreak with 10 deaths and more than 7 million pounds of product recalled. FSIS published a public report in January 2025 citing systemic failures at the Jarratt, Virginia facility, including inadequate environmental monitoring. Post-incident analysis pointed to a sampling plan that did not escalate after positive results — a reanalysis trigger gap. The environmental monitoring worksheet defines what happens after a positive Zone 2 swab; the reanalysis worksheet defines what change triggers a reanalysis of the plan. Both were the gap.

3. 03

   Cucumber and pre-cut salad recalls, late 2024 through 2025 — ingredient hazard profile and supplier verification

   Multiple multi-state recalls for cucumbers and pre-cut salads with Salmonella and Listeria. Operators sourcing from new suppliers without an ingredient hazard profile flagging country of origin and farm-level risk got caught in expanded recalls. The supplier verification worksheet is where you document “what I knew about this supplier before I bought.” If the answer is “not enough,” the recall extends to you.

11How to use these

A 30-day path from blank to populated.

If you are starting from zero, the order matters. Worksheets feed each other. Build them out of order and you'll redo work.

1. 01

   Week 1 — product description and HACCP team roster

   The two preliminary worksheets that don't depend on anything else. An afternoon's work.

2. 02

   Week 2 — process flow diagram, walked and verified on the floor

   Draw it from receiving to shipping. Then walk it. The on-site verification statement gets signed when reality matches the diagram.

3. 03

   Week 3 — hazard analysis with the 3×3 (or 5×5) matrix

   One row per (process step × hazard category) combination. Score each. Apply the “high severity always significant” override. Mark significance.

4. 04

   Week 4 — decision tree, critical limits, monitoring, corrective action, verification, validation for every CCP

   The downstream worksheets all flow from the hazard analysis. If you got that right, the rest is mostly mechanical.

Plan on 4 to 12 hours of analytical time for a small operation with one or two products. More for multiple verticals or a complex ingredient list. The work is bounded by your vertical knowledge — a granola maker may not know flour-borne Salmonella is now medium-to-high likelihood per the 2023 recall data. Don't guess. When in doubt, check the FDA Hazard Analysis Guidance for Human Food or the matching FSIS compliance guideline for your vertical.

12Why I built this

A short note on why this page exists.

The week after my CFIA licence came through I had a folder of six downloaded HACCP templates on the desktop and a stack of FSPCA workbook printouts beside the keyboard. The FSPCA workbook was rigorous but the worked examples were juice and deli meat — I make mushrooms.

I rebuilt my hazard analysis worksheet in Excel using the workbook columns. The first draft marked end-of-shift sanitation as a CCP — the 2022 Codex tree Q1 caught it (PRP-controlled, not a CCP). The second draft survived my first CFIA inspection. The third draft survived an SQF gap assessment in 2024. That third draft, with the vertical specifics swapped out, is what this page describes.

Most operators starting out only need three or four worksheets to unblock their build — almost always the hazard analysis, the decision tree, the critical limits table, and the monitoring procedure. The rest you grow into as your operation matures.

13FAQ

Common questions.

1. 01

   Is the decision tree on this page the current Codex one?

   Yes. The four-question tree adopted at the 45th Codex Alimentarius Commission session in November 2022, codified in CXC 1-1969 Rev 2023 Annex II. SQF Edition 10 (audits begin January 2027), BRCGS Issue 9, and FSSC V6 all accept it. The 2003 version is no longer the default.

2. 02

   Does the hazard analysis worksheet need a radiological column?

   If you operate under FSMA (21 CFR §117.130(b)), yes. Required even if the conclusion is “not significant.” Under Codex, SFCR, or USDA-FSIS only, three categories is enough. If you sell into both markets, default to four.

3. 03

   Should I use a 3×3 or a 5×5 risk matrix?

   Either is fine. 3×3 is the NACMCF default and the FSPCA workbook format. 5×5 is preferred by SQF and BRCGS auditors because finer resolution shows you actually distinguished between hazards. What matters is that your threshold is written down and applied consistently.

4. 04

   What's the difference between a hazard analysis “worksheet” and a “form”?

   Nothing. NACMCF 1997 calls it a “table.” 21 CFR §117.130 calls it a “hazard analysis.” Codex 2023 calls it a “worksheet.” SQF calls it a “form.” All refer to the same populated matrix.

5. 05

   Can I use the same worksheet for an FSMA Food Safety Plan and an SFCR PCP?

   Almost. Format is the same. The differences: FSMA requires a radiological column (SFCR doesn't); SFCR uses CFIA's five-element framework wording (FSMA uses the seven principles); SFCR retention is two years per §87, FSMA retention is two years for most records per 21 CFR §117.315. If you operate in both, build one worksheet with the four-category column and both framings in the header.

6. 06

   Will auditors actually accept these?

   Yes, when the worksheet is filled out completely and the methodology is documented in writing. Auditors aren't looking for a specific template — they're looking for evidence you performed a hazard analysis, walked a defensible decision-tree methodology, set measurable critical limits with cited validation sources, and verified the controls are working. Format is up to you.

7. 07

   What's the difference between validation and verification?

   Validation answers “will the control work?” — initial scientific evidence, done once at plan launch and after significant changes. Verification answers “is the control being executed and remaining effective?” — ongoing through calibration, records review, observation, testing. See section 7 above.

8. 08

   How often do I redo the hazard analysis?

   At least annually per 9 CFR §417.4(a)(3), or every three years per 21 CFR §117.170, whichever applies to your operation. Plus a change-triggered reanalysis any time you add a product, change a supplier, change a process step, or experience a significant deviation. The reanalysis schedule worksheet (#18 above) is where you log when each reanalysis is due.

9. 09

   Where do the populated worksheets actually live in the plan?

   As appendices. Your HACCP plan or Food Safety Plan or PCP is the narrative document; the worksheets are appendices A through whatever. Most auditors expect to see them indexed in the plan's table of contents and physically (or digitally) attached.

14Next step

Where to go from here.

If you came for a specific worksheet, pick the one matching your principle and start populating it from the structure above. The hazard analysis worksheet is the centerpiece — get that right and the downstream worksheets are mostly mechanical.

For the records side (daily logs and operational data that prove your plan is running), the equipment temperature logs and cleaning logs are at /templates/temperature-log and /templates/cleaning-log.

For the principles side, the seven-principles walkthrough is at /learn/haccp/7-principles. For Canadian operators, the PCP overview is at /learn/cfia-sfcr/preventive-control-plan — same worksheets, slightly different framing.

The worksheets are not the plan. They are the work you do before you write the plan. Get them right and the plan writes itself in a long weekend.

Footnotes

1.21 CFR Part 117 — FSMA Preventive Controls for Human Food — ecfr.gov

2.9 CFR Part 417 — USDA-FSIS HACCP — ecfr.gov

3.Codex CXC 1-1969 Rev 2023 (FAO/WHO) — 2022 decision tree (Annex II) — fao.org

4.NACMCF HACCP Principles and Application Guidelines 1997 — fda.gov

5.FDA Hazard Analysis Guidance for Human Food — fda.gov

6.FSIS Compliance Guideline — HACCP Validation 2015 — fsis.usda.gov

7.SOR/2018-108 Safe Food for Canadians Regulations — §86 (PCP), §87 (records), §90 (traceability) — laws-lois.justice.gc.ca

8.FDA Outbreak Investigation: Salmonella in Flour, April 2023 — fda.gov

9.FSIS Boar's Head Listeria Public Report, January 2025 — fsis.usda.gov

Andrew Langevin·CFIA-licensed facility, Brantford ON· Published 2026-06-04· 14 min read· Wikidata Q139112497