Food Safety Atlas

HACCP: a worked example

An auditor or food safety officer does not read a plan from front to back and stop. They test whether the plan is true of the kitchen in front of them. What follows is general practice, not a rule of any scheme or regulator, and requirements vary by scheme and country.

How this plan would be read

Are the foundations there?Team named, scope clear, working. A good plan on a dirty kitchen does not pass.
Does the product match?Recipe, and shelf life on paper, against the actual tray in the cool room.
Does the flow match?Walk it. Look for steps not on the diagram, such as food on a bench, or .
Is the reasoning there?Why is this significant? Why is this not a CCP? A judgement with reasons is fine. A blank box is not.
Where do the limits come from?Each traced to a source, and evidence it works in this kitchen.
Do the records stand up?Pick a batch and follow it backwards from service to receiving: cook, cool, label, storage, reheat. Do the times add up? Are the same initials there on someone's day off?
What happens when it goes wrong?Find a deviation. Was the food held? Where did it go? Was the cause fixed? No deviations in a year gets asked about too.
Can the staff do it?Ask a cook: show me how you probe this. What do you do if it reads 72 °C? Who do you tell?
Is someone checking? records, weekly reviews, reviews after change. by someone other than the .

Here is part of a filled-in , with invented readings, and how an auditor would read it.

BatchPan depth60 °C at21 °C at5 °C atResultActionInitialsReviewed
A5 cm10:5512:35 (1 h 40)14:10 (1 h 35 further)PassNoneCook 1Supervisor, Friday
B9 cm13:2015:35 (2 h 15)Not continuedFail: missed by 15 minutes32 kg discarded. Pans overfilled because of a short supply of pans. More pans ordered, cook retrained.Cook 2Supervisor, Friday

Batch B is what an auditor hopes to see. missed, food discarded, cause found, and it was recorded honestly. They would then check the pans really arrived, and that it has not happened since. They may also ask why depth of 9 cm wasn't caught at the 90-minute check.

A generic plan, not tailored
A template with another kitchen's steps still in it. allows generic plans, but they have to be tailored to the site.
Hazards rated with the control in place
Everything rates low, because controls are assumed to work. Nothing appears significant.
Too many CCPs, or none explained
Every step named a CCP, so none gets real attention. Or no CCPs, without reasons.
Limits with no source
'75 °C' appears with no reference, and no evidence that the kitchen's own equipment can achieve it.
Records filled in afterwards
Same pen, same handwriting, same reading each day. Times that do not fit the shift.
Corrective action that is only 'told staff'
No word on , no cause, and it happens again next month.
Probes not checked
overdue. Or a probe nobody can find when it's asked for.
Verification by the monitor
The same person cooks, records and reviews.
Allergen information out of date
The says one spice blend, the shelf holds another one.
Never reviewed
New chiller, new supplier, same plan date.
Where would this example get challenged?Probably in five places: cook being a CCP when reheat follows, chilled storage and not being CCPs, testing frequency, using 5 days with a of 5 °C rather than 's 4 °C, and 75 °C with no hold time at reheat. The reasons are written down, which is what makes each a discussion and not a finding.
Does passing an audit mean the food is safe?No. An audit samples what it sees on one day. It shows the system looks sound. The and records from every other day are what back that up.
Is HACCP required by law?It depends on where you are, your business type and who you serve, and the name of the required program varies. Some customers and schemes ask for even where the law does not. Ask your regulator.