HACCP and food safety management

In short

HACCP (Hazard Analysis and Critical Control Point) is a systematic, preventive food safety system that identifies biological, chemical and physical hazards in a food process and controls them at defined Critical Control Points instead of relying on end-product testing. It is built on seven Codex principles and twelve implementation steps, and it sits on top of prerequisite programmes such as GMP, GHP and sanitation. In India it is legally anchored through the Food Safety and Standards Act, 2006 and Schedule 4 of the FSS (Licensing and Registration of Food Businesses) Regulations, 2011, and commercially through ISO 22000:2018 and FSSC 22000 certification demanded by exporters and modern retail. It is examined in B.Sc/M.Sc Food Science, food technology GATE-equivalent papers (XL/AG food technology sections) and in almost every QA/QC interview at dairies, processors and export houses.

Explained

Origin, definitions and scope

• HACCP originated in the 1960s from work by Pillsbury, the US Army Natick laboratories and NASA to assure safe food for space flight; zero-defect assurance was impossible by sampling alone.
• Codified by the Codex Alimentarius Commission in CXC 1-1969, *General Principles of Food Hygiene*; its 2020 revision made HACCP Chapter 2 of the code and merged Good Hygiene Practices into one document.
• Hazard: a biological, chemical or physical agent in food, or a condition of food, with the potential to cause an adverse health effect. Risk = probability × severity of that effect; HACCP manages hazards, risk assessment quantifies them.
• Significant hazard: one reasonably likely to occur and to cause unacceptable harm if uncontrolled — only these proceed to CCP determination.
• Control measure: any action that prevents, eliminates or reduces a hazard to an acceptable level. CCP: a step at which a control measure is essential and where loss of control means an unacceptable safety risk.
• Critical limit: a measurable value separating acceptable from unacceptable. Operational limit / target: a tighter internal value used so that adjustments happen before the critical limit is breached.
• HACCP addresses safety only — not quality, legality, fraud or shelf-life aesthetics. Quality defects are handled by quality plans; food fraud (VACCP) and food defence (TACCP) are separate vulnerability and threat assessments.

Hazard types

• Biological: *Salmonella* (poultry, eggs, spices), *Listeria monocytogenes* (ready-to-eat, chilled, dairy), *E. coli* O157:H7 (minced meat, sprouts), *Staphylococcus aureus* toxin (handled foods), *Clostridium botulinum* (low-acid canned foods, vacuum packs), *Bacillus cereus* (cooked rice), *Vibrio* (seafood), hepatitis A and norovirus, parasites (*Taenia*, *Anisakis*).
• Chemical: mycotoxins (aflatoxin B1 in groundnut, maize, chilli; ochratoxin A; patulin in apple juice; DON), pesticide residues, veterinary drug and antibiotic residues (nitrofurans and chloramphenicol in shrimp — a recurring EU/US rejection cause for Indian exports), heavy metals (Pb, Cd, Hg, As), process contaminants (acrylamide, 3-MCPD esters, histamine in scombroid fish), cleaning chemical carry-over, excess additives, and allergens (treated as a chemical hazard).
• Physical: metal, glass, hard plastic, stone, bone, wood, insect fragments; usually judged against sizes capable of injury (commonly >7 mm, or smaller for foods for children/the vulnerable).
• Radiological hazards are listed separately in some schemes.

Prerequisite programmes (PRPs)

• HACCP is not standalone: PRPs control the general hygiene environment so the HACCP plan can stay small and focused on genuine CCPs.
• Typical PRPs: factory layout and zoning, construction and surfaces, water and ice potability (IS 10500:2012 for drinking water), air and compressed-air quality, cleaning and sanitation (CIP schedules, chemical concentration and contact time), pest control, waste management, personal hygiene and medical fitness, training, supplier approval and incoming material control, preventive maintenance and calibration, glass/brittle-plastic register, chemical control, allergen management, traceability and recall, transport and storage, visitor control.
• Operational PRPs (OPRPs) are an ISO 22000 concept: control measures for significant hazards that are not CCPs — monitored by action criteria (observable or measurable) rather than a hard critical limit.
• In India these prerequisites are legally mandated as Schedule 4 of the FSS (Licensing and Registration) Regulations, 2011 — Part I (petty/street vendors), Part II (general manufacturing), Part III (milk and milk products), Part IV (slaughterhouse and meat), Part V (catering), Part VI (nutraceuticals and like), Part VII (storage/transport/distribution/retail), Part VIII (e-commerce). Note the Schedule has been amended and sub-parts renumbered over time — check the current consolidated regulation before quoting a part number in a document.

The twelve steps (five preliminary + seven principles)

1. Assemble a multidisciplinary HACCP team — production, QA, engineering, microbiology, hygiene; name a team leader; co-opt external expertise where absent.
2. Describe the product — composition, pH/aw, additives and preservatives, packaging, processing, shelf life, storage and distribution conditions, labelling.
3. Identify intended use and consumers — including vulnerable groups (infants, elderly, pregnant, immunocompromised) and whether the food is eaten without further cooking.
4. Construct a process flow diagram — every step from raw material receipt to despatch, with rework loops, delays, utilities and material entry points.
5. On-site verification of the flow diagram — walk the line across all shifts and sign off; a flow diagram verified only on paper is the commonest audit non-conformity.
6. Principle 1 — Conduct a hazard analysis: list all potential hazards at every step; assess likelihood and severity; identify control measures. Record justification for each decision.
7. Principle 2 — Determine CCPs, usually with the Codex decision tree (Q1 control measures exist? Q2 step eliminates/reduces hazard to acceptable level? Q3 could contamination exceed acceptable levels? Q4 will a later step eliminate/reduce it?).
8. Principle 3 — Establish validated critical limits for each CCP — temperature, time, pH, aw, Cl₂ ppm, moisture, metal-detector sensitivity, pressure, flow rate; grounded in law, scientific literature, challenge studies or thermal process calculation.
9. Principle 4 — Establish a monitoring system: what, how, frequency, who. Prefer continuous physical/chemical measurement (chart recorders, data loggers, PLC trending) over microbiological tests, which are too slow for real-time control.
10. Principle 5 — Establish corrective actions: act on the deviating product (hold, rework, reprocess, divert, destroy), restore control, find and fix the cause, record it.
11. Principle 6 — Establish verification procedures: calibration, record review, targeted sampling and testing, internal audit, periodic HACCP plan review. Distinguish validation (evidence the measure *can* control the hazard, done before implementation) from monitoring (is it working now) and verification (confirming the system works as planned).
12. Principle 7 — Establish documentation and record-keeping: hazard analysis, HACCP plan and CCP summary table, monitoring and deviation records, calibration, training, verification. Retention commonly one year beyond shelf life, or as the regulator/customer specifies.

Writing and running the plan

• CCP summary (control chart) columns: Process step | Hazard | Critical limit | Monitoring (what/how/frequency/who) | Corrective action | Records | Verification.
• Classic CCPs: pasteurisation/thermal process, metal detection or X-ray, chilling and cold-chain holding, retort sterilisation (Fo), acidification to pH ≤ 4.6, aw reduction, filtration/sieving, chlorination of wash water, allergen label check at packing, antibiotic-residue screening at raw milk reception, visual sorting for aflatoxin-damaged nuts.
• Deviation handling: every affected lot since the last conforming check is held (not released), evaluated by a competent person, and dispositioned with a written record; traceability must let you draw the line.
• Reassess the plan on any change of raw material, recipe, equipment, process parameter, packaging, intended use, new scientific or regulatory information, repeated deviation or a recall — plus a scheduled annual review.
• Advantages: preventive rather than reactive; shifts cost from rejection to control; risk-based and resource-efficient; legally recognised worldwide; gives documented due diligence; enables market access.
• Limitations: needs trained people and management commitment; useless without sound PRPs; no HACCP plan prevents hazards arising after despatch (consumer abuse); heavy documentation can turn into paper compliance; small and unorganised units (dominant in India) struggle with cost and record discipline; critical limits set without validation are a false assurance.

Indian and international framework

• Food Safety and Standards Act, 2006 — single law, single regulator (FSSAI); licence and registration regulations (2011) carry Schedule 4 hygiene and HACCP-style requirements; the FSS (Food Safety Auditing) Regulations, 2018 allow third-party audits by FSSAI-recognised agencies in place of some inspections.
• Food Safety Supervisor: every licensed business must have trained supervisors — delivered through FSSAI's FoSTaC programme (one trained supervisor per 25 food handlers is the commonly applied benchmark; confirm the current ratio in the prevailing FSSAI order).
• FSSAI schemes: Hygiene Rating for food service, Eat Right India, BHOG, Clean Street Food Hub, RUCO for used cooking oil; Food Safety Compliance System (FoSCoS) for licensing; InFoLNet laboratory network; NABL-accredited and FSSAI-notified labs for regulatory testing.
• ISO 22000:2018 — FSMS standard; High Level Structure (Clauses 4-10), Plan-Do-Check-Act at two levels (organisation and operation), risk at business level plus hazard at product level, interested parties, PRP/OPRP/CCP hazard control plan, emergency preparedness. ISO/TS 22002-1 gives PRPs for food manufacturing; ISO 22005 traceability.
• FSSC 22000 = ISO 22000 + sector PRP specification + additional scheme requirements; BRCGS, IFS, SQF are other GFSI-recognised schemes often demanded by European and US buyers.
• Indian Standards: IS 15000 was India's HACCP standard and IS 17025-type references exist for laboratories; BIS has largely adopted ISO 22000 as IS/ISO 22000. Because these numbers and editions change, cite the standard by name and confirm the current number and year from the BIS catalogue before quoting it formally.
• Export-linked systems: EIC/EIA approval for fish, shrimp and meat plants (HACCP-based, EU-approved establishment numbers), APEDA registration for processed food and organic exports, Spices Board for spices, and US FDA FSMA requirements — note that FSMA's Preventive Controls rule uses HARPC (Hazard Analysis and Risk-Based Preventive Controls), which adds supply-chain, allergen and sanitation preventive controls and a Food Safety Plan written by a Preventive Controls Qualified Individual, beyond classical HACCP.
• Mandatory US/EU HACCP sectors: seafood, juice, meat and poultry — the reason Indian shrimp and marine plants were among the earliest HACCP adopters.

Key points

• HACCP - preventive, systematic food safety system controlling hazards at critical points, not by end-product testing.
• Seven principles - hazard analysis, CCP determination, critical limits, monitoring, corrective action, verification, documentation.
• Twelve steps - five preliminary steps (team, product, use, flow diagram, on-site confirmation) before the seven principles.
• PRP - general hygiene foundation (GMP/GHP); HACCP fails without it, and most hazards are actually held by PRPs.
• CCP vs CP - loss of control at a CCP means an unacceptable safety risk; a control point affects quality or is backed by a later step.
• OPRP - ISO 22000 control measure for a significant hazard with action criteria instead of a measurable critical limit.
• Critical limit - a single measurable, validated value; must be monitorable in real time (temperature, time, pH, aw, ppm).
• Codex decision tree - four questions applied to each significant hazard at each step to decide CCP status.
• Validation vs verification vs monitoring - can it work / is the system working as planned / is it in control right now.
• Corrective action - restore control, isolate and disposition affected product, eliminate the cause, record everything.
• Hazard classes - biological, chemical (including allergens), physical, sometimes radiological.
• Schedule 4, FSS Licensing Regulations 2011 - India's statutory hygiene and GMP prerequisites, part-wise by business type.
• FSSAI - regulator under the FSS Act, 2006; FoSCoS licensing, FoSTaC training, Hygiene Rating, food safety auditing regulations 2018.
• ISO 22000:2018 - certifiable FSMS combining HACCP, PRPs, interactive communication, management system and PDCA at two levels.
• FSSC 22000 / BRCGS / IFS - GFSI-recognised certification schemes buyers ask for; ISO 22000 alone is not a GFSI scheme.
• HARPC - the US FSMA version of hazard analysis with risk-based preventive controls and a Food Safety Plan.
• TACCP / VACCP - food defence (intentional attack) and food fraud (economic adulteration) assessments, outside classic HACCP.
• Reassessment triggers - change in product, process, equipment, packaging, use, law, science, or any recurring deviation or recall.

Formulas and examples

Example 1 — Thermal process (F₀) at a retort CCP. A low-acid vegetable curry is retorted; the target is a 12-log reduction of *C. botulinum* spores with D₁₂₁ = 0.21 min.

• Required F₀ = 0.21 × 12 = 2.52 min (the classic "12-D botulinum cook", rounded to 3 min in practice).
• If the retort holds at 116 °C instead, z = 10 °C → L = 10^{(116 − 121.1)/10} = 10^−0.51 = 0.309.
• Time needed at 116 °C = 2.52 / 0.309 = 8.2 min of holding.
• Critical limit written on the plan: retort temperature ≥ 121 °C for ≥ 3.0 min (or an equivalent validated schedule), monitored by calibrated MIG thermometer plus chart recorder every batch.

Example 2 — Milk pasteurisation CCP. HTST plant: critical limit 72 °C for 15 s (Indian dairy practice and FSSAI pasteurisation definition; LTLT alternative 63 °C for 30 min).

• Holding tube length needed for a flow of 10,000 L/h at 15 s: volume in tube = 10,000 × (15/3600) = 41.7 L.
• With a 50 mm bore pipe, area = π/4 × 0.05² = 1.963 × 10⁻³ m² → length = 0.0417 / 1.963 × 10⁻³ = 21.2 m (fastest-particle correction and the flow-diversion valve are part of validation).
• Monitoring: continuous chart record of holding-tube outlet temperature + FDV position; corrective action: automatic diversion to raw-milk balance tank, hold and re-pasteurise.
• Verification: alkaline phosphatase (ALP) test negative on every batch; ALP is a verification test, not the monitoring step, because the result comes after processing.

Example 3 — Log reduction and critical limit check. Raw milk at 3.0 × 10⁵ CFU/mL; after pasteurisation 2.0 × 10² CFU/mL.

• Log reduction = log₁₀(3.0 × 10⁵ / 2.0 × 10²) = log₁₀(1,500) = 3.18 logs.
• *Coxiella burnetii* design requires about 5 logs at 72 °C/15 s; 3.18 logs observed means either a low initial load of the target or under-processing — the deviation is investigated against the chart record, not dismissed because the final count looks "low".

Example 4 — Metal detection CCP, sensitivity and cost of failure. A biscuit line runs a metal detector with test pieces Fe 2.0 mm, non-Fe 2.5 mm, SS316 3.0 mm; checked every 60 min and at start/end of shift.

• Line speed 1,200 packs/h. A failed 11:00 test (last good test 10:00) → product on hold = 1,200 packs.
• At ₹25 per pack, product at risk = 1,200 × 25 = ₹30,000 to re-pass through a working detector.
• If the check interval were stretched to 4 h, exposure = 4,800 packs = ₹1,20,000 — the quantified reason monitoring frequency is itself a critical decision.

Example 5 — CCP decision tree applied.

Where it is used

• Dairy: Amul/GCMMF, Mother Dairy, Hatsun, Nestlé India — pasteurisation, antibiotic-residue screening at reception, aflatoxin M1 control, cold chain as CCPs.
• Seafood and meat export: Kochi, Visakhapatnam and Veraval shrimp plants under EIC/EIA-approved HACCP plans; antibiotic residue, histamine, metal and freezing CCPs; EU and US rejections drive the plan.
• Packaged foods and beverages: ITC, Britannia, Parle, Haldiram's, Hindustan Unilever, Coca-Cola/PepsiCo bottlers — metal detection, retort/thermal processes, water chlorination, allergen labelling.
• Spices, nuts and grain: Spices Board and APEDA exporters — aflatoxin, ochratoxin, pesticide residue and *Salmonella* control; sorting and steam sterilisation steps.
• Food service and institutional catering: IRCTC base kitchens, airline caterers, hospital and QSR chains, cloud kitchens — receiving, cooking, hot-holding, cooling and reheating temperature CCPs under Schedule 4 Part V and FSSAI Hygiene Rating audits.
• Job roles: QA/QC executive, HACCP team leader, Food Safety Supervisor (FoSTaC-certified), FSMS internal auditor, third-party auditor with FSSAI-recognised agencies, R&D/NPD safety assessor, regulatory affairs and export documentation.

Interview questions

• Q: What is the difference between a CP and a CCP? A: At a CCP, control is essential for safety and loss of control means an unacceptable risk with no later step to fix it; a CP affects quality or is covered by a subsequent control step.
• Q: Why can't microbiological testing be used to monitor a CCP? A: Results take days, so the product has already moved; monitoring needs a rapid, continuous physical or chemical measurement, with micro testing used for verification instead.
• Q: Give an example of validation versus verification. A: Validation is a thermal death-time study proving 72 °C/15 s delivers the needed log reduction; verification is reviewing charts, calibrating the probe and running the ALP test to confirm the system works as planned.
• Q: What are the five preliminary steps before the seven principles? A: Assemble the HACCP team, describe the product, identify intended use and consumers, construct the flow diagram, and verify the flow diagram on site.
• Q: How do you set a critical limit? A: From a legal requirement, validated scientific data, published thermal or challenge studies or expert advice — it must be measurable, real-time monitorable and documented with its justification.
• Q: A pasteuriser chart shows 70 °C for four minutes. What do you do? A: Treat it as a deviation: confirm the flow-diversion valve acted, hold all product from the last conforming reading, re-pasteurise or reject after assessment, correct the cause, and record the deviation and disposition.
• Q: Is an allergen a chemical hazard? A: Yes — allergens are managed as chemical hazards, controlled through segregation, sequencing, validated cleaning and a label-verification step that is often itself a CCP.
• Q: What does Schedule 4 of the FSSAI licensing regulations cover? A: The statutory prerequisite hygiene and GMP requirements for food businesses, written part-wise by sector — manufacturing, milk, meat, catering, storage and transport, retail and e-commerce.
• Q: How does ISO 22000:2018 differ from HACCP? A: ISO 22000 wraps HACCP inside a certifiable management system with PDCA at organisation and operation levels, interactive communication, PRP/OPRP/CCP classification and risk thinking at business level.
• Q: What is an OPRP and when would you use one? A: A control measure for a significant hazard that lacks a measurable critical limit — for example validated cleaning between allergen runs — monitored against observable action criteria.
• Q: Why is HACCP not a quality management system? A: Its scope is safety; defects in taste, weight, colour or shelf-life appearance are quality issues handled by quality plans and standards, not CCPs.
• Q: When must a HACCP plan be reassessed? A: On any change to raw material, recipe, equipment, process parameter, packaging or intended use, on new regulatory or scientific information, after repeated deviations or a recall, and at a scheduled periodic review.

Common mistakes

• Listing too many CCPs — a plan with fifteen CCPs usually means prerequisite controls have been misclassified as critical.
• Writing a critical limit that cannot be monitored in real time, such as "absence of *Salmonella*" or "clean equipment".
• Confusing validation, verification and monitoring in definitions and in exam answers.
• Skipping the on-site confirmation of the flow diagram, so rework loops, bypass lines and manual additions never reach the hazard analysis.
• Treating correction (fixing the product) as corrective action (eliminating the cause) and closing the record without root-cause analysis.
• Applying HACCP to quality or legal defects, or using it to cover food fraud and food defence instead of VACCP/TACCP.
• Quoting withdrawn standards or part numbers from memory — standard numbers, FSSAI schedule parts and training ratios are amended and must be checked against the current notification.

Related topics

FSSAI and food laws in India · Food quality analysis · Sensory evaluation · Food microbiology and spoilage organisms · Thermal processing and preservation · Food packaging and shelf-life studies