Critical control points in food safety: how CCPs work in HACCP, how critical limits are set and real examples

A manufacturer can have spotless production lines, trained operators and a clean audit history and still ship contaminated product. The cause is usually a single step where a hazard was never stopped: a cook that ran short, a chiller that drifted warm or a metal detector nobody tested. When that product reaches a retailer's shelf, the result is a recall, a damaged brand and a difficult conversation with every customer who stocked it.

Food safety systems exist to find those steps before a customer does. They do it by choosing the few points in a process where a failure cannot be fixed later and giving each one a measurable limit, a regular check and a named person who acts when something slips. Those points have a precise name and a precise definition, and understanding both is the foundation for everything else in a HACCP plan.

What is a critical control point?

A critical control point (CCP) is a step in a food process where control is essential to prevent or eliminate a food safety hazard or reduce it to an acceptable level.

The Codex Alimentarius Commission defines it in its HACCP annex to CAC/RCP 1-1969 (Rev. 4, 2003) as “A step at which control can be applied and is essential to prevent or eliminate a food safety hazard or reduce it to an acceptable level.” Read the full text in the Codex HACCP annex.

In everyday terms, a CCP is the last reliable chance to deal with a hazard. Depending on the operation, it might be a cooking step that kills bacteria, a chilling step that stops them multiplying or a metal detector that catches foreign objects. Each one sits at a point where a failure cannot be fixed later in the process.

CCPs are one part of HACCP, which Codex defines as “A system which identifies, evaluates, and controls hazards which are significant for food safety.” A CCP always belongs to a specific operation. Codex notes that CCPs listed in any example might not be the only ones identified for a specific application or might be of a different nature, so a plan cannot be copied from another site. Not every step qualifies either, because the intent of HACCP is to focus control at CCPs.

How a CCP is identified, limited, monitored and corrected

Once a step is a CCP, it moves through the same chain of decisions, from spotting the hazard to proving the control works. The table below shows each element with the Codex wording or a short paraphrase.

Element	What it means	Example
Hazard analysis	Collecting and evaluating information on hazards to decide which are significant for food safety	Raw chicken may carry harmful bacteria
CCP determination	Choosing the steps where control is essential for a significant hazard	The cooking step
Critical limit	“A criterion which separates acceptability from unacceptability”	Internal temperature of 165 °F (73.9 °C)
Monitoring	A planned sequence of observations or measurements that shows whether a CCP is under control	A probe thermometer reading on every batch
Corrective action	“Any action to be taken when the results of monitoring at the CCP indicate a loss of control”	Continue cooking, recheck and record
Verification	Methods, procedures and tests beyond monitoring that show the plan is being followed. Validation is separate: evidence that the plan’s elements are effective	Reviewing records and auditing the process

Finding the CCP with the decision tree

Codex says a decision tree can help determine a CCP by giving a logical reasoning approach. It is meant for guidance, should be applied flexibly and does not suit every situation, so other approaches may be used. If a hazard must be controlled but no CCP is found, Codex says the operation should be redesigned so a control measure exists.

Setting critical limits

Critical limits must be specified and validated for each CCP. Codex lists the criteria often used as temperature, time, moisture level, pH, water activity, available chlorine and sensory parameters such as visual appearance and texture. Limits should be measurable. Where expert guidance has been used to set them, the operation must confirm the limits fully apply to its own product and process.

Monitoring and corrective action

Monitoring must be able to detect loss of control at the CCP and ideally give that information in time to adjust the process before a limit is breached. Codex requires a designated person with the knowledge and authority to carry out corrective actions to evaluate the monitoring data. A failure to meet a critical limit is called a deviation. Corrective actions must bring the CCP back under control, cover proper disposition of the affected product and be documented.

Example of a CCP in practice: cooking chicken to a safe core temperature

Consider a food manufacturer that cooks chicken breasts for sale to retailers. The scenario below is illustrative, and the temperature comes from the USDA Food Safety and Inspection Service (FSIS), which lists 165 °F (73.9 °C) as the safe minimum internal temperature for all poultry in its safe temperature chart.

• Hazard: harmful bacteria in raw poultry.
• CCP: the cooking step, because no later step reliably removes the hazard.
• Critical limit: an internal temperature of 165 °F (73.9 °C) measured with a food thermometer.
• Monitoring: a line operator checks the thickest part of the chicken, away from bone, and records the reading for each batch.
• Deviation: a reading of 158 °F falls below the limit.
• Corrective action: the batch goes back on the heat, is checked again and the new reading is recorded. If the site cannot show the product reached the limit, the product is disposed of.

Verification then asks a different question: not whether this batch passed, but whether the plan works. Auditing methods, procedures and tests are all verification activities in the Codex annex. The figure also belongs in a plan only after it is validated for the operation, because limits differ by product and jurisdiction.

How CCPs differ from prerequisite programs and control measures

A CCP does not work alone. Codex says prerequisite programs such as good hygienic practices should be in place before HACCP is applied, so a CCP sits on top of basic hygiene and does not replace it.

Term	Purpose	Scope	Timing
Prerequisite programs	Provide the hygiene foundation HACCP depends on, including training	The whole operation	In place before HACCP is applied, and well established, fully operational and verified
Control measure	Any action or activity that prevents or eliminates a hazard or reduces it to an acceptable level	Any step. More than one measure may control a hazard and one measure may control more than one hazard	Whenever the hazard analysis shows it is needed
CCP	The step where control is essential for a significant hazard	One specific step in a specific operation	Monitored continuously or often enough to show the step is under control

Questions that come up when building a first CCP list

The sections above cover the mechanics. These answers deal with the practical questions that usually follow.

How many CCPs does a HACCP plan need?

There is no fixed number. Each operation works it out through its own hazard analysis, and Codex says more than one CCP may address the same hazard. If a hazard must be controlled but no CCP exists, the process should be changed so one can be applied. A simple process may have one or two CCPs while a complex one may have many more.

What are the seven HACCP principles and where do CCPs fit?

Codex lists them as hazard analysis, determining CCPs, establishing critical limits, monitoring, corrective action, verification and documentation. CCP determination is Principle 2, and the other principles build around it. Ideagen covers all seven with examples in its post on the importance of HACCP in the food industry.

Who decides what the CCPs are?

The HACCP team does, using a multidisciplinary approach. Codex says successful application needs the full commitment and involvement of management and the work force, with expertise such as microbiology, food technology and engineering as appropriate. The resulting plan sits inside a wider food safety management system.

Do CCPs apply outside food manufacturing?

Yes. Codex says HACCP can be applied throughout the food chain from primary production to final consumption. It also notes that the concept can be applied to other aspects of food quality, although the Codex text itself considers food safety.

What a CCP asks of your team on the next shift

Pick the few steps where a failure cannot be recovered later, give each a limit someone can measure and name the person who acts when the reading falls short. Then keep the plan honest. Codex says a HACCP application should be reviewed and changed whenever the product, process or any step is modified, so a new supplier, recipe or oven should trigger a fresh look at the limits. A CCP that nobody checks is only a line on a plan, and one that is checked and acted on is what keeps an unsafe batch from leaving the building.