What are the 12 steps of HACCP?

Food safety is not an afterthought. Whether you work in a restaurant, a care facility, or a production plant: everyone who handles food has to deal with HACCP. But what does this system actually involve, and how do you apply it correctly? In this article, we answer the most frequently asked questions about HACCP, from the basic principles to the 12 concrete steps you need to follow to create a working food safety plan.

Whether you want to set up a HACCP system, train your team, or simply better understand what lies behind the mandatory documentation: this overview gives you a clear and practical answer to every question.

What is HACCP and why is it mandatory?

HACCP stands for Hazard Analysis and Critical Control Points and is an internationally recognised system for identifying, assessing, and controlling food safety risks. The system is mandatory for all businesses in the food chain under European legislation, specifically Regulation (EC) No 852/2004 on the hygiene of foodstuffs.

The obligation applies to a wide range of organisations: from supermarkets and restaurants to catering companies, hospitals with a kitchen, and the food processing industry. The rationale behind the requirement is preventive working: rather than reacting to incidents after the fact, you identify where risks arise in advance and manage them systematically. Regulatory authorities such as the Food Standards Agency (FSA) check whether businesses have a demonstrable and functioning HACCP system in place.

A good HACCP system protects not only consumers, but also the organisation itself. Businesses that have no system or an inadequate one risk fines, temporary closure, or reputational damage in the event of an incident.

What are the 7 basic principles of HACCP?

The 7 basic principles of HACCP form the substantive core of the system. They describe step by step how you analyse hazards, establish critical points, and organise monitoring and correction. Each principle builds on the previous one.

Conduct a hazard analysis: Identify all biological, chemical, and physical hazards in the production process.
Determine Critical Control Points (CCPs): Establish at which points in the process hazards can be effectively controlled.
Establish critical limits: Define measurable standards, such as maximum temperatures, within which each CCP is safe.
Set up a monitoring system: Describe how and how often each CCP is measured and recorded.
Determine corrective actions: Specify what happens when a critical limit is exceeded.
Establish verification procedures: Regularly check whether the HACCP system is working correctly and is up to date.
Maintain documentation and records: Ensure demonstrable evidence of all analyses, measurements, and actions.

These seven principles are universally applicable, regardless of the size or type of organisation. They form the foundation for every HACCP plan and are elaborated through the 12 steps of the implementation process.

What are the 12 steps of the HACCP process?

The 12 steps of HACCP are the practical elaboration of the 7 basic principles. The first five steps are preparatory in nature; the final seven steps correspond to the 7 principles. Together they form a complete implementation process.

The preparatory steps (steps 1 to 5)

Assemble a HACCP team: Bring together a multidisciplinary team with knowledge of the product, the process, and food safety.
Describe the product: Document all relevant characteristics of the product, such as ingredients, composition, shelf life, and packaging.
Determine the intended use: Establish who the product is intended for and how it will be used, including by vulnerable groups.
Draw up a process flow diagram: Create a visual diagram of all steps in the production process, from raw material to finished product.
Verify the process flow diagram on-site: Check on location whether the diagram corresponds to the actual situation in practice.

The implementation steps (steps 6 to 12)

Conduct a hazard analysis (principle 1): Analyse each process step for possible hazards and assess their likelihood and severity.
Determine the Critical Control Points (principle 2): Use a decision tree to determine which steps are actually CCPs.
Establish critical limits (principle 3): Define the measurable standards for each CCP that must not be exceeded.
Set up a monitoring system (principle 4): Describe who measures, what is measured, how often, and by what method.
Determine corrective actions (principle 5): Specify which actions are taken in the event of deviations, including who is responsible.
Establish verification procedures (principle 6): Plan periodic audits, internal checks, and reviews of the system.
Ensure documentation and record-keeping (principle 7): Record all steps, measurements, and actions in writing so that you can demonstrate compliance.

Working through all 12 steps takes time, but results in a solid and demonstrable food safety system that will also hold up under inspection.

How do you assemble a HACCP team?

You assemble a HACCP team by involving people with different areas of expertise who together oversee the entire production process. The team must have knowledge of the technical processes, the products, microbiology, and the day-to-day shop floor. A single-person team is insufficient in most cases.

An effective HACCP team typically includes the following roles:

A team leader with knowledge of HACCP methodology and food safety
A production manager who knows the process from the inside
A quality officer or hygiene specialist
Shop floor employees who contribute practical knowledge
Optionally, an external expert for complex processes or when setting up the system for the first time

It is important that team members are sufficiently trained. A HACCP course for team members ensures that everyone has the same foundational knowledge and contributes to a consistent and reliable plan. The better prepared the team, the stronger the resulting HACCP plan. Want to see how digital training can support your team? Book a free demo and find out what E-lia can do for your organisation.

What is a Critical Control Point (CCP) and how do you determine it?

A Critical Control Point (CCP) is a step in the production process where control is essential to prevent, eliminate, or reduce a food safety hazard to an acceptable level. It differs from an ordinary control point in that failure directly leads to an unacceptable safety risk.

To determine whether a process step is a CCP, you use a decision tree: a structured series of yes-or-no questions that guides you systematically through the analysis process. The questions cover whether a hazard is present, whether control at this point is possible, and whether a subsequent step can eliminate the hazard.

Examples of common CCPs include:

Pasteurisation or heating to a specific core temperature
Metal detection for packaged products
Refrigeration where the temperature must remain within a defined range

A common mistake is to designate too many CCPs. Not every process step with a risk is automatically a CCP. Selectivity and substantiation are essential for a workable and credible system.

What are the most common mistakes made with HACCP?

The most common mistakes in HACCP are incomplete documentation, designating too many or too few CCPs, and having a system that looks correct on paper but is not followed in practice. Many organisations also underestimate how important it is to review the system regularly.

Other frequently made mistakes include:

Drawing up the HACCP plan once and then failing to update it when processes change
Not involving or training shop floor employees, leaving them unaware of the plan
Setting critical limits without justification or a scientific basis
Failing to keep records or only filling them in when an inspection is imminent
Not documenting corrective actions, creating confusion about who should do what when deviations occur

The solution to many of these mistakes lies in good training and clear communication with employees. When everyone understands why HACCP exists and what their role in it is, compliance becomes more natural. Regular refreshers, even for experienced employees, help keep the system alive. Tools such as toolbox talks and workplace inspections can help you embed this knowledge structurally on the shop floor.

How E-lia helps with HACCP training

Implementing HACCP effectively depends on the knowledge and engagement of your employees. But classroom-based training is time-consuming, difficult to schedule, and quickly forgotten. We offer a smarter approach: HACCP training via WhatsApp, with no login or app download required.

With our platform, you make HACCP knowledge accessible to everyone on the shop floor, including employees who are less digitally confident or work in a different language. What we offer:

Ready-made HACCP microlearning modules you can deploy immediately
Modules you can adapt to your own processes and products in 10 to 15 minutes
Automatic translations, so multilingual teams receive the same knowledge
Progress monitoring via a clear dashboard, so you always know who has completed what
Flexible scheduling of modules, for example during the onboarding of new employees or when processes change

Our platform also supports digital work instructions and tools to help you retain and maintain knowledge over time, so food safety stays embedded in your organisation long after initial training.

Want to train your team on HACCP quickly and effectively? Explore our HACCP training via WhatsApp and discover how we embed food safety knowledge accessibly and lastingly within your organisation. Or book a free demo to see the platform in action.

Frequently Asked Questions

How often must a HACCP plan be reviewed or updated?

A HACCP plan must be reviewed at least annually, but also immediately after any relevant change to the process, products, legislation, or infrastructure. Think of a new supplier, a revised recipe, or a kitchen refurbishment. It is advisable to tie reviews to fixed moments, such as an annual internal audit, so that the system remains structurally current and does not exist only on paper.

What is the difference between a CCP and a CP (control point), and why does it matter?

A control point (CP) is a step in the process where you manage a hazard, but where failure does not directly lead to an unacceptable safety risk for the consumer. A critical control point (CCP) is a step where failure does directly result in a serious hazard that is not corrected by a later step. The distinction matters because CCPs require more intensive monitoring, documentation, and corrective actions. Designating too many steps as CCPs makes the system unworkable; too few can jeopardise food safety.

Does the HACCP requirement also apply to small catering businesses or sole traders?

Yes, the HACCP requirement applies in principle to all businesses in the food chain, including small catering establishments and sole traders. European legislation does, however, offer some flexibility for small businesses: they may work with simplified HACCP systems based on sector guides for good hygiene practices (GHP). The Food Standards Agency (FSA) assesses during an inspection whether the system is demonstrable and proportionate to the size and nature of the business, but the complete absence of a system is never acceptable.

How do I ensure that employees actually follow HACCP procedures on the shop floor?

The key lies in clarity and repetition: employees must not only know what the rules are, but also understand why they exist. Practical training in their own language, visual instructions on the shop floor, and regular short refreshers are more effective than a one-off classroom session. Actively involving employees in drawing up or adapting procedures also gives them a sense of ownership. Progress monitoring helps managers quickly identify who needs extra attention or guidance.

What documentation must I be able to present during a HACCP inspection?

During an inspection, the regulatory authority will expect at minimum the following documents: the current HACCP plan including the hazard analysis and CCP overview, the process flow diagram, established critical limits with supporting justification, monitoring records (such as temperature logs), and reports of corrective actions and verifications. In addition, training records for employees must be available. Ensure that all documents are dated, signed, and easy to locate, including in digital form.

Can I set up a HACCP system without an external consultant?

Yes, that is possible, but it does require adequate preparation and knowledge within your own team. With the right training for your HACCP team members, a good sector guide, and available templates, you can build a solid system internally. An external expert can be valuable during the initial set-up, for complex production processes, or when an internal audit reveals structural shortcomings. Many organisations opt for a hybrid approach: setting up internally with occasional external review.

What are the consequences if my HACCP system is not in order during an inspection?

The consequences can range from a written warning and a requirement to make improvements, to a fine, temporary closure of the premises, or even criminal prosecution in the case of serious violations. In addition to the legal consequences, there is also the reputational risk: inspection findings may be made public. A well-functioning and demonstrable HACCP system is therefore not only a legal obligation, but also direct protection for your business continuity.