Learn the 7 HACCP principles for your food business. Hazard analysis, critical control points, monitoring, and corrective actions explained.
What Is HACCP? HACCP — Hazard Analysis and Critical Control Points — is a systematic, science-based approach to food safety management that identifies, evaluates, and controls hazards throughout the food production process. Originally developed in the 1960s by NASA and the Pillsbury Company to ensure safe food for astronauts, HACCP has since become the international gold standard for food safety management in every sector of the food industry. In Australia, HACCP-based food safety management is embedded within the Food Standards Code . While not every food business is required to have a formal, documented HACCP plan, the principles of HACCP underpin all effective food safety programs. Understanding and applying these principles is essential for any hospitality operator who wants to go beyond minimum compliance and build a truly robust food safety system. For a broader introduction, see our complete guide to food safety in Australian hospitality. Principle 1: Conduct a Hazard Analysis The first step in any HACCP system is identifying all potential hazards that could affect the safety of the food you serve. Hazards fall into three categories: Biological Hazards These are the most common cause of foodborne illness and include bacteria (such as Salmonella, Listeria, E. coli, and Campylobacter), viruses (such as norovirus and hepatitis A), and parasites. Biological hazards can enter food through contaminated ingredients, poor handling, inadequate cooking, or cross-contamination between raw and ready-to-eat foods. Chemical Hazards Chemical hazards include cleaning products, sanitisers, pesticides, allergens, and naturally occurring toxins such as ciguatera in certain fish species. These hazards are often introduced through improper storage of chemicals near food, failure to rinse surfaces after cleaning, or lack of allergen awareness. Physical Hazards Physical hazards are foreign objects that could cause injury or illness if consumed. Common examples include glass fragments, metal shavings, bone splinters, hair, plasters, and jewellery. These hazards are controlled through good manufacturing practices, equipment maintenance, and personal hygiene policies. Conducting a thorough hazard analysis requires examining every step in your food operation — from receiving ingredients to serving the finished dish. For each step, ask: what could go wrong, how likely is it, and how serious would the consequences be? Principle 2: Determine Critical Control Points A Critical Control Point (CCP) is a step in the food handling process where a control measure can be applied to prevent, eliminate, or reduce a hazard to an acceptable level. Not every step in your process is a CCP — only those where control is essential and where loss of control could result in an unacceptable food safety risk. Common CCPs in hospitality include: Cooking: Ensuring food reaches a safe internal temperature (typically 75°C) to kill harmful bacteria. Chilling: Rapidly cooling cooked food through the danger zone to prevent bacterial growth. Cold storage: Maintaining refrigerated food at or below 5°C. Hot holding: Keeping cooked food at or above 60°C during service. Receiving: Checking deliveries for correct temperature, packaging integrity, and use-by dates. The key to identifying CCPs is understanding which steps are truly critical. A useful tool is the CCP Decision Tree, which asks a series of yes/no questions to determine whether a particular step qualifies as a CCP. Principle 3: Establish Critical Limits For each CCP, you must establish critical limits — the measurable parameters that separate acceptable from unacceptable. Critical limits must be based on scientific evidence or regulatory requirements and should be specific, measurable, and unambiguous. Examples of critical limits include: Cooking temperature: Internal temperature of poultry must reach 75°C or above. Refrigeration: Cold storage must be maintained at 5°C or below. Cooling: Cooked food must be cooled from 60°C to 21°C within 2 hours, then from 21°C to 5°C within a further 4 hours. Hot holding: Food held for service must be maintained at 60°C or above. Delivery acceptance: Chilled deliveries must arrive at 5°C or below; frozen deliveries at -15°C or below. These limits are not suggestions — they are the boundaries that define safe food handling. When a critical limit is not met, the food may be unsafe and corrective action must be taken immediately. Principle 4: Establish Monitoring Procedures Monitoring is the planned observation or measurement of a CCP to ensure critical limits are being met. Effective monitoring procedures answer four questions: what will be monitored, how it will be monitored, when (or how often) it will be monitored, and who is responsible for monitoring. In a hospitality setting, monitoring typically involves: Taking temperature readings of fridges, freezers, and hot-hold equipment at regular intervals (typically two to three times per day). Checking food temperatures during cooking using a calibrated probe thermometer. Inspecting deliveries for temperature, packaging, and date compliance upon arrival. Verifying that cleaning and sanitising tasks have been completed according to the schedule. Digital monitoring tools like FoodSafety HQ's temperature monitoring system can automate much of this process, providing real-time data, automatic pass/fail determinations, and instant alerts when critical limits are breached. Principle 5: Establish Corrective Actions When monitoring reveals that a CCP is not within its critical limits, corrective actions must be taken immediately. The purpose of corrective actions is twofold: to bring the CCP back under control and to determine what to do with any food that was affected while the CCP was out of control. Corrective actions should be pre-planned so that staff know exactly what to do when a problem occurs. For example: If a fridge temperature exceeds 5°C, check the thermostat, assess the safety of stored food,