What is a HACCP plan?
HACCP stands for Hazard Analysis and Critical Control Point. In practical terms, a HACCP plan is a written map of how a food business keeps significant hazards under control. It should describe the product, ingredients, process steps, hazards, control measures, monitoring procedures, corrective actions, verification activities, and records.
For a small business, the best HACCP plan is not the longest plan. It is the one that accurately reflects the real operation. If the production team cooks fillings, cools sauces, packages baked goods, stores refrigerated products, or handles allergens, the plan should show how those steps are controlled in daily production.
Who needs a HACCP plan?
Some businesses need HACCP because of a regulation, product category, local health department requirement, customer requirement, export expectation, or certification program. Others may build a HACCP-style plan because it creates a stronger food safety system even when a formal HACCP plan is not specifically required.
Small food businesses should verify applicability before assuming. A bakery, co-packer, food truck, acidified food processor, seafood processor, juice processor, ready-to-eat manufacturer, or refrigerated food company may face different requirements depending on the product and where it is sold.
HACCP vs food safety plan
A HACCP plan and a FSMA-style food safety plan both start with hazard analysis, but they are not identical documents. HACCP focuses on the seven HACCP principles and critical control points. A food safety plan for a covered facility may include hazard analysis, preventive controls, supply-chain controls, recall plan, monitoring, corrective actions, verification, and supporting records.
For many small manufacturers, the practical question is not which term sounds better. The question is what the business, regulator, customer, or certification program expects to see. If a customer asks for a HACCP plan, do not send only a sanitation SOP. If a facility is covered by preventive controls requirements, do not assume a basic HACCP chart is enough.
The 7 principles of HACCP
The seven principles are the backbone of a HACCP plan:
- Conduct a hazard analysis.
- Determine critical control points.
- Establish critical limits.
- Establish monitoring procedures.
- Establish corrective actions.
- Establish verification procedures.
- Establish recordkeeping and documentation.
These principles are simple to list but harder to apply well. The plan should show decision making, not just check boxes. For example, if cooking is a critical control point, the plan should specify the measurable limit, how temperature is monitored, who records it, what happens if the limit is missed, and how records are reviewed.
What should be included in a HACCP plan?
A practical HACCP plan usually includes:
- Product description and intended use.
- Ingredient and packaging list.
- Process flow diagram.
- Verified process flow review.
- Hazard analysis for each process step.
- CCP decision logic or documented reasoning.
- HACCP summary table.
- Monitoring forms and record templates.
- Corrective action instructions.
- Verification and validation support where applicable.
- Prerequisite programs such as GMPs, sanitation, allergen control, pest control, calibration, supplier approval, and training.
The exact format can vary. What matters is whether the plan is complete, accurate, implemented, and supported by records.
HACCP plan template structure
A small business HACCP template should not start with a blank CCP table. Start with the product and process. A useful template structure is:
- Product description.
- Intended consumers and intended use.
- Process flow diagram.
- Hazard analysis worksheet.
- CCP or control measure summary.
- Monitoring records.
- Corrective action records.
- Verification schedule.
- Supporting programs and references.
See the dedicated HACCP plan template for a more detailed structure.
Example sections for a small food business
For a refrigerated sauce business, the plan might include receiving refrigerated ingredients, cold storage, batching, cooking, cooling, filling, labeling, finished product storage, and distribution. For each step, the business would consider biological, chemical, and physical hazards.
For a bakery, the plan might focus on allergen handling, ingredient storage, foreign material controls, baking parameters, cooling, packaging, and label review. A bakery may not always have a cooking CCP, but it still needs strong controls for allergens, sanitation, and label accuracy.
Common mistakes
Common HACCP mistakes include:
- Copying a plan from another business without changing the process.
- Listing every possible hazard as significant without explaining risk.
- Calling a step a CCP without a measurable critical limit.
- Having monitoring forms that no one uses.
- Missing corrective action instructions.
- Forgetting label and allergen controls.
- Treating prerequisite programs as separate from the HACCP system.
- Failing to review the plan after a formula, supplier, equipment, or process change.
QA perspective
From a QA perspective, a HACCP plan should be easy to audit against the floor. If the plan says metal detection is monitored every hour, there should be hourly records. If the plan says labels are checked at start-up, there should be a start-up label check. If the flow diagram shows a cooling step, the cooler, records, and employee practices should match.
The best small business plans are practical enough for production employees to follow and detailed enough for an auditor, regulator, buyer, or internal reviewer to understand the control system.
FAQ
Does every small food business need a HACCP plan?
Not always. HACCP requirements depend on the product, process, jurisdiction, customer, and certification program. Some businesses need a formal HACCP plan, some need a FSMA food safety plan, and some may need both or a customer-specific food safety program.
Can I use a generic HACCP plan template?
A template can help with structure, but the actual hazard analysis, controls, monitoring records, and verification activities must match your operation. A generic plan that does not reflect the real process is weak during an audit.
What is the most common HACCP mistake for small businesses?
One common mistake is listing hazards without showing how the business actually controls them. A usable plan connects the hazard, control measure, responsible person, monitoring step, corrective action, verification, and record.
Is a HACCP plan the same as a food safety plan?
No. They overlap, but a FSMA food safety plan for a covered facility is built around hazard analysis and risk-based preventive controls. A HACCP plan is organized around the HACCP principles and critical control points.