HACCP, or Hazard Analysis and Critical Control Points, is a systematic and preventive approach to identifying, evaluating, and controlling food safety hazards throughout the food production process.

For food manufacturers, processors, importers, distributors, restaurants, and other food businesses, food safety system provides a structured way to control biological, chemical, and physical hazards before they result in unsafe food.

A properly designed food safety system can help a business strengthen food safety controls, support regulatory compliance, improve operational consistency, and meet customer or certification requirements.

In Canada, HACCP principles are closely connected with Preventive Control Plans (PCPs) and other food safety management systems. The Canadian Food Inspection Agency (CFIA) describes a written PCP as a plan that identifies hazards and establishes measures to prevent, eliminate, or reduce those hazards to acceptable levels.

Whether you are developing a HACCP plan for the first time, preparing for an audit, or strengthening an existing food safety system, understanding how a food safety system works is essential.

Reviewed by Reza Eslami
CEO & Co-Founder, Arnika
25+ years of experience in food safety, HACCP, SFCR, SQF, GMP, and regulatory compliance.
View full profile

What Does HACCP Stand For?

HACCP stands for Hazard Analysis and Critical Control Points.

It is a preventive food safety methodology that identifies hazards before they cause harm and establishes controls at points in a process where those hazards can be effectively managed.

Food safety system focuses primarily on three categories of food safety hazards:

  • Biological hazards – such as pathogenic bacteria, viruses, and parasites
  • Chemical hazards – such as allergens, cleaning chemicals, pesticides, or other harmful substances
  • Physical hazards – such as glass, metal, stones, or other foreign materials

The objective is not simply to inspect finished products. Instead, food safety system focuses on controlling hazards throughout the process.

This preventive approach makes HACCP an important foundation for modern food safety management.

Why Is HACCP Important for Food Businesses?

Food production involves many potential sources of contamination and process failure. Hazards can enter through raw materials, employees, equipment, processing conditions, packaging, storage, transportation, or other parts of the operation.

A food safety system helps a business identify where hazards could occur and how to control them.

Prevents Food Safety Hazards

HACCP focuses on prevention rather than relying solely on finished-product inspection.

By identifying hazards and establishing appropriate controls, businesses can reduce the likelihood that unsafe food reaches consumers.

Improves Process Control

food safety system requires businesses to understand their processes and determine where control is essential.

This can improve consistency and provide employees with clear procedures for monitoring food safety controls.

Supports Regulatory Compliance

Canadian food businesses may have regulatory obligations relating to preventive controls, sanitation, processing, documentation, traceability, recalls, and other food safety requirements.

For federally regulated businesses, HACCP-based approaches can form part of a broader Preventive Control Plan (PCP). CFIA’s guidance specifically includes hazard analysis, control measures, critical control points, critical limits, monitoring, corrective actions, verification, and records within a written PCP.

Supports Customer and Certification Requirements

Many food businesses need a structured food safety system to satisfy customers, retailers, international buyers, or third-party certification programs.

HACCP principles are also incorporated into many broader food safety management and certification systems.

Strengthens Food Safety Culture

Food safety system creates clear responsibilities for management, supervisors, quality personnel, and production employees.

When implemented effectively, it helps make food safety part of everyday operations rather than something addressed only during inspections or audits.

HACCP Prerequisite Programs: The Foundation of HACCP

Before implementing HACCP, food businesses need foundational programs that provide the basic environmental and operational conditions necessary to produce safe food.

These are commonly referred to as HACCP Prerequisite Programs (PRPs).

Typical prerequisite programs include:

  • Good Manufacturing Practices (GMP)
  • Personal hygiene
  • Sanitation and cleaning
  • Pest control
  • Allergen control
  • Supplier approval
  • Preventive maintenance
  • Equipment calibration
  • Water quality
  • Waste management
  • Chemical control
  • Traceability
  • Recall procedures
  • Employee training
  • Transportation and storage controls

PRPs control general conditions within the operation, while the HACCP plan focuses on significant hazards that require specific process controls.

CFIA’s preventive-control guidance similarly identifies establishment maintenance, sanitation, hazard analysis, control measures, CCP procedures, verification, and supporting records as components of an effective preventive control system.

HACCP vs. Prerequisite Programs

One of the most common questions is the difference between food safety system and prerequisite programs.

Prerequisite Programs

PRPs establish the basic conditions needed for safe food production.

Examples include:

  • Cleaning and sanitation
  • Personal hygiene
  • Pest control
  • Equipment maintenance
  • Supplier controls

HACCP

HACCP focuses on significant hazards associated with specific products and processes and establishes controls at appropriate points in the process.

For example, a sanitation program may control general environmental contamination, while a HACCP plan may establish a specific cooking CCP with a validated critical limit.

The two systems work together.

PRPs create the foundation. hazard-control system provides the process-specific hazard control system.

For a detailed explanation, see our HACCP Prerequisite Programs resource.

HACCP and Preventive Control Plans in Canada

HACCP and Canada’s Preventive Control Plan (PCP) approach are closely related, but they are not exactly the same thing.

A hazard-control system focuses on identifying and controlling food safety hazards through the HACCP principles.

A PCP is a broader written system used to demonstrate how applicable food safety and other regulatory requirements are being addressed.

Under the Safe Food for Canadians Regulations, a written PCP may include:

  • Hazard analysis
  • Control measures
  • Critical control points
  • Critical limits
  • Monitoring procedures
  • Corrective action procedures
  • Verification procedures
  • Supporting documentation
  • Evidence that the plan has been implemented

CFIA states that businesses required to have a written PCP must develop, implement, maintain, and verify it.

Therefore, a Canadian food business should determine whether it requires a PCP and then design its food safety system according to the applicable regulatory, product, market, and customer requirements.

The 7 Principles of HACCP

The hazard-control system is based on HACCP 7 principles internationally recognized.

Principle 1: Conduct a Hazard Analysis

The first step is to identify reasonably expected biological, chemical, and physical hazards associated with ingredients, materials, processing steps, equipment, and the production environment.

The team then evaluates the hazards and determines which ones require control.

A proper hazard analysis should consider the entire process rather than focusing only on the finished product.

Principle 2: Determine Critical Control Points

A Critical Control Point (CCP) is a step where control can be applied and is essential to prevent, eliminate, or reduce a significant food safety hazard to an acceptable level.

Not every process step is a CCP.

A HACCP team must determine which steps require critical control based on the specific product, process, and hazards.

CFIA describes a CCP as a process step where a control measure with critical limits is essential to control a significant hazard.

Principle 3: Establish Critical Limits

A critical limit defines the boundary between acceptable and unacceptable control at a CCP.

Depending on the process, critical limits may involve parameters such as:

  • Time
  • Temperature
  • pH
  • Water activity
  • Concentration
  • Physical measurements

Critical limits should be scientifically or technically justified and appropriate for the hazard being controlled.

Principle 4: Establish Monitoring Procedures

Monitoring determines whether a CCP remains under control.

A monitoring procedure should define:

  • What is monitored
  • How it is monitored
  • When or how frequently monitoring occurs
  • Who performs the monitoring
  • How results are recorded

CFIA describes monitoring as a planned sequence of observations or measurements used to assess whether a control measure is under control.

Principle 5: Establish Corrective Actions

A hazard-control system must define what happens when a critical limit is not met.

Corrective action procedures should address the deviation, restore control, determine what happened to affected product, and prevent recurrence where appropriate.

CFIA identifies corrective actions as an essential component of HACCP and preventive-control systems.

Principle 6: Establish Verification Procedures

Verification confirms that the HACCP system is being implemented as intended and remains effective.

Verification activities may include:

  • Record review
  • Internal audits
  • Equipment checks
  • Calibration review
  • Testing
  • Observation
  • Review of monitoring results
  • Review of corrective actions

Verification is different from monitoring.

Monitoring checks whether a CCP is under control. Verification checks whether the overall control system is implemented and effective.

CFIA identifies verification as the sixth HACCP principle and explains that verification activities demonstrate that control measures are consistently implemented and effective.

Principle 7: Establish Documentation and Record-Keeping

A hazard-control system needs appropriate documentation and records.

Records may include:

  • Hazard analyses
  • HACCP plans
  • CCP monitoring records
  • Corrective action records
  • Verification records
  • Calibration records
  • Training records
  • Product and process information

Documentation provides evidence that the food safety system has been established and implemented.

The 12 Steps for Developing a HACCP Plan

The seven principles are commonly implemented through a structured sequence of preliminary steps.

A typical HACCP development process includes:

Step 1 – Assemble the HACCP Team

Create a team with appropriate knowledge of:

  • Food safety
  • Production
  • Quality assurance
  • Engineering or maintenance
  • Sanitation
  • The specific products and processes

The team should collectively understand the operation and the hazards associated with the food being produced.

Step 2 – Describe the Product

Document relevant information about:

  • Ingredients
  • Product characteristics
  • Processing methods
  • Packaging
  • Storage
  • Distribution
  • Shelf life

Step 3 – Identify Intended Use

Determine how the product is expected to be used and identify the intended consumer.

Consider whether the product is ready-to-eat or requires further preparation.

Step 4 – Construct the Process Flow Diagram

Develop a flow diagram showing the sequence of operations from receiving through processing, packaging, storage, and distribution.

Step 5 – Verify the Flow Diagram

The HACCP team should verify the flow diagram against actual operations.

The team should walk through the facility and confirm that the documented process reflects what actually happens.

CFIA’s HACCP guidance similarly identifies assembling the team, describing the product, identifying intended use, constructing the process flow, and verifying the flow diagram as preliminary steps before applying the seven principles.

Step 6 – Conduct the Hazard Analysis

Identify and evaluate potential biological, chemical, and physical hazards at each process step.

Step 7 – Determine Critical Control Points

Determine which process steps are CCPs for significant hazards.

Step 8 – Establish Critical Limits

Establish measurable or observable critical limits for each CCP.

Step 9 – Establish Monitoring Procedures

Define how each CCP will be monitored and how monitoring results will be recorded.

Step 10 – Establish Corrective Actions

Define what employees must do when a critical limit is not met.

Step 11 – Establish Verification Procedures

Establish procedures to verify that the hazard-control system is implemented and effective.

Step 12 – Establish Documentation and Records

Maintain the records necessary to demonstrate that the HACCP system is being followed.

What Is a Critical Control Point?

A Critical Control Point (CCP) is a specific step where a control measure is essential for controlling a significant food safety hazard.

For example, depending on the product and validated process, a cooking step may be identified as a CCP for controlling a biological hazard.

However, businesses should not automatically designate common process steps as CCPs.

A CCP must be determined through the hazard analysis and the characteristics of the specific product and process.

This is why a HACCP plan should be facility- and product-specific rather than copied from another business.

What Is a Critical Limit?

A critical limit is a measurable or observable criterion that separates acceptable from unacceptable control at a CCP.

Examples can include:

  • Minimum or maximum temperature
  • Maximum processing time
  • Maximum pH
  • Minimum concentration
  • Other scientifically justified process parameters

Critical limits must be appropriate for the hazard and the control measure being used.

CFIA notes that critical limits are predetermined measurable or observable criteria that separate acceptable from unacceptable conditions for food safety.

HACCP Monitoring vs. Verification

Monitoring and verification are often confused.

Monitoring

Monitoring is performed to determine whether a CCP is under control.

Example:

An employee measures and records the temperature of a cooking process at the required frequency.

Verification

Verification determines whether the hazard-control system and its control measures are working as intended.

Example:

A supervisor reviews monitoring records, observes the process, checks calibration, and verifies that the procedure is being followed.

Both are important components of an effective HACCP system.

How to Develop a HACCP Plan

Developing a HACCP plan should begin with understanding the actual operation.

A practical process includes:

1. Understand the Products

Review ingredients, formulations, packaging, intended use, storage, and distribution.

2. Understand the Process

Map the complete process from receiving through final distribution.

3. Review Prerequisite Programs

Confirm that foundational programs such as GMP, sanitation, pest control, allergen management, and supplier controls are established.

4. Conduct the Hazard Analysis

Identify and evaluate hazards at each process step.

5. Determine CCPs

Use the hazard analysis to determine where critical control is required.

6. Establish Critical Limits

Define appropriate limits for each CCP.

7. Develop Monitoring and Corrective Actions

Document who monitors each CCP, how frequently monitoring occurs, what happens when a deviation occurs, and how records are maintained.

8. Establish Verification

Determine how the business will verify that the hazard-control system remains effective.

9. Implement the System

Train employees and integrate HACCP procedures into daily operations.

10. Review and Maintain the Plan

Reassess the HACCP plan when there are significant changes to products, ingredients, equipment, processes, regulations, or other relevant conditions.

CFIA recommends maintaining and reassessing preventive-control plans when changes occur, including changes to regulations, products, ingredients, equipment, processing steps, or production volumes.

HACCP Documentation and Records

A HACCP system should be supported by appropriate documentation.

Depending on the operation, documentation may include:

  • Product descriptions
  • Process flow diagrams
  • Hazard analysis worksheets
  • CCP determination
  • Critical limits
  • Monitoring procedures
  • Corrective action procedures
  • Verification procedures
  • HACCP records
  • Calibration records
  • Training records
  • Supporting scientific or technical information

Records provide evidence that procedures are being followed and allow management to identify trends and investigate deviations.

For federally regulated businesses, CFIA’s PCP guidance specifically identifies hazard analysis, CCP documentation, monitoring, corrective actions, verification, and supporting documents as components of the written system.

HACCP Training

Employees involved in food safety, production, quality assurance, sanitation, and supervision should understand the HACCP procedures relevant to their responsibilities.

HACCP training may cover:

  • HACCP principles
  • Hazard identification
  • CCP determination
  • Critical limits
  • Monitoring
  • Corrective actions
  • Verification
  • Documentation
  • Prerequisite programs
  • Employee responsibilities

Training should be appropriate to the employee’s role and should be reinforced when processes, procedures, or responsibilities change.

HACCP Certification: What Does It Mean?

The term HACCP certification can refer to different things depending on the context.

It is important to distinguish between:

  • HACCP training or a HACCP course certificate
  • HACCP system development and implementation
  • Third-party certification against a specific standard or scheme
  • Customer or regulatory requirements

Completing a HACCP training course does not automatically mean that a food facility has a certified HACCP system.

Likewise, implementing a HACCP plan does not automatically mean that a facility has obtained third-party certification.

Businesses should identify the specific certification, customer, regulatory, or market requirement that applies to their operation before choosing a certification pathway.

HACCP and GFSI Certification

Many food businesses pursue broader food safety certification schemes to satisfy retailer, customer, or international market requirements.

Depending on the scheme, HACCP principles may form an important part of the food safety management system.

However, HACCP and GFSI certification are not the same thing.

Hazard-control system is a food safety methodology.

GFSI-recognized certification schemes are broader systems that may include requirements for food safety management, prerequisite programs, traceability, supplier management, food defense, food fraud, verification, and other controls.

HACCP for Canadian Food Businesses

For Canadian businesses, HACCP should be considered within the broader regulatory environment applicable to the operation.

Requirements can differ depending on:

  • Product type
  • Processing activities
  • Province or territory
  • Federal jurisdiction
  • Import or export activities
  • Customer requirements
  • Certification scheme
  • Market destination

Federally regulated businesses subject to the Safe Food for Canadians Regulations may require a written Preventive Control Plan. CFIA provides specific guidance and templates for developing, implementing, verifying, and maintaining these plans.

Businesses should therefore avoid treating HACCP as a one-size-fits-all document.

The food safety system should be designed around the actual products, processes, hazards, facility, and applicable requirements.

When Should a HACCP Plan Be Reviewed?

A HACCP plan should not be considered a document that is created once and forgotten.

It should be reviewed when significant changes occur, such as:

  • New products
  • New ingredients
  • New suppliers
  • New equipment
  • Changes to processing parameters
  • Changes to production flow
  • Changes in packaging
  • Changes in intended use
  • New regulatory requirements
  • Significant food safety incidents
  • Recalls or complaints
  • Significant changes in production volume

The objective is to ensure that the hazard analysis and control measures remain appropriate for the current operation.

CFIA recommends reassessing preventive control plans when something new, something changes, or problems occur, such as recalls, complaints, unsatisfactory laboratory results, or inspection findings.

Common HACCP Mistakes

Food businesses commonly encounter problems when developing or implementing a hazard-control system.

Copying Another Company's HACCP Plan

A HACCP plan should reflect the actual product and process.

Copying another company’s plan can result in hazards, CCPs, or control measures that do not accurately reflect your operation.

Treating Every Process Step as a CCP

Not every step is a critical control point.

CCPs should be determined through a documented hazard analysis.

Ignoring Prerequisite Programs

A HACCP plan cannot replace basic sanitation, hygiene, maintenance, pest control, allergen management, and other prerequisite programs.

Failing to Validate Critical Limits

Critical limits should have an appropriate scientific or technical basis.

Poor Record-Keeping

A procedure that is not followed or documented cannot provide reliable evidence of effective implementation.

Not Taking Corrective Action

A deviation should trigger a defined response rather than simply being recorded.

Failing to Update the HACCP Plan

Changes to products, processes, equipment, ingredients, or regulations can affect the original hazard analysis.

HACCP Consulting for Food Businesses in Canada

Developing and implementing a hazard-control system can be challenging, particularly for businesses dealing with multiple products, complex processes, regulatory requirements, or customer certification expectations.

Arnika supports food businesses with HACCP Consulting, including:

  • HACCP plan development
  • Hazard analysis
  • CCP determination
  • Critical limit development
  • HACCP documentation
  • Prerequisite program development
  • HACCP implementation
  • Employee training
  • Internal auditing
  • Corrective action support
  • Regulatory compliance support
  • Certification and audit preparation

Our approach is designed around each operation’s actual products, processes, hazards, and requirements, rather than a generic HACCP template.

HACCP Implementation: A Practical Approach

A successful hazard-control system is more than a document.

It needs to work in the real production environment.

A practical implementation should therefore include:

Assess → Analyze → Develop → Implement → Train → Monitor → Verify → Improve

Assess

Understand the facility, products, processes, existing programs, and regulatory requirements.

Analyze

Identify and evaluate food safety hazards.

Develop

Create the HACCP plan and supporting procedures.

Implement

Put the procedures into practice.

Train

Ensure employees understand their responsibilities.

Monitor

Monitor CCPs and other applicable controls.

Verify

Confirm that the system is implemented and effective.

Improve

Use records, audits, deviations, complaints, and other information to improve the system.

HACCP prerequisite programs for food safety management

HACCP FAQs

What does HACCP stand for?

HACCP stands for Hazard Analysis and Critical Control Points. It is a preventive approach used to identify, evaluate, and control significant food safety hazards.

What are the 7 principles of HACCP?

The seven principles are:

  1. Conduct a hazard analysis
  2. Determine critical control points
  3. Establish critical limits
  4. Establish monitoring procedures
  5. Establish corrective actions
  6. Establish verification procedures
  7. Establish documentation and record-keeping

What are the 12 steps of HACCP?

The 12-step approach includes assembling the HACCP team, describing the product, identifying intended use, constructing and verifying the process flow diagram, followed by application of the seven HACCP principles.

What is a CCP in HACCP?

A CCP, or Critical Control Point, is a process step where control is essential to prevent, eliminate, or reduce a significant food safety hazard to an acceptable level.

What is the difference between HACCP and GMP?

Good Manufacturing Practices (GMP) establishes general manufacturing and hygiene practices that help create a suitable environment for safe food production.

HACCP focuses on identifying and controlling significant hazards associated with specific products and processes.

GMP can therefore form part of the prerequisite foundation supporting a HACCP system.

What is the difference between HACCP and a Preventive Control Plan?

HACCP is a systematic approach for identifying and controlling food safety hazards.

A Preventive Control Plan is a broader written system used to demonstrate how applicable food safety and other regulatory requirements are addressed.

For federally regulated Canadian food businesses, a PCP may incorporate HACCP principles as part of its food safety controls.

Is HACCP certification mandatory in Canada?

There is no single universal requirement that every Canadian food business obtain the same HACCP certification.

Requirements depend on the business, products, jurisdiction, customers, market, and applicable certification or regulatory program.

Does HACCP certification mean that my facility is certified?

Not necessarily.

A HACCP training certificate demonstrates that an individual completed a training program. Facility certification involves a separate assessment or certification process where applicable.

Does HACCP replace prerequisite programs?

No.

HACCP works together with prerequisite programs such as sanitation, GMP, pest control, allergen management, maintenance, supplier controls, and personal hygiene.

Does HACCP replace a Preventive Control Plan?

Not necessarily.

For businesses subject to the SFCR, the PCP is a broader regulatory framework. HACCP principles may be incorporated into the food safety portion of the PCP.

How often should a HACCP plan be reviewed?

The appropriate review frequency depends on the operation and applicable requirements. A HACCP plan should also be reassessed when significant changes occur to products, ingredients, equipment, processes, regulations, or other relevant conditions.

Can Arnika help develop a HACCP plan?

Yes. Arnika provides HACCP consulting and food safety support for Canadian food businesses, including hazard analysis, HACCP plan development, HACCP prerequisite programs, implementation, training, food safety auditing, and certification preparation.

Conclusion

HACCP is one of the most important preventive approaches used in modern food safety management.

A well-designed HACCP system helps food businesses identify significant hazards, establish appropriate controls, monitor critical points, respond to deviations, verify effectiveness, and maintain documented evidence.

For Canadian food businesses, HACCP should be considered as part of the broader food safety and regulatory framework applicable to the operation, including prerequisite programs and, where required, a Preventive Control Plan.

The strongest HACCP systems are not simply documents created for an audit. They are practical systems that employees understand, management supports, and the business continuously monitors and improves.

If your business needs help developing, implementing, reviewing, or strengthening its HACCP system, Arnika HACCP consulting and implementation support
 can help you build a practical food safety system aligned with your products, processes, and applicable requirements.

Need help implementing HACCP, SFCR, GMP, or preparing for certification?

Contact Arnika‘s consulting team for expert guidance anywhere in Canada.