1.3 Core HACCP Definitions

Key Takeaways

  • A hazard is a biological, chemical, or physical agent reasonably likely to cause illness or injury if uncontrolled; severity is the seriousness of that hazard’s effects.
  • A control point is any step where factors can be controlled; a CCP is a step where control is essential to prevent, eliminate, or reduce a significant hazard to an acceptable level.
  • A critical limit is a max and/or min value at a CCP that separates safe from unsafe operating conditions; a deviation is failure to meet a critical limit.
  • Monitoring is a planned sequence of observations or measurements to assess whether a CCP is under control and to produce records; validation proves the plan will work if implemented; verification confirms the plan is valid and the system runs as written.
  • A HACCP plan is the written document; a HACCP system is the implemented result; prerequisite programs (including GMPs) provide the foundational operating conditions for HACCP.
Last updated: July 2026

1.3 Core HACCP Definitions

Quick Answer: Learn the official-style meanings: a hazard threatens health; a CCP is where control is essential for safety; a critical limit is the safe/unsafe boundary at that CCP; a deviation means the limit was missed; monitoring watches the CCP in real time; validation proves the plan is scientifically sound; verification proves the system works as written; prerequisite programs are the foundation; the plan is the document and the system is the implementation.

Certification exams love definition traps. Two words can look similar (control point vs critical control point, validation vs verification) yet change the entire answer. This section drills the NACMCF-aligned vocabulary used in FDA’s HACCP Principles & Application Guidelines and mirrored in Codex-trained courses.

Hazard, Hazard Analysis, and Severity

Hazard

Hazard: A biological, chemical, or physical agent that is reasonably likely to cause illness or injury in the absence of its control.

Exam implications:

  • Hazards are about safety, not burnt crust color or slightly off texture.
  • Categories are the classic triad: biological (pathogens, toxins of microbial origin in many contexts), chemical (cleaners, pesticides, undeclared allergens, natural toxins), physical (metal, glass, hard plastic, bone fragments).
  • “Reasonably likely” filters speculation; hazard analysis still considers ingredients, process steps, equipment, distribution, and consumers.

Hazard analysis

Hazard analysis: The process of collecting and evaluating information on hazards associated with the food to decide which are significant and must be addressed in the HACCP plan.

Two stages:

  1. Hazard identification — brainstorm potential hazards at each step (ingredients, process, equipment, storage, intended use).
  2. Hazard evaluation — judge severity and likelihood to decide which hazards must be controlled in the plan.

Severity

Severity: The seriousness of the effect(s) of a hazard.

When evaluating severity, teams consider consequences such as magnitude and duration of illness or injury and impact of sequelae. Severity combines with likelihood to determine significance. A rare but catastrophic hazard and a common moderate hazard can both be significant depending on the product and consumers (e.g., infant formula vs. general adult snack).

Control measure

Control measure: Any action or activity that can prevent, eliminate, or reduce a significant hazard. More than one control measure may address one hazard; one measure may address multiple hazards (classic example: pasteurization of milk).

Control Point vs. Critical Control Point (CCP)

Control point

Control point: Any step at which biological, chemical, or physical factors can be controlled.

Many steps are control points. Not every control point is a CCP.

Critical control point (CCP)

Critical control point (CCP): A step at which control can be applied and is essential to prevent or eliminate a food safety hazard or reduce it to an acceptable level.

FeatureControl pointCCP
Control possible?YesYes
Essential for safety of a significant hazard?Not necessarilyYes
Has critical limits, CCP monitoring, specific corrective actions in the plan?Not as a CCP packageYes
Typical confusionSanitation or quality stepValidated cook, metal detection as essential control, critical chill, etc.

CCP decision tree: A sequence of questions that helps determine whether a control point is a CCP. It is a tool, not a substitute for expert judgment, and it is applied after hazard analysis identifies hazards that must be addressed.

Step

Step: A point, procedure, operation, or stage in the food system from primary production to final consumption. Flow diagrams are built from steps; CCPs are assigned to steps.

Critical Limit, Criterion, Deviation, and Corrective Action

Critical limit

Critical limit: A maximum and/or minimum value to which a biological, chemical, or physical parameter must be controlled at a CCP to prevent, eliminate, or reduce to an acceptable level the occurrence of a food safety hazard.

Critical limits:

  • Separate safe vs. unsafe operating conditions at the CCP
  • Must be scientifically based (regulations, literature, studies, experts)
  • Differ from operational limits, which may be tighter for quality or early warning but are not themselves the safety boundary unless designated as the critical limit

Examples of parameters used as critical limits: temperature, time, pH, water activity (aw), line speed, thickness, available chlorine, metal detector sensitivity settings (as defined in the plan).

Criterion

Criterion: A requirement on which a judgment or decision can be based. Critical limits are criteria tied to food safety at CCPs.

Deviation

Deviation: Failure to meet a critical limit.

Not every process “blip” is a deviation. If the critical limit is a minimum internal cook of a stated temperature for a stated time, missing that standard is a deviation. Missing a quality target that is not the critical limit may be an operational issue without being a HACCP deviation — wording on exams is precise.

Corrective action

Corrective action: Procedures followed when a deviation occurs. Effective corrective actions generally:

  1. Fix the cause of noncompliance
  2. Determine disposition of affected product
  3. Record what was done

Plans should specify what happens, who is responsible, and that records will be kept.

Control (verb/noun senses)

Control means (a) managing conditions to meet criteria, or (b) the state where correct procedures are followed and criteria are met. Exam language: “Is the CCP under control?”

Monitor, Validation, and Verification

These three terms are high-yield.

Monitor

Monitor: To conduct a planned sequence of observations or measurements to assess whether a CCP is under control and to produce an accurate record for future use in verification.

Monitoring purposes:

  1. Track the operation and correct trends before a deviation when possible
  2. Detect loss of control when a critical limit is not met
  3. Create documentation for verification

Monitoring should be as continuous as feasible; when not continuous, frequency must still reliably indicate control. Methods are usually rapid physical/chemical checks or visual observations. Microbiological tests are seldom effective for real-time CCP monitoring because of time lag.

Validation

Validation: That element of verification focused on collecting and evaluating scientific and technical information to determine if the HACCP plan, when properly implemented, will effectively control the hazards.

Validation answers: “Is this the right plan scientifically?”
Examples: proving a cook delivers required lethality; confirming a metal detector setup can find the specified test pieces under operating conditions; scientific justification of critical limits.

Verification

Verification: Those activities, other than monitoring, that determine the validity of the HACCP plan and that the system is operating according to the plan.

Verification answers: “Is the plan sound, and are we actually following it with results that show control?”
Examples: calibration checks on a defined schedule, record review, targeted sampling, independent audits, observing monitoring performance, periodic comprehensive system review.

ConceptCore questionTiming emphasis
MonitoringIs the CCP under control now?Real-time / planned frequency during production
ValidationWill this plan control hazards if followed?Before/during implementation; after major changes
VerificationIs the plan valid and is the system running as written?Ongoing activities beyond monitoring

Memory hook used by many instructors: validate the science; verify the practice; monitor the CCP.

HACCP Plan, System, Team, and Prerequisite Programs

HACCP plan

HACCP plan: The written document based upon the principles of HACCP that delineates the procedures to be followed. It includes team info, product description, intended use, verified flow diagram, hazard analysis summary, and the CCP summary table (hazards, critical limits, monitoring, corrective actions, verification, records).

HACCP system

HACCP system: The result of the implementation of the HACCP plan. Paper without practice is not a system.

HACCP team

HACCP team: The group responsible for developing, implementing, and maintaining the HACCP system — ideally multidisciplinary (production, sanitation, QA, engineering, food micro) plus people who know local process variability.

Prerequisite programs

Prerequisite programs: Procedures, including Good Manufacturing Practices, that address operational conditions providing the foundation for the HACCP system.

Common PRP examples: sanitary facility design and traffic control; supplier control; written specifications; equipment sanitary design and preventive maintenance; cleaning and sanitation (master schedule); personal hygiene; training; chemical control; receiving/storage/shipping conditions; traceability and recall; pest control.

PRPs are documented and audited and managed separately from the HACCP plan, though effectiveness of PRPs is assessed when designing HACCP. HACCP does not replace GMPs; it builds on them.

Quick Definition Bank (Drill Table)

TermShort definition
HazardBio/chem/physical agent reasonably likely to cause illness or injury if uncontrolled
SeveritySeriousness of a hazard’s effects
Control pointAny step where factors can be controlled
CCPStep where control is essential to prevent/eliminate/reduce a hazard to acceptable levels
Critical limitMax/min value at a CCP for safety
DeviationFailure to meet a critical limit
MonitorPlanned observations/measurements to assess CCP control + create records
Corrective actionProcedures when a deviation occurs
ValidationScience/tech proof the plan will control hazards if implemented
VerificationActivities other than monitoring confirming plan validity and system operation
Prerequisite programFoundational conditions/practices (e.g., GMPs) supporting HACCP
HACCP planWritten HACCP document
HACCP systemImplemented plan in operation

Common Exam Traps

  1. Calling a quality-only issue a hazard
  2. Labeling every control point a CCP
  3. Using operational limits as if they were critical limits without saying so
  4. Treating lab pathogen testing of finished lots as the primary monitoring method for a cook CCP
  5. Swapping validation and verification
  6. Confusing HACCP plan (document) with HACCP system (implementation)
  7. Believing strong PRPs make principles 1–7 unnecessary — PRPs are necessary but not sufficient for significant process hazards

Lock these definitions now. Later chapters apply them to decision trees, worksheets, pathogens, and plan tables — but the vocabulary does not change.

Test Your Knowledge

According to standard HACCP definitions, a critical control point (CCP) is best described as which of the following?

A
B
C
D
Test Your Knowledge

What is a deviation in HACCP terminology?

A
B
C
D
Test Your Knowledge

Which pair correctly contrasts validation and verification?

A
B
C
D
Test Your Knowledge

Which statement correctly distinguishes a HACCP plan from a HACCP system?

A
B
C
D