5.2 Control Measures and Hazard Analysis Worksheets
Key Takeaways
- A control measure is any action or activity that can prevent, eliminate, or reduce a significant hazard to an acceptable level.
- One hazard may need multiple control measures; one control measure may address more than one hazard.
- Hazard analysis worksheets document step, potential hazard, justification of significance, whether the hazard is addressed in the plan (Y/N), and the control measure(s).
- Saying a hazard is not significant still requires written justification—often because PRPs, supplier controls, or process design make occurrence unlikely.
- Control measures identified in Principle 1 later support CCP decisions, but not every control measure is automatically a CCP.
5.2 Control Measures and Hazard Analysis Worksheets
Quick Answer: A control measure is any action or activity that can prevent, eliminate, or reduce a significant hazard to an acceptable level. Teams capture identification and evaluation on a hazard analysis worksheet with columns for process step, hazard, significance justification, whether the hazard is in the HACCP plan (Y/N), and the control measure(s). Not every control measure becomes a CCP.
Principle 1 does not end when the team names a pathogen or a metal fragment. For each significant hazard, the team must describe how control is achieved. That description becomes the practical link between hazard science and process design—and it is usually recorded on a structured hazard analysis worksheet (sometimes called a hazard analysis form or HA form).
What Is a Control Measure?
NACMCF-aligned definitions treat a control measure as:
Any action or activity that can be used to prevent, eliminate, or reduce a significant hazard.
Unpack the three outcomes:
- Prevent — stop the hazard from occurring or being introduced (for example, approved supplier programs that exclude contaminated ingredients; sealed packaging that prevents environmental contamination; allergen segregation that prevents cross-contact).
- Eliminate — destroy or remove the hazard completely or to a practical zero for the intended purpose (for example, a validated cook that kills vegetative pathogens; metal detection with rejection that removes metal fragments from the product stream).
- Reduce to an acceptable level — lower risk to a level appropriate for the food and its use when total elimination is not the operational target (for example, controlled fermentation that reduces pathogens via pH and competition; irradiation or other lethality treatments meeting a defined log reduction).
“Acceptable level” is not “whatever the plant hopes for.” It is grounded in science, regulation, customer requirements, and intended use—especially for vulnerable consumers.
One-to-Many Relationships
Exams often test flexible thinking about control design:
- One hazard → multiple control measures. Listeria monocytogenes in an RTE line may be controlled by lethality (cook), post-cook hygienic zoning (PRP), environmental sanitation, cold storage limits, and shelf-life design. No single action always carries the whole load.
- One control measure → multiple hazards. A validated thermal process may address several vegetative pathogens at once. A metal detector may address metal from multiple upstream equipment sources.
Teams should list the control measures that actually operate in their process, not copy a generic textbook list that does not match plant reality.
Control Measures vs Critical Control Points
This is a high-yield distinction:
| Concept | Meaning |
|---|---|
| Control measure | Any action/activity that prevents, eliminates, or reduces a significant hazard |
| Control point | Any step where biological, chemical, or physical factors can be controlled |
| Critical control point (CCP) | A step where control is essential to prevent, eliminate, or reduce a significant hazard to an acceptable level |
During Principle 1, the team identifies control measures. During Principle 2, the team decides which steps are CCPs—often using a decision tree plus expert judgment. Many effective controls live correctly in prerequisite programs (GMPs, SSOPs, supplier approval, pest control, allergen programs) and never become CCPs. Elevating every control to a CCP creates an unmanageable plan.
The Hazard Analysis Worksheet
NACMCF application materials and industry training programs commonly use a table that forces disciplined thinking. Exact column titles vary slightly by company or curriculum, but exam content consistently expects you to recognize these elements:
Typical worksheet columns
- Process step — from the verified flow diagram (for example, “Receive raw chicken,” “Cook,” “Cool,” “Assemble salad,” “Package,” “Cold store”).
- Potential hazard(s) — biological, chemical, and/or physical hazards identified at that step (often listed separately so each can be evaluated).
- Justification / basis for decision — why the hazard is or is not significant (severity and likelihood reasoning; scientific or historical basis; role of existing PRPs).
- Significant hazard addressed in the HACCP plan? (Y/N) — the go/no-go decision for plan inclusion.
- Control measure(s) — how the hazard is prevented, eliminated, or reduced (process step control, PRP, supplier program, formulation, packaging, etc.).
Some worksheets add columns for hazard type (B/C/P), references, or preliminary CCP thoughts. The core story remains: step → hazard → why it matters → in plan? → how controlled.
Worked row examples (illustrative)
| Step | Hazard | Justification (summary) | In plan? | Control measure(s) |
|---|---|---|---|---|
| Cook chicken | Survival of Salmonella | Severe illness; raw poultry often contaminated; undercook reasonably likely without control | Y | Validated time/temperature cook process |
| Receive packaged flour | Metal fragments from supplier | Possible but controlled by supplier COA, magnets at supplier, and in-plant sifting/metal detection later | Y or N* | Supplier approval; in-plant metal control at grinding/sifting |
| Dry storage | Rodent filth | Severity moderate–high if occurs; likelihood low with effective pest PRP | Often N | Integrated pest management PRP |
| Label application | Undeclared allergen (wrong label) | Severe allergic reaction risk; mix-ups reasonably likely without control on multi-allergen lines | Y | Label verification / scanning control; allergen PRP |
*Whether metal is “in the plan” depends on whether the team judges it significant at that step and where essential control is applied. The worksheet must show consistent logic from evaluation to control.
Writing strong justifications
Weak justification: “Not a problem.”
Strong justification: “Pathogen X is associated with ingredient Y in published outbreak data; severity includes bloody diarrhea and HUS risk; without a controlled lethality step, survival is reasonably likely; therefore significant.”
Weak justification for “N”: “We clean a lot.”
Stronger: “Occurrence of chemical sanitizer residue at harmful levels is not reasonably likely given automatic dilution control, rinse verification, and chemical PRP; controlled under SSOPs rather than as a process CCP.”
PRPs as Control Measures
Many control measures are prerequisite program activities. That is correct HACCP design when:
- The hazard is controlled adequately by facility-wide hygienic systems, and
- Dedicated CCP monitoring with critical limits is not essential at a specific process step.
Examples: handwashing and illness policies for viral contamination risk; master sanitation for environmental pathogens supporting but not solely defining RTE safety; receiving temperature checks as part of a broader cold-chain PRP depending on product risk.
When a PRP is the stated control measure for a significant hazard, the team must still ensure the PRP is real—written, implemented, and verified—not a hopeful sentence on a form.
From Worksheet to HACCP Plan Summary
After Principle 1 (and CCP determination in Principle 2), significant hazards with CCP control appear in the HACCP plan summary table with critical limits, monitoring, corrective actions, verification, and records. Hazards marked “N” with PRP controls still need living programs. Auditors often cross-check: if the worksheet says a hazard is controlled by SSOP X, does SSOP X exist and work?
Common Worksheet Errors (Exam Traps)
- Listing only biological hazards and ignoring chemical/physical at a step.
- Marking every hazard “Y” without evaluation, then creating dozens of fake CCPs.
- Marking serious, reasonably likely hazards “N” with no scientific justification.
- Confusing control measures with monitoring (monitoring checks a control; it is not the control itself).
- Copying another plant’s worksheet for a different product/process.
- Treating quality defects as hazards “just to be safe,” which muddies the plan.
Exam Focus
Be ready to define control measures (prevent / eliminate / reduce), map worksheet columns (step, hazard, justification, Y/N in plan, control measure), and explain that Principle 1 identifies how hazards are controlled—while Principle 2 decides which steps are essential CCPs.
What is a control measure in HACCP terms?
Which set of columns best matches a typical NACMCF-style hazard analysis worksheet?
A team identifies a significant pathogen hazard at the cook step and lists a validated time/temperature process as the control measure. What is the most accurate next conceptual step in the HACCP sequence?
Why might a hazard analysis worksheet mark a hazard as not addressed in the HACCP plan (N) even though the hazard was listed?