9.1 Principle 2: Identify Critical Control Points

9.1 Principle 2: Identify Critical Control Points

Quick Answer: A Critical Control Point (CCP) is a step at which control can be applied and is essential to prevent, eliminate, or reduce a significant food-safety hazard to an acceptable level. Cooking, cooling, metal detection, and safety-critical formulation (for example pH or water activity) are classic CCP candidates. Ordinary control points and PRPs are important, but they are not automatically CCPs.

After Principle 1 names the significant hazards for each process step, Principle 2 asks a harder operational question: Where must control be applied so that this product is safe? NACMCF’s HACCP Principles & Application Guidelines define a CCP as a point, step, or procedure at which control can be applied and is essential to prevent or eliminate a food-safety hazard or reduce it to an acceptable level. That definition is the exam and industry standard.

What Makes a Step a CCP?

Three ideas sit inside the definition:

1. Control can be applied at that step — there is a measurable action or condition the plant can set, check, and document (temperature/time, pH, screen size, detector sensitivity, and so on).
2. The step is essential for safety — if control fails at this step and is not reliably achieved later, the significant hazard is reasonably likely to cause illness or injury.
3. The target is a significant hazard already justified in Principle 1 — CCPs are not invented for quality defects, customer preference, or “we always check here.”

If any of those three fail, the step is usually not a CCP, even if the plant wisely monitors it.

Classic CCP Examples (and Why They Fit)

Cooking (lethality / thermal process)

A validated cook step for raw ground beef, poultry, or a ready-to-eat (RTE) product often is a CCP when cooking is the primary lethality step against vegetative pathogens such as Salmonella or STEC. Control is applied as time and temperature; the step is essential because pathogens that survive cooking may not be eliminated later.

Cooling

Cooling of cooked product can be a CCP when the significant hazard is spore-forming pathogens (for example Clostridium perfringens or C. botulinum) that germinate and multiply if product stays too long in the temperature danger zone. The control is time-and-temperature profile during cool-down.

Metal detection (or equivalent physical-hazard control)

Where metal fragments are a significant physical hazard and detection/rejection at a defined step is essential before packaging or shipping, metal detection is frequently designated a CCP. The control is calibrated detection sensitivity plus rejection of nonconforming product.

Formulation for safety (pH, water activity, salt, preservatives)

When product safety depends on achieving a maximum pH, maximum water activity (aw), minimum salt or acid level, or another formulation parameter that prevents pathogen growth or toxin production, that formulation or acidification step can be a CCP. Example thinking: acidifying a product so C. botulinum cannot grow under intended distribution conditions.

Other legitimate CCP candidates (facility-specific): pasteurization; commercial sterilization; irradiation where used as the lethality step; sieve or filter steps that are the last essential control for a significant physical hazard; labeled allergen declaration only when the plan treats labeling as the essential control for undeclared allergen risk (many plants instead manage allergens primarily through PRPs—do not assume).

CCP vs Control Point vs Prerequisite Program

Exam traps often mix three layers of control:

Key distinctions:

• Every CCP is a control point, but not every control point is a CCP. Criticality requires essential control of a significant hazard.
• PRPs keep the environment and operations under control so HACCP can focus on the few steps that must work. A sanitation failure can still cause a crisis, but sanitation is usually managed as a PRP/SSOP, not as a CCP for every product step—unless the hazard analysis shows that a specific sanitation-related control is the essential CCP for a significant hazard (unusual, but possible in specialized designs).
• Do not multiply CCPs to look thorough. Too many CCPs dilute monitoring resources and confuse operators. Too few leave significant hazards without essential control. The right number is justified by science and process design, not by copying a competitor’s plan.

Process Design Drives CCP Selection

Two plants making “similar” products can have different CCPs:

• Plant A cooks raw poultry to a validated lethality and packages it refrigerated → cooking (and possibly cooling) may be CCPs.
• Plant B receives fully cooked product and only slices and packs under sanitation controls → there may be no cook CCP; significant hazards may be controlled at receiving temperature, metal detection, or allergen labeling depending on the analysis.
• Plant C relies on low pH and low aw for ambient-stable safety rather than a kill step → formulation parameters may be CCPs instead of cooking.

CCPs follow this facility’s verified flow diagram, ingredients, equipment, and intended use—not a generic industry checklist pasted without review.

Principle 2 Outputs for the Plan

When Principle 2 is complete, the team should be able to list, for each significant hazard, the process step(s) designated as CCPs and a brief justification (why control is essential here). That list feeds Principle 3 (critical limits), Principle 4 (monitoring), and Principle 5 (corrective actions). If the team cannot explain why a step is essential, it is not ready to be called a CCP.