Introduction to HACCP and Food Safety Management
Course resources
Download these working templates in Word and adapt them for your own workplace. They are yours to edit, print and use as part of your records.
HACCP is the method the law expects every food business to use to keep food safe. This first module explains what it is, why it is required, and the everyday controls it has to stand on to work.
What HACCP actually is
HACCP stands for Hazard Analysis and Critical Control Point. It is a way of looking at your process step by step, working out what could make the food unsafe, and putting a control at each point where it matters. The method was first developed to keep food safe for astronauts, where a single failure could not be allowed, and it has since become the basis of food safety law across the United Kingdom and Europe.
Strip away the jargon and HACCP asks three plain questions about your food. What could make this unsafe? Where in my process can I stop that happening? How do I know my control is working? Everything that follows in this course is a structured way of answering those three questions and writing down the answers so anyone can see the system is sound.
Why the law requires it
This is not optional good practice. Regulation (EC) 852/2004 on the hygiene of foodstuffs requires every food business to put in place, keep in place and review a documented food safety management system based on the principles of HACCP. The word documented matters. A system that lives only in the head chef’s memory is not a system the law recognises, and it is no defence at inspection.
In England the enforcement sits within the Food Safety and Hygiene (England) Regulations 2013. Scotland, Wales and Northern Ireland have their own near identical versions, so the HACCP duty applies wherever you trade, even if the local wording differs.
The law is proportionate. Regulation 852/2004 expects the system to match the size and nature of the business, so a sandwich bar is not held to the same documentary weight as a cook chill factory. The regulation allows smaller operations to use generic guides to good practice and simplified systems, provided the principles are still applied. What is never optional is the thinking behind HACCP, knowing your hazards and controlling them at the points that matter.
It also helps to know where the method comes from. HACCP is set out in the Codex Alimentarius, the international food standards body, as a logical sequence of twelve steps, the five preliminary steps followed by the seven principles. UK and European law are built on that same Codex sequence, so when an auditor refers to the twelve steps or the logic sequence, they mean exactly the flow you are learning here.
Prerequisite programmes come first
HACCP does not work on its own. It sits on top of a set of basic controls known as prerequisite programmes, or PRPs. These are the good hygiene practices that keep your whole operation clean and safe, and they deal with the general hazards so that HACCP can concentrate on the specific ones that need a critical control point.
The main prerequisite programmes
Cleaning and disinfection, pest control, personal hygiene, maintenance of premises and equipment, supplier and delivery control, waste management, a safe water supply, stock rotation, and staff training. Each one is a programme in its own right, with its own schedule and records.
Think of it this way. Cleaning, pest control and personal hygiene keep the general level of contamination low across the whole kitchen. If those programmes are weak, hazards appear everywhere and a HACCP plan cannot cope, because you would need a critical control point at almost every step. Strong prerequisites hold the ground steady, so HACCP can focus on the few steps where control is genuinely critical, such as cooking or chilling.
HACCP is built on prerequisites, not instead of them. If your cleaning, pest control or supplier checks are failing, fix those first. A HACCP plan laid over weak prerequisites will not hold, and an auditor will see through it at once.
A scenario from the floor
A small chilled sandwich unit was putting all its effort into a detailed HACCP plan while its cleaning was slipping and a fridge door seal was split. An audit swab found Listeria on a food contact surface. The problem was not the plan, it was the prerequisites underneath it. Listeria grows even at chilled temperatures and thrives on damp, dirty surfaces, so no amount of paperwork at the cooking step would have caught it. The fix was to tighten the cleaning schedule, repair the seal and bring maintenance back under control, then revisit the plan. It is a common pattern. When a HACCP system fails at audit, the root cause is usually a weak prerequisite, not a missing principle.
Bring it to your workplace
List your prerequisite programmes and, for each one, name where the schedule lives and who signs it off. If any programme has no written schedule or no named owner, that is the first gap to close, before you touch the HACCP plan itself.
Module summary
- HACCP stands for Hazard Analysis and Critical Control Point, and it asks what could go wrong, where to control it, and how you know the control works.
- Regulation (EC) 852/2004 requires every food business to run a documented, HACCP based system and to review it.
- Prerequisite programmes such as cleaning, pest control, personal hygiene, maintenance and supplier control handle the general hazards.
- HACCP sits on top of the prerequisites, so weak PRPs will bring a HACCP plan down with them.
