What is HACCP plan?
A HACCP plan is a systematic approach to food safety that identifies, evaluates, and controls hazards in food production. It helps restaurants prevent food borne illnesses by managing critical points where contamination risks can occur during preparation and handling.
7 Steps of a HACCP Plan Explained for Restaurant Owners
Overview
Running a restaurant means more than just serving great food - it also means keeping your customers safe. One of the biggest risks in any kitchen is a foodborne illness outbreak, which can happen if food isn't stored, cooked, or handled properly. These types of problems can make people sick and lead to serious consequences for your business, including health code violations or even being shut down.
That's why having a HACCP plan is so important. HACCP stands for Hazard Analysis and Critical Control Points. It's a step-by-step way to look at your food handling process and find any points where things could go wrong - like undercooked meat, poor storage temperatures, or cross-contamination. Once you spot these problem areas, the plan helps you put controls in place to prevent them.
The goal of HACCP is simple - keep your food safe from the moment it enters your kitchen to the moment it's served to your customer. In this article, we'll walk you through the seven steps of a HACCP plan. Each step will include examples that show how you can use it in your restaurant, so it's clear, practical, and easy to follow.
That's why having a HACCP plan is so important. HACCP stands for Hazard Analysis and Critical Control Points. It's a step-by-step way to look at your food handling process and find any points where things could go wrong - like undercooked meat, poor storage temperatures, or cross-contamination. Once you spot these problem areas, the plan helps you put controls in place to prevent them.
The goal of HACCP is simple - keep your food safe from the moment it enters your kitchen to the moment it's served to your customer. In this article, we'll walk you through the seven steps of a HACCP plan. Each step will include examples that show how you can use it in your restaurant, so it's clear, practical, and easy to follow.
Step 1. Conduct a Hazard Analysis

The first step in creating a HACCP plan is conducting a hazard analysis. This means taking a close look at every part of your food preparation process to figure out where things could go wrong and cause someone to get sick. A hazard is anything that can make food unsafe. These hazards usually fall into three main types -
- Biological (like bacteria, viruses, or parasites)
- Chemical (such as cleaning supplies, allergens, or food additives)
- Physical (like glass shards, metal pieces, or plastic bits)
To begin this step, start by mapping out your entire food process - from the time ingredients arrive at your door to when a dish is served. Walk through each task - receiving, storing, preparing, cooking, cooling, and serving. At each stage, ask yourself- What could go wrong here?
For example
- When you receive raw chicken, is it cold enough to be safe?
- During preparation, is there a risk of cross-contamination with cutting boards or knives?
- While cooking, are temperatures high enough to kill harmful bacteria?
Let's say you serve a chicken sandwich. You'd look at how the chicken is stored in the fridge, how it's handled during prep, how long it's cooked, and how it's held before serving. You might realize that if the chicken isn't cooked to the right internal temperature, harmful bacteria like salmonella could still be present. That's a biological hazard.
Another example - If a cook forgets to wipe down a prep surface after slicing raw meat, and then preps vegetables on the same board, that's a clear risk of cross-contamination.
This step is all about identifying the risks before they become problems. Talk to your staff, observe how they work, and write down any potential hazards you find.
- Biological (like bacteria, viruses, or parasites)
- Chemical (such as cleaning supplies, allergens, or food additives)
- Physical (like glass shards, metal pieces, or plastic bits)
To begin this step, start by mapping out your entire food process - from the time ingredients arrive at your door to when a dish is served. Walk through each task - receiving, storing, preparing, cooking, cooling, and serving. At each stage, ask yourself- What could go wrong here?
For example
- When you receive raw chicken, is it cold enough to be safe?
- During preparation, is there a risk of cross-contamination with cutting boards or knives?
- While cooking, are temperatures high enough to kill harmful bacteria?
Let's say you serve a chicken sandwich. You'd look at how the chicken is stored in the fridge, how it's handled during prep, how long it's cooked, and how it's held before serving. You might realize that if the chicken isn't cooked to the right internal temperature, harmful bacteria like salmonella could still be present. That's a biological hazard.
Another example - If a cook forgets to wipe down a prep surface after slicing raw meat, and then preps vegetables on the same board, that's a clear risk of cross-contamination.
This step is all about identifying the risks before they become problems. Talk to your staff, observe how they work, and write down any potential hazards you find.
Elevate Food Safety, Simplify Compliance!
Experience Seamless Food Safety with Altametrics!
Step 2. Identify Critical Control Points (CCPs)
Once you've listed all the possible food safety hazards in your kitchen, the next step is to figure out where you can control or eliminate them. These spots are called Critical Control Points, or CCPs. A CCP is a step in your process where you must take action to prevent a food safety hazard from causing harm.
Think of it this way - if something can go seriously wrong with your food, where in the process can you stop it from happening? That's your CCP.
Let's go back to the chicken sandwich example. One of the most obvious CCPs is cooking the chicken. If raw chicken isn't cooked to the right internal temperature (165F or 74C), bacteria like salmonella and campylobacter may survive. By cooking it to the proper temperature, you kill those harmful bacteria - that makes cooking a critical point of control.
Another example might be cold storage. If you're storing dairy or seafood, your refrigerator needs to stay at or below 40F (4C). If the temperature goes above that for too long, bacteria can grow quickly. So maintaining cold holding temperatures is another CCP.
Not every step in your kitchen will be a CCP. For example, washing produce may be important, but it's not necessarily the last point where you can control a hazard. A CCP is typically a point where -
- A hazard can be prevented, removed, or reduced to a safe level
- There is no other later step that will fix the problem if it goes wrong
- A measurable action (like time or temperature) can be used to track safety
To identify CCPs in your restaurant, look at each hazard from your hazard analysis and ask- Is there a step where I must control this hazard to ensure the food is safe? If the answer is yes, and there's no later step that can fix the problem, that step is a CCP.
Think of it this way - if something can go seriously wrong with your food, where in the process can you stop it from happening? That's your CCP.
Let's go back to the chicken sandwich example. One of the most obvious CCPs is cooking the chicken. If raw chicken isn't cooked to the right internal temperature (165F or 74C), bacteria like salmonella and campylobacter may survive. By cooking it to the proper temperature, you kill those harmful bacteria - that makes cooking a critical point of control.
Another example might be cold storage. If you're storing dairy or seafood, your refrigerator needs to stay at or below 40F (4C). If the temperature goes above that for too long, bacteria can grow quickly. So maintaining cold holding temperatures is another CCP.
Not every step in your kitchen will be a CCP. For example, washing produce may be important, but it's not necessarily the last point where you can control a hazard. A CCP is typically a point where -
- A hazard can be prevented, removed, or reduced to a safe level
- There is no other later step that will fix the problem if it goes wrong
- A measurable action (like time or temperature) can be used to track safety
To identify CCPs in your restaurant, look at each hazard from your hazard analysis and ask- Is there a step where I must control this hazard to ensure the food is safe? If the answer is yes, and there's no later step that can fix the problem, that step is a CCP.
Step 3. Establish Critical Limits
After identifying your Critical Control Points (CCPs), the next step is to set critical limits for each one. A critical limit is a specific, measurable standard that must be met to ensure food safety. If the food doesn't meet this limit, it may not be safe to serve.
Think of critical limits as the safety boundaries for each CCP. They're usually based on things like temperature, time, pH level, or chemical concentration. These limits must be clear and easy to measure so your staff can check whether food is within the safe range.
Let's go back to the example of cooking chicken. We already know that one CCP is the cooking step. The critical limit for that step would be an internal temperature of 165F (74C). If the chicken doesn't reach that temperature, the food is unsafe to serve - plain and simple.
Another example- for cold storage of perishable foods like seafood or milk, the critical limit might be 40F (4C) or lower. If your fridge rises above that temperature, harmful bacteria can start to grow quickly. That means the cold storage step has failed to stay within the critical limit.
Here are some other common critical limits in a restaurant setting -
- Hot holding foods must be kept at 135F (57C) or higher
- Reheating leftovers must reach 165F (74C) within 2 hours
- Cooling cooked foods must bring the temperature down from 135F to 70F within 2 hours, and from 70F to 41F within 4 more hours
Critical limits aren't just made up - they should be based on trusted food safety guidelines from agencies like the FDA or your local health department. You can also consult food code regulations or industry best practices to make sure your limits are correct.
Once your critical limits are set, be sure they are written clearly in your HACCP plan and posted near workstations when possible. Staff should be trained to check and record these limits as part of their daily tasks.
Think of critical limits as the safety boundaries for each CCP. They're usually based on things like temperature, time, pH level, or chemical concentration. These limits must be clear and easy to measure so your staff can check whether food is within the safe range.
Let's go back to the example of cooking chicken. We already know that one CCP is the cooking step. The critical limit for that step would be an internal temperature of 165F (74C). If the chicken doesn't reach that temperature, the food is unsafe to serve - plain and simple.
Another example- for cold storage of perishable foods like seafood or milk, the critical limit might be 40F (4C) or lower. If your fridge rises above that temperature, harmful bacteria can start to grow quickly. That means the cold storage step has failed to stay within the critical limit.
Here are some other common critical limits in a restaurant setting -
- Hot holding foods must be kept at 135F (57C) or higher
- Reheating leftovers must reach 165F (74C) within 2 hours
- Cooling cooked foods must bring the temperature down from 135F to 70F within 2 hours, and from 70F to 41F within 4 more hours
Critical limits aren't just made up - they should be based on trusted food safety guidelines from agencies like the FDA or your local health department. You can also consult food code regulations or industry best practices to make sure your limits are correct.
Once your critical limits are set, be sure they are written clearly in your HACCP plan and posted near workstations when possible. Staff should be trained to check and record these limits as part of their daily tasks.
Step 4. Establish Monitoring Procedures

Once you've set clear critical limits for each Critical Control Point (CCP), the next step is to make sure those limits are actually being followed every day. That's where monitoring procedures come in. Monitoring means checking and recording what's happening at each CCP so you can catch problems before they affect your customers.
Monitoring should be simple, routine, and done by trained staff. The goal is to keep a close eye on the points in your process where something could go wrong - and to catch it right away if it does.
Let's go back to the example of cooking chicken. If your critical limit is 165F, then the monitoring procedure could be using a calibrated food thermometer to check the internal temperature of each chicken filet before it's served. The cook then records the temperature in a logbook or digital system.
Another example - If one of your CCPs is cold storage, then your staff might check and record refrigerator and freezer temperatures at set times each day - say, at the start of each shift. If the temperature ever goes above 40F, you'll know there's a problem and can act quickly.
Here are some important points to remember when setting up your monitoring procedures -
- Decide who is responsible for each monitoring task (e.g., line cook, prep chef, manager)
- Choose a clear method for monitoring (e.g., thermometer reading, visual check, pH strip)
- Set a schedule for how often checks must happen (e.g., every 2 hours, each batch, per shift)
- Document results in a consistent way. Use logs, checklists, or digital apps
Monitoring isn't just about catching mistakes - it also helps prove that your restaurant is taking food safety seriously. If a health inspector asks how you ensure safe food, your monitoring records are your proof.
It's important to train your team to take these checks seriously and to understand why they matter. A missed temperature check could be the difference between a safe meal and a foodborne illness.
Monitoring should be simple, routine, and done by trained staff. The goal is to keep a close eye on the points in your process where something could go wrong - and to catch it right away if it does.
Let's go back to the example of cooking chicken. If your critical limit is 165F, then the monitoring procedure could be using a calibrated food thermometer to check the internal temperature of each chicken filet before it's served. The cook then records the temperature in a logbook or digital system.
Another example - If one of your CCPs is cold storage, then your staff might check and record refrigerator and freezer temperatures at set times each day - say, at the start of each shift. If the temperature ever goes above 40F, you'll know there's a problem and can act quickly.
Here are some important points to remember when setting up your monitoring procedures -
- Decide who is responsible for each monitoring task (e.g., line cook, prep chef, manager)
- Choose a clear method for monitoring (e.g., thermometer reading, visual check, pH strip)
- Set a schedule for how often checks must happen (e.g., every 2 hours, each batch, per shift)
- Document results in a consistent way. Use logs, checklists, or digital apps
Monitoring isn't just about catching mistakes - it also helps prove that your restaurant is taking food safety seriously. If a health inspector asks how you ensure safe food, your monitoring records are your proof.
It's important to train your team to take these checks seriously and to understand why they matter. A missed temperature check could be the difference between a safe meal and a foodborne illness.
Create, Implement, and Execute Multiple Daily Checklists
Streamline Your Operations with Altametrics
Step 5. Establish Corrective Actions
Even with the best systems in place, things can go wrong. That's why Step 5 of your HACCP plan is about establishing corrective actions - clear steps your team should take when a critical limit is not met. These actions help prevent unsafe food from reaching customers and ensure that the problem is fixed right away.
Corrective actions should be simple, specific, and easy to follow. They should answer the question- What do we do when something goes off track?
Let's say your line cook checks a chicken breast and sees it only reached 155F instead of the required 165F. The corrective action could be -
1. Return the chicken to the grill and cook it until it reaches the correct internal temperature.
2. Re-check the temperature.
3. Record the incident and action taken.
Another example - If a cooler is found at 45F instead of 40F, your corrective action might be-
1. Move perishable items to another working cooler.
2. Call maintenance to fix the broken equipment.
3. Check the condition of the affected food and discard anything questionable.
4. Log the event and inform the manager.
Here's how to set up strong corrective actions -
1. Be specific - Don't just say reheat food. Say reheat to 165F within 2 hours.
2. Assign responsibility - Make sure staff know who handles what when limits aren't met.
3. Document everything - Keep records of what went wrong, what was done, and who did it.
4. Use the event as a learning opportunity - If the same problem happens more than once, you may need to update your procedures or provide more training.
Corrective actions help prevent minor slip-ups from becoming major health risks. They also show health inspectors that your team is prepared to handle problems the right way. Skipping this step or being vague about what to do can lead to unsafe food, wasted product, and compliance issues.
Corrective actions should be simple, specific, and easy to follow. They should answer the question- What do we do when something goes off track?
Let's say your line cook checks a chicken breast and sees it only reached 155F instead of the required 165F. The corrective action could be -
1. Return the chicken to the grill and cook it until it reaches the correct internal temperature.
2. Re-check the temperature.
3. Record the incident and action taken.
Another example - If a cooler is found at 45F instead of 40F, your corrective action might be-
1. Move perishable items to another working cooler.
2. Call maintenance to fix the broken equipment.
3. Check the condition of the affected food and discard anything questionable.
4. Log the event and inform the manager.
Here's how to set up strong corrective actions -
1. Be specific - Don't just say reheat food. Say reheat to 165F within 2 hours.
2. Assign responsibility - Make sure staff know who handles what when limits aren't met.
3. Document everything - Keep records of what went wrong, what was done, and who did it.
4. Use the event as a learning opportunity - If the same problem happens more than once, you may need to update your procedures or provide more training.
Corrective actions help prevent minor slip-ups from becoming major health risks. They also show health inspectors that your team is prepared to handle problems the right way. Skipping this step or being vague about what to do can lead to unsafe food, wasted product, and compliance issues.
Step 6. Establish Verification Procedures
Now that you have your monitoring and corrective actions in place, the next step is to make sure your entire HACCP system is actually working the way it should. That's where verification procedures come in.
Verification means double-checking that your food safety plan is effective, and that your team is following it correctly. While monitoring happens every day and focuses on keeping things under control in the moment, verification is more about reviewing the big picture.
For example, if your staff is recording the temperature of cooked chicken every shift, a manager might verify that -
- Thermometers are being calibrated regularly to ensure accuracy.
- Temperature logs are filled out completely and correctly.
- Corrective actions were taken and documented when needed.
Here are some common ways to verify your HACCP plan -
1. Reviewing records - Go over temperature logs, cleaning checklists, and corrective action forms regularly to ensure they are complete and accurate.
2. Equipment checks - Make sure thermometers, refrigerators, and other critical equipment are working and calibrated.
3. Observing procedures - Watch staff during prep, cooking, and cleaning to ensure they are following food safety practices.
4. Internal audits - Schedule regular reviews of your HACCP plan to check for gaps or outdated steps.
Let's say you find that temperature logs are being filled out at the end of the day, instead of throughout the shift. That's a sign your monitoring isn't happening in real time, and a change is needed. Verification helps you catch these issues before they lead to bigger problems.
It's also a good idea to assign verification tasks to supervisors or managers who are trained in food safety. Their job is to ask - Are we doing what we say we're doing? And is it working?
Verification helps you stay confident that your plan is more than just words on paper - it's something your team is using every day to protect your customers and your business.
Verification means double-checking that your food safety plan is effective, and that your team is following it correctly. While monitoring happens every day and focuses on keeping things under control in the moment, verification is more about reviewing the big picture.
For example, if your staff is recording the temperature of cooked chicken every shift, a manager might verify that -
- Thermometers are being calibrated regularly to ensure accuracy.
- Temperature logs are filled out completely and correctly.
- Corrective actions were taken and documented when needed.
Here are some common ways to verify your HACCP plan -
1. Reviewing records - Go over temperature logs, cleaning checklists, and corrective action forms regularly to ensure they are complete and accurate.
2. Equipment checks - Make sure thermometers, refrigerators, and other critical equipment are working and calibrated.
3. Observing procedures - Watch staff during prep, cooking, and cleaning to ensure they are following food safety practices.
4. Internal audits - Schedule regular reviews of your HACCP plan to check for gaps or outdated steps.
Let's say you find that temperature logs are being filled out at the end of the day, instead of throughout the shift. That's a sign your monitoring isn't happening in real time, and a change is needed. Verification helps you catch these issues before they lead to bigger problems.
It's also a good idea to assign verification tasks to supervisors or managers who are trained in food safety. Their job is to ask - Are we doing what we say we're doing? And is it working?
Verification helps you stay confident that your plan is more than just words on paper - it's something your team is using every day to protect your customers and your business.
Step 7. Record-Keeping and Documentation
The last step in building your HACCP plan is to create a solid record-keeping and documentation system. This step ties everything together by showing proof that your food safety processes are in place, being followed, and working.
Good records help you do three important things -
1. Prove compliance with food safety regulations.
2. Track patterns over time to catch small issues before they become big ones.
3. Demonstrate responsibility to health inspectors, customers, and staff.
Your records should include everything related to your HACCP system, such as -
- The hazard analysis you conducted in Step 1.
- A list of your Critical Control Points (CCPs).
- Your critical limits for each CCP.
- Monitoring logs, like temperature checks or refrigerator readings.
- Corrective action reports showing what was done when something went wrong.
- Verification records to show that procedures and equipment were regularly checked.
For example, if you check refrigerator temperatures twice a day, those readings should be logged and dated. If a fridge went above 40F and you moved the food to another unit, that action should be written down too.
It doesn't have to be complicated. Many restaurants use printed checklists, binders, or digital systems to stay organized. What's most important is that your records are -
1. Accurate - Write things down as they happen, not later.
2. Complete - Don't skip steps or leave blanks.
3. Accessible - Keep them somewhere easy to find during inspections or team reviews.
4. Up to date - Make sure forms and logs match your current procedures.
Training your staff to complete logs correctly is key. Everyone on your team should understand why the paperwork matters - not just that it's something we have to do.
Remember, you can have the best HACCP plan in the world, but if you can't prove it with records, it's as if it doesn't exist. Clear documentation shows that your restaurant is serious about food safety.
Good records help you do three important things -
1. Prove compliance with food safety regulations.
2. Track patterns over time to catch small issues before they become big ones.
3. Demonstrate responsibility to health inspectors, customers, and staff.
Your records should include everything related to your HACCP system, such as -
- The hazard analysis you conducted in Step 1.
- A list of your Critical Control Points (CCPs).
- Your critical limits for each CCP.
- Monitoring logs, like temperature checks or refrigerator readings.
- Corrective action reports showing what was done when something went wrong.
- Verification records to show that procedures and equipment were regularly checked.
For example, if you check refrigerator temperatures twice a day, those readings should be logged and dated. If a fridge went above 40F and you moved the food to another unit, that action should be written down too.
It doesn't have to be complicated. Many restaurants use printed checklists, binders, or digital systems to stay organized. What's most important is that your records are -
1. Accurate - Write things down as they happen, not later.
2. Complete - Don't skip steps or leave blanks.
3. Accessible - Keep them somewhere easy to find during inspections or team reviews.
4. Up to date - Make sure forms and logs match your current procedures.
Training your staff to complete logs correctly is key. Everyone on your team should understand why the paperwork matters - not just that it's something we have to do.
Remember, you can have the best HACCP plan in the world, but if you can't prove it with records, it's as if it doesn't exist. Clear documentation shows that your restaurant is serious about food safety.
Must-Read Content
Frequently Asked Questions
What's the difference between a hazard and a risk in HACCP?
A hazard is something that can cause harm (e.g., bacteria), while risk is the chance that the hazard will actually cause harm in your process.
What's the difference between a CCP and a critical limit?
A CCP (Critical Control Point) is where a hazard can be prevented or controlled. A critical limit is the measurable standard (like temperature) that must be met at that point.
Are digital tools or apps available for managing a HACCP plan?
Yes, there are many digital HACCP tools and apps that help with logging, monitoring, alerts, and documentation. They can save time and reduce human error.
What's the biggest mistake restaurants make with HACCP plans?
One common mistake is creating a HACCP plan and then not following it daily. The plan only works if it's used consistently and accurately.