HACCP Audits & Reviews

HACCP Internal Audit Checklist

Complete Internal HACCP Audit Checklist for UK Food Businesses

A structured checklist is the backbone of an effective internal HACCP audit. Without one, auditors tend to check what they remember, miss entire sections, and produce inconsistent results between audit cycles. This checklist covers every element of a HACCP-based food safety management system, organised by the Codex Alimentarius structure. Each item includes what to check, what evidence to look for, and guidance on scoring. Use it as-is or adapt it to your specific operation. The goal is a systematic review that leaves no part of your food safety system unexamined.

Key takeaways

A structured checklist ensures every element of your HACCP system is audited consistently across cycles.

Each check item should have defined evidence requirements so the auditor knows what to look for.

Cover preliminary steps, hazard analysis, CCP controls, monitoring, corrective actions, verification, and prerequisite programmes.

Interview staff as well as reviewing documents - understanding on the ground is as important as paperwork.

Keep completed audit checklists as part of your HACCP records to demonstrate systematic verification to EHOs.

Preliminary Steps and HACCP Team Checklist

Check 1: HACCP team composition. Is the team defined with named members? Does each member have a defined role? Have all members received appropriate food safety training (Level 3 minimum for the team leader)? Has the team met within the past 12 months? Evidence: HACCP team list with names, roles, and training certificates. Meeting minutes or review records. Check 2: Product descriptions. Are all products and product groups described? Do descriptions include ingredients, intended use, target consumer groups (including vulnerable populations), storage requirements, and shelf life? Are descriptions current and reflect the actual menu? Evidence: Written product descriptions, current menu. Check 3: Flow diagrams. Does a flow diagram exist for every product group? Have they been verified on-site within the past 12 months? Are they version-controlled with dates? Do they match the current kitchen layout and processes? Evidence: Flow diagrams with verification dates, version numbers. Check 4: Intended use and consumer identification. Has the business identified whether food is served to vulnerable groups (elderly, children, immunocompromised)? Are additional controls in place for vulnerable consumers? Evidence: Product descriptions, HACCP plan introduction.

Hazard Analysis and CCP Identification Checklist

Check 5: Hazard analysis completeness. Does the hazard analysis cover every step in every flow diagram? Are biological, chemical, and physical hazards identified at each step? Is each hazard assessed for likelihood and severity? Are control measures identified for each significant hazard? Evidence: Hazard analysis worksheet, risk assessment scores. Check 6: CCP identification. Have CCPs been identified using a decision tree or equivalent method? Are CCPs clearly marked on the flow diagrams? Does the business distinguish between CCPs and operational prerequisite programmes? Evidence: CCP determination records, annotated flow diagrams. Check 7: Critical limits. Are critical limits defined for each CCP? Are they measurable (not subjective)? Are they scientifically valid and appropriate for the food and process? Can staff state the critical limits for the CCPs they monitor? Evidence: CCP documentation, staff interviews. Check 8: Allergen hazard analysis. Are the 14 declarable allergens identified in the hazard analysis? Is allergen cross-contact assessed at preparation and service steps? Are allergen controls documented (separate storage, dedicated equipment, cleaning between allergen changes)? Are staff aware of allergen risks and the business allergen policy? Evidence: Allergen matrix, allergen policy, staff interviews.

Monitoring, Corrective Actions, and Records Checklist

Check 9: Monitoring procedures. Is there a documented monitoring procedure for each CCP? Does it specify what is monitored, how, how often, and by whom? Are monitoring records being completed at the documented frequency? Are records legible, complete, and signed? Evidence: Monitoring procedure documents, completed log sheets (check last 3 months). Check 10: Corrective actions. Are corrective action procedures defined for each CCP? Do procedures specify what to do with the food, how to restore control, and who to notify? Are corrective actions recorded when monitoring shows a deviation from critical limits? Are corrective actions effective (same issue not recurring)? Evidence: Corrective action procedures, corrective action log, trend analysis. Check 11: Calibration. Are probe thermometers calibrated and is calibration documented? What is the calibration frequency (at minimum monthly)? Are calibration records available showing the date, method, result, and any adjustment? Evidence: Calibration log, calibration certificates for reference thermometers. Check 12: Record-keeping. Are all HACCP records retained for at least 12 months (FSA recommendation)? Are records stored securely and retrievable within 15 minutes? Is there a record retention and disposal policy? Evidence: Filed records, retrieval test.

HACCP Audits & Reviews

Automate your HACCP compliance

Paddl generates HACCP plans tailored to your business, creates monitoring routines from your CCPs, and keeps digital records that EHO inspectors can verify instantly. No more paper folders.

Start free trial See HACCP features

Try the free HACCP Hazard Identifier

Verification, Review, and Prerequisite Programmes Checklist

Check 13: Verification activities. Has the HACCP plan been reviewed within the past 12 months? Are internal audit records available from the current audit cycle? Has end-product testing or environmental monitoring been conducted (if applicable to the business type)? Is there evidence that verification findings have led to plan improvements? Evidence: Annual review minutes, internal audit reports, test results. Check 14: Supplier management. Are approved supplier lists maintained and current? Are supplier specifications on file for all food ingredients? Are delivery checks documented (temperature, condition, dates)? Is there a procedure for dealing with non-conforming deliveries? Evidence: Approved supplier list, supplier specs, delivery check records. Check 15: Cleaning and sanitation. Is there a documented cleaning schedule covering all areas and equipment? Does it specify frequency, method, chemicals, concentration, and contact time? Is there evidence of cleaning verification (visual checks, ATP testing, microbiological swabbing)? Evidence: Cleaning schedule, cleaning records, verification results. Check 16: Pest control. Is there a pest control contract or in-house programme? Are pest control reports available and reviewed? Are there any signs of pest activity? Is proofing adequate (gaps around pipes, damaged door seals, uncovered drains)? Evidence: Pest control reports, premises inspection. Check 17: Staff training. Do all food handlers have documented food safety training? Is there a training matrix showing who has been trained on what? Is refresher training provided at documented intervals? Can staff demonstrate practical understanding of their food safety responsibilities? Evidence: Training records, training matrix, staff interviews.

What to do next

Adapt this checklist to your business

Review each check item and remove any that do not apply to your operation (e.g. end-product testing for a small cafe). Add any site-specific items (e.g. specific equipment checks, processes unique to your menu).

Score your current system against the checklist

Run through the checklist as a baseline assessment. For each item, score it as compliant, partially compliant, or non-compliant. This gives you a clear picture of where your biggest gaps are.

Create an action plan from the results

For every item scored as non-compliant or partially compliant, define a corrective action, assign an owner, and set a deadline. Prioritise critical and major items first.

Common mistakes to avoid

Mistake

Using the checklist as a tick-box exercise without looking at evidence

Instead

Each "yes" should be backed by evidence the auditor has actually reviewed. "Do you have temperature logs?" should prompt the auditor to examine the logs for completeness, accuracy, and corrective actions - not just confirm they exist.

Mistake

Skipping the staff interview element

Instead

Documentation can be perfect while actual practice is poor. Talking to staff at all levels reveals whether the system is understood and followed or whether it is just paperwork that managers complete.

Frequently asked questions

How long does it take to work through this full checklist?

For a single-site food business, allow three to four hours: one hour for document review, one to two hours for kitchen observation and staff interviews, and 30 to 60 minutes for writing up findings. For larger or more complex operations, it may take a full day.

Should I use this checklist for every audit?

Use the full checklist for your annual comprehensive audit. For quarterly focused audits, extract the relevant section (e.g. just the monitoring and corrective action checks, or just the prerequisite programme checks) to keep the audit focused and manageable.

What scoring system should I use?

A simple three-point scale works well: Compliant (evidence reviewed, standard met), Partially Compliant (some elements in place but gaps exist), Non-Compliant (standard not met or no evidence available). Some businesses add a fourth level: Not Applicable. Avoid complex numerical scoring that adds complexity without improving the quality of findings.

Do I need to keep completed checklists?

Yes. Completed audit checklists are HACCP verification records and should be retained alongside your other HACCP documentation for at least 12 months. EHOs may ask to see previous audit results as evidence that your system is actively monitored and improved.

HACCP Audits & Reviews