HACCP Principle 2: How to Identify Critical Control Points
Identifying Critical Control Points in Your Food Safety System
A Critical Control Point (CCP) is a step at which control can be applied and is essential to prevent or eliminate a food safety hazard or reduce it to an acceptable level. The challenge for most food businesses is not finding CCPs - it is avoiding the trap of declaring too many. If everything is critical, nothing is critical, and your monitoring system becomes unmanageable. This article explains how to correctly identify CCPs using the Codex Alimentarius decision tree, with worked examples relevant to UK hospitality operations.
- A CCP is the last step where you can prevent, eliminate, or reduce a significant hazard to an acceptable level.
- Use the Codex decision tree as a guide, but apply professional judgement and document your reasoning.
- Most hospitality businesses should have 3 to 7 CCPs - more than that suggests over-identification.
Key takeaways
What Makes a Control Point "Critical"?
The seven principles, written into a plan you can run
Paddl drafts a HACCP plan from your menu, chemicals and equipment in about fifteen minutes, links each CCP to a check on the daily routine, and records who took the corrective action when a limit is missed. Paddl is £69 per location per month with every feature and a 30-day free trial.
Try the free HACCP Hazard IdentifierCompare the best HACCP softwareDownload the free HACCP plan templateFoodDocs vs Paddl for HACCPUsing the Codex Decision Tree
Common CCPs in Hospitality
Avoiding the Over-Identification Trap
What to do next
Apply the decision tree to each significant hazard
For every significant hazard identified in Principle 1, work through the four Codex decision tree questions and record the outcome.
Review your CCP count
If you have more than 7 CCPs, critically assess whether some are better managed as OPRPs or through prerequisite programmes.
Create a CCP summary table
Build a clear table listing each CCP, the hazard it controls, the control measure, the critical limit, and the monitoring method. This becomes the core of your HACCP plan.
Common mistakes to avoid
Frequently asked questions
How many CCPs should a typical restaurant have?
Most restaurants have between 3 and 7 CCPs. Common ones include cooking temperature, cooling, cold storage, hot holding, and delivery acceptance. The exact number depends on your menu complexity and processes. A simple sandwich shop might have 2 to 3; a hotel with banqueting, room service, and multiple restaurants might have 6 to 8.
Is allergen management a CCP?
It depends on your operation. Many businesses manage allergens through prerequisite programmes (staff training, labelling systems, dedicated equipment). However, if you serve customers with severe allergies and the point of meal assembly is the last opportunity to prevent allergen cross-contact, it may warrant CCP status. The key test is whether failure at this step could cause serious harm with no subsequent step to catch it.
What is the difference between a control point and a critical control point?
A control point (CP) is any step where a hazard can be controlled. A critical control point (CCP) is a step where control is essential because it is the last opportunity to prevent, eliminate, or reduce a significant hazard. Washing vegetables before cooking is a CP; cooking to 75°C is a CCP because cooking is the kill step.
Can I have a CCP at the delivery stage?
Yes. Checking delivery temperatures is a common CCP because accepting chilled goods above 8°C introduces a significant biological hazard. If you have no subsequent step to eliminate that hazard (you are not going to cook everything that arrives), then delivery acceptance is your last line of defence and qualifies as a CCP.
Related resources
How-To Guides
Expert Answers
UK Regulations
Paddl Features
Free Templates
Need expert help with HACCP?
Our hospitality consultants can review your compliance, spot the gaps an EHO will flag, and help you fix them before your next inspection.
Manage HACCP digitally
Paddl helps UK hospitality businesses automate haccp compliance. AI-generated plans, digital records, and inspection-ready documentation.