Critical Control Points Explained: How to Determine Your CCPs

The most misunderstood part of HACCP

Ask ten small producers what their critical control points are and you'll get ten different answers, and several of them will be wrong. Some name far too many, turning routine good practice into a long list of CCPs they can't realistically monitor. Others can't identify a single one and assume that means their process is unusually safe.

A critical control point is a specific, important idea, and getting it right is what separates a HACCP plan that works from one that just looks busy. Here's what a CCP actually is and how to determine yours properly.

What a critical control point is

A critical control point is a step in your process where you can apply a control that is essential to prevent, eliminate, or reduce a food safety hazard to an acceptable level, and where losing control would mean the hazard is not caught anywhere else.

Two things make a step critical:

1. It controls a significant hazard. Only the hazards your analysis flagged as significant are candidates. If a hazard isn't significant, the step controlling it isn't a CCP.
2. There's no later step that will catch the hazard. If a subsequent step in your process eliminates the hazard, the later step is the more likely CCP, not this one.

The classic example is cooking. For a meat product, the cook step is almost always a CCP: it's where you destroy harmful bacteria, you can measure whether it worked (core temperature), and if you get it wrong, nothing downstream will fix it.

CCP versus prerequisite programme

This is where most of the confusion lives. A prerequisite programme (PRP) is the foundation of good hygiene practice that supports your whole operation: cleaning, pest control, staff training, maintenance, personal hygiene, and so on. PRPs manage the general conditions. CCPs control specific significant hazards at specific steps.

The test is roughly this: if the control manages the overall environment, it's a prerequisite. If it's a specific point where you must hit a measurable limit to keep a specific hazard in check, it's a CCP.

Cleaning your premises is a prerequisite. Cooking a chicken to a verified core temperature is a CCP. Storing chemicals away from food is a prerequisite. Detecting metal with a calibrated detector before despatch is a CCP.

Getting this distinction right matters because auditors see two opposite mistakes constantly: producers labelling every prerequisite as a CCP (which makes the plan unmanageable), and producers burying a genuine CCP inside their prerequisites (which means a real hazard isn't being controlled with the rigour it needs).

The Codex decision tree

The internationally recognised way to determine CCPs is the Codex decision tree. Codex revised this tree as part of its 2023 update to the General Principles of Food Hygiene, and the current version is simpler than the older Q1 to Q4 sequence that many templates still use. You apply it to each significant hazard at each step.

The current Codex decision tree works through these questions:

1. Can the significant hazard be controlled to an acceptable level at this step by prerequisite programmes? If yes, the step is not a CCP; the hazard is managed by your PRPs.
2. Do specific control measures for the identified significant hazard exist at this step? If no, the step is not a CCP, and you need to consider whether control is needed here and modify the process if so.
3. Will a subsequent step prevent or eliminate the hazard, or reduce it to an acceptable level? If yes, this step is not the CCP; that later step should be.
4. Can this step specifically prevent or eliminate the hazard, or reduce it to an acceptable level? If yes, this step is a CCP. If no, the process or product needs to be modified to introduce a control.

The logic is deliberate. The first question lets hazards that are properly managed by good hygiene practice exit early, which stops you creating unnecessary CCPs. The later questions focus on whether this specific step is genuinely the place the hazard gets controlled.

Worked examples

A bakery making bread. The bake step reaches temperatures well above what any vegetative bacteria survive, and there's no later step to rely on. The bake is a CCP for biological hazards. The flour storage step, by contrast, is managed by prerequisites (pest control, stock rotation) so it isn't a CCP.

A producer making chilled ready-to-eat salads. There's no kill step at all because nothing is cooked. Here the CCPs are more likely to sit around supplier control of raw materials, wash steps for produce, and tight temperature control, because there's no later stage to fall back on.

A meat processor making cooked sliced ham. The cook is a CCP. The chilling step afterwards may also be a CCP, because slow cooling allows surviving spores to germinate. Metal detection before packing is frequently a CCP too.

Notice that the same process step can be a CCP in one business and a prerequisite in another. It depends entirely on your products, your hazards, and what your process does and doesn't include.

Setting critical limits

Once you've identified a CCP, you must set a critical limit: the measurable boundary between safe and unsafe. A critical limit has to be something you can actually measure in real time, such as a temperature, a time, a pH, or a water activity.

For a cook step, the critical limit might be a core temperature held for a defined time. For a metal detector, it's the detection sensitivity for ferrous, non-ferrous, and stainless steel. For chilled storage, it's a maximum temperature.

Each critical limit needs monitoring (how and how often you check it), a corrective action (what you do when it's breached), and a verification procedure (how you confirm the whole system is working). These are HACCP principles 4 through 6, and they all flow directly from the CCPs you identify here.

Where this trips small producers up

Determining CCPs requires applying the decision tree consistently to every significant hazard, and doing it the same way each time. It's detailed, and it's easy to drift, answering the questions slightly differently from one hazard to the next.

This is one of the reasons FoodSafe's HACCP assistant, Sage, applies the decision tree as deterministic logic rather than leaving it to interpretation. Sage gathers the information through conversation, but the CCP determination itself follows the standard Codex decision tree every time, with the rationale recorded against each decision. You review and confirm the outcome, and your plan carries a documented, consistent justification for why each step is or isn't a CCP, which is exactly what an auditor wants to see.

The takeaway

A critical control point isn't every good thing you do. It's the small number of steps where control is essential and where there's no second chance. Identify those correctly, set measurable limits, and monitor them, and you have the backbone of a defensible HACCP plan.

If you haven't worked through your hazard analysis yet, start there; CCP determination only makes sense once you know which hazards are significant.

Food safety compliance, handled.