HACCP Implementation Training: Build Your HACCP System Step by Step

Opens by explaining what this implementation course is for: for every section of Codex, what a food business should do and how to put it in place, building good hygiene practices first and then the HACCP plan in twelve steps. Introduces the document the course follows, the Codex General Principles of Food Hygiene, CXC 1-1969, published by FAO and WHO, adopted in 1969 and last revised in 2022. Shows how to read Codex as a code of practice written in should, not shall, and its two parts: good hygiene practices as the foundation, and the HACCP system for significant hazards they do not control. Covers who does what: competent authorities decide what the law requires, and food business operators are responsible for safe food. Ends with the seven-step teaching pattern, eight practice exercises, four written exercises, the 60% marks for the certificate, and a recap.

What you will be able to do

• Explain the two parts of Codex: good hygiene practices and HACCP
• Read Codex as a code of practice written in should
• Describe the roles of competent authorities and food business operators

Why it matters

Safe food comes from a system, not from luck; knowing how Codex is built shows where your HACCP work should start.

Practice: Practice: Welcome: food hygiene and HACCP · 3 questions

Starts with a business case at XYZ Ltd., a dairy in Sydney, where the night shift calls a skipped final rinse of a yoghurt filler a small issue, because to them a deviation is only a missed critical limit, so hygiene slips are never reported. Explains Codex's definition of a hazard as a biological, chemical or physical agent in food with the potential to cause an adverse health effect, with XYZ Ltd. listing allergens in their own column. Covers good hygiene practices and other prerequisite programmes as the foundation, and a CCP set only for a significant hazard, with a critical limit. Then separates monitoring, verification and validation, two cleaning words, and why a deviation covers a GHP procedure as well as a critical limit. Ends with how to make the terms stick in training, forms and meetings, a check on whether it is working, and a recap.

What you will be able to do

• Define a hazard and a control measure as Codex does
• Tell monitoring, verification and validation apart
• Explain why a deviation covers GHPs as well as critical limits

Why it matters

Shared words give shared control; when every shift uses the same terms, hygiene slips get reported and fixed.

Practice: Practice: Hazards and the language of Codex · 3 questions

Opens at three in the morning at XYZ Ltd., where an operator notices the pasteuriser chart looks wrong: in one version she stays silent and the milk is recalled, in the other she stops the flow and holds the milk. Explains the eight general principles: a preventive, science-based approach on a foundation of prerequisite programmes, validated, monitored, reviewed and communicated. Compares GHPs with control at a CCP, noting that a seafood processor in Mumbai with a cooking step will need a HACCP plan. Covers food safety culture: the five elements Codex names, the six things management should ensure, and how XYZ Ltd. makes culture visible. Then shows Sterling's recommended approach in five phases and part of XYZ Ltd.'s gap assessment against Codex. Ends with the order of work: assess the gaps, build the GHPs, then the HACCP plan, and a recap.

What you will be able to do

• Explain the eight general principles of food hygiene
• Describe the elements of food safety culture that Codex names
• Carry out a gap assessment against Codex

Why it matters

A plan is only as good as the system under it; a gap assessment shows what to fix before writing the HACCP plan.

Practice: Practice: The system and the gap assessment · 3 questions

Starts at a farm supplying XYZ Ltd., where a cow treated with a veterinary drug is milked into the farm tank before the withdrawal period ends, putting residues into a whole tanker load that pasteurisation cannot remove. Explains section seven: good hygiene practices that control many hazards at their source, such as water, faecal contamination, food handlers and contact surfaces, and how a business decides whether GHPs alone are enough, which need greater attention, and whether a HACCP system is needed. Covers section eight on primary production: the environment, hygienic production, handling, storage and transport, cleaning and personal hygiene. Then shows how a dairy that does not own the farms puts this in place through an agreement in which farms mark treated cows and keep their milk out. Ends with what to look for on a farm visit and a recap.

What you will be able to do

• Explain how good hygiene practices control hazards at their source
• Decide whether GHPs alone are enough or a HACCP system is needed
• Set hygiene requirements for primary production suppliers

Why it matters

Stopping a hazard where it starts is cheaper than trying to remove it later; some hazards, like drug residues, cannot be removed.

Practice: Practice: Hazards at their source, primary production · 3 questions

Opens with XYZ Ltd. extending its building: in one version a new drain runs from milk reception under the wall into the soft cheese packing room, so every hose-down passes dirty water where cheese is open; in the other the drains were planned with the HACCP team. Explains location and structure: sites away from threats, layouts that separate raw from finished, and materials that are easy to clean, with Codex's five ways to separate, from walls and distance to one-way flow, airflow and separation in time. Covers facilities: drains that flow the right way, places to wash tools and hands, temperature, air, light and storage that keeps things apart. Then covers equipment that can be cleaned, taken apart, monitored and calibrated. Shows XYZ Ltd.'s hygienic design check and a bakery in London. Ends with a recap.

What you will be able to do

• Apply Codex's five ways of separating raw and finished areas
• Check that drains, hand washing and storage support hygiene
• Assess equipment for cleaning, dismantling and calibration

Why it matters

Good design makes the right thing the easy thing; a badly placed drain can defeat the hardest-working cleaning team.

Practice: Practice: Premises, facilities and equipment · 3 questions

Starts with a new cleaner in XYZ Ltd.'s soft cheese room told to watch a colleague and copy, who mixes sanitiser by eye and leaves it on too briefly, so swabs fail and a full day's cheese is held. Explains that everyone in contact with food, directly or indirectly, should know their role in protecting it, and that people using chemicals are instructed. Covers how the food and its process set the depth of training, including whether germs can grow, physical contaminants and allergens, and how each person's duties set the topics. Shows an example of the training matrix XYZ Ltd. keeps, including drivers, and why section 10.3 lets businesses of different sizes meet it in different ways. Then covers instruction and supervision, assessing and refreshing training, triggers such as a new nut topping, and training records. Ends with a recap.

What you will be able to do

• Build a training matrix that matches topics to each person's duties
• Set training depth by the food, its hazards and its process
• Assess, refresh and record food hygiene training

Why it matters

People make the procedures work; a training matrix stops new staff learning wrong habits by copying colleagues.

Practice: Practice: Training and competence · 3 questions

Opens with the nightly clean of XYZ Ltd.'s soft cheese room, where hosing floor drains at high pressure beside the open filler sprays dirt onto it and environmental swabs test positive for Listeria. Explains section 11: premises and equipment maintained so they can be cleaned, and written procedures that set what is cleaned, by whom, how, how often and how it is checked, shown in an example written programme for the soft cheese room. Covers cleaning methods, monitoring and verifying cleaning with swabs or observation, with quality assurance swabbing the filler and cutting tables after the night clean into a swab log, and reviewing procedures when things change. Then covers keeping pests out, dealing with infestations at once and keeping records, and covering, removing and storing waste apart. Ends with three common mistakes and a recap.

What you will be able to do

• Write a cleaning programme stating what, who, how, how often and how checked
• Verify cleaning with swabs or observation and keep a swab log
• Set up pest control and waste handling with records

Why it matters

How you clean matters as much as how often; the wrong method can spread Listeria onto the equipment you meant to clean.

Practice: Practice: Maintenance, cleaning and pest control · 3 questions

Starts with a filling-room operator at XYZ Ltd. who was vomiting last night and says nothing, filling yoghurt all morning including a batch for a hospital contract, which is later held. Explains section 12.1 on health status: people who are ill or show the symptoms Codex lists report to management at once and stay out of food areas while management decides, with a trained stand-in from the training matrix taking over. Covers the two options Codex gives for cuts, personal cleanliness, protective clothing, and hand washing at the four moments, with gloves never replacing clean hands. Then covers behaviour that could contaminate food and visitors, including maintenance workers, who read the hygiene policy, answer health questions and sign a visitor form. Shows an example of XYZ Ltd.'s personal hygiene programme. Ends with a recap.

What you will be able to do

• Apply the rules for reporting illness and staying out of food areas
• Explain the four moments for hand washing and the role of gloves
• Set hygiene rules for visitors and maintenance workers

Why it matters

One honest word protects consumers and the business; reporting illness early prevents a held batch or an outbreak.

Practice: Practice: Personal hygiene · 3 questions

Opens with soft cheese cut into portions on a wire frame at XYZ Ltd., where the frame is cleaned on the same weekly plan as the walls, residue builds up in its joints, and Listeria leads to a recall from a hospital and supermarkets. Explains describing each food, its intended use and users and the steps of its process, confirmed on site, shown in a product description for XYZ Ltd.'s soft cheese and two products side by side on the same template, with grouping allowed only where it hides no hazard. Covers deciding whether GHPs are enough or some need greater attention, and when greater attention is not enough and a HACCP system is needed. Then covers monitoring GHPs, corrective action on the process and the product, and verification, keeping the records Codex names. Ends with three mistakes and a recap.

What you will be able to do

• Write a product description covering use, users and process steps
• Identify GHPs that need greater attention
• Monitor, correct and verify GHPs with the records Codex names

Why it matters

Some practices matter more than others; giving a cutting frame greater attention can prevent a Listeria recall.

Practice: Practice: Control of operation: describing and checking · 3 questions

Starts with XYZ Ltd. filling yoghurt cups with and without a nut topping on one line, where a quick rinse between runs leads to a child's allergic reaction and a recall. Explains the nine key aspects, starting with time and temperature control, which Codex calls among the most common failures of operational control, and specific process steps that are validated, monitored, recorded and measured with calibrated devices. Covers preventing microbiological, physical and chemical contamination and allergen cross-contact, shown in four of XYZ Ltd.'s controls: nuts stored on their own rack below other ingredients, the nut run last with a full clean and allergen swab, and allergen training on the matrix. Then covers incoming materials and safe, protective, labelled packaging, with a bakery in Singapore whose allergen matrix was undone by one scoop. Ends with three mistakes and a recap.

What you will be able to do

• Control time and temperature with validated, monitored steps
• Build an allergen management system from receipt to processing
• Check incoming materials and packaging are fit for purpose

Why it matters

Allergen control is a system, not a rinse; scheduling, storage and swabs together protect allergic consumers.

Practice: Practice: Control of operation: key aspects of GHPs · 3 questions

Opens with a supplier warning that one batch of strawberry syrup may be contaminated, where XYZ Ltd.'s flavoured milk carries only a date mark and no lot code, so a whole week of product is recalled, versus lot coding that limits the recall. Explains section 13.3: water, ice and steam fit for purpose, and records kept for longer than the product's shelf-life or as the competent authority sets. Covers recall procedures that find and remove unsafe food quickly, report to the competent authority, hold product securely and improve through periodic field trials, with stores and sales accounting for every lot. Then covers section 14: producer and lot on every container, labels with instructions and allergens, and consumer education, followed by transport that protects food to the end. Ends with three mistakes, including vans assumed cold with no log, and a recap.

What you will be able to do

• Set water quality and record retention requirements
• Run a recall that accounts for every lot made, stocked and sold
• Check labels and transport protect food to the consumer

Why it matters

A recall is only as good as the records behind it; lot coding can turn a week's recall into a single batch.

Practice: Practice: Water, records, recall, information, transport · 3 questions

Starts with a seafood processor in Mumbai that cooks and freezes prawns: in one version it relies on sampling a few packs, which miss a short-running cooker, and in the other it controls the cooking step. Explains HACCP as science-based and systematic, with seven principles from hazard analysis to documentation, and XYZ Ltd.'s general manager chairing HACCP reviews with a trained team. Covers how Codex says to apply HACCP: prerequisite programmes, including GHPs, in place first, a system customised to the business and reviewed, and flexibility for small businesses while all seven principles are considered, shown for a small café in Toronto with four staff. Then shows how section 19 applies the principles in twelve steps: five that prepare and seven that put the principles to work. Ends with a recap.

What you will be able to do

• List the seven HACCP principles
• Explain why prerequisite programmes come before the HACCP plan
• Describe the twelve steps of applying HACCP

Why it matters

Controlling the step that makes food safe protects consumers far better than testing a few packs at the end.

Practice: Practice: The HACCP system and its 12 steps · 3 questions

Opens with a hotel catering kitchen in Singapore whose chef draws a three-box flow diagram at his desk, missing the night-time cooling and reheating of leftover chicken, so neither step is analysed. Explains Step 1: a team with the right expertise, with outside advice from associations, independent experts, competent authorities and guides where needed, shown in the team at XYZ Ltd. Covers the scope that names the products, processes and applicable prerequisite programmes, written for XYZ Ltd., and Steps 2 and 3: describing each product for safety and identifying its intended use and users, including known other uses and vulnerable groups. Then covers Steps 4 and 5: constructing a flow diagram of every step and input for XYZ Ltd.'s soft cheese and confirming it on site during all stages and hours of operation, with two other businesses. Ends with a recap.

What you will be able to do

• Assemble a HACCP team and define the scope
• Describe a product, its intended use and vulnerable users
• Confirm a flow diagram on site at all hours of operation

Why it matters

Get the picture right before you analyse it; a step missing from the flow diagram is a hazard nobody controls.

Practice: Practice: Steps 1 to 5: team, product and flow diagram · 3 questions

Starts with a bakery in Toronto selling chilled cookie dough that relies on home baking, although many customers eat the dough raw, so no step controls the hazard for them. Explains section 19.6 and the example worksheet in Annex III of Codex. Covers listing every potential hazard at every step and input, named specifically with its cause, shown in what the first stage produces at XYZ Ltd. Then covers evaluating which hazards are significant by likelihood, severity, acceptable levels, whether toxins or physical agents can form or persist, and both intended and known unintended use, with the reasons recorded, using an example from XYZ Ltd. Covers considering control measures for each significant hazard, whether GHPs or process controls, with the same method shown in two very different businesses. Ends with a recap: specific, sourced, reasoned.

What you will be able to do

• List hazards at every step, named specifically with their cause
• Evaluate significance using likelihood, severity and known use
• Choose control measures for each significant hazard

Why it matters

A hazard analysis that considers how customers really use the food finds risks a desk exercise would miss.

Practice: Practice: Step 6, Principle 1: hazard analysis · 3 questions

Opens with a seafood processor in New York that calls everything a CCP, twelve in all, from hand washing to the cooker, so the cooker gets no more attention than the mop. Explains that CCPs are determined only for significant hazards, at steps where control is essential and a deviation could mean unsafe food, applying the considerations of section 19.7. Shows four decision questions in Sterling's own words and layout, and a CCP determination worksheet, as XYZ Ltd.'s team answers them for the yoghurt with nut topping and two decisions on the soft cheese line, with a hotel catering kitchen in Dubai. Covers what to do if no step can control a hazard: modify the product or process. Then covers numbering CCPs, summarising them in a table such as the HACCP worksheet in Annex IV, and marking them on the flow diagram. Ends with a recap.

What you will be able to do

• Apply the four decision questions to determine CCPs
• Decide what to do when no step can control a hazard
• Number CCPs, summarise them and mark them on the flow diagram

Why it matters

CCPs are few, real and reasoned; too many CCPs dilute attention from the steps that actually make food safe.

Practice: Practice: Step 7, Principle 2: determining CCPs · 3 questions

Starts with a seafood processor in Hong Kong whose recorder traces a cooker temperature dip below the critical limit at two in the morning, but nobody reads the chart until Friday, so three days of product must be recalled. Explains Step 8: critical limits that are measurable or observable and scientifically validated, from your own studies or sound sources that fit your process, shown in XYZ Ltd.'s critical limits and Sterling's recommended approach. Covers Step 9: monitoring as a sequence of observations or measurements set out in advance, detecting a deviation in time to isolate the product, continuous where possible and otherwise frequent enough, with how this looks in a smaller business. Then covers instructed operators, a designated person evaluating results, signed records with results and timing, what a monitoring record can get wrong, and a bakery in Manila. Ends with a recap.

What you will be able to do

• Set critical limits that are measurable and validated
• Design monitoring that detects deviations in time to isolate product
• Write monitoring records that are signed, timed and evaluated

Why it matters

Validated limits, checked in time and read by someone who can act, stop unsafe product before it leaves the site.

Practice: Practice: Steps 8 and 9: critical limits and monitoring · 3 questions

Opens on a night shift at XYZ Ltd., where the flavoured milk pasteuriser drops below its validated critical limit, the alarm is reset and filling carries on, so under-heated bottles reach supermarket shelves. Explains writing specific corrective actions for each CCP before any deviation, and making sure the people at the CCP know them. Shows how XYZ Ltd. deals with the food: working out which product is affected, holding it, assessing it, and deciding whether to reprocess, divert or destroy it. Covers finding and fixing the root cause, recording the details and reviewing corrective actions for trends, with section 13.1.4 applying the same ideas to GHPs, and the choices left to you, such as form layout and signatories. Ends with the common mistake, good practice, a recap and written exercise three on steps one to ten.

What you will be able to do

• Write corrective actions for each CCP before a deviation happens
• Identify, hold and decide the disposition of affected product
• Find the root cause and review corrective actions for trends

Why it matters

Deciding what to do before the alarm sounds stops under-processed product reaching shelves on a busy night shift.

Practice: Practice: Corrective actions · 3 questions

Starts with XYZ Ltd.'s hospital catering contract, where the hospital asks how the dairy knows its soft cheese controls work and who checks they keep working, and a team that borrowed critical limits from another product's guide cannot answer. Explains validation of control measures: evidence that a control measure, or a combination, can control the hazard to a specified outcome, gathered for the whole plan before it is put in place and confirmed in the first weeks of production. Covers verification once the plan runs: records, calibration, observation, testing and audits, by someone other than the person who monitors and corrects, shown in a validation file for each CCP and a log of who verified what and when. Then covers periodic review, review whenever something changes, revalidation when necessary, and two more businesses. Ends with a recap.

What you will be able to do

• Validate control measures with evidence that fits your own products
• Plan verification by someone independent of monitoring
• Decide when the plan needs review or revalidation

Why it matters

Show that it can work, and that it still works; that is exactly what customers and auditors ask a HACCP team.

Practice: Practice: Validation and verification · 3 questions

Opens with a supermarket's auditor at XYZ Ltd. asking for last month's pasteuriser charts and metal detector checks, which sit in a drawer and on loose sheets, written in one hand at the end of the shift. Explains step twelve: documenting the HACCP procedures and how the plan was built, from the team and hazard analysis to the CCPs, limits, validation and every change, kept in one HACCP file with a date and version on every page. Covers simple, signed records of monitoring, deviations and verification, kept longer than the shelf-life or as the competent authority decides, built into existing paperwork where possible, with a seafood processor in Mumbai logging CCP checks on a tablet. Then covers training at each person's level, a working instruction for each CCP, and current training records. Ends with the common mistake, good practice and a recap.

What you will be able to do

• Document how the HACCP plan was built and changed
• Keep simple, signed records for monitoring, deviations and verification
• Write a working instruction for each CCP

Why it matters

Write it when you do it and keep it where you need it; records made at the time are what auditors can trust.

Practice: Practice: Documentation, records and training · 3 questions

Starts with a handover at XYZ Ltd., where the HACCP plan sits on a departing manager's laptop and undated forms are spread over three offices, so the new manager misses the monthly verification of the cheese line. Explains every document and record Codex names for good hygiene practices, from cleaning and recall to training, pests and incoming materials. Covers what Codex names for HACCP: documentation so the system is properly put in place, and records showing ongoing control of significant hazards, step by step, including the hazard analysis with its scientific support, CCP determination, the plan, validation and changes. Then shows how XYZ Ltd. organises its folders by function, dated and versioned, with work instructions, forms and a mock recall form that tests the recall procedure. Ends with the common mistake of a copied binder, and a recap.

What you will be able to do

• List the documents and records Codex names for GHPs
• List the documentation and records needed for the HACCP system
• Organise documented information by function, dated and versioned

Why it matters

Keep what Codex names and add only what helps; an organised file survives staff changes and audits alike.

Practice: Practice: The documented information you need · 3 questions

Begins with a supermarket chain telling XYZ Ltd. that a new contract depends on HACCP certification: in one version the company buys a ready-made binder that nobody runs, and in the other it writes a road map with phases and owners. Starts at the top: management commitment, with the managing director appointing the HACCP team leader in writing and agreeing the scope, a multidisciplinary team, an honest gap assessment, and good hygiene practices in place and verified. Covers building the plan through the twelve steps, validating it before it starts and running it long enough for real records to build up. Then covers confirming what your competent authority requires and what your certification body's programme expects, and continual improvement under section 5.1. Ends with what comes next: open practice exercises, the written exercises and the final exam.

What you will be able to do

• Plan HACCP implementation in phases with owners
• Confirm what your competent authority and certification body expect
• Explain why a plan needs real records before a certification audit

Why it matters

Build a system that works and the certificate follows; a binder nobody runs leaves nothing for an auditor to see.

Practice: Practice: Your road map and certification readiness · 3 questions