Critical Control Points: What They Are and Why You Need Them
General information for UK hospitality operators, not legal advice. If something here is wrong or out of date, the editorial policy explains how to report it.
Critical control points are the few steps in a kitchen where control is essential, each carrying a limit, a check, a response and a record.
A critical control point is a step in a food process where control is essential to prevent a hazard, eliminate it, or reduce it to an acceptable level. Critical control points are the handful of steps where getting it wrong makes food unsafe, so each one carries a measurable limit, a check, a named response when the check fails, and a record that all of it happened.
The duty sits in Article 5 of Regulation (EC) 852/2004 on the hygiene of foodstuffs, and applies to every food business operator after primary production. Most kitchens already do the work. What the law adds is the discipline of naming which steps are critical and deciding in advance what happens when one fails.
What critical control points are, and what they are not
Article 5 states the second HACCP principle in one line, and the word doing the work is essential. A step is a critical control point when nothing later in the process will catch the failure.
Identifying the critical control points at the step or steps at which control is essential to prevent or eliminate a hazard or to reduce it to acceptable levels.
Cooking a chicken thigh is essential control, because no later step kills what survives it. Wiping a prep bench is not, because a dirty bench is caught by cooking and by separation. Both matter. Only one fails on its own.
GOV.UK puts the same idea in plainer words, describing critical control points as the points when you need to prevent, remove or reduce a hazard in your work process. A kitchen that ends up with twenty of them has written down its whole method rather than its critical steps, and the monitoring load that follows is why the plan stops being filled in by week three.
Where the seven principles come from
Article 5 requires food business operators to put in place, implement and maintain a permanent procedure based on the HACCP principles, and sets out seven of them in order.
- Identify the hazards that must be prevented, eliminated or reduced to acceptable levels.
- Identify the critical control points, the steps where control is essential.
- Establish critical limits that separate acceptability from unacceptability.
- Establish and implement effective monitoring at those points.
- Establish corrective actions for when monitoring shows a point is not under control.
- Establish procedures, carried out regularly, to verify that the first five are working.
- Establish documents and records that demonstrate the effective application of the rest.
Regulation (EC) 852/2004 originated in EU law, and legislation.gov.uk now publishes the UK version, kept up to date with amendments made in the UK since then. Enforcement is local: GOV.UK tells operators to contact their local food safety team, who assess the business and advise on the system it needs. The practical shape of a full plan is covered in the walkthrough on building a HACCP plan an EHO will respect.
A prerequisite is not a CCP, and neither is every control measure
Three things get confused, and separating them is most of the work.
A prerequisite is the standing condition that makes safe food possible at all: cleaning, maintenance, pest control, chemical records, staff training, staff hygiene, and staff health and sickness reporting. GOV.UK publishes document templates for exactly that list. Prerequisites are managed on a schedule and verified by inspection, not by a reading taken at a moment in time. The habits behind them sit in the piece on cleaning schedules that actually get done.
A control measure is anything that reduces a hazard. Colour-coded boards, a supplier specification, a date label, a two-hour service window: all control measures, most of them not critical, because a failure in one is caught somewhere else.
A critical control point is a control measure applied at a step where control is essential and no later step will save it. The test is not how important the step feels. It is whether the failure survives to the plate.
The Safer Food, Better Business pack carries the split already: its safe method sheets cover cross-contamination, cleaning, chilling and cooking as everyday practice, and the diary is where the exceptions get written. GOV.UK notes that a business in Northern Ireland should use the Safe Catering guidance instead, while the Safer Food, Better Business pack for caterers is published for restaurants, cafes and takeaways.
The five steps a restaurant kitchen usually controls
Most pub and restaurant menus reduce to five critical control points, and the figures below are the limits those steps are usually written against.
| Step | Hazard | Critical limit in common use |
|---|---|---|
| Cooking | Harmful bacteria survive | 75°C at the core in England, Wales and Northern Ireland |
| Cooling | Bacteria multiply while food sits warm | Into the fridge within 90 minutes, FSA guidance rather than a regulated figure |
| Hot holding | Bacteria multiply below the safe holding band | 63°C or above, with one display period below it of up to two hours |
| Chilled storage | Bacteria multiply in refrigerated food | 8°C or below in England, Wales and Northern Ireland, with one display period above it of up to four hours |
| Reheating | Survivors from the first cook | 75°C at the core in England, Wales and Northern Ireland, 82°C in Scotland |
Two of those carry a tolerance that is routinely misread. Chilled food may be held above 8°C for display or service for a single period of up to four hours, after which it must be used or thrown away, which is why most operators run fridges at 5°C or below to stay inside the limit. Hot food may sit below 63°C for a single period of up to two hours, after which it must be used, chilled down or thrown away. Neither is a rolling allowance that resets when the tray goes back. Fridge and freezer records are covered in the piece on temperature monitoring and the cold chain.
Setting a critical limit you can measure
Article 5 asks for critical limits at critical control points which separate acceptability from unacceptability. That rules out most of what gets written on kitchen plans. Piping hot is not a limit. Chilled promptly is not a limit.
A usable critical limit has three parts: a value, a place, and a method. Not 75°C, but 75°C at the thickest part of the joint, read on a clean probe. Not cooled quickly, but into the fridge within 90 minutes of leaving the stove. The method matters as much as the number, because a probe pushed into the surface of a rolled joint will read a pass on food that is raw in the middle.
Limits are only as honest as the instrument behind them, which is why the probe check belongs in the plan. The routine is set out in the article on probe thermometer calibration.
Monitoring, and the corrective action that follows a breach
Article 5 asks for effective monitoring procedures at critical control points. Effective means scheduled, assigned and recorded at the time, by the person who took the reading. A page filled in from memory at the end of the week is not monitoring, and an inspector who sees five identical readings in the same pen knows it.
Monitoring answers four questions in advance: what is measured, how, how often, and by whom. Frequency should follow risk rather than habit. A cook temperature is checked on every batch. A fridge is checked at agreed points in the day, not once because the morning shift got to it.
Corrective action is the principle most plans leave blank, and the one that decides whether a breach becomes an incident. Article 5 requires corrective actions for when monitoring indicates that a critical control point is not under control. A written corrective action covers three things: what happened to the food, what was done to the process so it does not recur, and who decided. The FSA states the same duty as putting things right if there is a problem with a CCP, and keeping the record of how it was put right.
Verification, review and the record an inspector reads
Verification is not monitoring done twice. Monitoring asks whether this batch was safe. Verification asks whether the system is still working, and Article 5 asks for procedures, carried out regularly, to verify that the measures are working effectively. In a kitchen that means a manager countersigning the week, a probe checked against a reference, a sample of corrective actions read back, and a look at whether the same breach keeps appearing.
Review has a trigger written into the same article. Where any modification is made in the product, process or any step, the operator must review the procedure and make the necessary changes to it. A new menu, a new supplier, a replaced combi oven or a moved cold room all qualify. GOV.UK puts it the same way, telling operators to check, review and update the system whenever food processes or suppliers change.
Then there is the record. Article 5 requires documents and records commensurate with the nature and size of the food business to demonstrate the effective application of the controls, kept up to date at all times and retained for an appropriate period. The FSA is blunter about why it matters: a business involved in a food safety incident will need to show its records as evidence of how it keeps food safe. That evidential weight is the subject of the article on the due diligence defence.
Where Zynthio fits
Critical control points fail on paper for ordinary reasons: the sheet is in the office, the breach is written on a delivery note, and nobody is asked to close it. Zynthio holds a full Codex HACCP plan that feeds itself from the daily checks, building process flow, hazard analysis, decision tree, CCPs and critical limits, per site or as an org master plan. A CCP is linked to a checklist task so readings mirror in one-directionally, which means HACCP can never block a staff checklist submission, and an out-of-range reading raises a corrective action carrying disposition, root cause and prevention, which moves from open to completed to verified.
An 08:00 daily job flags actions open over 24 hours, verifications due within 7 days and plans due within 30 days, and the EHO export covers 90 days. Two limits are worth knowing before switching: monitoring frequency is free text and is not enforced, and the process flow prints as a table rather than a diagram. The HACCP software page sets out how the plan and the daily record connect.
Frequently asked questions
How many critical control points should a restaurant have?
There is no set number, and fewer is usually better. Most pub and restaurant menus reduce to cooking, cooling, hot holding, chilled storage and reheating. A plan listing twenty points has usually recorded the whole method rather than the steps where control is essential, and the monitoring it creates is the reason it stops being completed. Article 5 asks for the steps at which control is essential, not every step that matters.
Is handwashing a critical control point?
No. Handwashing is a prerequisite, managed by schedule, training and supervision rather than by a reading taken at a moment in time. GOV.UK groups staff hygiene with cleaning, maintenance, pest control and training as things covered by standing procedures and their own templates. Treating it as a critical control point creates monitoring nobody can perform, and it distracts from the cook, chill and hold steps where a failure survives to the plate.
What temperature should a critical limit for reheating be?
In England, Wales and Northern Ireland, food that is reheated must reach 75 degrees Celsius at the core. In Scotland the figure for reheated food is 82 degrees Celsius. Write the limit with the method beside it, naming where the probe goes and on which item, because a reading taken at the surface of a dense portion will pass food that is still cold in the middle.
What does an inspector expect to see for corrective action?
Three things, in writing. What happened to the food, whether it was used, chilled down or thrown away. What was done to the process so the breach does not repeat, such as a repaired door seal or a changed service time. And who decided, with the date. Article 5 requires corrective actions when monitoring indicates that a critical control point is not under control.
Does a small cafe need a full HACCP plan?
Not always. GOV.UK says the type of system needed depends on the size of the business and its risk level and complexity, and that a local food safety team might advise a full HACCP plan where the business is larger or higher-risk. Smaller caterers are pointed to the Safer Food, Better Business toolkits, which cover cross-contamination, cleaning, chilling and cooking as safe methods with a diary behind them.