What is Principle 2 of HACCP?

Principle 2 of HACCP is the identification of critical control points. Using the significant hazards from Principle 1, you determine the specific steps in the process where control is essential to prevent, eliminate, or reduce each hazard to an acceptable level. Steps where control is not essential, because a prerequisite program or a later step handles the hazard, are not critical control points.

Is handwashing a critical control point?

No. Handwashing is a control point managed through a prerequisite program (personal hygiene and GMPs), not a critical control point. It reduces hazards generally rather than eliminating a specific hazard at a measurable step with a critical limit you can monitor. Strong hygiene programs actually reduce how many true CCPs a process needs.

How do you determine a critical control point?

Run each significant hazard through the CCP decision tree at each step where it is present. The Codex version asks whether control measures exist, whether the step reduces the hazard to an acceptable level, whether contamination could occur or increase there, and whether a later step will control it. The answers, documented, tell you whether the step is a CCP.

Can one step be a critical control point for more than one hazard?

Yes. A single step can be a CCP for several hazards, and a single hazard can be controlled at more than one step. That is why the decision tree is run hazard by hazard rather than step by step in general. A cook step, for example, can control both Salmonella and E. coli O157:H7 at the same time.

How many critical control points should a HACCP plan have?

There is no target number; a plan should have as many CCPs as the significant hazards genuinely require, and no more. Well-run plants often have only a few, because strong prerequisite programs handle most hazards before any control step. Adding CCPs that a prerequisite program already covers dilutes attention and creates records nobody reviews.

HACCP Principle 2: Critical Control Points

Q: What is a critical control point in HACCP?

A critical control point (CCP) is a step, point, or procedure where control can be applied and is essential to prevent or eliminate a food safety hazard or reduce it to an acceptable level. The test is whether losing control there would let a significant hazard reach the consumer with no later step to catch it. Cooking, chilling, and metal detection are classic CCPs.

Q: What is the difference between a CCP and a control point?

A control point is any step where a factor can be controlled; a critical control point is the subset where control is essential to safety. Every CCP is a control point, but most control points, such as handwashing and general sanitation, are managed as prerequisite programs rather than CCPs because they address hazards generally rather than at a specific measurable step.

The step where control is the last line of defense. This is how you tell a real CCP from an ordinary control point, so you monitor the few steps that actually decide safety.

A critical control point (CCP) is a step in a food process where control can be applied and is essential to prevent, eliminate, or reduce a significant food safety hazard to an acceptable level. HACCP Principle 2 takes the significant hazards found in Principle 1 and identifies the specific steps where losing control means the hazard reaches the consumer.

Principle 2 is a filter, not a hunt for more things to control. Its job is to separate the handful of steps where control is genuinely critical from the many places where a good prerequisite program already does the work. This post defines a CCP precisely, contrasts it with an ordinary control point, walks the Codex decision tree, and works through the three examples every plant recognizes: the cook, the chill, and the metal detector.

What is a critical control point in HACCP?

A critical control point is a point, step, or procedure at which control can be applied and is essential to prevent or eliminate a food safety hazard or reduce it to an acceptable level. The two load-bearing words are essential and acceptable. If losing control at the step would let a significant hazard through to the consumer with no later step to catch it, the step is critical. If another step downstream will still catch the hazard, this step may not be the CCP.

CCPs only exist for the significant hazards identified in Principle 1. You do not go looking for CCPs in the abstract; you take each significant hazard and ask where in the flow it is actually controlled. A single step can be a CCP for more than one hazard, and a single hazard can be controlled at more than one step. The point of Principle 2 is to make that mapping explicit and defensible, which is exactly the information a HACCP plan is built around.

What is the difference between a CCP and a control point?

A control point is any step where a biological, chemical, or physical factor can be controlled; a critical control point is the subset of those steps where control is essential to safety. Every CCP is a control point, but most control points are not CCPs. The difference decides where you spend your monitoring, your critical limits, and your corrective-action discipline, so getting it right matters more than almost anything else in the plan.

Strong prerequisite programs on the left shrink the list on the right. A plant with weak sanitation ends up trying to make critical control points do work that hygiene should have handled.

Here is the counterintuitive part: better prerequisite programs mean fewer CCPs, not more. Handwashing, sanitation SOPs pest control, and supplier approval are control points, and they are essential to a safe operation, but they are managed as prerequisite programs rather than CCPs because they address hazards generally rather than at a specific measurable step. When those programs are strong, hazards are already reduced to acceptable levels before product reaches a control step, so fewer steps need to carry the full weight of a CCP. When they are weak, plants pile hazards onto CCPs the process cannot actually control. Building the prerequisite base first, through GMP compliance and sanitation, is what keeps the CCP list short and honest.

How do you identify a critical control point?

You identify CCPs by running each significant hazard through a short, ordered set of questions known as the CCP decision tree, applied at each step where that hazard is present. The tree forces a consistent, documented answer instead of a judgment call. The Codex Alimentarius version uses four questions; this post summarizes them, and the full worked walkthrough lives in the CCP decision tree guide.

Start from one significant hazard at one step. Take a single hazard from your Principle 1 analysis and the specific step you are evaluating. Never run the tree for a step in general; run it per hazard.
Q1: Are control measures in place for this hazard? If yes, continue. If no, ask whether control at this step is necessary for safety; if it is, the process must be modified to include a control measure.
Q2: Does this step eliminate or reduce the hazard to an acceptable level? If yes, the step is a CCP. A cook step that delivers a validated pathogen kill answers yes here.
Q3: Could contamination occur or increase to unacceptable levels here? If the step does not itself control the hazard, ask whether the hazard could be introduced or grow at this step. If no, it is not a CCP.
Q4: Will a later step eliminate or reduce the hazard to an acceptable level? If a subsequent step (a later cook, a metal detector) will catch it, this step is not the CCP and control belongs downstream. If no later step will, this step is the CCP.
Record the answer and the reasoning. Whichever way the tree comes out, document the path. The rationale is what an auditor reviews and what you revisit during reassessment.

The tree turns a judgment call into a documented path. The same step can be a CCP for one hazard and not for another, which is why you always run it hazard by hazard.

What are examples of critical control points?

The clearest CCP examples are cooking, chilling, and metal detection, because each is a measurable step that a hazard must pass and where a later step will not save you. Working these three makes the concept concrete.

Step	Significant hazard	Why it is a CCP	Typical critical limit
Cooking	Survival of vegetative pathogens (Salmonella, E. coli O157:H7)	The validated kill step; no later step reduces the pathogen load	Internal temperature and hold time delivering the required log reduction
Chilling / cooling	Growth and toxin formation by spore-formers (C. perfringens, C. botulinum)	Spores survive the cook, so cooling speed is the only control on their growth	Time-temperature cooling limits (e.g., through the danger zone within set hours)
Metal detection	Metal fragments from equipment wear	Last chance to detect and reject foreign metal before shipping	Detector sensitivity verified against test pieces of a set size
Acidification	C. botulinum growth in shelf-stable product	pH is what makes the product safe at ambient storage	Finished equilibrium pH at or below 4.6

The cook is the archetypal CCP: a validated internal temperature and hold time delivers a specific log reduction of the target pathogen, and nothing after it lowers that pathogen load. Chilling is a CCP because spore-formers like Clostridium perfringens survive the cook, so how fast the product moves through the danger zone is the only thing standing between a safe product and toxin formation, the reasoning laid out in cooking and cooling food safety. Metal detection is a CCP because it is the last opportunity to catch a physical hazard before the product ships. Acidification is a CCP in shelf-stable foods because a finished equilibrium pH at or below 4.6 is what prevents C. botulinum from growing at ambient storage.

Facts worth pinning

The CCP is one of the seven principles defined by NACMCF (1997) as "a step at which control can be applied and is essential to prevent or eliminate a food safety hazard or reduce it to an acceptable level."
The four-question decision tree originates with the Codex Alimentarius General Principles of Food Hygiene, and NACMCF reproduces a decision tree as an application aid rather than a mandatory rule.
For USDA-inspected plants, 9 CFR 417.2(c) requires the HACCP plan to list the CCPs for each identified food safety hazard, along with the critical limits at each.
Acidified foods rely on a finished equilibrium pH of 4.6 or below to control C. botulinum, the threshold codified in 21 CFR 114.3.

Getting Principle 2 right, and keeping it right

The most common Principle 2 mistake is inflation: labeling every hygiene step a CCP because it feels safer. It is not safer. Every extra CCP dilutes attention, generates monitoring records nobody reviews, and buries the two or three steps that genuinely decide safety. A lean CCP list backed by strong prerequisite programs is a stronger plan than a long list backed by wishful thinking. If a step is really controlled by a program, manage it as a program and keep it off the CCP list.

Once your CCPs are set, the discipline shifts to keeping the records at those points clean and current, because a CCP is only as good as the monitoring that proves it stayed in control. That is the handoff to Principle 3, critical limits and Principle 4, monitoring. Plants that run CCP checks on paper tend to discover gaps only at audit; moving those checks onto tablets with timestamps and required fields is the same digitize-the-paper move Harmony runs for production and quality logs (see how CLS did it). See how a connected operation ties CCP data together on the features overview and how the whole framework fits together in HACCP certification.