What is Principle 3 of HACCP?

Principle 3 of HACCP is establishing critical limits. At each critical control point you set one or more measurable maximum or minimum values, such as a cook temperature, a cooling time, a pH, or a water activity, that separate safe from unsafe product. Each critical limit must be science-based and validated to confirm it actually controls the hazard.

What are examples of critical limits?

Common examples include a minimum internal cook temperature and hold time delivering a set log reduction of Salmonella, a cooling limit such as 135F to 70F within two hours, a finished equilibrium pH of 4.6 or below for shelf-stable foods, a water activity of 0.85 or below, and a metal detector rejecting test pieces of a defined size.

Can a critical limit be a visual observation?

Yes, as long as it is objective and reliably correlates with the hazard being controlled. Examples include the absence of pink color in a fully cooked patty or a metal detector's reject action. Visual or automatic critical limits are common where a numeric reading is impractical, provided the correlation to safety has been validated.

HACCP Principle 3: Critical Limits

Q: What is the difference between a critical limit and an operating limit?

A critical limit is the boundary between safe and unsafe at a CCP; crossing it is a deviation that triggers corrective action. An operating limit is a tighter target set inside the critical limit so operators adjust the process before the critical limit is ever crossed. Crossing an operating limit is a routine adjustment, not a deviation.

Q: How do you validate a critical limit?

You validate a critical limit by gathering scientific evidence that meeting the limit actually controls the hazard, for example citing USDA Appendix A time-temperature tables or commissioning a challenge study, then confirming the limit is achievable on your equipment and product. Validation is done before relying on the plan and repeated whenever the process changes.

The number that draws the line between safe and unsafe at each CCP. Set it from science, validate that it works, then build an operating limit inside it so you catch drift before it becomes a breach.

A critical limit is the maximum or minimum value to which a biological, chemical, or physical parameter must be controlled at a critical control point to prevent, eliminate, or reduce a food safety hazard to an acceptable level. HACCP Principle 3 sets at least one critical limit at every CCP, drawn from science and validated to prove it works.

A critical limit is the boundary between safe and unsafe, and it has to be a number, not a hope. This post covers what makes a limit valid, where the science comes from, the common parameters (temperature and time, pH, water activity), why an operating limit sits inside the critical limit, and how validation proves the whole thing holds. It builds directly on Principle 2 because a CCP without a critical limit is just a step you are watching for no defined reason.

What is a critical limit in HACCP?

A critical limit is a measurable maximum or minimum value that separates acceptable from unacceptable at a CCP. NACMCF defines it as "a maximum and/or minimum value to which a biological, chemical, or physical parameter must be controlled at a CCP to prevent, eliminate, or reduce to an acceptable level the occurrence of a food safety hazard." The key properties are that it is measurable, it is tied to a specific hazard, and crossing it means the product may be unsafe.

Because monitoring has to catch a breach in real time, critical limits are set on parameters you can measure quickly: temperature, time, pH, water activity, moisture, salt concentration, a metal-detector reject, or a visible indicator like the color of a cooked patty. A limit that can only be confirmed by a lab test days later cannot serve as a critical limit, because by the time you know, the product has shipped. That real-time constraint shapes which parameters plants choose and links Principle 3 directly to Principle 4, monitoring.

Where do critical limits come from?

Critical limits come from science-based sources: regulatory requirements, published guidance from FDA and USDA, scientific studies, and validation work by process authorities. You do not invent a critical limit; you cite it, and you keep the citation on file as part of your HACCP plan. An auditor will ask where a limit came from, and "we have always used that number" is not an answer.

Every critical limit traces back to a source you can produce on request. The process-authority letter is often the tie-breaker for novel or proprietary processes where no published table applies.

Some of the most-cited sources: for cooked meat and poultry, USDA FSIS Appendix A gives time-temperature combinations that deliver a validated 6.5-log or 7.0-log reduction of Salmonella. For retail and foodservice, the FDA Food Code gives minimum internal cooking temperatures (165°F for poultry, 155°F for ground meats, 145°F for whole cuts and fish). For acidified and shelf-stable foods, 21 CFR 114 fixes the finished equilibrium pH at 4.6 or below. For seafood, the FDA Fish and Fishery Products Hazards and Controls Guidance is the standard reference. When no published limit fits a novel process, a qualified process authority establishes and documents one.

What are common critical limits?

The most common critical limits are temperature-and-time combinations, pH, and water activity, because those three parameters control the biological hazards behind most HACCP plans. Each targets a different mechanism.

Parameter	Controls	Example critical limit	Common source
Temperature + time (cook)	Survival of vegetative pathogens	Internal temp and hold time for a 6.5–7.0 log Salmonella reduction; 165°F poultry (Food Code)	USDA FSIS Appendix A; FDA Food Code
Temperature + time (cool)	Growth of spore-formers after cooking	135°F to 70°F within 2 hours, then to 41°F within 4 more (Food Code)	FDA Food Code; USDA Appendix B
pH	C. botulinum in shelf-stable food	Finished equilibrium pH ≤ 4.6	21 CFR 114
Water activity (aw)	Bacterial growth in dried/shelf-stable food	aw ≤ 0.85 (below the level most pathogens need)	21 CFR 117 / process authority
Metal detection	Physical metal hazard	Reject on a test piece of a set diameter (ferrous / non-ferrous / stainless)	Validation against certified test pieces

The three biological workhorses map cleanly onto the FAT TOM growth factors from biological hazards in food: a cook manages temperature to kill pathogens, cooling manages time and temperature to deny growth, and pH and water activity remove the conditions bacteria need to multiply at all. Most bacteria cannot grow below a water activity of 0.85, and C. botulinum is inhibited at or below pH 4.6, which is why those two numbers appear so often. Cooling limits exist because spore-formers survive the cook, the reasoning detailed in cooking and cooling food safety.

Why set an operating limit inside the critical limit?

An operating limit is a tighter target set inside the critical limit so operators adjust the process before the critical limit is ever crossed. The critical limit is the edge of safe; the operating limit is a buffer that gives the line time to react to normal drift without producing an actual deviation. If a cook's critical limit is 165°F, an operating limit of, say, 168°F means a downward drift triggers a correction while the product is still safe.

Normal processes wander. The operating limit catches the wander and turns it into a routine adjustment instead of a deviation, held product, and corrective-action report.

The distinction matters because crossing an operating limit is a process adjustment, while crossing a critical limit is a deviation that triggers Principle 5, corrective actions: you must control the affected product and investigate. Plants that run tight to the critical limit generate constant deviations and paperwork; plants that build in a sensible operating buffer keep the CCP quietly in control. Setting that buffer well is a process-knowledge decision, not a safety compromise, because the operating limit is always inside the validated critical limit.

How do you validate a critical limit?

You validate a critical limit by obtaining scientific evidence that, when the limit is met, the hazard is actually controlled. Validation is a one-time (and after-change) proof that the plan can work, distinct from the ongoing verification that it is working. NACMCF and USDA both treat validation as the front-end scientific justification for the plan.

State the hazard and the target reduction. Name the pathogen or hazard and the level of control required, for example a 6.5-log reduction of Salmonella in a cooked meat product.
Identify the parameter and candidate limit. Choose the measurable parameter (internal temperature and hold time) and the value you propose to use as the critical limit.
Gather scientific support. Cite the regulatory limit, published guidance, or study that shows the value delivers the required control, or commission a challenge or inoculation study through a process authority.
Confirm it works in your process. Demonstrate the limit is achievable and repeatable on your actual equipment and product, using data logging or thermal mapping where relevant.
Document and file the evidence. Keep the validation record with the plan; it is what an auditor reviews and what you revisit whenever the process changes.
Revalidate on change. A new formulation, a thicker portion, or new equipment can move the limit; revalidate before relying on the old number.

Facts worth pinning

NACMCF defines a critical limit as the maximum or minimum value a parameter must be controlled to at a CCP to reduce a hazard to an acceptable level (FDA/NACMCF HACCP guidelines).
USDA FSIS Appendix A publishes time-temperature combinations validated to deliver a 6.5-log or 7.0-log reduction of Salmonella in cooked meat and poultry (FSIS Cooking Guideline, Revised Appendix A).
The FDA Food Code sets minimum internal cooking temperatures of 165°F for poultry, 155°F for ground meats, and 145°F for whole cuts and fish, and a cooling limit of 135°F to 70°F within 2 hours and to 41°F within 4 more (FDA Food Code).
Acidified foods are held to a finished equilibrium pH of 4.6 or below to control C. botulinum, and most bacteria cannot grow below a water activity of 0.85 (21 CFR 114.3).

Keeping limits defensible

A critical limit is only as trustworthy as the record behind it, and this is where paper systems leak. Validation letters filed in a drawer, cooking-study data on someone's laptop, a critical limit that quietly changed when the line sped up but never got revalidated: these are the gaps auditors find. Keeping each critical limit tied to its source document and its validation evidence, in one place your team can produce on request, is what turns audit prep into a query instead of a binder hunt.

That is the same digitize-the-paper move Harmony runs for production and quality records (see how CLS did it), and it pays off across the whole HACCP framework, from GMP compliance up to HACCP certification. Once the limits are set and validated, the plan lives or dies on whether monitoring actually catches a breach, which is Principle 4. See how a connected operation keeps CCP data live on the features overview.