The hazard analysis worksheet is the document you use to work through HACCP Principle 1, conduct a hazard analysis. For each step on your process flow diagram, it captures the potential hazards, whether each one is significant, why, and what controls it, in a single row-by-row table. Everything downstream in the plan depends on it.
It is the most important document in the whole HACCP system, because if a hazard is missed here or misjudged, no critical limit, monitoring plan, or record fixes it later. This guide walks the worksheet column by column, shows how to decide a hazard is significant, and, most importantly, how to write the justification that makes the whole thing defensible. There is a printable blank worksheet attached to this post you can use directly.
What is a hazard analysis worksheet?
A hazard analysis worksheet is a structured table, one row per hazard per process step, that records the potential hazards at each step, a significance judgment, the reasoning behind that judgment, and the control measure. It is the standard format for documenting HACCP Principle 1 and the input to Principle 2, determining critical control points.
The worksheet exists to make hazard analysis systematic instead of intuitive. Left to memory, a team remembers the pathogen on the raw meat and forgets the allergen carried over from the prior run, or the chemical residue from a sanitizer. The worksheet forces every step to be examined for every hazard type, and forces the team to write down a reason. That written record is what an auditor reviews, and it is the foundation the rest of HACCP is built on.
What are the columns, and what goes in each?
The worksheet has seven working columns. Each does a specific job, and the order matters: you move left to right, and a step becomes a CCP candidate only after the significance and control columns are honest.
Columns 1 through 3 are descriptive: the step from your verified flow diagram, the specific hazard, and its type, biological, chemical (allergens count as chemical), or physical. Column 4 is the judgment: is this hazard significant? Column 5 is the reason for that judgment. Column 6 names the control measure. Column 7 records whether the step is a critical control point for that hazard, which carries into Principle 2. A worked HACCP plan template pairs this worksheet with the CCP worksheet that follows it.
How do you decide a hazard is significant?
A hazard is significant when it is both reasonably likely to occur and, if it did occur uncontrolled, likely to cause illness or injury. Both tests have to pass. A hazard that is severe but not reasonably likely, or likely but trivial, is documented and set aside, you only build controls for the ones that clear both bars.
Two things trip teams up here. First, "reasonably likely to occur" means in the absence of controls, you judge the raw hazard, not the hazard after your existing safeguards, or you will circular-reason every hazard away. Second, some hazards are significant by default for a product: pathogens on raw poultry, allergens on a shared line, histamine in scombrotoxin-forming fish. Strong prerequisite programs and GMPs reduce likelihood, but you document that reasoning rather than skipping the hazard.
How do you write the justification column?
The justification column states, in a sentence or two, why the significance decision went the way it did. It is the single most scrutinized field on the worksheet, because it is where an auditor can see whether the team reasoned or guessed. A good justification cites the specific reason, the product, the population, the science, or the regulation.
Compare two entries for the same hazard. Weak: "Salmonella, significant, industry standard." Strong: "Salmonella, significant, raw poultry routinely carries Salmonella, product is not cooked again before consumption, and the target population includes children." The second explains itself; the first makes an auditor dig. The same applies when you rule a hazard out: "Metal, not significant at receiving, controlled by downstream metal detector (see CCP-2)" is defensible; "not significant" alone is a finding waiting to happen. Write justifications so that someone who was not in the room can follow the logic, because in an audit, someone who was not in the room is exactly who reads them.
How do you fill out the worksheet, step by step?
Work one step at a time, and within each step, one hazard type at a time. The sequence keeps you from skipping hazards or reasoning in circles:
- List every step from the verified flow diagram. Put each process step in column 1, in order. If the flow diagram has not been confirmed on the floor, stop and confirm it first, an inaccurate flow poisons everything below.
- Brainstorm hazards by type at each step. For every step, ask what biological, chemical (including allergen), and physical hazards could be introduced, increase, or survive. Put each in column 2 with its type in column 3.
- Judge significance for each hazard. Apply the two-part test, reasonably likely and severe, and mark column 4 Yes or No.
- Write the justification. In column 5, state the specific reason for the column-4 decision, whether Yes or No, citing the product, population, science, or regulation.
- Name the control measure. For every significant hazard, put the measure that prevents, eliminates, or reduces it in column 6, a cook step, a metal detector, a validated changeover, a supplier control.
- Decide CCP or not. In column 7, use the decision logic to determine whether this step is a critical control point for this hazard, and carry every "Yes" forward to the CCP worksheet.
Download the printable blank hazard analysis worksheet attached to this post and work through your process in exactly this order.
How does the worksheet feed the rest of the plan?
The worksheet is the input to everything downstream. Every hazard marked significant with a CCP in column 7 becomes a row in the CCP worksheet, where it gets a critical limit, a monitoring procedure, and a corrective action. Every significant hazard controlled by a prerequisite instead stays in that program.
This is also why the worksheet is the first thing an auditor asks for and the HACCP team revisits at every reassessment. When a new ingredient, supplier, or line change happens, you re-open the affected rows here first, then let the changes ripple down into the plan and its records.
What do the primary sources say?
The hazard analysis is Principle 1 and the format is well established:
- Conducting a hazard analysis is Principle 1 of the seven, defined in the FDA HACCP Principles & Application Guidelines which sets out the significance test and the worksheet approach.
- The two-part significance test, reasonably likely to occur and severity of the consequence, comes from the same guidance and the underlying Codex Alimentarius General Principles of Food Hygiene.
- Under FSMA preventive controls, the equivalent step is the hazard analysis in 21 CFR Part 117 Subpart C which broadens the hazards you must evaluate.
- Seafood hazard analysis is required under 21 CFR Part 123 with product-specific guidance in the FDA Fish and Fishery Products Hazards and Controls Guidance.
How do you keep the worksheet a living document?
A hazard analysis worksheet filled out once for an audit and filed away is worse than useless, it gives false confidence while the process moves on beneath it. The worksheet has to be reopened every time an ingredient, supplier, formulation, or piece of equipment changes, and reviewed on the reassessment schedule regardless.
The plants that keep it alive treat the hazard analysis as connected to the floor, not frozen in a binder. When change controls, supplier updates, and deviation trends are captured and searchable, the team can see when a change should trigger a worksheet review, instead of finding out at the next audit that the plan describes a line that no longer exists. Harmony builds that layer for food and beverage plants, turning paper checks and records into live, searchable data on the systems you already run, no rip-and-replace. One manufacturer replaced paper production logging entirely and automated its daily reporting on exactly this pattern. Start from the attached worksheet, build the plan on the HACCP plan template and keep the SSOPs strong underneath so the worksheet stays short and honest.