hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us

HACCP · Hazard analysis and critical control point

HACCP certification consulting for hazards stopped at the step where control is essential, batch after batch.

Reach HACCP certification with an independent certification body, first time, on a schedule your production can keep. Sterling's expert and experienced consultants build the HACCP system around your real process: good hygiene practices, the hazard analysis, CCPs with validated limits, and the monitoring, corrective-action and verification records an auditor will test, and stay with you through the certification audit and after it, in 60+ countries. We ensure successful certification for our clients.

  • One all-inclusive proposal for a fixed scope: consulting, Effivity software, Sterling Academy access and internal auditor training, as applicable to your standard, in a single proposal
  • A team of expert and experienced food safety consultants, advising on management systems across sectors and countries since 2003
  • The Sterling Promise: 100% on-time completion, 100% success, 8,100+ client engagements. Sterling does not certify; an accredited body audits and decides

8,100+ client engagements in 60+ countries.

HACCP client experience
  • Allianz
  • Emirates Flight Catering
  • Etihad Rail
  • Haier
  • Whirlpool
  • Emerson
  • Olam
  • Piramal Pharma Solutions

What it is

What is HACCP and what is it used for?

HACCP stands for hazard analysis and critical control point. It is the internationally accepted method for keeping food safe by prevention rather than by testing the finished product: a food business works through its process step by step, identifies the biological, chemical and physical hazards in it, decides at which steps control is essential, and monitors those steps against limits shown to work. The method is set out by the Codex Alimentarius Commission, the joint FAO and WHO food standards body, in the General Principles of Food Hygiene, CXC 1-1969, the reference behind food hygiene law and certification in most of the world.

The Codex text has two chapters, and both matter to an auditor. Chapter One covers good hygiene practices, from the design of establishments and equipment, training, cleaning, pest control and personal hygiene to control of operation, product information and transport. Chapter Two is the HACCP system itself: seven principles and the twelve-step sequence for applying them, from assembling the HACCP team to documentation and records. Codex is explicit that prerequisite programmes, which include the good hygiene practices, should provide the foundation for an effective HACCP system; a plan built on weak hygiene moves the hazards to the CCPs and hopes.

Current text. The Codex General Principles of Food Hygiene, CXC 1-1969, were adopted in 1969, amended in 1999 and revised in 1997, 2003, 2020 and 2022. The current text calls a positive food safety culture fundamental to any food hygiene system and, compared with the 1997 wording, changes two principles: critical limits must be validated, and the HACCP plan must be validated before verification procedures are established. The 2022 revision added Annex IV, a decision tree and worksheet for determining CCPs. Codex texts are recommendations for voluntary application by member governments, not a substitute for national law; most food hygiene regulations, and every HACCP certification scheme, are built on them.

Who it is for

Who needs HACCP certification?

HACCP applies at any step of the food chain, from a single-line processor to a hotel kitchen, and the Codex text expects it to be applied with the flexibility a small or less developed business needs. Certification lets a customer or an inspector rely on an independent audit of the plan. Organisations come to Sterling for HACCP from four situations:

  • A customer, distributor or importer asks for a HACCP certificate. Supplier approval forms, tenders and import registrations often list a HACCP certificate as the minimum. We confirm at the start which document the certification body will certify against and whether the customer accepts it.
  • The law requires HACCP-based procedures and the inspector asks to see them. In the European Union, Regulation (EC) No 852/2004 requires food business operators after primary production to put in place, implement and maintain a permanent procedure or procedures based on the HACCP principles. In the United States, HACCP is mandatory for meat and poultry under USDA rules and for seafood and juice under FDA rules, and most other FDA-registered food facilities need a written food safety plan with hazard analysis and risk-based preventive controls under FSMA. In the Philippines, the Food Safety Act of 2013 encourages food business operators to implement a HACCP-based system and directs official inspection to take HACCP implementation into account.
  • A new product, a new line or an incident. A change of process, a foreign-body complaint, a pathogen finding or a recall exposes a plan that was never revisited. The hazard analysis is redone from the current flow diagram, with certification as the outside check.
  • You are building food safety for the first time. For a growing business HACCP is the first rung: it puts the hygiene practices in order, produces the plan and the records, and is the base ISO 22000 or FSSC 22000 builds on later.

The intended benefit is safe product; the certificate is the proof, not the purpose.

Business benefits

How HACCP protects your product, your customers and your licence to trade

A HACCP plan is a set of decisions about where a hazard can be stopped, taken before production rather than after a complaint. We start where plans most often fail: a cooking step with a limit nobody validated, a metal detector that is a CCP on paper and a formality on the floor.

  • Unsafe product stopped at the step, not at the customerCCPs chosen through the hazard analysis, limits validated, monitoring done at the time, so a deviation is caught while the batch is still in the building.
  • Access to customers who ask for a certificateA certificate from an independent body, against a named document, answers supplier approval forms and import requirements, and the same plan carries into ISO 22000 or FSSC 22000.
  • Inspections that end without findingsPrerequisite programmes and a HACCP plan documented in the structure the inspector knows, with the records Codex-based regulations expect.
  • Fewer complaints and smaller recallsHazards controlled where they occur mean fewer foreign-body, allergen and microbiological complaints, and the records show which lots a deviation touched.
  • Controls that survive the night shiftMonitoring forms, critical limits and corrective-action rules written for the operator on the line, so the plan runs the same way on every shift.
  • A team that can defend its own planA HACCP team that did the hazard analysis itself can explain every CCP to an auditor or a customer; a copied plan cannot be defended by anyone.

Measure CCP deviations, corrective actions by cause, complaints by category and verification findings. If those improve, the system is working; a longer HACCP manual is not one of the measures.

Requirements

What are the main HACCP requirements?

HACCP has no numbered clauses in the way an ISO management system standard has. The Codex text sets out good hygiene practices in Chapter One and the HACCP principles with their twelve-step application in Chapter Two, and a certification body audits your system against the scheme document it names, built on that text. The table is a plain-language map; during the programme your system is checked element by element against the Codex text and the scheme.

ElementWhat it requires of youWhat it looks like in practice
Good hygiene practices: premises, people, operation and transportDesign, maintain, clean and disinfect the establishment, control pests, keep food handlers trained and hygienic, control the operation from intake to dispatch, inform consumers and protect food in transportZoning that keeps raw and ready-to-eat apart, cleaning, pest-control and training records, supplier specifications, time and temperature control, allergen handling, labelling and lot marking, vehicle checks
Steps 1 to 5: the preliminary stepsAssemble the HACCP team, describe the product, identify its intended use, construct the flow diagram and confirm it on siteA multidisciplinary team, product descriptions with the intended consumers, and a flow diagram walked and corrected on the floor
Principle 1: hazard analysis (Step 6)List the potential hazards at each step, analyse which are significant and identify the measures that control themA worksheet for every step, with the reasoning for each hazard kept or dismissed and the control measure it relies on
Principle 2: critical control points (Step 7)Determine the steps at which control is essential to prevent, eliminate or reduce a significant hazard to an acceptable levelCCPs decided with the decision tree and worksheet, usually few in number, each tied to a significant hazard
Principle 3: validated critical limits (Step 8)Establish, for each CCP, limits that separate acceptable from unacceptable product, with evidence that they achieve the intended controlTime, temperature, pH, water activity or detector sensitivity limits, with the validation study, regulatory value or reference behind each
Principle 4: monitoring (Step 9)Establish a system to monitor control of each CCP: what is measured, how, how often and by whomMonitoring records made at the time by trained operators, with calibrated equipment and a rule for a missed reading
Principle 5: corrective actions (Step 10)Establish the corrective actions to take when monitoring shows a deviation from a critical limit at a CCPProduct identified and held, the cause corrected, disposition decided by an authorised person, and a record of all of it
Principle 6: validation and verification (Step 11)Validate the HACCP plan, then establish verification procedures to confirm that the system is working as intendedValidation before the plan goes live, then record reviews, calibration, testing, internal audits and a periodic reassessment of the plan
Principle 7: documentation and records (Step 12)Establish documentation for all procedures, and records appropriate to the principles and their applicationThe plan and its supporting studies, the monitoring, corrective-action and verification records, and document control so the plan on the floor is the current one

What does useful HACCP evidence look like?

A flow diagram that matches the plant on the day of the audit; a hazard analysis with reasoning, not ticks; CCPs the operators can name; critical limits with the validation behind them; monitoring records written at the time, including the misses and what was done about them; calibration of the probes and detectors the limits depend on; verification results that were acted on; and hygiene records, from cleaning to pest control, that hold the plan up, all kept in Effivity from the first workshop.

HACCP requirements explained: the twelve steps

Certification process

How do you get HACCP certified?

The system is built and operated first; an independent certification body audits it afterwards. Sterling prepares your organisation and does the implementation with your team. The certification decision belongs to the certification body, and that independence gives the certificate its value.

  1. 01
    Define the scope and the target.Products, lines, sites, shifts and headcount; HACCP on its own, or as the core of ISO 22000 or FSSC 22000; and the document the certification body will certify against, confirmed with the customer who asked.
  2. 02
    Gap analysis: review the current system against the requirements.Hygiene practices, any existing HACCP plan, records and the premises are reviewed against the Codex text and the scheme, and the actions, owners, dates and resources are agreed.
  3. 03
    Implement and generate evidence.Put the prerequisite programmes in order, form the HACCP team, work the twelve steps from product description to record keeping, validate the limits, and run monitoring and corrective action in daily production.
  4. 04
    Verify, audit and review.Verification, an internal audit of the plan and the hygiene practices, and a management review test the system; findings are raised by us first and closed with evidence.
  5. 05
    Complete the certification body's assessment.A readiness review of the documented system, then the certification audit on site, often run as two visits; respond to any findings and await the decision.
  6. 06
    Keep the system running after certification.Monitoring, verification, internal audits and reviews continue, with a surveillance audit each year and recertification in the third year on the cycle certification bodies commonly run.

Check the route's credibility as carefully as its price. Ask which certification body will audit, which HACCP document it certifies against, whether the certificate is issued under accreditation and by whom, and whether your customer accepts that combination; then verify the answers with those bodies. A certificate that fails the customer's supplier check leaves the hazards uncontrolled and the fee spent. How to choose a credible HACCP provider · The certification buyer's checklist

Cost

How much does HACCP certification cost?

No single price fits every food operation. A single-product bakery with clean premises and a catering group with twelve kitchens and no written plan are different projects. A Sterling proposal is an all-inclusive proposal with every component in view.

Cost componentWhat affects it
Consulting and implementationCondition of the hygiene practices, whether a HACCP plan exists, the number of products and process flows, sites and shifts, and how much of the work your team carries (Design™ or Drive™)
Independent certificationThe certification body's audit time, set by its scheme rules from the products, HACCP studies, employees and sites; travel; annual surveillance; recertification in the third year
Internal resourcesHACCP team time, supervision at the line, training hours, testing and validation studies, calibration, and any hygiene works the premises need
Software and learningIncluded in a Sterling engagement: Effivity for the HACCP system and Sterling Academy access for your people, with users, courses and access period in the proposal
Continued supportVerification reviews, internal audits, plan reassessment after changes, refresher training and the step up to ISO 22000 or FSSC 22000 under Sustain™

What moves the price

  • Number of sites, products and distinct process flows, hence of HACCP studies
  • Whether the premises meet good hygiene practice or need zoning, drainage, pest-control or maintenance works
  • Whether critical limits can be taken from regulation and published science or need a validation study
  • HACCP on its own, or HACCP built as the core of ISO 22000 or FSSC 22000 from the start
  • Shift patterns, seasonality, languages on the floor and the customer's own requirements

What a Sterling proposal always shows

  • Deliverables, responsibilities, assumptions and exclusions, in writing
  • Certification-body fees identified separately, so the programme cost is comparable
  • Effivity, training and Academy access itemised at no additional cost
  • Payment milestones tied to deliverables, not to the calendar
  • One all-inclusive proposal. No surprises, ever

Timeline

How long does HACCP certification take?

A HACCP system has to run before it can be audited. The plan must be validated before anyone relies on it, monitoring records must accumulate over enough production to show the CCPs are under control, and verification and an internal audit must have happened; certification bodies commonly ask for a minimum period of operation before the certification audit. That is why the realistic range is three to six months: the short end for a plant whose hygiene practices already hold and whose products share one process flow, the long end where the premises need works or several HACCP studies are required. The plan is built around that evidence, with milestones tracked in Effivity.

PhaseWhat determines the pace
Scope and gap analysisAccess to the site, the process flows, any existing plan and the last inspection or customer audit
Hygiene practices and the HACCP studyThe condition of the premises, the number of products and flows, validation work such as testing, and approval times for works
Operation and recordsProduction running under the plan long enough for monitoring, corrective-action and verification records to exist, then internal audit and review
Certification assessmentThe certification body's availability, the readiness review and audit dates, and the time to close any findings

If a customer audit, a shipment or a licence renewal sets the date, say so at the first call. We will tell you what is achievable and which decisions cannot wait. A certificate date promised before anyone has seen your process flow is a guess with a signature.

The production manager writes that the workshops helped production staff understand why each control matters rather than only which forms to complete, and that the HACCP plan is now clearer, more consistent and easier to maintain.

Production Manager — MCBRIDE CORPORATION · HACCP · Manufacturing & industrial

Challenges

Common HACCP implementation challenges

HACCP programmes stall for reasons that repeat from kitchen to factory; each has a practical answer.

Every step became a CCP.

A plan with fifteen CCPs is a plan nobody can run: monitoring turns into paperwork and the steps that matter get no more attention than the rest. We redo the hazard analysis with the Codex decision tree, keep as CCPs only the steps where control is essential, and manage the rest through the hygiene practices.

The hygiene practices cannot carry the plan.

Pests, condensation over the line, worn floors, raw and cooked crossing paths. HACCP assumes the prerequisites hold. The gap analysis separates what a procedure can fix from what needs budget, and sequences the works so certification does not wait for the last contractor.

Critical limits were borrowed, not validated.

A cooking temperature taken from a textbook, a metal-detector test piece chosen by the supplier, a chill time nobody measured. Each limit gets a source: a regulation, a published study or a validation run on your own equipment, recorded in the plan.

Monitoring records are filled in at the end of the shift.

A record written from memory is not monitoring, and an auditor recognises the identical handwriting at once. We cut the forms to what the plan needs, train operators on why each check exists, and move CCP records into Effivity so a missed reading is visible the same day.

The plan has not changed since the product did.

A new recipe, a new supplier, a faster line, a new allergen in the building, and the plan still describes the process of three years ago. Reassessment is scheduled and triggered: any change to product, process, equipment or supplier reopens the hazard analysis before it goes live.

Your engagement

What your HACCP engagement includes

A Sterling engagement covers the whole journey, from the first walk of the line to the certificate and beyond, under one all-inclusive proposal and one accountable team, rather than a manual and a list of other suppliers to find.

  • Scope, gap analysis and implementation plan

    Hygiene practices, any existing HACCP plan, records and premises reviewed; actions, owners and dates agreed before work starts.

  • HACCP system development and documentation

    HACCP team, product descriptions, flow diagrams, hazard analysis, CCPs, critical limits, monitoring, corrective action, verification and records, and the prerequisite programmes, built with your people on Sterling's template sets.

  • Effivity ISO & GRC software

    Your HACCP system runs in Effivity from day one, included with the engagement at no additional cost.

  • Training for everyone

    Internal auditor training for your audit team, as applicable to your standard, and preferential Sterling Academy access, including complimentary awareness training for your people as part of the engagement.

  • Validation, verification, internal audit and review

    Validation of the plan and the verification activities, then an internal audit and management review, with findings closed before the certification body arrives.

  • Certification readiness and support

    Preparation for the readiness review and the certification audit, presence during the audit as agreed, and support until the certificate is issued.

Certification decisions remain with the independent certification body.

How we deliver

How Sterling supports your HACCP implementation

Every HACCP engagement runs on Sterling OS™, our delivery operating system: five phases, each with defined deliverables, decision owners and the evidence it must produce. You decide how much of the work your team carries; the method, the software and the accountability stay the same.

  1. 01
    Design™Guided implementation: your HACCP team does the work with Sterling's structure, templates, workshops and coaching.
  2. 02
    Drive™Fully managed consulting: Sterling consultants carry the agreed consulting and documentation work with your HACCP team and line supervisors.
  3. 03
    Sustain™After certification: verification reviews, internal audits, plan reassessment, refresher and new-hire training, and surveillance readiness every year.
  4. 04
    Automate™The HACCP system in Effivity: hygiene programmes, hazard analysis, CCP monitoring, corrective actions, calibration, verification, audits and reviews in one workspace.
  5. 05
    Revise™Stepping up from HACCP to ISO 22000 or FSSC 22000, changes to the Codex text or the scheme, and changes to products, lines, sites or regulation.

Before work starts we agree the engagement team, the weekly working session, the deliverables and who decides what. Progress is reviewed weekly, so an unfinished hygiene works item or an unvalidated limit is visible in month two, not at the readiness review.

How Sterling OS™ works

HACCP implementation

HACCP requirements

Get the document

We e-mail the document as a PDF link. Tell us who you are and where to send it.

A quick security check confirms the request comes from a person.

By requesting the document you agree to our privacy notice. Sterling uses these details to send it and to respond to your request. We never sell your data.

Effivity · HACCP software, included in every engagement

How Effivity helps you fulfil, automate and simplify the requirements of HACCP under the Codex General Principles of Food Hygiene.

Every Sterling HACCP engagement includes Effivity, the ISO and GRC automation platform built by the Sterling group and used in 50+ countries. Your consultant configures the food safety workspace within the agreed scope: prerequisite programmes, hazard analysis, CCPs and limits, monitoring, corrective actions, calibration, verification, documents, internal audits and reviews in one place. Sterling consulting clients get their Effivity subscription included with the engagement, at no additional cost.

Effivity FSMS: Context of the Organisation dashboard
Effivity · Context of the Organisation dashboard
Good hygiene practices

Prerequisite programmes with their checks

Cleaning, pest control, maintenance, personal hygiene, supplier and transport controls run as scheduled programmes with records, so the foundation of the plan is visible without a filing cabinet.

Preliminary steps

Team, products and flow diagrams

HACCP team membership and competence, product descriptions with intended use, and flow diagrams with the date and names of the on-site confirmation.

Hazard analysis

The worksheet, step by step

Hazards listed at each step, significance assessed with the reasoning recorded, control measures identified, and the analysis versioned so a reassessment shows what changed.

Critical control points and critical limits

CCP determination and validation

The decision-tree outcome for each significant hazard, the CCPs it produced, and each critical limit with its validation source attached.

Monitoring

CCP records made at the time

Monitoring entries by operator and shift against the limit, the calibrated instrument identified, and a missed or out-of-limit reading flagged to the supervisor at once.

Corrective actions

Deviations, holds and disposition

Every deviation with the product affected, the correction, the cause, the disposition decision and the person who took it, closed with evidence.

Validation and verification

Verification schedule and results

Record reviews, calibration, testing, internal audits and the periodic reassessment of the plan, with results analysed as trends rather than filed.

Documentation and record keeping

The plan and its records under control

The plan, procedures and forms with versions and approvals, and the records an auditor or inspector asks for retrievable by product, lot, CCP or date.

What this means at the audit

The certification auditor walks the line with the flow diagram, asks for the hazard analysis behind each CCP, checks a shift's monitoring records against the critical limits, follows a deviation to its disposition, and reads the verification results and the last internal audit. In Effivity each is a screen with dates, owners and evidence attached, and Sustain™ runs in the same workspace after certification.

In your engagement

  • Subscription included with the engagement, at no additional cost
  • Configured by your Sterling consultant within the agreed scope
  • Your existing HACCP plan, hygiene records and registers migrated, not retyped
  • Admin and user training for your HACCP team and supervisors
  • Modules for QMS, FSMS, EMS, OHSMS, ISMS and more when you integrate other standards

HACCP client experience

On the record: what clients say about working with Sterling.

Client feedback wall: letters on file

The plant's quality control manager describes the hazard analysis and CCP review as detailed and grounded in the actual processing flow, and credits the team with strengthening monitoring records and corrective-action decisions.

Quality Control Manager — Philippine Bottling and Beverage Manufacturing Corporation · HACCP · Food & beverage

The general manager writes that the team showed professionalism, attention to detail and a deep understanding of food safety regulation throughout, and that prompt answers, a careful review of procedures and thorough training sessions set the business on the path to sound food safety management.

Dante O. Sargento, General Manager — M.O.'s Food Product · HACCP · Food & beverage

The plant manager reports that the collaboration delivered HACCP and ISO 9001:2015 certification, tightened internal processes and gave the company a credential that directly supports its expansion into international markets.

Melanie K. Cabuso, Plant Manager — Bel Mondo Italia Corporation · ISO 9001 and HACCP · Manufacturing & industrial

Each account is drawn from a signed letter or e-mail on file and reported in our words, with the signatory's role and organisation attached; the original letters are available on request.

Case studies with HACCP in scope

What a HACCP engagement looks like in practice.

All case studies
  1. 01

    Restaurant chain: safe, consistent food at every location

    A restaurant chain needed food that was safe, compliant and the same at every location. Under ISO 22000 and HACCP it applied strict controls, monitored its critical control points and dealt with risks early, reducing the likelihood of foodborne illness and keeping it within the regulations. Standard recipes, central preparation of food and checks at each stage gave customers a consistent experience; its chief executive said the system improved the whole chain, in the kitchen and at the table.

    Read the case study
  2. 02

    Food distributor: quality and food safety managed across the cold chain

    A food distributor that saw itself as simply moving product needed to manage quality and food safety across the cold chain. With ISO 9001, ISO 22000 and HACCP in place, real-time temperature monitoring, strict HACCP controls and early risk analysis sharply reduced the risk of products losing quality. Systematic records and smoother audits kept the supply chain in line with food safety requirements; its operations director said clients have more confidence and the results show in the bottom line.

    Read the case study

Sterling Academy · HACCP e-learning

Train every food handler on HACCP, not just the HACCP team.

Sterling Academy is e-learning built for a plant or a kitchen: short video lessons with checkpoints, a final exam and a numbered Certificate of Completion per learner, verifiable online. Sterling consulting clients benefit from preferential course access and special pricing through their Sterling consultant, including complimentary awareness training for their people as part of the engagement.

  • HACCP and food hygiene awareness for every food handler, with the training and competence evidence the Codex good hygiene practices ask for
  • Practitioner courses for the HACCP team leader, supervisors and quality staff
  • Internal auditor training for the people who will audit the HACCP plan, as applicable to your standard, as part of the engagement
  • Completion tracked by department and shift, with a training status report for the auditor
  • New hires and seasonal workers trained as they arrive, so evidence is current at every surveillance audit
  • A Sterling consultant reachable when a learner has a question

Sterling Academy courses for a HACCP programme

Who takes which course, and why.

Full Academy catalogue
E-learning course · every employee

HACCP Awareness

What HACCP expects of the business and of each person who handles food, packaging or equipment: the hygiene practices, what a CCP is and why its check cannot be skipped, what to do when a limit is missed, and how the plan fits daily work.

Final exam · numbered Certificate of Completion, verifiable online

View the course
E-learning course · document owners and the HACCP team

Documented Information Management

Creating, controlling and using the documentation HACCP depends on, from hygiene procedures and the HACCP plan to monitoring records and verification reports, so the current version is on the line.

Final exam · numbered Certificate of Completion, verifiable online

View the course
E-learning course · HACCP team, supervisors, auditors

Nonconformity Management

Deviations at a CCP, corrections and product hold, disposition decisions, complaints, root cause and corrective action, and the evidence that the fix held.

Final exam · numbered Certificate of Completion, verifiable online

View the course
E-learning course · management and the HACCP team

Risk Management

How the hazard analysis assesses likelihood and severity, how that differs from business-level risk, and how management keeps the risks to the food safety system itself under review.

Final exam · numbered Certificate of Completion, verifiable online

View the course
In the engagement · your audit team

Internal auditor training

Delivered by your Sterling consultant for the people who will audit the hygiene practices and the HACCP plan, with exercises on your own lines.

As applicable to your standard · Certificate of Competence

Also in the catalogue

Integrating other standards?

Awareness courses for ISO 22000, ISO 9001, ISO 14001, ISO 45001, ISO/IEC 27001 and more, so an integrated system trains one workforce on one platform.

See all courses

Sterling consulting clients arrange access through their consultant. Sterling Academy certificates are training certificates; certification of your HACCP system remains with the independent certification body.

Why Sterling

Want successful HACCP certification? Come to Sterling.

Whether you run one kitchen or plants in several countries, Sterling builds a HACCP system that production can live with and an auditor can test. We reconcile the customer's specification, the national hygiene regulation and the certification scheme for each site, so one plan answers all three.

Food safety in 60+ countries since 2003

HACCP systems built for manufacturers, beverage plants, caterers, packers and distributors, on their own and as the core of ISO 22000 and FSSC 22000, with one engagement team accountable in every country you operate in.

All-inclusive proposal

Consulting, Effivity, training and Academy access in one proposal, with certification-body fees identified separately. No surprises, ever.

A plan the line can run

Only the CCPs the hazard analysis justifies, forms your operators will complete, and hygiene programmes matched to your premises, so the plan is used on every shift, not tolerated at audit time.

Expert and experienced consultants

Consultants who have built food safety systems across sectors and countries since 2003 and get the hazard analysis right first time, so the certification audit confirms a plan that already works.

The Sterling Promise

What our HACCP certification success guarantee means

100%on-time completion · success · 8,100+ client engagements

We stay with your organisation until the agreed HACCP certification outcome is reached, through consulting, audit preparation and the closure of any findings the certification body raises. Plain explanations, practical delivery on the floor, and the software and learning included in the fee turn the programme into a capability your business keeps.

The engagement defines the standard, the scope, the outcome and each party's responsibilities. Your organisation provides accurate information and operates the agreed controls. The independent certification body audits and retains its certification decision. Our commitment concerns the agreed certification support; it is not a warranty that no food safety incident will occur or that every customer will approve you.

After certification

What happens after HACCP certification?

Certification bodies commonly run a three-year cycle: a surveillance audit in each of the first two years and a recertification audit in the third, on the pattern the scheme sets. Between visits the system has to keep producing evidence: monitoring on every shift, calibration and verification on schedule, corrective actions closed, an internal audit, and a reassessment of the plan whenever a product, process, supplier or equipment changes.

Recipes, suppliers, lines and regulations change faster than any audit cycle, and each change is a reason to reopen the hazard analysis. Under Sterling OS™ Sustain™ we run the verification reviews, internal audits and reassessments with you and prepare each surveillance audit.

FAQs

Frequently asked questions about HACCP

Is HACCP certification mandatory?

HACCP-based procedures are a legal requirement in many jurisdictions, for example for food business operators after primary production in the European Union and for meat, poultry, seafood and juice processors in the United States; certification is not. A certificate is a voluntary, independent confirmation that the plan exists and works, asked for by customers and importers rather than by the law.

What is the difference between HACCP and ISO 22000?

HACCP is the Codex method, its seven principles and the plan they produce, on a foundation of good hygiene practices. ISO 22000 is a certifiable management system standard that contains those principles and adds what a plan alone lacks: context and leadership, objectives, documented information, traceability, emergency preparedness, internal audit, management review and improvement. A HACCP certificate confirms the plan; ISO 22000 certifies the system around it.

Who issues a HACCP certificate, and against what?

An independent certification body issues it after auditing your system against a specified document, which the certificate names: a Codex-based HACCP scheme operated by the body, or a national HACCP standard where one exists. Codex itself runs no certification scheme and issues no certificates. Ask which document the body certifies against and whether the certificate is issued under accreditation; both affect what a customer will accept.

Is a HACCP certificate GFSI-recognised?

No. GFSI recognises certification programmes it has benchmarked, and a HACCP certificate on its own is not one of them. If a retailer or export customer asks for GFSI recognition, FSSC 22000, BRCGS, SQF or IFS is the route, and each contains HACCP, so the work already done is reused.

How many CCPs should a plan have?

As many as the hazard analysis justifies, and no more. A CCP is a step at which control is essential to prevent, eliminate or reduce a significant hazard to an acceptable level; Codex provides a decision tree and worksheet to decide whether that applies. Most plants end up with a small number of CCPs and control the remaining hazards through the hygiene practices.

What are prerequisite programmes and do we need them first?

Prerequisite programmes are the practices and conditions that make a HACCP plan possible: Codex describes them as including good hygiene, good agricultural and good manufacturing practices, with training and traceability, establishing the basic environmental and operating conditions for HACCP. They come first because a CCP cannot compensate for pests, poor cleaning or untrained people.

Does Sterling issue the HACCP certificate?

No. Sterling guides the system into place, trains your people and prepares you for the audit. An independent certification body conducts the readiness review and the certification audit and makes the certification decision. Consulting and certifying under one contract is a conflict of interest, not a service.

How long is a HACCP certificate valid?

Commonly three years, maintained by a surveillance audit in each of the first two years and a recertification audit before expiry; the exact cycle is set by the scheme the body certifies against. The certificate is only as current as the plan behind it.

Can HACCP be integrated with ISO 9001, Halal or other standards?

Yes, and it often is: the case study above combined HACCP with ISO 9001 in one programme. Document control, training, corrective action, internal audit and management review can serve the quality system and the HACCP plan together; Halal certification adds its own ingredient, process and segregation requirements beside the hazard analysis.

Before the first call

Prepare a useful HACCP readiness brief

No HACCP manual is needed before the first conversation. A frank account of the operation and of who is asking for the certificate is enough. Seven questions:

  1. Who is asking for HACCP, and in what form: a customer or importer (does it name a scheme?), a regulator or licence, or your own decision after an incident?
  2. Which products, lines and sites should the certificate cover, and which steps, such as storage, transport or co-packing, are done by someone else?
  3. Is there a HACCP plan today, who wrote it, were its limits ever validated, and when was the hazard analysis last reviewed?
  4. What condition are the premises and hygiene programmes in: pest control, maintenance, cleaning, zoning, allergen handling and water?
  5. What do complaints, product holds, rejected lots, customer audits and official inspections say about the starting point?
  6. Who would sit on the HACCP team, and who can take decisions and give time to implementation, verification and training?
  7. Does a customer audit, a shipment, a licence renewal or a certificate expiry fix the date?

With the answers we can scope the work and prepare a realistic proposal. It prepares a conversation; it is not a scored assessment or a certification decision.

Don’t be fooled by certification scams

If it takes ten days, it is not HACCP certification.

HACCP is the most widely sold food safety certificate and the easiest to sell badly, because the certificate reads the same whether a hazard analysis was done or a template was renamed. The market offers certificates from bodies nobody accredits, plans copied from another factory with the product name changed, and consultants who promise to do everything while your people do nothing, all cheaper until a customer's auditor, an inspector or a complaint tests them.

How to choose a credible HACCP provider

  1. Ask who will issue the certificate and against which document. A credible certificate names the body and the HACCP scheme or standard it was audited against, and appears on the body's public register.
  2. Ask whether the certificate is issued under accreditation, by which accreditation body, and whether that body is a signatory to the Global ACI multilateral recognition arrangement, which replaced the IAF MLA and ILAC MRA in January 2026; confirm it with the accreditation body, not with a logo on a quotation.
  3. Ask who will do the hazard analysis, and where. If nobody plans to walk your line, confirm the flow diagram and validate the limits, the plan will be someone else's with your name on the cover.
  4. Identify who carries each task, which audit costs are separate, and what support exists when the certification audit raises findings.
  5. Ask what your operators will learn and where the records will live. Without training and a system, monitoring stops the week the consultant leaves.
  6. Walk away from "certified in 7 to 10 days", "we manage everything" and one invoice for consulting and certificate. Hygiene programmes must be in place, limits validated and records generated before any credible audit.
All ten warning signs of shortcut certification

Talk to a consultant

Plan your HACCP certification with confidence.

Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.

hello@sterling-grc.com

+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

What would you like to achieve?

Choose a starting point. The enquiry form takes about a minute.

Your goal
Book my free discovery call

Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice