ISO 22000 clause 8.5.4.1: connect every control with its plan and record

What clause 8.5.4.1 requires in practice

This sub-clause sets the content of the hazard control plan. The organisation establishes, implements and maintains it as documented information. For every control measure at a CCP or OPRP, the plan includes six items: the food safety hazard or hazards the measure controls, the critical limit for a CCP or the action criterion for an OPRP, the monitoring procedure, the correction to make if the limit or criterion is not met, who is responsible and has authority, and the records of monitoring. The clause does not fix a table layout or document name. A single combined plan or a set of linked instructions is acceptable, provided each measure shows all six items clearly and a user can find what they need without guessing.

Show what the measure controls

Identify the relevant food safety hazard and the control measure clearly. The plan should connect with the hazard analysis so users and reviewers understand why the measure exists. A process name alone may not explain the hazard or intended outcome.

Specify the critical limit for a CCP or action criterion for an OPRP. Keep this consistent with the technical rationale and validation basis. Where a measure has several relevant conditions, make their relationship understandable rather than presenting disconnected values.

Link detailed supporting information where useful. The plan can be concise while referring to a controlled instruction or specification, provided personnel can access the information needed for the task.

Define monitoring and the required response

Describe or reference the monitoring procedure and the records of results. People need to understand how a result is obtained, what it means and where it is recorded. The detailed monitoring requirements add method, frequency and evaluation considerations.

Specify corrections when the limit or criterion is not met. A response that only says notify a supervisor may be incomplete if nobody has defined what happens to affected product or who can make the necessary decision.

Responsibilities and authorities should cover the relevant activities, including evaluation and response. Distinguish the person performing a check from the person authorised to decide the status of affected product where those roles differ.

Keep the plan coherent through change

A combined HACCP/OPRP table, linked instructions or another clear structure can be used. The standard does not require one template. Avoid fragmentation that leaves operators applying one criterion while an evaluator uses another.

When a measure changes, examine every connected element: technical basis, criterion, monitoring, records, response and competence. Updating only the heading or equipment reference can leave the operating arrangement inconsistent.

Why clause 8.5.4.1 matters to the business

Each missing item in the plan shows up later as a practical problem. Without the hazard, nobody remembers why the check exists. Without the response, operators improvise. Without a named authority, product waits while people look for someone to decide. A well-formed plan shortens the time between detecting a problem and protecting consumers, which is the whole commercial and ethical point of food safety. It also helps with customer audits and regulatory inspections, because the answers to the usual questions are in one coherent place.

How to implement clause 8.5.4.1

Use the six required items as a checklist for every CCP and OPRP, and test that they hold together. Aim for a plan that a new supervisor could pick up and apply without a briefing, because that is a fair test of whether the connections between its parts are clear.

1. Create a row or sheet for each control measure, starting with the hazard it controls and a reference to the analysis.
2. Enter the limit or criterion exactly as it will be applied at the workstation, with units or a clear description.
3. Link or include the monitoring method, and name the record that captures each result.
4. Write the correction in terms an operator can act on, including how affected product is held.
5. Assign responsibilities and authorities by role, with cover for absence and for each shift.
6. Check terminology is the same across the plan, instructions and record forms.
7. Review each entry whenever the measure, product or equipment changes.

Illustrative food-manufacturing example

Illustrative catering example

A catering team uses a justified OPRP with an observable criterion. The plan references an instruction describing the observation, but the response section uses a different term for failure. Supervisors interpret the two descriptions differently.

The team aligns the terminology, checks the technical intent and tests the revised instruction with personnel. A single coherent decision is more useful than two individually polished documents.

Evidence and common mistakes