ISO 22000 clause 8.5.4: make the HACCP and OPRP plan usable at work
ISO 22000 clause 8.5.4 requires an implemented and maintained hazard-control plan covering controls at CCPs and OPRPs. It translates hazard analysis and validation into operating arrangements. Personnel need to know the hazard being controlled, the relevant limit or criterion, how to monitor it and what to do when the result is unacceptable.
What clause 8.5.4 requires in practice
Clause 8.5.4 turns the analysis and validation into something people can run. The organisation establishes, implements and maintains a hazard control plan, kept as documented information, which brings together the controls managed at CCPs and by OPRPs. Five sub-clauses fill in the detail: what the plan contains for each control (8.5.4.1), how limits and criteria are set and justified (8.5.4.2), how monitoring works (8.5.4.3), what is done when limits or criteria are missed (8.5.4.4), and the need to implement the plan and keep evidence that it operates (8.5.4.5). Together they describe an operating system: a person watches a defined condition, understands what the result means, and knows what to do with the product and the process if it is wrong.
Connect each measure with its operating information
The general plan requirement includes the hazard, critical limit or action criterion, monitoring procedure, corrections, responsibilities and authorities, and monitoring records for each measure. A combined plan can be suitable if these relationships remain clear.
Use the current analysis and validation as the technical basis. The plan should not introduce an unexplained criterion that differs from the conditions supporting the control's capability.
Make the plan usable by the people responsible. A technical table may need linked operating instructions so that the required activity and response are unambiguous at the point of use.
Distinguish limits from action criteria
Critical limits at CCPs must be measurable, while OPRP action criteria can be measurable or observable. Maintain the rationale for their determination. These criteria connect the selected measure with the acceptable hazard outcome.
A business target or preferred operating setting is not automatically the critical limit. If the operation uses an internal target to provide a margin, make the distinction clear and technically justified rather than confusing personnel about which response applies.
Make monitoring timely and response clear
Monitoring systems must detect failure against the relevant limits or criteria. Define methods, devices, frequency, results, appropriate calibration or verification arrangements, and responsibilities for monitoring and evaluation.
Failure response must prevent release of potentially unsafe product, identify the cause, restore the relevant parameter and prevent recurrence through the applicable correction and corrective-action arrangements.
Finally, implementation needs retained evidence. A plan approved in an office does not demonstrate that monitoring and response happen as intended during actual operation.
Why clause 8.5.4 matters to the business
This clause is where food safety meets the production floor. A technically excellent analysis is worth little if operators cannot tell what to check, what is unacceptable and who decides what happens to the product. Gaps here lead to the costly stories of recalls, rejected consignments and lost customers, and they are the findings that most often worry auditors. A usable plan also reduces dependence on a few experienced individuals, helps new staff become competent faster, and gives managers a way to see control working instead of trusting that it is.
How to implement clause 8.5.4
Build the plan from the people who will use it, and test it against realistic situations before relying on it. Remember that the plan is judged by what operators and evaluators do with it, so involve them from the first draft and keep the layout simple enough for use at the workstation.
- Gather the validated CCP and OPRP decisions, and list for each the hazard, the limit or criterion, the monitoring, the corrections and the responsibilities.
- Check that each limit or criterion has a documented reason and that measurable or observable meaning is clear to operators.
- Define monitoring methods, frequency, equipment and who evaluates results, and link the checks to the product they represent.
- Specify the immediate and follow-up response, including who can hold or release affected product.
- Provide instructions and training at the point of use, not only in an office file.
- Run a scenario from result to product decision, and fix the gaps it reveals.
- Keep records, review the plan after changes, and have verification confirm it works.
Illustrative food-manufacturing example
A manufacturer has categorised a validated processing measure as a CCP for a particular hazard and product. Its plan connects the measurable critical limit with the monitoring method, responsible operator and evaluator, affected-product identification and specified response.
During a practical review, the team discovers that the operator knows how to record the result but not how to identify product made since the last acceptable check. It improves the instruction and competence assessment before treating the plan as fully implemented.
Illustrative catering example
A caterer has a justified OPRP involving an observable condition in a particular process. The plan defines what acceptable and unacceptable observations mean and how a failure is reported and evaluated.
A trial with two supervisors reveals inconsistent interpretation. The team improves the supporting specification and checks understanding. The category does not excuse vague criteria or an uncertain response.
Evidence and common weaknesses
Maintain the plan, the rationale for criteria and the required monitoring-system information. Retain implementation evidence, including results and relevant actions. Link records to the process and product sufficiently to support decisions after a failure.
Common weaknesses include separate tables with conflicting criteria, monitoring records without evaluation responsibility and instructions that address equipment adjustment but omit product. Another is carrying over a plan after a relevant process change without checking its technical basis.
Test the complete sequence using a realistic scenario: result, interpretation, escalation, product control, correction and follow-up. This can reveal missing connections that a document review alone does not expose.
Explore each numbered part
8.5.4.1 · connect every control with its plan and record
A hazard-control plan should make every important operating decision visible. This guide explains the required information for each CCP or OPRP measure and how to connect technical content with practical instructions. Manufacturing and catering examples show why the plan needs clear responsibility for monitoring, evaluation and response, rather than relying on a table of limits alone.
8.5.4.2 · justify critical limits and OPRP action criteria
Limits and criteria translate a validated control decision into a condition people can monitor. This guide explains measurable CCP limits, measurable or observable OPRP criteria and the documented rationale connecting them with acceptable hazard levels. Food-processing and allergen-control examples show why inherited settings, vague observations and operating targets need careful distinction.
8.5.4.3 · detect CCP and OPRP failures in time to act
Monitoring must produce a usable result early enough for the required response. This guide explains the information needed for CCP and OPRP monitoring, their different frequency considerations and responsibility for evaluation. Food-processing and allergen-control examples show how delayed results, unclear observations or weak product identification can make a recorded check ineffective.
8.5.4.4 · plan the response when a food safety control fails
A failed limit or criterion requires decisions about product, process and cause. This guide explains the response that belongs in the hazard-control plan and its connection with clause 8.9. Food-processing and catering examples distinguish restoring a parameter from resolving affected-product status, and immediate correction from action that prevents the same failure recurring.
8.5.4.5 · show that the hazard-control plan is implemented
An approved plan must become consistent operating practice. This guide explains implementation and maintenance of the hazard-control plan, including the evidence needed to demonstrate application. Food-manufacturing and catering examples show how to examine results, authority and response across shifts, and why completed forms are weak evidence when they do not reflect actual work.
Frequently asked questions
Must HACCP and OPRP plans be separate?
No fixed document structure is prescribed. The required information and distinctions must remain clear for each control.
Can an OPRP use a visual criterion?
Yes, where appropriate. Observable criteria need a suitable specification or instruction and a monitoring arrangement that supports reliable decisions.
Is a signed plan proof of implementation?
No. Retained evidence must show that the plan is actually applied and maintained.
Check the plan from operator action to product decision
Discuss a hazard-control plan review with Sterling, including practical instructions, competence and evidence. Suitable Effivity ISO & GRC automation software support can accompany the agreed workflow. Explore HACCP Awareness, then use the hazard-control overview and hub.