The HACCP Tree
Codex Alimentarius structures HACCP as 12 sequential steps — but the underlying logic is a tree. Healthy roots (PRPs) support a solid trunk (5 preliminary steps), which allows the branches (7 principles) to bear fruit. This module maps each step to how SafetyCore implements it — learn the methodology and the software simultaneously.
The Roots
Prerequisite programmes — the foundation everything else depends on. BRC Section 4 / ISO 22002-1.
The Trunk
5 preliminary steps — must complete before hazard analysis can begin. Codex Steps 1–5.
The Branches
7 principles — the analytical core of the HACCP plan. Codex Steps 6–12.
Prerequisite Programmes
PRPs are the operating conditions and activities that manage the food safety environment. A HACCP plan without healthy PRPs is structurally unsound — hazards that should be managed by PRPs leak through to the hazard analysis, overcomplicate the plan, and create audit risk. BRC Issue 9 Section 4 and ISO 22002-1 define the minimum requirements.
5 Preliminary Steps
These five steps must be completed before Principle 1 (hazard analysis) can begin. BRC Issue 9 Section 2 treats them as separately auditable elements. Missing any one of them is an automatic major non-conformance.
7 HACCP Principles
The analytical core of the HACCP plan. Each principle builds on the last — you cannot set meaningful monitoring procedures (P4) without validated critical limits (P3), and you cannot establish critical limits without identifying your CCPs (P2).
Validation vs Verification
The most misunderstood distinction in HACCP — and one of the most common causes of BRC major non-conformities. They ask fundamentally different questions, happen at different times, and require different types of evidence.
Validation — "Will it work?"
Science-first. Proving before implementation that your critical limit will actually control the hazard. A one-time activity (or repeated when changes occur). Evidence: published kill curves, regulatory guidance, challenge testing, expert opinion.
Verification — "Is it working?"
Process-check. Confirming after implementation that the system is operating as planned. Ongoing at planned intervals. Methods: record reviews, internal audits, microbiological testing, calibration, annual HACCP review.
- Published D-value / kill curves for Salmonella
- ACMSF / EFSA guidance on thermal inactivation
- In-house challenge testing records
- Equipment qualification — worst-case thermocouple position
- Daily review of oven temperature logs
- Monthly review of CCP deviation records
- Quarterly probe calibration certificates
- Annual HACCP plan review meeting minutes
Each CCP in SafetyCore has a dedicated validation evidence section — a CCP cannot be marked approved until validation evidence has been attached and signed off. Verification activities are managed through the annual review scheduler and the CCP monitoring log dashboard. This creates the auditable chain BRC and FSSC 22000 auditors look for: science-justified limits → daily monitoring → periodic verification that monitoring is working.
Clause 2.9.1 requires validation evidence for every critical limit. Clause 2.12 requires a documented verification programme. Both are fundamental clause requirements. If your validation evidence is missing, expired, or not specific to your process, your HACCP plan is non-compliant under BRC Issue 9 regardless of how good your monitoring records are.
Put the Knowledge to Work
SafetyCore builds the validation gate and verification schedule into every CCP — so you can't accidentally skip either. Start your free trial and implement HACCP properly from day one.
Start Free Trial — No Card Required