Introduction

The identification of all potential hazards associated with each process step, the systematic conduct of hazard analysis to evaluate their significance, and the consideration of appropriate control measures represents a critical analytical exercise at the heart of any HACCP-based food safety management system. This foundational work, commonly referenced as Principle 1 within the Codex Alimentarius HACCP framework, transforms the identification of theoretical hazards into a disciplined, evidenced assessment of which hazards genuinely require control measures to ensure food safety.

The process comprises three interrelated but distinct activities. Hazard identification involves systematically documenting all potential biological, chemical, physical, allergenic, and fraud, and maliciously-introduced hazards that might reasonably be present in, introduced during, survive through, or be controlled at each production step. Hazard analysis evaluates these identified hazards to determine which are significant—meaning they are reasonably likely to occur at unacceptable levels if not controlled—by assessing both the severity of potential health effects and the likelihood of occurrence. Consideration of control measures entails identifying what actions or conditions are necessary to prevent, eliminate, or reduce each significant hazard to acceptable levels.

This systematic analytical framework provides a logical, science-based approach to food safety decision-making, enabling food manufacturers to discriminate between hazards requiring active management and those adequately controlled through foundational hygiene and operational practices.

Significance and Intent

The comprehensive identification, rigorous analysis, and thoughtful consideration of control measures for food safety hazards serve a fundamentally important function: establishing the technical basis upon which the entire food safety management system is constructed. Without thorough hazard analysis, food manufacturers cannot claim to have designed appropriate controls or to be managing genuine risks effectively.

The significance of hazard identification extends beyond merely listing potential problems. Different product types and processes harbour different hazards at different risk levels. Raw poultry production faces particular risks from Salmonella; ready-to-eat products require intensive focus on Listeria monocytogenes; seafood raises specific concerns about Clostridium botulinum and histamine-forming bacteria. Bakery products carry distinct physical hazard concerns compared to meat processing operations. Without process-specific hazard identification grounded in scientific literature and industry evidence, food manufacturers operate from incomplete or generic assumptions rather than evidence-based understanding.

Hazard analysis moves beyond identification to evaluation, asking which of the identified hazards are genuinely significant enough to warrant control measures. This evaluation rests on two distinct but equally important dimensions. Severity assesses the potential health consequences should a hazard reach consumers—ranging from minor quality concerns through acute illness to serious, potentially life-threatening conditions or death. Likelihood evaluates the probability that the hazard will actually occur at harmful levels, considering inherent characteristics of raw materials, the effectiveness of processing conditions, the stability of environmental controls, and historical evidence.

The rationale for evaluating both dimensions is straightforward. A hazard with high severity but extremely low likelihood may rationally require less intensive monitoring than one with moderate severity but high likelihood of occurrence. A pathogen that could theoretically cause severe illness but is eliminated with virtual certainty by a well-designed process requires different control intensity than one that frequently survives standard conditions. By evaluating both dimensions systematically, food manufacturers move beyond assumption-based decisions to risk-proportionate, defensible management.

The consideration of appropriate control measures translates analysis into action. Once significant hazards are identified, food manufacturers must determine how these hazards will be managed. Not all hazards require critical control points with intensive monitoring; many are adequately managed through well-designed prerequisite programmes establishing foundational environmental and operational conditions. Others require operational prerequisite programmes providing targeted controls for specific hazards. Only those hazards for which elimination or reduction to acceptable levels is essential for safety, and which cannot be adequately managed through prerequisite or operational prerequisite programmes, warrant designation as critical control points requiring critical limits and focused monitoring.

The intended outcome of thorough hazard identification, rigorous analysis, and proportionate control measure consideration is a food safety system that is technically sound, scientifically defensible, rationally prioritised, and demonstrably focused on genuine risks to consumer health. Such a system provides due diligence, supports regulatory compliance, and—most importantly—prevents foodborne illness and injury.

Overview of Compliance

Compliance with requirements for hazard identification, analysis, and control measure consideration requires several interconnected documented and analytical systems. The hazard analysis itself serves as the central record, whilst supporting reference materials provide the technical foundation for analysis decisions.

The comprehensive hazard identification documentation should systematically address each process step included in the production flow. For each step, hazard identification documents should describe how specific biological, chemical, physical, allergenic, and fraud, and maliciously-introduced hazards might be present, introduced, survived through, increased, or controlled. This identification should be informed by multiple reference sources: scientific literature on hazards associated with specific food types; industry codes of practice and guidance documents; regulatory requirements applicable to the product and production location; epidemiological data on foodborne illness outbreaks; historical information about hazards previously encountered in similar facilities; and facility-specific experience with specific products and processes.

The hazard evaluation documentation records the systematic assessment of significance of hazards using defined criteria for both severity and likelihood. Food manufacturers should employ consistent evaluation frameworks that can be applied uniformly across all identified hazards, ensuring comparable assessment methodology. The evaluation framework should clearly define severity categories—for example, distinguishing between hazards that could cause serious or potentially life-threatening illness, moderate acute illness, or minor gastrointestinal upset. Likelihood evaluation requires equally clear criteria addressing probability of occurrence, considering whether the hazard is present in incoming materials, whether process conditions effectively control it, and whether subsequent steps further reduce risk.

The significance determination—typically calculated by combining severity and likelihood scores—should be documented with clear rationale for the scoring assigned to each hazard. When significance is marginal or judgements are made regarding whether a hazard exceeds the predetermined threshold for control, supporting references to scientific evidence or regulatory guidance strengthen the decision.

Control measure documentation identifies what actions or conditions will control each significant hazard. This documentation should clarify whether each hazard is controlled through prerequisite programmes, operational prerequisite programmes, or critical control points. Where control is achieved through prerequisite or operational prerequisite programmes, the documentation should specify which programme addresses the hazard and describe how the programme controls the hazard to acceptable levels.

Supporting reference materials provide the scientific and technical basis for hazard analysis decisions. Food manufacturers should maintain access to and references toward: scientific literature on pathogenic organisms, chemical hazards (including allergens), or physical contaminants relevant to their products; regulatory guidance on hazards associated with specific product types; epidemiological data on outbreaks associated with similar products or processes; industry codes of practice; and facility-specific historical information about hazards previously identified or encountered.

Product description documentation collects technical information necessary for informed hazard analysis, including composition, processing characteristics, pH and water activity values, storage conditions, intended consumer groups, and maximum shelf life. This information influences which hazards are relevant and how likely they are to occur.

Process flow diagrams provide the framework upon which hazard identification is conducted. Accurate flow diagrams showing all process steps, potential delay points, rework loops, and material flows ensure that hazards associated with each actual process step are considered.

Documented Systems

Comprehensive hazard identification, analysis, and control measure consideration requires multiple documented systems working in concert, each providing essential information for rigorous decision-making.

The hazard identification and analysis document forms the centrepiece. This document systematically addresses each process step and lists all potential hazards that might reasonably be expected to occur at that step in relation to the product, process, and facilities. For each identified hazard, the documentation should describe the mechanism by which the hazard is present, introduced, survived, or increased at the specific step.

The hazard list should be comprehensive across all hazard categories. Biological hazards include pathogenic bacteria (such as Salmonella, Listeria monocytogenes, pathogenic E. coli, Clostridium botulinum), viruses (such as hepatitis A, norovirus), parasites, and prions where relevant to the product type and intended use. Chemical hazards encompass residues from agricultural production (pesticides, veterinary drugs, heavy metals), environmental contaminants, cleaning chemicals and sanitisers, processing-related substances, naturally occurring toxins in certain raw materials, allergens, and substances migrating from food contact materials. Physical hazards include foreign bodies such as glass, metal fragments, stones, hard plastics, bone, or other hard contaminants that could cause injury. Radiological hazards address radioactive contamination where relevant to geographic location or source materials. Economic adulteration hazards include substitution, dilution, or misrepresentation of ingredients or product authenticity.

For each identified hazard, effective documentation describes not simply that the hazard might occur, but the specific mechanism and circumstances. For raw materials, the documentation should identify how the hazard might be present in the ingredient or material as received from suppliers—for example, Salmonella potentially present in raw poultry, Clostridium botulinum spores in certain vegetables, pesticide residues in produce, or metal fragments in minerals used as processing aids. During processing, documentation should describe how hazards might be introduced through processing equipment, personnel, water, utilities, or the processing environment; how hazards might survive or multiply if process conditions are insufficient; and how subsequent steps might control or further increase the risk associated with the hazard.

The hazard evaluation framework and assessment documents the systematic evaluation of significance. Food manufacturers should establish and document clear criteria for severity assessment. High severity hazards typically include those reasonably likely to cause serious adverse health effects—such as pathogenic bacteria known to cause severe illness or death (for example, E. coli O157, Salmonella, Clostridium botulinum), parasites causing serious disease, or physical hazards such as sharp glass or metal fragments that could cause internal injury. Moderate severity hazards cause acute illness but typically not severe or life-threatening outcomes. Low severity hazards cause minor illness or quality concerns.

Likelihood assessment should evaluate the probability that the hazard will actually occur at harmful levels given the characteristics of the incoming materials, the design and performance of processing steps, and the effectiveness of existing controls. Documentation should consider whether historical evidence indicates that the hazard has previously been problematic in similar operations; whether the raw material source is known to frequently harbour the hazard; whether processing conditions are known to effectively eliminate or control the hazard; and whether facility design and operational procedures would prevent introduction or multiplication. High likelihood hazards are those for which occurrence at harmful levels is reasonably foreseeable under normal operation. Medium likelihood hazards could occur but may not have obvious precedent. Low likelihood hazards are those for which specific, unlikely conditions would need to coincide for harmful levels to be reached.

The significance score or determination—whether calculated through mathematical multiplication of severity and likelihood scores or through qualitative assessment—should be documented clearly. Food manufacturers should establish a predetermined threshold above which hazards are considered significant and will be carried forward for control measure consideration, with all other hazards being adequately managed through prerequisite programmes.

Where a hazard might be present but elimination is determined to be impractical, the documentation should include justification for accepting defined acceptable levels of the hazard in the finished product, with reference to regulatory limits, established industry practice, or scientific evidence supporting the acceptable level

Control measure specifications document how each significant hazard will be managed. For hazards controlled through prerequisite programmes, documentation should identify the specific prerequisite programme addressing the hazard—for example, Listeria monocytogenes controlled through sanitation procedures, pest management, personnel hygiene, and environmental design controls documented within prerequisite programmes. For significant hazards controlled through operational prerequisite programmes, documentation should describe the specific operational prerequisite programme—for example, environmental microbiological monitoring targeting Listeria in ready-to-eat production areas. For critical control points, documentation should specify the control measure, the critical limit, monitoring frequency and methodology, and corrective actions.

Importantly, documentation should acknowledge where multiple control measures collectively manage a single hazard. For example, control of Salmonella in poultry might involve supplier approval ensuring source animals are from vetted suppliers, segregation of raw and ready-to-eat products preventing cross-contamination, temperature control during cooking ensuring pathogen reduction, and finished product testing providing verification.

Severity and likelihood assessment matrices or frameworks provide structured tools that ensure consistency in hazard evaluation across different product types, process steps, and hazard categories. These frameworks document the numerical or categorical scales used, the definitions corresponding to each level, and the methodology for combining severity and likelihood scores to determine significance. Consistent frameworks enable transparent decision-making and facilitate comparison of hazard rankings across different hazards and process steps.

Reference material lists and documentation identify the scientific literature, regulatory guidance, industry codes of practice, epidemiological data, and facility-specific historical information used to support hazard identification and evaluation decisions. Food manufacturers should maintain records indicating which references informed particular hazard identification or significance assessments, enabling audit verification of the evidence base underlying decisions.

Process flow diagrams and supporting descriptive documentation provide the process context in which hazard identification occurs. Flow diagrams should accurately represent all process steps, showing ingredient introduction points, processing sequences, potential delays or holding periods where time-temperature relationships matter, rework loops, segregation between product flow streams, and material flow to finished product. For each process step shown in the flow diagram, hazard analysis documentation should address hazards relevant to that specific step.

Product description documentation collects technical information essential for hazard analysis—composition including raw materials and allergens; physicochemical properties such as pH and water activity; processing methods and parameters; packaging systems; storage and distribution conditions; shelf life; and intended use by consumer groups. This information informs which hazards are relevant and influences likelihood and severity assessments.

Practical Application

The practical work of hazard identification, analysis, and control measure consideration involves coordinated activities from technical specialists, production personnel, and management staff working together to build understanding of actual hazards in specific products and processes.

Hazard identification requires systematic, team-based examination of each process step. A multidisciplinary team including personnel with knowledge of food safety, technical management, production operations, engineering, and hygiene should work through each process step, asking structured questions about what hazards might be present, introduced, survived, controlled, or increased at that step. This examination should reference scientific literature on hazards known to be associated with the specific food type; industry codes of practice providing guidance on hazard occurrence; regulatory requirements for the product and production location; epidemiological data on outbreaks of foodborne illness linked to similar products; and facility-specific historical experience with the product or similar products.

Team members with production experience are essential to this process, as they possess practical knowledge about how processes actually function, where informal adaptations to procedures occur, what variability exists in incoming materials, and where operational conditions might allow hazards to persist or multiply. Production personnel often recognise hazard mechanisms that pure theory-based analysis might overlook.

Effective hazard identification avoids generic descriptions in favour of product- and process-specific hazard documentation. Rather than simply listing “pathogenic bacteria” as a hazard, the documentation should specifically identify which bacterial pathogens are relevant to the product—for example, Salmonella in poultry, Listeria in ready-to-eat products, or E. coli O157 in raw beef. This specificity ensures that subsequent analysis and control measure consideration remain focused on genuine threats rather than hypothetical possibilities.

Hazard analysis entails systematic evaluation of severity for each identified hazard. Team members with relevant scientific or technical knowledge should consider what health consequences would result if the hazard were consumed at harmful levels. This evaluation should reference published scientific literature on the pathogenic organism or chemical hazard, epidemiological data on illnesses it causes, regulatory standards reflecting risk judgements, and information in industry codes of practice. The team should assign severity scores based on predetermined categories, documenting the reasoning for each score assignment.

Severity assessment should be grounded in actual health consequences rather than theoretical concerns. A hazard that could theoretically cause harm but for which no documented cases of illness exist in the relevant product category, or which typically causes only very minor symptoms when it does occur, might appropriately receive lower severity scores than one with documented history of serious illness in similar products.

Likelihood assessment requires careful evaluation of whether the hazard will actually occur at harmful levels in the specific process. The team should consider multiple factors: the prevalence of the hazard in the incoming materials sourced from the particular suppliers or geographic origins used; the inherent characteristics of the raw materials or ingredients affecting hazard presence; the effectiveness of the processing step in controlling the hazard if processing is involved; the stability of the process under normal operating conditions; the environmental conditions of the facility and their impact on hazard survival or multiplication; and the probability that multiple required conditions would coincide to permit harmful levels to be reached.

This assessment should draw on scientific evidence about hazard survival and multiplication under specific conditions. For example, likelihood assessment for Listeria monocytogenes in ready-to-eat products should reference published scientific data on how this organism survives under refrigeration, the conditions under which it multiplies, and the prevalence in processing environments in similar facilities. Likelihood assessment should avoid the simplistic conclusion that “it could happen” as sufficient justification for high likelihood ratings.

Historical data from the facility should be examined but interpreted cautiously. Absence of prior occurrence does not prove low likelihood if monitoring systems were inadequate to detect the hazard; the process may simply have been fortunate rather than inherently resistant to the hazard. Conversely, a single occurrence in a similar facility elsewhere should not automatically imply high likelihood without understanding whether the specific conditions enabling that occurrence exist in the facility being assessed.

Determination of significance through combining severity and likelihood scores enables consistent prioritisation. The team should establish a predetermined threshold score above which hazards are considered significant and will be carried forward for control measure consideration. This threshold should be clearly documented and applied consistently to all identified hazards. Using consistent methodology across all hazards prevents some hazards from receiving detailed scrutiny whilst others are dismissed without adequate analysis.

Control measure consideration for each significant hazard requires identifying what actions or conditions prevent, eliminate, or reduce the hazard to acceptable levels. The team should consider whether the hazard can be adequately managed through existing or enhanced prerequisite programmes establishing foundational environmental and operational conditions; whether targeted operational prerequisite programmes specific to this hazard are appropriate; or whether critical control points with critical limits and intensive monitoring are essential.

This determination often benefits from application of decision tree frameworks or similar structured logic tools that guide the team through questions about whether controls already exist for the hazard, whether the process step is specifically designed to eliminate or reduce the hazard, and whether subsequent steps provide additional control. The conclusion should be that each significant hazard is addressed by one or more control measures, whether those are prerequisite programmes, operational prerequisite programmes, or critical control points.

Food manufacturers should recognise that multiple control measures may collectively manage a single hazard. For example, control of metal contamination might involve supplier approval ensuring suppliers use metal detection, visual inspection of incoming materials, equipment design to minimise generation of metal fragments, preventive maintenance of equipment, effective metal detection and rejection systems, and training of personnel on preventing introduction of personal items. Each element contributes to overall control, and documentation should clarify how they collectively reduce risk.

Pitfalls to Avoid

Food manufacturers frequently encounter specific challenges when conducting hazard identification, analysis, and control measure consideration. Recognising and addressing these common errors improves the technical quality of hazard analyses.

Generic or template-based hazard identification that fails to reflect product- and process-specific reality represents a fundamental error. Hazard analyses based primarily on copying hazard lists from industry templates or other companies’ plans, without systematic evaluation of what hazards actually apply to the specific product and process, fail to identify real risks or misidentify irrelevant concerns as significant. Effective hazard identification requires examination of the specific product formulation, incoming materials from specific suppliers, the actual processing steps employed, and the facility environment.

Incomplete hazard identification across all hazard categories leaves some risks unaddressed. Some organisations conduct hazard analyses examining biological and chemical hazards thoroughly whilst neglecting physical hazards, radiological hazards, or economic adulteration risks. Comprehensive hazard identification must systematically address all hazard categories relevant to the product and process.

Overlooking hazards introduced during processing or from the facility environment results in incomplete risk assessment. Hazard identification focused narrowly on raw materials may fail to identify hazards introduced through processing equipment, personnel, utilities like water or compressed air, facility design, or environmental conditions. Thorough hazard identification considers hazard introduction at every step, not merely pre-existing hazards in raw materials.

Inadequate consideration of preceding and following process steps limits understanding of how hazards move through the overall production chain. A hazard present in raw materials but eliminated by a subsequent processing step may not require control at the step where it is present. Conversely, a processing step designed to eliminate a hazard requires understanding what conditions enable that step to function effectively and what happens to any hazard that survives.

Inaccurate or inadequately verified process flow diagrams undermine hazard identification based on the diagram. If the documented flow diagram does not accurately represent the actual process, hazards associated with undocumented or misrepresented process steps will not be identified. Process flow diagrams should be verified through direct observation of the actual process, with particular attention to delay points, rework loops, and alternative process paths that may occur under different production scenarios.

Inadequate severity assessment that fails to distinguish between serious health hazards and minor quality concerns results in misclassified priorities. Some organisations classify nearly all identified hazards as high severity without differentiation, whilst others inappropriately minimise the severity of hazards known to cause serious illness. Severity assessment should be grounded in documented health consequences of the specific hazard, with reference to scientific literature and epidemiological data.

Likelihood assessment distorted by cognitive biases such as optimism bias or anchoring bias results in inaccurate risk evaluation. Organisations sometimes underestimate likelihood because problems have not been observed locally, despite evidence of the hazard occurring in similar facilities elsewhere. Others overestimate likelihood based on a single incident or because they have become focused on a particular hazard without evidence supporting high likelihood. Likelihood assessment should be supported by explicit evaluation of whether incoming materials are known to carry the hazard, whether processing conditions reliably control the hazard, and whether environmental conditions would support survival or multiplication.

Excessive reliance on company history in hazard likelihood assessment can be misleading. If a hazard has never occurred at a facility, this may reflect effective controls—or it may simply reflect monitoring systems inadequate to detect the hazard, or fortunate conditions that may not persist. Historical absence of observed problems should be supplemented with evaluation of whether the risk factors that create the hazard in other facilities are also present in this facility.

Incorrect determination of significance due to misapplication of scoring methodology results in hazards being carried forward for control when prerequisite programmes would be adequate, or hazards being excluded from specific control measures when control is essential. If food manufacturers establish a significance threshold but then apply different criteria to different hazard categories, or if different team members interpret severity or likelihood differently, inconsistent significance determinations result. Clear definitions of severity and likelihood categories, with specific examples corresponding to each level, reduce inconsistency.

Inadequate support for decisions regarding acceptable hazard levels where elimination is impractical leaves food manufacturers vulnerable to audit challenges. Where a hazard cannot practically be eliminated entirely, some organisations arbitrarily accept residual hazard levels without reference to regulatory limits, scientific evidence, or industry practice. Food manufacturers should document and justify acceptable residual levels with reference to established standards or scientific evidence supporting those levels.

Misunderstanding the distinction between prerequisite programmes, operational prerequisite programmes, and critical control points results in inappropriate allocation of control methods. Some organisations designate most or all significant hazards as necessitating critical control points, creating unwieldy monitoring systems that overwhelm laboratory and quality assurance capacity. Others attempt to manage critical hazards through only prerequisite programmes, failing to implement the intensive monitoring and immediate corrective actions essential for safety. Clear understanding of when each control method is appropriate improves system effectiveness and efficiency.

Failure to document evidence supporting hazard analysis decisions limits traceability of reasoning and makes the analysis vulnerable during audits or regulatory challenge. Where hazard identification or significance assessment lack reference to scientific literature, regulatory guidance, or industry best practice, auditors cannot evaluate whether assessments were reasonable. Comprehensive documentation with clear references to supporting evidence strengthens the credibility and defensibility of the analysis.

Food manufacturers can address these pitfalls through several practical approaches: assembling multidisciplinary teams that include production and operational expertise alongside quality and technical perspectives; systematically working through each process step rather than relying on templates; consulting scientific literature and industry guidance specific to the product type rather than generic sources; directly observing the process to verify flow diagrams and identify actual hazards; using structured severity and likelihood assessment frameworks consistently across all hazards; documenting reasoning for significance determinations with supporting evidence; and engaging external expertise where specialised knowledge is required.

In Summary

The systematic identification of all potential hazards associated with each process step, the rigorous conduct of hazard analysis to evaluate their significance, and the thoughtful consideration of appropriate control measures represent fundamental analytical work upon which effective food safety management systems are built. This work cannot be delegated to templates or generic hazard lists; it requires disciplined, evidence-based evaluation specific to the particular product, process, and facilities of each food manufacturing operation.

Hazard identification requires comprehensive, systematic examination across all hazard categories — biological, chemical, physical, allergenic, and fraud, and maliciously-introduced hazards  — with specific attention to hazards present in raw materials, those introduced during processing, and those that survive particular process steps. The identification should consider preceding and following steps in the broader production chain, ensuring full understanding of how hazards move through the system.

Hazard analysis transforms identified hazards into a prioritised assessment of which are genuinely significant. This evaluation relies on two equally important dimensions: the severity of health consequences should the hazard reach consumers, and the likelihood that the hazard will actually occur at harmful levels given the characteristics of incoming materials, the design of processes, and the operational environment. Systematic evaluation of both dimensions, supported by scientific evidence and documented with clear reasoning, produces risk assessments that rationally reflect genuine threats rather than theoretical concerns or cognitive biases.

Control measure consideration recognises that significant hazards require management through appropriate mechanisms—whether foundational prerequisite programmes establishing basic operational conditions, targeted operational prerequisite programmes addressing specific hazards, or critical control points demanding critical limits and intensive monitoring. The selection of appropriate control mechanisms reflects understanding of which controls are necessary for safety and which level of monitoring intensity is proportionate to the risks involved.

Documented hazard analyses supported by scientific evidence, consistent severity and likelihood evaluation frameworks, clear product and process descriptions, and accurate process flow diagrams provide the foundation upon which the entire HACCP system rests. The quality of this foundation directly determines whether the resulting system effectively protects consumers or merely generates paperwork without addressing genuine risks.

When hazard identification, analysis, and control measure consideration are conducted thoroughly, with integrity, and grounded in evidence specific to each product and process, food manufacturers develop genuine understanding of their risks, allocate control measures proportionately, and establish systems capable of reliably preventing foodborne illness and injury. This analytical work, though demanding, is the intellectual foundation upon which food safety ultimately depends.