ServSafe HACCP Guide: 7 Principles Explained

What Is HACCP?

HACCP stands for Hazard Analysis and Critical Control Points. It is a proactive, science-based food safety system designed to prevent biological, chemical, and physical hazards from causing foodborne illness before they reach the consumer. Unlike reactive inspections, HACCP identifies risks at every step of the flow of food — from receiving and storage through preparation, cooking, holding, cooling, reheating, and serving.

The FDA and USDA require HACCP plans for many segments of the food industry, including meat and poultry processors, seafood operations, and juice manufacturers. For most food service establishments, applying HACCP principles is best practice and is tested directly on the ServSafe Manager certification exam. If you are studying for ServSafe, you should be able to name all 7 principles in order, give examples of CCPs in a restaurant kitchen, and explain what happens when a critical limit is not met.

Before diving into the principles, it helps to understand the prerequisites. A HACCP plan is only as good as the foundation supporting it. ServSafe teaches that Active Managerial Control and a solid set of Standard Operating Procedures (SOPs) must already be in place. These include personal hygiene policies, approved supplier programs, equipment maintenance, and pest control. Once those foundations are established, you can build an effective HACCP plan. For a full overview of food safety management, see our ServSafe complete guide.

Principle 1 — Conduct a Hazard Analysis

The first principle requires you to identify all potential hazards that could occur at each step in the flow of food. Hazards fall into three categories: biological (bacteria, viruses, parasites), chemical (cleaning agents, pesticides, allergens), and physical (bone fragments, metal shavings, glass). For each menu item, the HACCP team traces every ingredient from receiving to service, asking: what could go wrong here, and is it likely to occur at a level that could harm a guest?

In a commercial kitchen, a hazard analysis for a grilled chicken breast might identify Salmonella contamination during receiving, cross-contamination during prep, and undercooking during grilling as the most significant biological hazards. Chemical hazards might include sanitizer residue if equipment is not properly rinsed. Physical hazards are generally low risk for whole muscle poultry. The output of the hazard analysis is a list of significant hazards that the HACCP plan must control. Employees who handle food with allergen concerns should also review our ServSafe allergens guide as part of the hazard analysis process.

Principle 2 — Identify Critical Control Points (CCPs)

A Critical Control Point is a step in the food preparation process where a control measure can be applied to prevent, eliminate, or reduce a food safety hazard to an acceptable level. Not every step in the flow of food is a CCP — only those where control is essential and where loss of control would likely result in an unacceptable health risk. A common tool for identifying CCPs is the CCP Decision Tree, a series of yes/no questions about each step and each hazard identified in the hazard analysis.

In a typical restaurant, common CCPs include cooking (temperature kills pathogens), cooling (rapid cooling prevents bacterial growth), and hot holding (maintaining temperature prevents multiplication). Receiving raw shellfish is another common CCP because improper temperature at delivery can render the product unsafe before it ever enters your kitchen. It is important to distinguish a CCP from a prerequisite program — handwashing, for example, is a critical practice but is generally managed through SOPs, not as a formal CCP in the HACCP plan.

Principle 3 — Establish Critical Limits

Critical limits are the measurable standards that must be met at each CCP to keep food safe. They are based on regulatory requirements, scientific data, and expert guidance — not personal judgment. Critical limits must be specific and observable. Temperature and time are the most common critical limits in food service. For example, the critical limit for cooking whole muscle poultry is an internal temperature of 165°F (74°C) for 15 seconds. For ground beef, it is 155°F (68°C) for 15 seconds. For cooling, food must be cooled from 135°F to 70°F within two hours and from 70°F to 41°F within four additional hours.

If a critical limit is not met, the food is not automatically discarded — the corrective action plan (Principle 5) determines the proper response. Critical limits are non-negotiable: they cannot be adjusted based on how busy the kitchen is or personal preference. Managers who hold the ServSafe Food Handler Card must ensure all staff understand the critical limits relevant to their station.

Principle 4 — Establish Monitoring Procedures

Monitoring is the scheduled observation or measurement of a CCP to ensure it stays within its critical limit. A monitoring procedure defines: what is being measured (e.g., internal temperature), how it is measured (e.g., calibrated bimetallic thermometer), when or how often (e.g., every chicken breast coming off the grill), and who is responsible (e.g., the line cook, verified by the shift supervisor).

Continuous monitoring is preferred where possible — for example, a calibrated probe thermometer built into a walk-in cooler provides constant readings. When continuous monitoring is not possible, the frequency of monitoring should reflect the risk. High-risk CCPs like cooking temperatures should be checked every batch; lower-risk steps like receiving temperatures may be checked on every delivery. Monitoring records must be kept as part of Principle 7 and should be reviewed regularly as part of Principle 6 verification.

Principle 5 — Identify Corrective Actions

When monitoring shows that a critical limit has not been met, a pre-determined corrective action must be taken immediately. Corrective actions serve two purposes: (1) fix the immediate problem with the affected food, and (2) identify and correct the root cause so it does not recur. For food that did not meet a critical limit, options include: continue cooking to reach the correct temperature, reject a shipment that arrived at an unsafe temperature, or discard food that has been in the temperature danger zone too long.

The corrective action must be documented, including what happened, what was done with the affected food, and what steps were taken to prevent recurrence. ServSafe emphasizes that managers must have the authority and knowledge to make corrective action decisions quickly. A line cook who finds that reheated soup only reached 145°F instead of the required 165°F must know to return it to heat immediately — not serve it. For more on how HACCP integrates with your renewal and ongoing training obligations, see our ServSafe renewal guide.

Principle 6 — Establish Verification Procedures

Verification confirms that the HACCP plan is working as intended. Verification activities are different from monitoring: monitoring checks individual CCPs in real time, while verification evaluates the overall system. Verification includes reviewing monitoring records to confirm they are being completed accurately, calibrating thermometers and other measuring equipment on a regular schedule, conducting additional microbiological testing when appropriate, and reviewing the HACCP plan annually or whenever a significant change occurs (new menu item, new supplier, renovation of kitchen space).

Third-party audits, health department inspections, and internal management audits all function as verification activities. The ServSafe exam often tests the distinction between monitoring and verification — know that verification is broader, less frequent, and done by management or a qualified third party.

Principle 7 — Establish Recordkeeping Procedures

The seventh and final HACCP principle requires that all monitoring data, corrective actions, verification activities, and the written HACCP plan itself be documented and retained. Records are the paper trail that proves your system was followed. They also help managers identify trends — for example, if temperature logs show a cooler consistently running at 43°F when the critical limit is 41°F, the trend reveals an equipment problem before a more serious failure occurs.

Required records typically include: the written HACCP plan and hazard analysis, CCP monitoring logs (temperature records, time logs), corrective action reports, equipment calibration records, and employee training documentation. Regulatory agencies can request records during inspections, and incomplete or falsified records can result in serious consequences. Good recordkeeping also supports a culture of accountability and continuous improvement in food safety.

HACCP on the ServSafe Manager Exam

The ServSafe Manager exam dedicates significant attention to HACCP. Expect questions that ask you to identify which step in a scenario represents a CCP, what the appropriate corrective action is when a critical limit is breached, or which of several options correctly describes a verification activity. Common traps include confusing monitoring with verification, misidentifying a step as a CCP when it is better handled by an SOP, or selecting an incorrect critical limit temperature. Use our ServSafe practice test to drill HACCP scenarios until the principles become second nature.