Restaurant HACCP Checklist: The Seven Principles Applied to a Working Kitchen

HACCP — Hazard Analysis and Critical Control Points — is a method for identifying where in your process a food-safety hazard can be controlled, setting a measurable limit at that point, checking it, and writing down what you did when it failed. Most restaurants are not legally required to have a written HACCP plan, but every restaurant is expected to control the same hazards, and HACCP is the clearest way to organize that work. This checklist explains when a plan is actually required, walks through the seven principles with kitchen examples, and gives you sample critical limits and records for the control points most restaurants share.

When a restaurant needs a written HACCP plan

There are two different federal regimes, and they are often confused:

• USDA FSIS-regulated establishments (meat, poultry, and egg product processing plants) must operate under a written HACCP plan by regulation (9 CFR Part 417). See FSIS HACCP guidance (opens in a new tab). Restaurants are not FSIS establishments.
• Retail and food service are governed by state and local codes based on the FDA Food Code. The Food Code does not require a HACCP plan for ordinary cooking and serving. It does require one when you conduct a specialized process that needs a variance from the regulatory authority (§3-502.11, §8-201.13), including:
  • reduced-oxygen packaging (vacuum packing, sous vide, cook-chill) beyond the conditions in §3-502.12;
  • curing, smoking, or using food additives as a method of preservation;
  • sprouting seeds or beans;
  • custom processing animals for personal use;
  • operating a molluscan shellfish life-support tank;
  • any other process the regulatory authority identifies as requiring one.

Beyond those cases, franchisors, contract feeders, schools operating under USDA school meal rules, and some local health departments require HACCP-based food safety plans as a matter of policy. And FDA explicitly encourages voluntary use of HACCP principles in retail through its Managing Food Safety: A Manual for the Voluntary Use of HACCP Principles (opens in a new tab), which frames the goal as active managerial control of the foodborne illness risk factors.

Prerequisite programs come first

HACCP assumes the basics are already handled. Before you identify a single critical control point, confirm the prerequisite programs exist and are working, because they are what keep everyday hazards out of the plan:

• Approved suppliers and receiving procedures.
• Employee health policy and exclusion/restriction rules.
• Handwashing and personal hygiene standards.
• Cleaning and sanitizing procedures, including a master cleaning schedule.
• Pest control program.
• Equipment maintenance and thermometer calibration.
• Allergen management.
• Labeling and date marking (see the food labeling guide).
• Food-safety training for all staff, with a certified food protection manager where required.

The seven principles, applied to a kitchen

The seven principles come from the National Advisory Committee on Microbiological Criteria for Foods and are published by FDA as HACCP Principles & Application Guidelines (opens in a new tab). Here is what each one looks like in a restaurant.

Principle 1 — Conduct a hazard analysis

List your menu items, group them by process (no cook / cook and serve same day / complex), and for each step identify biological, chemical, and physical hazards that are reasonably likely to occur. In practice, the hazards that drive most restaurant plans are:

• Pathogen survival from undercooking (poultry, ground meats, eggs, shellfish).
• Pathogen growth from improper holding and slow cooling.
• Cross-contamination from raw to ready-to-eat food, and allergen cross-contact.
• Chemical contamination from sanitizers and cleaners.
• Physical hazards such as glass, metal shavings, and packaging.

• Menu grouped by process; each group has a flow diagram (receive → store → prep → cook → hold → cool → reheat → serve).
• Hazards listed at each step with a short justification.
• Hazards controlled by prerequisite programs are noted as such and kept out of the CCP list.

Principle 2 — Determine the critical control points

A CCP is a step where control is essential and where a later step will not fix the problem. Cooking is the classic CCP for the cook-serve process: nothing after it kills pathogens. Cold holding, hot holding, cooling, and reheating are the usual CCPs in the complex process. Receiving temperature is a CCP for ready-to-eat seafood and some other products. Resist labeling everything a CCP; a plan with 30 CCPs will not be monitored.

Principle 3 — Establish critical limits

A critical limit is the measurable value that separates safe from unsafe at each CCP. In retail, most critical limits come directly from the FDA Food Code as adopted by your jurisdiction, so you are not inventing science — you are citing it.

Many operators set operating limits tighter than the critical limit (cook chicken to 170°F, run the walk-in at 36°F) so that normal variation never reaches the critical limit. Write both down and label which is which.

Principle 4 — Establish monitoring procedures

Monitoring answers: what is measured, how, how often, and by whom. The answer must be realistic for a busy line. Continuous monitoring (sensors in refrigeration) is ideal where it is available; otherwise set a frequency that will catch a deviation before a full shift of product is affected.

• Each CCP has a named monitoring method (probe thermometer, unit thermometer, wireless sensor, timer).
• Frequency is specified (every batch, every 2 hours, continuous).
• The position responsible is named (grill cook, opening manager), not 'staff'.
• The record format is specified, and the record captures time, value, and initials.
• Thermometers used for monitoring are calibrated on a documented schedule (±2°F per §4-502.11).

CCP: Cold holding — reach-in #2 (sandwich station)   LIMIT: ≤ 41°F
DATE   TIME   PRODUCT TEMP (item)      INIT  WITHIN LIMIT?  ACTION
09/07  06:10  38°F (sliced tomato)      JM   Y
09/07  10:00  40°F (tuna salad)         AR   Y
09/07  14:00  44°F (tuna salad)         AR   N   see CA log #17
09/07  14:30  39°F (tuna salad)         AR   Y   recheck after CA

Principle 5 — Establish corrective actions

Decide in advance what happens when a critical limit is not met, so the decision is not made under pressure by whoever happens to be there. A complete corrective action covers the product (continue cooking, rapidly chill, reheat, discard), the process (fix the unit, change the method), and the record (what, when, who, disposition). The temperature log guide lays out corrective-action decision points for each type of failure.

CA #17   DATE 09/07   TIME 14:05   CCP: Cold holding, reach-in #2
Deviation: tuna salad 44°F (limit ≤ 41°F); unit air 43°F.
Cause: door left open during restock; lid off pan.
Product action: 2 lb tuna salad moved to walk-in, re-chilled to 39°F by 14:30;
   out of range < 2 h (last good reading 10:00 = 40°F) — retained.
Process action: restock procedure reviewed with AR; lid discipline added to
   line check.
Recorded by: AR     Verified by: JM 09/07 16:00

Principle 6 — Establish verification procedures

Verification confirms the plan is being followed and that it works. In a restaurant this usually means:

• The person in charge reviews monitoring and corrective-action records daily or weekly and initials them.
• Thermometers are calibrated and the calibration is logged.
• A manager periodically observes monitoring being done and takes independent readings.
• A periodic food safety self-audit checks CCPs and prerequisite programs together.
• The plan is reassessed at least annually and whenever the menu, equipment, suppliers, or process change, or after a deviation pattern or complaint.
• Where a variance applies, the regulatory authority's verification requirements are met (§8-201.14).

Principle 7 — Establish record-keeping and documentation

Records are what turn a plan into evidence. At minimum keep: the hazard analysis and CCP determination, the critical limits and their sources, monitoring records, corrective action records, verification records (reviews, calibration, audits), and training records. Set a retention period in the plan — the Food Code does not fix one for voluntary plans, but variances and many franchisors specify a year or more — and make sure records can be retrieved by date and CCP.

One-page HACCP readiness checklist

Use this to assess an existing plan or to scope a new one.

• Do we perform any process that requires a variance and a HACCP plan under our local code? If yes, has the plan been submitted and approved?
• Are prerequisite programs written, trained, and working?
• Is the menu grouped by process with a flow diagram for each group?
• Does each group have a hazard analysis with justification?
• Are CCPs limited to the steps where control is essential?
• Does each CCP have a critical limit with a cited source, and an operating limit?
• Is monitoring specified by method, frequency, responsible position, and record?
• Are corrective actions pre-defined for product, process, and record?
• Is verification scheduled (record review, calibration, observation, audit, annual reassessment)?
• Are records complete, retrievable, and retained for the stated period?
• Does a new manager know where the plan is and how to run it?

Common mistakes in restaurant HACCP plans

• Copying a template without a hazard analysis. The plan lists CCPs for items you do not serve and misses the sous vide station you added last year.
• Too many CCPs. Handwashing is vital, but it is a prerequisite program; making it a CCP creates monitoring nobody will do.
• Monitoring that only happens on paper. Uniform readings at identical times every day are a warning sign to any auditor.
• No corrective-action record. A plan with zero deviations in a year is either not being monitored or not being recorded honestly.
• No reassessment. Menus change; the plan should too.

HACCP works when it is part of the daily routine — the opening and closing checklists carry the monitoring steps, the temperature log holds the values, and the manager’s review closes the loop. Our blog post on restaurant food safety software discusses how digital tools change the record-keeping side.