HACCP Certification for Food Businesses — Seven Principles, Audit, Cost and Certification Bodies
Video Explanation & Insights
What HACCP is, and where it came from
HACCP — Hazard Analysis and Critical Control Points — is a preventive food-safety system. Instead of testing the finished product and hoping for the best, it examines the whole process from raw material and ingredient to storage, transport and the customer, identifies every biological, chemical or physical hazard, and fixes the specific points where that hazard must be prevented, eliminated or reduced to a safe level. The method was developed with NASA to guarantee food for astronauts, was adopted by regulators, and is today the basis of food-safety law in the European Union and the United States and of the Codex Alimentarius standard that India, Canada, Australia and Japan follow.
For an Indian food business, HACCP certification does three things: it satisfies importers and modern-trade retailers who make it a condition of listing, it demonstrates compliance with FSSAI's hygiene and safety requirements, and it brings standard operating procedures into the plant that reduce rejections and recalls. It also underpins other schemes — ISO 22000, FSSC 22000 and BRC are all built on HACCP.
Who needs it
- •Farms, fisheries and primary processors
- •Food manufacturing and processing units of every kind
- •Packaging material producers for food contact
- •Transporters, cold-chain and distribution services
- •Retail outlets, restaurants, hotels and caterers
- •Exporters whose buyers or destination regulators require a HACCP-based system
The seven HACCP principles
| Principle | What it requires | Example |
|---|---|---|
| 1. Hazard analysis | List every potential biological, chemical or physical hazard in raw materials, ingredients and each processing step | Pesticide residue in produce; metal fragments from a grinder |
| 2. Critical control points | Identify the steps where control is essential to prevent, eliminate or reduce a hazard to an acceptable level | Cooking, pasteurisation, metal detection, water treatment |
| 3. Critical limits | Set the measurable limit at each CCP that separates safe from unsafe | Water TDS, cooking temperature and time, pH, maximum storage temperature, pesticide MRL |
| 4. Monitoring | Define who checks what, how and how often at each CCP | Temperature log every 30 minutes; TDS check per batch |
| 5. Corrective actions | Decide in advance what happens when a limit is breached, including disposal of affected product | Re-cook or reject the batch; quarantine and record |
| 6. Verification | Confirm through audits and testing that the system works as designed | Internal audit, calibration, laboratory testing, external audit |
| 7. Documentation and records | Keep the plan, procedures and monitoring records | HACCP plan, SOPs, logs, training records, audit reports |
Documents and records the auditor expects
Company
- •FSSAI licence, GST, constitution documents
- •Plant layout with product and personnel flow
- •Organisation chart and HACCP team appointment
- •Supplier list and approval records
HACCP plan
- •Product descriptions and intended use
- •Process flow diagrams verified on the floor
- •Hazard analysis worksheets and CCP determination
- •Critical limits, monitoring and corrective-action procedures
Operating records
- •Prerequisite programmes: GMP, cleaning and sanitation, pest control, personal hygiene
- •Monitoring logs, calibration and laboratory test reports
- •Training records
- •Internal audit report and closure of non-conformities
Six steps to certification
- 1Month 1 — Preparation and gap analysis: existing practices are compared with the seven principles and prerequisite programmes; the gaps are listed and prioritised.
- 2Month 1–2 — Plan development: a HACCP plan is written for each product and process — hazards, CCPs, critical limits, monitoring, corrective actions — with SOPs and record formats.
- 3Month 2–3 — Implementation: the HACCP team is formed, staff are trained, monitoring begins and records accumulate as evidence.
- 4Month 3 — Internal audit: the system is audited internally; non-conformities are corrected and closed.
- 5Month 4 — External audit: the accredited certification body conducts the stage 1 (documentation) and stage 2 (on-site) audits.
- 6Month 4–5 — Certificate: issued after non-conformities are closed; annual surveillance audits follow, with a recertification audit at the end of the cycle.
Certification bodies, cost and validity
Choose a certification body accredited by a recognised accreditation body — NABCB in India, UKAS in the United Kingdom, ANAB in the United States — so that the certificate is recognised in the destination market. Global bodies such as SGS, TÜV SÜD, Bureau Veritas, Intertek and DNV operate in India alongside accredited Indian bodies.
| Component | What it covers | Notes |
|---|---|---|
| Certification fee | Registration and certificate issue by the body | Varies by body and scope |
| Audit fee | Stage 1 and stage 2 audit days, based on plant size, processes and headcount | The main cost |
| Additional charges | Auditor travel and stay, extra days for a second site or a failed closure | Paid at actuals |
| Surveillance audits | Annual audits during the certificate cycle | Budget as a recurring cost |
| Validity | Typically a three-year cycle with annual surveillance | Recertification audit before expiry |
Why certifications fail or lapse
- •A plan copied from another unit: CCPs and limits must match your own process and be verified on the floor.
- •Monitoring records that stop after the audit — surveillance auditors look for continuity.
- •Prerequisite programmes (pest control, cleaning, hygiene, calibration) neglected because attention went only to the CCPs.
- •An unaccredited certificate that the importer or regulator does not recognise.
- •No trained HACCP team, so the system depends on one person and collapses when they leave.
HACCP certification: common questions
FSSAI requires food businesses to follow hygiene and safety requirements that are HACCP-based, and certain categories and exporters are required to implement it. Formal certification is demanded mainly by export buyers, regulators in the destination market and modern retail.
HACCP is the hazard-control method; ISO 22000 is a full food-safety management system standard that includes HACCP plus management-system requirements. Many buyers accept HACCP; some ask for ISO 22000 or FSSC 22000.
Three to five months for a unit starting from basic GMP, depending on how many products and lines need plans and how quickly records build up before the external audit.
Typically three years, subject to annual surveillance audits, followed by a recertification audit.
Production, quality control, maintenance and a management representative, led by someone trained in HACCP. The team owns the plan and its records.
If it exports or supplies retailers and institutional buyers, yes. The plan scales to the size of the operation; a small unit may have only a few CCPs.
Gap analysis, the HACCP plan and SOPs, staff training, the internal audit and coordination with an accredited certification body through to the certificate and the surveillance calendar.