A hazard analysis is the foundation of every HACCP-based food safety system. If the logic is weak here, the rest of the plan becomes hard to defend. Your CCP decisions become inconsistent, your monitoring steps drift into guesswork, and your auditors or inspectors quickly see that the document is not grounded in the real operation.
In practice, performing a hazard analysis correctly means identifying what could realistically go wrong in your products and processes, deciding which hazards are genuinely significant in context, and then choosing the right control route for each one. It is not about copying a generic hazard table, and it is not about turning every hazard into a CCP.
This guide is practical EU and UK food safety guidance, not legal advice. It explains how to carry out hazard analysis in a way that is specific enough to hold up in review and simple enough to stay usable after the first draft. If you want the broader PinkPepper logic behind this approach, see our methodology and the regulations covered page.
What hazard analysis is and what it is not
Hazard analysis is the part of HACCP where you examine your real operation step by step and decide which food safety hazards matter, why they matter, and how they should be controlled. It is where the reasoning happens.
A useful hazard analysis is:
- a structured review of biological, chemical, physical, and allergen hazards
- specific to your ingredients, process flow, equipment, premises, and customers
- clear about which hazards are significant and which are already controlled another way
- strong enough to justify later control and CCP decisions
A weak hazard analysis is usually one of these:
- a copied industry table with no adaptation to the site
- a long list of theoretical dangers with no real prioritisation
- a worksheet that mixes hazards, controls, and CCP logic into the same vague note
- a document that nobody updates when products, suppliers, or methods change
The important point is that hazard analysis is not just form-filling. It is a documented decision process.
The correct step-by-step process
Different businesses structure the worksheet differently, but the sequence below is the one that consistently produces stronger HACCP decisions across EU and UK food operations.
Step 1: Describe the product and intended use properly
Before you can assess hazards, you need a clear description of what the product is and how it will be used. That includes:
- the product description and key ingredients
- processing characteristics such as cooking, chilling, fermentation, or freezing
- storage conditions and shelf life
- whether the food is ready to eat or intended to be cooked later
- the intended consumer, including whether vulnerable groups are relevant
This matters because the same hazard can be much more significant in one context than another. Listeria monocytogenes in a ready-to-eat chilled product with a meaningful shelf life is a different decision problem from the same organism on a raw ingredient that will be cooked thoroughly before eating.
Step 2: Map the real process, not the ideal one
Hazard analysis only works if it follows the actual process flow. That means listing the real steps from receipt to dispatch or service, including storage, preparation, processing, cooling, packing, holding, and delivery or service where relevant.
Do not build this from memory alone. Walk the process and check that the documented flow reflects what actually happens on site. This is where many HACCP plans start drifting into fiction.
If your process map is weak, fix that first with the HACCP plan template and the hazard analysis template.
Step 3: Identify hazards at each process step
For every process step, consider four hazard categories systematically:
- Biological: pathogens such as Salmonella, Listeria monocytogenes, pathogenic E. coli, Campylobacter, Bacillus cereus, viruses, parasites, and relevant spoilage or growth risks where they affect safety.
- Chemical: cleaning chemical residues, pesticides, mycotoxins, heavy metals, process contaminants, additive misuse, and naturally occurring toxins where relevant.
- Physical: metal, glass, hard plastic, wood, bone, stones, packaging fragments, or other foreign bodies capable of causing injury.
- Allergen: undeclared allergen presence and allergen cross-contact where regulated allergens are handled.
At this stage, the goal is to identify what is reasonably conceivable. The filtering happens in the next step.
Step 4: Decide whether each hazard is significant
This is the critical judgement step. A significant hazard is not just a hazard that exists in theory. It is a hazard that matters in your process, at that step, for that product, under your control environment.
To make that judgement, consider:
- how serious the health consequence would be if the hazard were not controlled
- how likely the hazard is to occur in the context of your real process
- whether existing prerequisite controls already manage it effectively
A hazard does not become significant just because it sounds serious in general. Equally, a hazard should not be ruled out casually if the consequence is severe and the control environment is weak.
Step 5: Assign the right control measure
For every significant hazard, identify the control measure that prevents it, eliminates it, or reduces it to an acceptable level. Examples include validated cooking, metal detection, strict temperature control, allergen segregation, supplier approval, or storage controls.
The point here is to define the actual control route, not jump straight to calling something a CCP.
Step 6: Decide whether the control sits at a CCP or elsewhere
Not every significant hazard leads to a CCP. Some hazards are controlled effectively through prerequisite programmes or other structured controls without needing CCP status. This distinction is where many HACCP plans become overcomplicated.
A CCP is a step where control is essential and loss of control would create an unacceptable food safety outcome. If the hazard is adequately managed through prerequisite controls, process design, or another non-CCP route, that should be stated clearly instead of inflating the plan.
How to judge whether a hazard is significant
This is where many teams either overcall everything or undercall the hazards that matter most. The key is to assess significance in context, not in abstraction.
Consider severity and likelihood together
The usual logic is simple even when the scoring system varies. If the potential harm is serious and the hazard is realistically likely in your process unless controlled, it is probably significant. If the consequence is limited and the likelihood is negligible under your real conditions, it may not be significant.
Examples:
- Likely significant: allergen cross-contact in a site producing both allergen-containing and allergen-free foods without reliable segregation.
- Likely significant: pathogen survival at a cook step where heating is the main kill control.
- Often not significant in the HACCP sense: a physical hazard already robustly controlled by an effective glass and brittle-plastic programme and verified site controls.
The important part is the reasoning, not the label alone.
Factor in your prerequisite programmes honestly
Prerequisite programmes such as cleaning, maintenance, pest control, supplier approval, waste handling, and personal hygiene exist to manage broad operational risks. If a hazard is already controlled effectively through a strong prerequisite programme, it may not need to stay in the HACCP plan as a significant hazard.
But that only works if the prerequisite programme is genuinely real and effective. A control that exists only in a folder is not a real control. Hazard analysis should reflect the operation you actually have, not the one you wish you had.
Think about the intended consumer
Hazard significance changes when the intended consumer changes. Foods for hospitals, care settings, infants, or other vulnerable groups may justify tighter decisions than food for the general healthy adult population. The hazard analysis should show that the team understood who the food is for.
The difference between a hazard, a control measure, and a CCP
These terms are frequently blurred together, and that usually leads to poor HACCP structure.
- Hazard: the thing that can cause harm, such as Salmonella in raw poultry or undeclared sesame in a finished product.
- Control measure: the action that manages that hazard, such as cooking, segregation, or label verification.
- CCP: the step where control is critical and must be monitored against a defined limit.
Not every hazard needs a CCP, and not every control measure is a CCP. Some hazards are handled through prerequisite programmes, some through supplier controls, some through process design, and some through CCPs. A strong hazard analysis keeps those decisions separate and explicit.
Common hazard analysis mistakes
Copying generic hazard tables without adapting them
Industry examples can help you think, but they do not replace site-specific analysis. If the worksheet does not reflect your actual ingredients, equipment, layout, product type, and process flow, it will not hold up.
Listing every imaginable hazard without prioritisation
A long undifferentiated list is not a sign of rigour. It usually means the analysis has not separated realistic hazards from background noise. When everything is marked significant, the plan becomes harder to manage and the true risks get buried.
Ignoring allergens as part of hazard analysis
Allergens are not just a labelling afterthought. For many businesses, undeclared allergens are among the most significant food safety hazards in the entire operation. The hazard analysis should treat them accordingly.
Turning every control into a CCP
This is one of the most common structural failures. Label checks, cleaning tasks, and routine segregation controls are important, but they are not automatically CCPs. Over-designating CCPs weakens the plan by making critical controls harder to distinguish from ordinary ones.
Failing to record why a hazard was ruled out
If you decide a hazard is not significant, the reasoning should be written down. A short rationale on likelihood, severity, or existing controls is usually enough, but it needs to exist. Otherwise the worksheet looks arbitrary.
How to keep hazard analysis usable in practice
The best hazard analyses are not the most complicated. They are the ones the business can actually review, understand, and update.
- Revisit it when something changes. New suppliers, new ingredients, new equipment, new products, or new process steps should trigger review.
- Walk the process against the worksheet periodically. Check whether the analysis still matches how the site really runs.
- Keep the logic visible. Separate the hazard, the reason it matters, the control route, and the CCP decision instead of collapsing everything together.
- Use it to train the team. Hazard analysis should help people understand why the controls exist, not just what box to tick.
- Use tools that reduce drift. If spreadsheet or paper versions keep getting out of sync, move to a more structured workflow that links hazards, controls, and records more cleanly.
If you are building or repairing this logic from scratch, the strongest starting point is the hazard analysis template, the HACCP plan template, and the broader PinkPepper workflow on pricing.
Conclusion
A correctly performed hazard analysis proves that your HACCP system is based on deliberate decisions rather than generic assumptions. It shows that you understand your product, your process, your hazards, and the controls that really matter. It also gives inspectors, auditors, and your own team a clear reason for why certain steps are critical and why others are managed differently.
The method is not complicated in principle: describe the product, map the process, identify realistic hazards, judge significance in context, and assign the correct control route. The hard part is doing that honestly, specifically, and consistently. That is what makes a hazard analysis hold up.
Frequently asked questions
What is the difference between hazard analysis and a HACCP plan?
Hazard analysis is the reasoning stage where you identify hazards and decide which ones matter. The HACCP plan is the structured control system that follows from those decisions, including CCPs, limits, monitoring, and corrective actions where applicable.
Do small food businesses need a full hazard analysis?
Yes, but it should be proportionate to the business. A small cafe does not need the same level of complexity as a processor, but it still needs a site-specific hazard analysis based on its actual foods and processes.
How many CCPs should a typical HACCP plan have?
There is no fixed number. Some businesses have one or two genuine CCPs. Some rely more heavily on strong prerequisite controls. More CCPs does not mean a better HACCP plan.
Can I start from an industry template?
Yes, as a reference point. But it must be adapted to your own operation. Unmodified generic hazard analysis tables are one of the fastest ways to end up with weak HACCP logic.
How often should hazard analysis be reviewed?
At minimum, review it routinely and whenever products, suppliers, processes, equipment, or intended use change. Any incident or recurring deviation is also a reason to check whether the analysis still holds.
What if I discover a hazard I had not considered before?
Document it, assess it immediately, decide whether new controls are needed, and then update the hazard analysis formally so the system reflects what you learned.
Next steps
- Use this template: Hazard analysis template
- Build the full plan: HACCP plan template
- Read next: How to identify critical control points without overcomplicating HACCP
- See the trust layer: How PinkPepper forms answers and which EU and UK rules it is grounded in
- Create a free account: Turn hazard analysis into a usable HACCP workflow with linked templates, controls, and records.