How to Get HACCP Certified: Preparation, Audit and Continuity

First clarify the scope of the certificate you need

One customer may only want a HACCP plan and evidence of implementation; another may require ISO 22000 or a different GFSI-recognised programme. Public regulation, meanwhile, expects the business to apply hygiene and HACCP-based procedures appropriate to its risk. These are not the same thing.

Before requesting quotes, put in writing: products, operating address, production lines, shifts, staff count, outsourced processes and target market. Clearly define which legal entity and which activities the certificate will cover.

Basic preparation before certification

If these systems are not working on the floor, quickly producing forms for the audit will not provide a lasting solution. A certification body looks not only at whether a procedure exists, but at evidence of implementation and whether staff actually know the system.

• An up-to-date list of legal requirements and customer conditions
• Layout, product and staff flows, and process flow diagrams
• Approved-supplier, traceability and recall system
• Cleaning-disinfection, pest control and waste management
• Maintenance plan, glass/hard-plastic control and measuring-device verification
• Allergen management and cross-contact controls
• Staff hygiene, health-status reporting and training records
• Up-to-date descriptions of raw materials, products and process characteristics

How is the HACCP plan prepared?

1. Assemble a competent team: bring production, quality, maintenance, purchasing and operations knowledge to the same table.
2. Define the product and intended use: content, processing, packaging, shelf life, storage and vulnerable consumer groups.
3. Prepare a flow diagram and verify it on-site: don't skip reprocessing, holding, waste and outsourced steps.
4. Conduct the hazard analysis: assess biological, chemical, physical and allergen hazards with justification.
5. Classify the control measures: separate prerequisites, operational controls and critical control points by the system's criteria.
6. Set limits, monitoring and corrective action: define who measures what, how often, and the fate of the product on deviation.
7. Build a verification and validation plan: show with scientific and operational evidence that the controls manage the hazard.

How long should the system run before the audit?

A single fixed duration is not right for every business. Enough genuine records must accumulate for the auditor to see the processes applied repeatably. For a seasonal or infrequent process, only a few days of records may not provide sufficient evidence.

Internal audit, closing non-conformances, a traceability drill, an emergency scenario and management's system review should all be completed before the external audit. Filling in forms retroactively damages trust.

What to ask when choosing a certification body

• Accreditation status for the requested standard and scope of activity
• The audit team's food-sector and process experience
• Audit duration, stages and multi-site approach
• Total cost including travel, follow-up audits and certificate-usage fees
• Non-conformance closure timelines and decision process
• Surveillance audits, certificate validity and scope-change conditions

Important: do not confuse the role of a consultancy with that of the independent body making the certification decision. Confirm accreditation and certificate-verification details directly with the relevant authorities.

Common non-conformances found during audits

• A mismatch between the flow diagram and actual production
• Hazard-analysis decisions left without justification
• The product's fate not recorded when a critical limit is exceeded
• Allergen matrix out of sync with current recipes
• Thermometer and scale checks that cannot be tracked
• Cleaning verification limited to visual inspection only
• Risk assessment not updated after a supplier change
• Internal audit reduced to a document check only

What happens after certification?

A certificate is not a starting line — it is an ongoing obligation to periodically demonstrate the system is maintained. Changes to menu, product, supplier, equipment, building, staff or regulation can affect the HACCP plan. Non-conformances, complaints, returns and test results should be tracked as trends.

As a surveillance audit approaches, tracking monthly performance indicators is more effective than last-minute file corrections — things like temperature deviations, repeat cleanings, complaint types, maintenance delays, supplier non-conformances and training effectiveness.