United States
Hong KongCritical control points and critical limits, worked through a dish
A critical control point is a step where control is essential because nothing downstream will catch the failure. A critical limit is the measurable boundary at that step - a temperature, a time, a concentration.
The theory is short. Working it through a real dish is what makes it stick, so here is chicken soup from delivery to service.
| Step | CCP? | Critical limit |
|---|---|---|
| Receiving the chicken | Yes | 5°C (41°F) or below |
| Storing it | Yes | 5°C (41°F) or below |
| Thawing it | No | Controlled, but cooking will follow |
| Cooking | Yes | 74°C (165°F) |
| Cooling leftovers | Yes | 135°F to 70°F in 2 hours, 70°F to 41°F in 4 more |
| Reheating for hot holding | Yes | 74°C (165°F) within 2 hours |
| Hot holding | Yes | 57°C (135°F) or above |
| Garnishing and serving | No | Hygiene applies, but no critical limit |
Why thawing is not critical here
Because cooking follows it, and cooking to 165°F handles what thawing might have allowed to grow.
Change the dish and the answer changes. Thawing prawns for a cold salad is a critical control point, because nothing downstream will kill anything. Same step, different process, different classification - which is why HACCP is done per process rather than per ingredient.
A question naming a step and asking whether it is a CCP is incomplete without the process. Read what happens next. If a later step will catch the failure, this one is not critical.
What makes a good critical limit
- Measurable. 165°F, not "hot enough".
- Observable in real time. Something a cook can check during the process, not a lab result that arrives on Thursday.
- Based on a standard, usually the Food Code, rather than on habit.
- Single-valued. A range invites argument at the boundary.
Most critical limits in a restaurant come straight from the Code, which is convenient: the numbers you are learning for the exam are the same numbers a HACCP plan would use.
Monitoring each one
Who, how, when, and recorded where. A critical limit nobody checks is not a control, and the record is what makes it verifiable afterwards.
The practical version is a log by the station with a pen attached, filled in at the time rather than reconstructed at the end of the shift. Inspectors can tell the difference, and so can anyone reading four identical readings in identical handwriting.
When a limit is missed
The corrective action was written before the shift. Continue cooking. Reheat and re-cool. Discard. Adjust the equipment and re-check.
And then the second half, which people forget: work out why it happened. A steam table that fails every Friday is not a food problem, it is an equipment problem wearing a food problem's clothes.
Common questions
What is a critical control point?
A step where control is essential because no later step will catch the failure. Cooking chicken is one; washing lettuce before a dish that will be cooked is not.
What is a critical limit?
The measurable boundary at a critical control point - a temperature, a time, a concentration. It has to be measurable in real time, based on a standard, and specific rather than a range.
Is thawing a critical control point?
It depends what comes next. Thawing chicken for a dish that will be cooked to 165°F is not critical. Thawing prawns for a cold salad is, because nothing downstream will kill anything.
How many critical control points should a process have?
As many as it needs and no more. Marking every step as critical produces a plan nobody follows; the test is whether a later step catches the failure.
What happens when a critical limit is missed?
The corrective action written in advance is carried out - continue cooking, reheat and re-cool, discard, or adjust equipment. Then the cause is investigated, because a repeating failure is usually an equipment or scheduling problem.