What is a Critical Control Point in food manufacturing?

A CCP is a step in your manufacturing process where you can apply control to prevent, eliminate, or reduce a food safety hazard to an acceptable level. Common examples include cooking, chilling, metal detection, and pH control. CCPs are identified through hazard analysis as part of your HACCP system.

How many CCPs should a food manufacturing process have?

There is no fixed number. The number of CCPs depends entirely on your process and the hazards it presents. A simple dry goods packer might have one or two CCPs, while a cooked meat processor could have five or more. Over-identifying CCPs dilutes your focus. If a hazard is controlled by a prerequisite programme like cleaning or pest control, it is not a CCP.

What records does MPI expect for CCP monitoring?

MPI expects continuous or scheduled monitoring records for every CCP, including the measurement taken, who took it, when it was taken, and whether the result was within the critical limit. If a limit was breached, there must be a linked corrective action record showing what happened, what was done with the affected product, and what was changed to prevent recurrence.

What happens if a CCP critical limit is breached?

You must immediately take corrective action: isolate any affected product, investigate the cause, restore control at the CCP, decide on product disposition (rework, downgrade, or destroy), and document the entire process. MPI verifiers will check that your corrective action records are complete and that you have addressed the root cause.

Do I need to use the Codex decision tree to identify CCPs?

The Codex decision tree is a widely used tool for CCP identification, but it is not the only option. MPI expects you to use a systematic, documented method for determining CCPs as part of your HACCP application. The Codex decision tree is a good starting point, but you can use any structured approach as long as you can justify your decisions.

1 April 2026

CCPHACCPFood ManufacturingMPICompliance

Critical Control Points for NZ Food Manufacturers and Processors

Name: Custom FCP / RMP App
Availability: InStock

How to identify, monitor, and manage CCPs in NZ food manufacturing and processing. What MPI expects under the Food Act 2014 and Animal Products Act 1999.

If you run a food manufacturing operation in New Zealand, your CCPs are the points in your process where food safety is won or lost. Get them right and your HACCP system works. Get them wrong and you are shipping product that could make people sick, or watching MPI increase your audit frequency.

This guide covers what CCPs actually are, how to identify them properly, what MPI expects for monitoring and corrective actions, and where most manufacturers run into trouble.

What Is a Critical Control Point?

A Critical Control Point is a step in your manufacturing process where you can apply a control measure to prevent, eliminate, or reduce a food safety hazard to an acceptable level. That is the textbook definition from Codex Alimentarius, and it is the basis for every HACCP system worldwide.

In practice, a CCP is the point where you draw the line. If the control at this step fails, there is no downstream step that will catch the hazard. If your cook step fails and there is no further kill step, contaminated product goes out the door. That is what makes it critical.

Under New Zealand law, HACCP application is mandatory for food manufacturers. If you operate under a Risk Management Programme (RMP) governed by the Animal Products Act 1999, or a custom Food Control Plan under the Food Act 2014, your plan must include properly identified CCPs with documented critical limits, monitoring procedures, and corrective actions.

MPI’s HACCP guidance is clear: applying HACCP is not optional. It is a regulatory requirement for every risk-based food safety programme in New Zealand.

Common CCPs in NZ Food Manufacturing

The specific CCPs in your operation depend on your process and your hazard analysis. But across NZ food manufacturing, these are the ones that come up repeatedly.

Cooking / Thermal Processing

The most common CCP in any operation that produces cooked or heat-treated products. The critical limit is typically a minimum internal temperature held for a minimum time. For poultry, 75 degrees Celsius at the thermal centre is a widely used benchmark. For other products, the time-temperature combination will depend on your validated process.

Chilling and Cooling

Rapid cooling after cooking is critical to prevent bacterial growth in the danger zone (5 to 60 degrees Celsius). MPI expects your cooling process to move product through the danger zone quickly. A common critical limit is cooling from 60 degrees to 5 degrees within a defined timeframe, often within 4 to 6 hours depending on the product and your validated parameters.

Metal Detection / X-ray Inspection

Physical contamination is a major hazard in processed food manufacturing. Your metal detector or X-ray system is typically the last line of defence before product leaves the factory. Critical limits are set as maximum detectable fragment sizes, commonly 2.0mm ferrous, 2.5mm non-ferrous, and 3.5mm stainless steel, though these vary by product type and detector capability.

pH and Water Activity Control

For shelf-stable or acidified products, pH and water activity (aw) are critical to preventing pathogen growth. Critical limits are product-specific but must be validated against the target organisms for your product category.

Allergen Control

In facilities that handle multiple allergens, the changeover and cleaning process between product runs can be a CCP. The critical limit is typically confirmed by validated cleaning verification, whether that is visual inspection, ATP swabbing, or allergen-specific testing.

How to Identify CCPs Using the Codex Decision Tree

The Codex Alimentarius decision tree is the standard tool for determining whether a control point is actually critical. It was revised by the Codex Committee on Food Hygiene and adopted in 2023 as part of the updated General Principles of Food Hygiene.

The decision tree works through a series of sequential questions for each identified hazard at each process step:

Can the hazard be controlled by prerequisite programmes (GHPs)? If yes, it is not a CCP. This is the most important filter. If your cleaning programme, pest control, or supplier approval already controls the hazard adequately, do not classify the step as a CCP.
Is this step specifically designed to eliminate or reduce the hazard to an acceptable level? If yes, it is a CCP. Your cook step, your pasteurisation step, your metal detector. These exist specifically to control a hazard.
Could contamination occur at or increase to unacceptable levels at this step? If no, it is not a CCP. If yes, move to the next question.
Will a subsequent step eliminate or reduce the hazard to an acceptable level? If yes, this step is not a CCP. If no, it is.

The decision tree is not mandatory. MPI does not prescribe a specific method for CCP determination. But you need a systematic, documented approach, and the Codex tree is well understood by verifiers. Whatever method you use, you must be able to justify why each CCP is (or is not) classified as critical.

A common mistake is over-identifying CCPs. If everything is critical, nothing is. Your operators cannot give proper attention to genuine CCPs if they are drowning in monitoring requirements for steps that should be managed as prerequisite programmes.

CCP Monitoring Requirements

MPI expects your CCP monitoring to be systematic, documented, and capable of detecting loss of control in real time. The HACCP guidance from MPI specifies that monitoring must answer four questions:

What is being measured or observed?
How is it being measured (instrument, method)?
When and how often is it measured (frequency)?
Who is responsible for taking the measurement?

For a cook CCP, that might mean: internal temperature measured with a calibrated probe thermometer, checked on every batch, recorded by the cook operator. For metal detection, it means: every unit passes through the detector, with test pieces run at a defined frequency to confirm the detector is functioning.

Monitoring can be continuous (every unit through a metal detector) or batch-based (temperature checks per batch). The key is that your frequency must be sufficient to detect a deviation before affected product is released. If you check your cook temperature once per shift and a failure happens mid-shift, you have four hours of potentially unsafe product.

Your monitoring records must include the actual measurement, the date and time, the identity of the person who took the measurement, and whether the result was within the critical limit. This is not negotiable. Incomplete monitoring records are one of the most common non-conformances raised during MPI verification visits.

What Happens When a CCP Limit Is Breached

When monitoring shows that a critical limit has been exceeded, you are in corrective action territory. Your HACCP plan must define the corrective actions for each CCP before a breach occurs, not after.

MPI expects your corrective action procedure to cover four things:

Restore control. Fix the immediate problem. If the cook temperature dropped, get it back to the critical limit. If the metal detector failed, stop the line.
Isolate affected product. Any product processed while the CCP was out of control must be identified and held. You need to be able to trace back to the last confirmed in-control measurement.
Determine product disposition. Evaluate the affected product. Can it be reworked? Does it need to be downgraded? Or does it need to be destroyed? This decision must be documented and justified.
Prevent recurrence. Investigate the root cause and implement changes to stop it happening again. This might be equipment maintenance, retraining, or a process change.

Every corrective action must be fully documented. MPI verifiers will review your corrective action records to confirm that you followed your procedure, that the affected product was properly dispositioned, and that you addressed the root cause. A corrective action that just says “temperature restored” without addressing why it dropped and what product was affected will not pass verification.

Common CCP Failures That Lead to Non-Conformances

Based on typical MPI verification findings across NZ food manufacturing, these are the areas where manufacturers consistently fall short:

Incomplete monitoring records. Missing times, missing signatures, missing actual values. If your record just has a tick instead of the actual temperature reading, that is a non-conformance.
No linked corrective actions. A monitoring record shows a deviation, but there is no corresponding corrective action record. The verifier will ask what happened to the product.
Corrective actions without root cause analysis. Recording that you “fixed the problem” without investigating why it happened does not satisfy MPI requirements. They want to see that you have actually prevented recurrence.
Unvalidated critical limits. Your HACCP plan states a cook temperature of 75 degrees Celsius, but you have no validation data proving that this time-temperature combination achieves the required log reduction for your specific product.
Metal detector testing gaps. Running test pieces at the start of the shift but not at the frequency specified in your plan. Or not documenting what happens to product processed between a failed test and the previous successful test.
Calibration lapses. Using monitoring instruments that are overdue for calibration. If your thermometer is not calibrated, your temperature readings are meaningless.

Digital CCP Monitoring vs Paper Records

Paper-based CCP monitoring has been the default in NZ food manufacturing for decades. It works, technically, but it creates problems that compound over time.

Paper records go missing. They get damaged by water or grease on the production floor. Handwriting is illegible. There is no way to enforce that a corrective action is completed before the line restarts. And when it comes time for an MPI audit, someone spends days pulling records out of filing cabinets and trying to cross-reference monitoring logs with corrective action forms.

Digital systems solve the structural problems with paper. Monitoring entries are timestamped automatically. Corrective action workflows can be enforced, so a deviation triggers a mandatory corrective action record before the operator can move on. Records are searchable, which means audit preparation drops from days to minutes. And dashboards give you real-time visibility into CCP status across your operation.

The Custom FCP / RMP App is built for exactly this. It is designed for NZ food manufacturers operating under RMPs and custom FCPs, with CCP monitoring workflows, corrective action tracking, and audit-ready record keeping built into a tablet-based system for the production floor. Your operators record CCP measurements directly into the app, deviations trigger corrective action workflows automatically, and your QC manager has full visibility across every CCP in the operation.

When MPI turns up for verification, your records are complete, linked, and accessible. No filing cabinets. No missing pages. No illegible handwriting.

Getting Your CCPs Right

CCPs are not a compliance exercise. They are the points in your process that actually keep people safe. If your hazard analysis is solid, your critical limits are validated, your monitoring is consistent, and your corrective actions are thorough, your HACCP system is doing its job.

If any of those elements are weak, it shows up in your MPI verification results, and eventually it shows up in your product.

Start with a proper hazard analysis. Use the Codex decision tree or an equivalent systematic method. Set critical limits you can actually monitor in real time. Train your operators on what to do when a limit is breached. And keep records that tell the full story.

Your HACCP system is only as strong as your weakest CCP.