EthicalHub

HACCP & PRPs

HACCP prerequisite programs, explained one by one

The 18 programs that keep your site under control before a CCP ever comes into play: what each one covers, the records auditors expect, and how often to check them.

4 min read

The short answer

Prerequisite programs (PRPs) are the basic conditions and activities that keep a food site hygienic and under control: supplier approval, cleaning, pest control, maintenance, training, allergen control and more. They come before HACCP. Your HACCP plan then deals with the specific hazards that PRPs alone can’t control, at critical control points. Auditors check PRPs at least as closely as CCPs, because most findings come from them.

PRP or CCP?

How PRPs and CCPs fit together

Prerequisite programs

Site-wide controls that apply whatever you’re making. Monitored on a schedule: daily, weekly, monthly or yearly. If one slips, you correct it and check whether product was affected.

Critical control points

Specific steps where a hazard must be controlled, with a validated critical limit, such as a cook temperature or metal detection. Monitored every batch or continuously. A deviation means product is held.

There’s no single official list of PRPs. The Codex General Principles of Food Hygiene and the ISO 22002 series used by FSSC 22000 group them differently. The 18 below are the set EthicalHub uses, organised around what auditors check.

The 18 programs

Each program, and the records behind it

Monitoring frequencies are typical starting points. Set yours by risk, and follow your scheme where it’s more specific.

#ProgramWhat it controlsRecords auditors expectTypical check
1Approved supplier programOnly approved suppliers, with current certificatesApproved supplier list, certificates, approval recordsMonthly review, annual re-approval
2Receiving and deliveryGoods-in checks and rejectionDelivery log, temperatures, rejectionsEvery delivery
3Food storageStorage conditions, labelling, stock rotationStorage temperature logs, rotation recordsDaily
4Temperature controlChilling, heating and holding outside CCPsTemperature logs, probe calibrationDaily or per shift
5Cleaning and sanitationClean food-contact surfaces and equipmentSchedule, signed records, sanitiser checks, verification swabsDaily and weekly by schedule
6Pest controlKeeping pests out of food areasContract, site map, service reports, actionsMonthly service
7Personal hygieneHandwashing, clothing, illness reportingHygiene policy, induction sign-offs, visitor declarationsOngoing, reviewed yearly
8Staff training and competencyEveryone trained for their roleTraining matrix, certificates, inductionsNew starters; yearly review
9Allergen managementAllergen identification, segregation and labellingAllergen matrix, changeover validation, label checksEvery run and recipe change
10Cross-contamination preventionSeparation of raw and ready-to-eat, zoningProcedure, colour-coding registerDaily
11Equipment maintenance and calibrationEquipment fit for use, instruments accurateEquipment register, maintenance log, calibration certificatesBy schedule, often quarterly
12Water qualitySafe water, ice and steamSupply confirmation, test results where neededYearly or on supply change
13Waste managementWaste removed without contaminating foodProcedure, disposal recordsDaily
14Chemical managementSafe storage and use of chemicalsChemical register, safety data sheetsYearly review
15Glass and brittle materialsBreakage risks in food areasRegister, audits, breakage logMonthly
16Foreign matter controlPhysical contaminants outside CCPsProcedure, incident logDaily
17Traceability and recallTracing lots and recalling productProcedure, batch records, mock recall reportsYearly test, minimum
18Corrective actionsFinding and fixing failures for goodCorrective action log, root cause, verificationAs they occur; monthly review
Getting started

Where to start if your PRPs are patchy

  • Start with the high-risk four: supplier approval, cleaning, allergens and traceability. They’re where auditors look hardest.
  • Write down what you already do before inventing new procedures. Most sites do more than they record.
  • Give each program an owner, a check frequency and one place its records live.
  • Review them yearly, alongside your HACCP plan, and whenever something changes on site.

Supplier approval has its own guide: what a supplier approval program must contain.

Where EthicalHub fits

All 18, ready to run

EthicalHub includes all 18 prerequisite programs as ready templates, with the records, check frequencies and corrective actions built in. Daily checks are logged on a phone, overdue ones are flagged, and everything goes into your audit pack.

See your PRPs in one place

A walkthrough built around your site and your scheme.

Book a walkthrough
Questions

Prerequisite programs: common questions

What are prerequisite programs in HACCP?
The basic conditions and activities that keep a food site hygienic and under control, such as supplier approval, cleaning, pest control, maintenance, training and allergen management. They are in place before HACCP, which then controls specific hazards at critical control points.
How many prerequisite programs are there?
There is no single official number. Codex, the ISO 22002 series and individual schemes group them differently. A practical set for a food manufacturer covers around 15 to 20 programs; EthicalHub uses 18.
What is the difference between a PRP and a CCP?
A PRP is a site-wide control monitored on a schedule. A CCP is a specific step with a validated critical limit, monitored for every batch or continuously, where a deviation means product is held.
Do auditors check prerequisite programs?
Yes, closely. GFSI schemes such as SQF, BRCGS and FSSC 22000 all audit PRPs, and many common findings come from them, such as missing cleaning verification, expired supplier certificates or uncalibrated instruments.

Run all 18, without the binders.

See how EthicalHub keeps every prerequisite program current and audit-ready.

Scroll to Top