Quick answer
A food-safety risk register should help leaders govern important risks, control weaknesses, ownership and uncertainty across the business. Link it to the actual HACCP studies and operating evidence without replacing them. Keep entries specific enough to support a decision and review triggers clear enough that changes or overdue action are noticed.
Define what the register is for
Use the register for cross-cutting management risks such as dependence on one supplier, inadequate competent cover, ageing infrastructure or unreliable information systems. The technical hazard analysis for each process still belongs in the HACCP study.
MyHACCP management guidance links resources and commitment with implementation. A register can help leaders identify where those conditions are weak, but the document itself does not control food.
Write a decision-useful entry
| Field | What it should explain |
|---|---|
| Risk statement | Cause/condition, potential control failure and consequence. |
| Scope | Affected products, sites, activities or dependencies. |
| Controls and evidence | What manages the risk and how effectiveness is known. |
| Owner and authority | Who can act and who resolves resource/technical decisions. |
| Uncertainty and actions | Missing evidence, temporary arrangements and proposed work. |
| Review/escalation | When the entry changes and what needs urgent attention. |
If using ratings, define the scale and apply it consistently. Do not let an average score obscure a severe concern or a statutory requirement.
Use an entry that connects to action
Illustrative entry: a key control depends on equipment with recurring faults and a temporary manual arrangement. Record the affected process, evidence for the workaround, competent cover, repair owner and trigger for stopping or escalating. “Old equipment — medium risk” is too vague to govern.
Distinguish inherent exposure, current control and remaining uncertainty where the method uses those concepts. A planned future repair is not an existing control until implemented and verified.
Review evidence and material changes
MyHACCP verification guidance supports assessing real implementation and control evidence. Link register updates with findings, incidents, changes, overdue repairs and ineffective actions. Check whether one issue affects several sites.
Keep the register concise but retain access to the supporting detail. A risk marked “accepted” still needs a lawful, justified decision and review; the label does not authorise unsafe supply or remove a technical evidence gap.
Use the register in leadership decisions
Review actions with the people who can provide resources or authority. Record decisions, dependencies and escalation. Reopen entries when assumptions change or actions fail, rather than repeatedly carrying forward the same reassuring status.
Use the existing HACCP review guide for underlying evidence. The register should make unresolved questions visible and connect them with accountable action, not duplicate every operational checklist.
Next steps
- Define the management risks and links to technical studies.
- Record specific scope, evidence, owner and uncertainty.
- Set meaningful actions and change/escalation triggers.
- Review leadership decisions and verify implemented controls.
Read the official practical guidance — Use the current source alongside the procedures for your own business.