Level 3 HACCP

Module 6: Operational controls and CCPs

Supervise suitable controls for suppliers, storage, cooking, cooling, holding, allergens and cross-contamination within the actual food process.

Video runtime: 11:41

What you will learn in this module
  • CCP status depends on an essential control for the actual significant hazard, with limits, monitoring and action.
  • Use a validated suitable cooking method and control affected food before release after a failed check.
  • Cross-contact controls must work through preparation, packing and service, with current information and clear communication.

Load this video from YouTube. Your browser will connect to YouTube; embedding follows your cookie preferences.

External playback does not record on-page study progress.

Module 6: Operational controls and CCPs

Module 6: Operational controls and CCPs

Supervise suitable controls for suppliers, storage, cooking, cooling, holding, allergens and cross-contamination within the actual food process.

Records your study progress, not an assessment result or certificate.

Key points

  • CCP status depends on an essential control for the actual significant hazard, with limits, monitoring and action.
  • Check deliveries and substitutions against specifications and review repeated supplier failures.
  • Storage safety combines temperature with separation, dates, protection, capacity and maintenance.
  • Use a validated suitable cooking method and control affected food before release after a failed check.
  • Provide realistic cooling resources and do not treat reheating as a guaranteed remedy for an unsafe history.
  • Holding controls maintain safely prepared food; failed food conditions require assessment beyond the equipment setting.
  • Cross-contact controls must work through preparation, packing and service, with current information and clear communication.

Lesson guide

6.1 What makes a control critical

A control point is critical when it is essential at that stage to prevent, remove or reduce a significant hazard to an acceptable level. Ask whether a later stage can provide the necessary control. Cooking, reheating, ready-to-eat storage or allergen labelling may be critical in a particular process, but not automatically in every business.

Distinguish these decisions from prerequisite good practices and justify them against the actual hazard analysis. A CCP needs a suitable limit, real monitoring and an effective corrective response. Supervisors should ensure staff understand their role and do not release food after a failed check merely because other controls or paperwork are complete.

6.2 Supplier and delivery controls

Approved suppliers, specifications, allergen agreements and traceability support safe ingredients. Check delivery condition, packaging, dates, required temperature, batch information and relevant labels. Recurrent poor deliveries require supplier review rather than accepting each fault as routine.

Warm or leaking chicken needs assessment and the acceptance response, which may include rejection or controlled separation while checks are made. Substituted bread, sauces or prepared ingredients can change allergens, storage or shelf life. Check current information before use and update affected controls and records. Do not let driver pressure or production needs override the procedure. Supplier controls must connect what was ordered, what arrived and what staff will actually use.

6.3 Chilled, frozen and dry storage

Storage controls address temperature, dates, covers, labels, raw-to-ready-to-eat separation and allergen arrangements. Raw food stored above ready-to-eat food can drip contamination even when the fridge reading is suitable. Manage capacity, stock rotation and maintenance so staff can store food safely.

Frozen food showing softening, wet packaging or unusual crystals may have experienced temperature problems and needs assessment, not an unsupported conclusion from appearance alone. Dry storage needs suitable clean, ventilated, pest-protected arrangements, with food off the floor and chemicals kept separately as instructed. A storage plan should govern real placement and condition as well as readings. Supervisors should identify defects or overload and check corrective action on affected food.

6.4 Cooking controls

Cooking controls need an approved, capable method suitable for food, equipment and batch size. Poultry, minced meat and rolled joints illustrate foods where a browned exterior cannot establish safe internal treatment. Use the specified time, temperature or approved process criteria and a suitable clean probe where required.

If the required standard is not met, do not serve the batch. Further cooking and a recheck may be appropriate if safe; otherwise isolate, escalate or dispose under the procedure. Investigate equipment, overloaded batches, method, probe use or training when checks fail. Supervisory control includes confirming the method’s suitability and actual application, not simply collecting a final number. No extra generic cooking threshold is invented in this guide.

6.5 Cooling and reheating controls

Cooling needs to work under actual batch sizes, containers, space and equipment. Deep containers and overloaded refrigeration can delay cooling and allow bacterial growth or toxin formation. Suitable business methods may include smaller portions, shallow containers, an ice bath or blast chilling, with defined timing and checks.

Reheating must follow the approved thorough process rather than slightly warming food, but cannot be assumed to correct earlier unsafe cooling. Some toxins may remain a hazard. Supervisors should provide realistic resources and records and assess failures against the food’s actual history. If safe cooling cannot be confirmed, do not release the food because it has later reached a reheating temperature; follow the safe food decision and investigate the cause.

6.6 Holding and display controls

Hot holding keeps food that has already been safely cooked or reheated at the required condition; it is not a slow cooking method for cold food. Chilled display also needs suitable food and equipment controls, while display arrangements should protect against handling, shared utensils and inaccurate labels.

Supervisors should ensure the equipment suits the process and the checks identify failures in time. If a holding control fails, assess the food and relevant time and temperature, arrange appropriate movement, repair or disposal and stop unsafe service. An adjusted thermostat cannot establish the safety of food already affected. Consider the actual food, display conditions and allergen separation rather than assuming the unit’s setting controls every risk.

6.7 Allergens and cross-contamination

Raw poultry, fish, vegetables and contaminated equipment can transfer hazards to ready-to-eat food. Use practical workflow separation, suitable equipment, handwashing, cleaning and disinfection, with training that staff can apply in the actual space. Colour-coded equipment alone is not enough if it is used incorrectly.

Allergens can transfer through utensils, packing equipment, cloths and gloves. Cheese tongs can affect a milk-allergic order; oil shared with battered food can affect a gluten-free claim. Maintain current recipes, matrices and relevant PPDS labels and ensure customer requests reach the correct people. If ingredients or cross-contact controls cannot be confirmed, stop and check rather than present the food as suitable.

In practice

Overloaded cooling process

Source teaching example rewritten as a formative scenario; not a real reported incident

Large deep containers are placed in a fridge with insufficient capacity after a busy cook.

Can a later reheating check prove the earlier process safe?

Assess the cooling failure and affected food, provide appropriate methods and capacity and do not use food with unconfirmed safety.

Unsafe cooling may create hazards that reheating does not remove.

Shared fryer for an allergy claim

Source teaching example rewritten as a formative scenario; not a real reported incident

Staff describe chips as gluten-free although the fryer oil is shared with battered products.

Is the ingredient list alone enough?

Check actual cross-contact controls and do not confirm suitability where the risk cannot be controlled.

The source’s shared-oil example demonstrates that process arrangements matter.

Reflect on your learning

What must delivery control include after a substitution?

Select one answer.

Does a suitable fridge reading compensate for raw drips onto salad?

Select one answer.

What may be needed after a cooking failure?

Select one answer.

What is hot holding designed to do?

Select one answer.

For your own learning — not the certification assessment.

FAQs

Are supplier controls finished after approval?

No. Check actual deliveries, substitutions and recurrent problems and maintain relevant information and traceability.

Why consider batch size in cooling and cooking?

The approved method must work with actual containers, equipment, food quantity and available space. An unrealistic process may fail despite complete records.

Can I confirm an allergy order from the recipe alone?

You need current ingredients and effective handling and cross-contact controls, including equipment, packing and communication. Stop and check when suitability cannot be confirmed.

Further reading

  • Food safety management systems for businesses (opens a new tab)

    Supplementary overview of HACCP-based procedures, checks and records.

    UK Government / Food Standards Agency. Applicable jurisdiction: UK overview; check the relevant national regulator and business-specific rules. Supplementary reading; checked 2026-10-07.

  • CookSafe: House Rules (opens a new tab)

    Role-specific training and practical hygiene, maintenance, temperature, stock and allergen controls.

    Food Standards Scotland. Applicable jurisdiction: Scotland; catering businesses. Supplementary reading; checked 2026-10-07.

  • Allergen guidance for food businesses (opens a new tab)

    Supplementary current ingredient information, labelling and cross-contact guidance.

    Food Standards Agency. Applicable jurisdiction: England, Northern Ireland and Wales; use Food Standards Scotland guidance for Scotland. Supplementary reading; checked 2026-10-07.

Jump to a key moment
Transcript

[0:00] Welcome to lesson 6.1. What makes a
[0:02] control point critical? A control point
[0:05] becomes critical when control at that
[0:07] step is essential to prevent, remove, or
[0:09] reduce a significant food safety hazard
[0:12] to an acceptable level. At level three,
[0:15] managers and supervisors need to
[0:16] understand that not every control is a
[0:18] critical control point.
[0:20] Many important controls are managed
[0:22] through prerequisite programmes such as
[0:24] cleaning, pest control, maintenance,
[0:27] personal hygiene, staff training, and
[0:29] supplier approval. A critical control
[0:32] point is usually a step where if the
[0:34] control fails, unsafe food could reach
[0:37] the customer, and there may be no later
[0:38] step to make it safe. For example,
[0:41] cooking chicken may be critical because
[0:43] harmful bacteria could survive if the
[0:45] food is undercooked.
[0:47] Reheating may be critical if food must
[0:49] be made safe again before service.
[0:52] Chilled storage may be critical for
[0:53] ready to eat foods because bacteria may
[0:56] grow if the food is kept too warm.
[0:58] Allergen control can also be critical in
[1:01] some processes.
[1:03] If the wrong PPDS label is applied or
[1:05] the wrong allergen order is served, the
[1:07] customer may be exposed to an undeclared
[1:09] allergen. Manager should ask, "Is the
[1:12] hazard significant? Is control needed at
[1:14] this point? and would a later step
[1:16] remove or reduce the hazard. The key
[1:19] message is a critical control point is a
[1:21] point where failure could lead directly
[1:23] to unsafe food. Level three staff must
[1:26] make sure CCPs are clearly identified,
[1:29] monitored, and supported by proper
[1:31] corrective action.
[1:32] Welcome to lesson 6.2. Delivery and
[1:35] supplier controls.
[1:37] Delivery and supplier controls help
[1:39] prevent unsafe or unsuitable food
[1:41] entering the business. At level three,
[1:44] managers and supervisors should make
[1:46] sure the business uses suitable
[1:47] suppliers, receives the correct
[1:49] products, checks deliveries properly,
[1:51] and keeps traceability information where
[1:53] needed. Supplier controls may include
[1:56] approved supplier lists, product
[1:58] specifications, allergen information,
[2:00] delivery agreements, temperature
[2:02] requirements, and action to take if a
[2:04] supplier repeatedly sends poor quality
[2:05] or unsafe food.
[2:08] Delivery checks may include checking the
[2:10] supplier name, delivery note, product
[2:12] condition, packaging, use by dates,
[2:14] batch information, allergen labels, and
[2:17] temperature where required.
[2:19] For example, chilled food should arrive
[2:21] cold, frozen food should arrive frozen,
[2:24] and packaging should be clean, sealed,
[2:26] and undamaged.
[2:27] If raw chicken arrives warm or leaking,
[2:30] it should not simply be accepted because
[2:32] the kitchen is busy. Allergen control is
[2:35] also important at delivery. If a
[2:37] supplier sends a substitute product, the
[2:39] allergen information may change. A
[2:42] different bread, sauce, spice mix, or
[2:45] dessert may contain allergens that the
[2:47] usual product does not contain. Managers
[2:50] should make sure staff know what to
[2:51] reject, what to quarantine, and who to
[2:53] report problems to. The key message is
[2:57] delivery and supplier controls protect
[2:59] the business before food enters
[3:00] production. If the wrong or unsafe
[3:03] product is accepted, the rest of the
[3:05] hacked system may already be weakened.
[3:08] Welcome to lesson 6.3. Chilled, frozen,
[3:11] and dry storage controls.
[3:13] Storage controls are important because
[3:15] food can become unsafe if it is kept at
[3:17] the wrong temperature, stored for too
[3:19] long, or exposed to contamination.
[3:22] At level three, managers and supervisors
[3:24] must make sure chilled, frozen, and dry
[3:27] storage systems are suitable for the
[3:28] food being handled. Chilled storage
[3:31] controls help slow the growth of harmful
[3:33] bacteria. High-risisk foods such as
[3:36] cooked meat, dairy products, prepared
[3:38] salads, sandwiches, cooked rice, sauces,
[3:41] and desserts must be kept under control.
[3:44] Frozen storage should keep food frozen
[3:46] solid. If food is partly defrosted,
[3:50] soft, wet, or covered in large ice
[3:51] crystals, it may indicate poor storage
[3:54] or temperature abuse.
[3:56] Dry storage should be clean, dry,
[3:58] ventilated, and protected from pests.
[4:01] Food should be stored off the floor,
[4:03] covered where needed, clearly labelled,
[4:05] and away from chemicals.
[4:07] Storage controls also include
[4:09] separation.
[4:11] Raw meat, poultry, and fish should be
[4:13] stored below ready to eat food to
[4:15] prevent raw juices dripping onto food
[4:16] that will not be cooked again. For
[4:19] example, a fridge may be cold enough,
[4:21] but if raw chicken is stored above
[4:23] cooked meat, contamination risk is still
[4:25] present. Managers should monitor storage
[4:28] temperatures, stock rotation, use by
[4:31] dates, labelling, allergen separation,
[4:33] pest signs, and equipment condition. The
[4:36] key messages: safe storage is not only
[4:38] about temperature. It also includes
[4:41] separation, labelling, date control,
[4:44] stock rotation, hygiene, and quick
[4:46] action when storage controls fail.
[4:49] Welcome to lesson 6.4. Cooking controls
[4:52] and critical limits. Cooking is often
[4:54] one of the most important critical
[4:56] control points in a food business.
[4:59] Proper cooking can destroy harmful
[5:01] bacteria, but only when the cooking
[5:02] process is suitable, and the required
[5:04] critical limit is met. At level three,
[5:07] managers and supervisors should make
[5:09] sure cooking controls are clear,
[5:11] validated, monitored, and understood by
[5:13] staff. Cooking controls may include
[5:16] using approved cooking methods, correct
[5:18] equipment, batch sizes, time and
[5:21] temperature requirements, visual checks,
[5:23] probe checks, and records where
[5:25] required.
[5:26] For example, poultry, minced meat
[5:29] products, sausages, rolled joints, and
[5:31] foods made from raw ingredients need
[5:33] strong cooking controls because harmful
[5:35] bacteria may be present inside the food
[5:37] or throughout the product. A critical
[5:40] limit is the boundary between safe and
[5:42] unsafe control. If the cooking limit is
[5:45] not met, the food should not be served
[5:47] until corrective action has been taken.
[5:49] Corrective action may include cooking
[5:51] the food for longer, checking again,
[5:53] separating affected food, reviewing
[5:55] equipment, or disposing of food if
[5:57] safety cannot be confirmed.
[6:00] Managers should also check that staff
[6:01] use probes correctly. Probes should be
[6:04] clean, suitable, placed in the correct
[6:06] part of the food, and cleaned between
[6:08] uses. The key message is cooking
[6:11] controls only protect customers when
[6:13] they are clear, measurable, and followed
[6:15] properly. If a critical limit is not
[6:18] met, food safety is not under control.
[6:21] Welcome to lesson 6.5. Cooling and
[6:24] reheating controls.
[6:26] Cooling and reheating controls are
[6:28] important because bacteria can grow if
[6:30] food spends too long at unsafe
[6:32] temperatures. At level three, managers
[6:35] and supervisors must make sure the
[6:36] business has safe, realistic procedures
[6:39] for cooling and reheating food. Cooling
[6:42] is high risk because cooked food may
[6:43] pass through temperatures where bacteria
[6:45] can grow quickly. Large, deep
[6:48] containers, overloaded fridges, and food
[6:50] left on the side for too long can all
[6:52] create unsafe conditions.
[6:55] For example, a large pot of curry, rice,
[6:57] or soup may stay warm in the centre for
[6:59] a long time. If cooling is too slow,
[7:02] bacteria may multiply and some bacteria
[7:05] can produce toxins that may not be
[7:07] removed by reheating. Cooling controls
[7:10] may include dividing food into smaller
[7:12] portions, using shallow trays, blast
[7:15] chilling, ice baths, ventilation, time
[7:17] limits, and clear records.
[7:20] Reheating controls are also important.
[7:23] Food should be reheated thoroughly
[7:24] according to the business procedure
[7:26] before service or hot holding. It should
[7:29] not be worn slightly or reheated
[7:31] unevenly.
[7:32] Manager should make sure staff
[7:34] understand what to do if cooling or
[7:36] reheating controls fail. If food has not
[7:39] cooled safely or reheating cannot be
[7:41] confirmed, it should not be served. The
[7:44] key messages: cooling and reheating are
[7:46] high-risisk stages that need clear
[7:48] procedures, monitoring, and corrective
[7:50] action. Time and temperature must be
[7:52] controlled from cooking to service.
[7:55] Welcome to lesson 6.6, Six, hot holding,
[7:58] cold holding, and display controls.
[8:01] Hot holding, cold holding, and display
[8:03] controls help keep food safe while it is
[8:05] waiting to be served or sold. At level
[8:08] three, managers and supervisors must
[8:10] make sure holding and display procedures
[8:12] are suitable for the food, equipment,
[8:14] and service style. Hot food should be
[8:17] cooked or reheated properly before it is
[8:19] placed into hot holding. Hot holding
[8:22] equipment is designed to keep food hot,
[8:24] not to cook food from cold.
[8:26] Cold holding is used for foods such as
[8:29] sandwiches, prepared salads, desserts,
[8:31] cooked meats, dairy products, and other
[8:33] chilled, ready to eat foods. These foods
[8:36] must be kept under temperature control
[8:38] because bacteria can grow if they become
[8:40] too warm. Display areas also create
[8:44] contamination risks. Food may be exposed
[8:47] to staff handling, customer handling,
[8:49] shared utensils, allergens, poor
[8:52] cleaning, damaged packaging, or
[8:53] incorrect labels.
[8:55] For example, a chilled display may look
[8:57] attractive, but if the temperature is
[8:59] too high, high-risisk foods may become
[9:01] unsafe. A cake display may also create
[9:04] allergen risk if not cakes. Gluten
[9:07] containing cakes and plain cakes are
[9:09] served with shared utensils.
[9:11] Managers should make sure staff know how
[9:13] to check equipment, record results,
[9:15] protect food, control allergens, and
[9:18] respond if holding temperatures fail.
[9:21] Corrective action may include adjusting
[9:23] equipment, moving food, checking how
[9:25] long food has been affected, disposing
[9:27] of unsafe food, and arranging repair.
[9:30] The key message is food on display is
[9:32] still under hack control. Hot food must
[9:35] stay hot, cold food must stay cold, and
[9:38] displayed food must be protected from
[9:40] contamination and allergen cross
[9:41] contact.
[9:43] Welcome to lesson 6.7, allergen and
[9:46] crosscontamination controls.
[9:48] Allergen and crosscontamination controls
[9:50] are essential operational controls in
[9:52] HAP. Crosscontamination happens when
[9:55] harmful bacteria, allergens, chemicals
[9:58] or physical hazards transfer from one
[10:00] food surface, object or person to
[10:03] another. At level three, managers and
[10:06] supervisors must make sure controls are
[10:08] practical, clear, and followed during
[10:10] real service. Raw and ready to eat food
[10:13] separation is one of the most important
[10:15] controls.
[10:17] Raw meat, poultry, fish, and unwashed
[10:20] vegetables can carry harmful bacteria.
[10:23] If these contaminate ready to eat food,
[10:25] the customer may eat the bacteria
[10:27] directly because there is no further
[10:29] cooking step. Controls may include
[10:31] separate storage, separate preparation
[10:34] areas, color-coded equipment, hand
[10:36] washing, cleaning and disinfection,
[10:38] staff training, and clear workflow.
[10:41] Allergen cross contact also needs strong
[10:43] control.
[10:45] Allergens can transfer through shared
[10:47] boards, knives, tongs, fryers, grills,
[10:50] ovens, display areas, scoops, gloves,
[10:54] cloths, or packaging.
[10:56] For example, using the same utensils for
[10:58] cheese and a dairfree order can transfer
[11:01] milk. Cooking chips in a fryer used for
[11:04] battered products may create gluten
[11:05] cross contact. Managers should also make
[11:08] sure allergen information is accurate.
[11:11] This includes supplier information,
[11:13] recipe control, allergen matrices, PPDS
[11:16] labels, and customer communication.
[11:19] If crosscontamination or allergen cross
[11:21] contact may have happened, food should
[11:23] not be served as safe unless the
[11:25] business can confirm the risk is
[11:26] controlled. The key message is
[11:29] contamination can happen silently.
[11:32] Managers must build strong controls,
[11:34] train staff, monitor behaviour, and
[11:36] support honest reporting when food
[11:38] safety is uncertain.