How to Write a HACCP Plan for Your Restaurant (with Template)

The CDC estimates that roughly 48 million Americans get sick from foodborne illness every year, and restaurants are one of the most common sources. A single outbreak can cost a restaurant $75,000 or more in direct expenses — and the reputational damage can be far worse.

A HACCP plan is a written food safety system that helps you identify hazards in your kitchen and set up controls to prevent them. Whether your local health department requires one or you simply want to protect your customers and your business, writing a HACCP plan is one of the smartest moves you can make as a restaurant owner.

This guide walks you through every step of writing a restaurant HACCP plan: the 7 HACCP principles, prerequisite programs, real examples, and a ready-to-use template.

What Is a HACCP Plan?

A HACCP plan is a written document that identifies potential food safety hazards in your restaurant’s operations and establishes procedures to prevent, eliminate, or reduce those hazards to safe levels. HACCP stands for Hazard Analysis and Critical Control Points.

Unlike reactive food safety approaches that catch problems after they happen, HACCP is a preventive system. You map out every step of your food handling process (from receiving deliveries to serving the final plate) and identify the specific points where things could go wrong. Then you set measurable limits, monitor those points, and document everything.

HACCP was originally developed in the 1960s by the Pillsbury Company, NASA, and the U.S. Army to ensure safe food for astronauts. Today, it’s the most widely used food safety management framework in the world, adopted by regulatory agencies across North America, the EU, and dozens of other countries.

For restaurant owners, a HACCP plan does three things: it keeps your customers safe, protects you from lawsuits and fines, and gives you a documented system that health inspectors can review during inspections.

The 7 Principles of HACCP

Every HACCP plan is built on seven principles established by the National Advisory Committee on Microbiological Criteria for Foods. These principles form the backbone of your plan, and understanding them is the first step in developing a HACCP plan for your restaurant.

Principle 1: Conduct a Hazard Analysis

List every step in your food preparation process and identify where biological, chemical, or physical hazards could occur. Biological hazards include bacteria like Salmonella or E. coli. Chemical hazards include cleaning products, allergens, or pesticides. Physical hazards include glass, metal fragments, or plastic.

Principle 2: Identify Critical Control Points (CCPs)

A critical control point is a step in your process where you can apply a control measure to prevent, eliminate, or reduce a food safety hazard. Not every step is a CCP. Cooking, cooling, and reheating are the most common CCPs in restaurants because failure at these steps directly results in unsafe food.

Principle 3: Set Critical Limits

For each CCP, define a measurable boundary between safe and unsafe. These limits must be specific numbers — not vague guidelines. For example, poultry must reach an internal temperature of 165°F (74°C). Ground beef must reach 155°F (68°C). Your local FDA Food Code or state health department sets most of these values.

Principle 4: Establish Monitoring Procedures

Decide who checks each CCP, how they check it, and how often. Monitoring should answer four questions: What is being measured? How is it measured? When is it measured? Who does the measuring? For example, the line cook checks the internal temperature of every chicken breast with a calibrated probe thermometer before plating.

Principle 5: Define Corrective Actions

When monitoring shows that a critical limit hasn’t been met, your staff needs to know exactly what to do. Corrective actions should be pre-written and specific. For a chicken breast that didn’t reach 165°F, the corrective action is simple: continue cooking until it does. For food that’s been in the temperature danger zone (41°F–135°F) for more than four hours, the corrective action is to discard it.

Principle 6: Establish Verification Procedures

Verification confirms that your HACCP plan actually works. This includes calibrating thermometers regularly, reviewing monitoring logs, observing staff during service, and conducting periodic internal audits. Some restaurants bring in a third-party food safety consultant for annual verification.

Principle 7: Keep Records and Documentation

Document everything. Your records should include your hazard analysis, CCP identification, critical limits, monitoring logs, corrective action reports, verification activities, and any plan modifications. Keep records for at least one year. Some jurisdictions require longer. These records are what health inspectors review during audits.

When Is a HACCP Plan Required for Restaurants?

Not every restaurant is legally required to have a written HACCP plan. Most standard restaurant operations (cooking burgers, making salads, frying chicken) fall under general food safety requirements like proper handwashing, temperature control, and sanitation. These are covered by your local food code and standard health inspections.

However, a written HACCP plan becomes required when your restaurant uses certain specialized processes. The specific triggers vary by state and county, but common ones include:

• Sous vide cooking:cooking food in vacuum-sealed bags at precise low temperatures
• Smoking or curing meats:for preservation rather than flavor
• Reduced oxygen packaging (ROP):vacuum packing or MAP for extended shelf life
• Using food additives for preservation:such as vinegar to acidify sushi rice
• Sprouting seeds or beans
• Operating molluscan shellfish tanks
• Custom processing:making and selling your own sauces, condiments, or fermented products

Even if your local health department doesn’t require a formal HACCP plan, writing one is still a smart practice. It gives you a documented system for managing your restaurant’s food safety, which helps during health inspections and protects you in liability situations.

Your first step should always be contacting your local health department. Ask whether your menu items or processes require a written HACCP plan. Some jurisdictions also require plan approval before you can start a specialized process, so don’t wait until your next inspection to find out.

Prerequisite Programs: What You Need Before Writing a HACCP Plan

A HACCP plan doesn’t work in isolation. It sits on top of prerequisite programs: the foundational food safety practices that every restaurant should already have in place. If your basics aren’t solid, your HACCP plan won’t be effective.

Here are the prerequisite programs your restaurant needs:

• Standard operating procedures (SOPs):written procedures for receiving, storage, prep, cooking, cooling, and reheating. Include these in your restaurant training manual.
• Cleaning and sanitation schedule:daily, weekly, and monthly cleaning tasks for all surfaces, equipment, and storage areas
• Pest control program:regular inspections and treatments by a licensed pest control company
• Employee hygiene and health policies:handwashing requirements, glove use, hair restraints, and illness exclusion policies. Document these in your employee handbook.
• Supplier verification:approved supplier list, delivery inspection procedures, and temperature checks on receiving
• Equipment maintenance and calibration:regular equipment maintenance, including thermometer calibration at least weekly
• Water safety:verification that your water supply meets safety standards
• Allergen management:procedures for handling the nine major allergens (milk, eggs, fish, shellfish, tree nuts, peanuts, wheat, soybeans, and sesame)

Think of prerequisite programs as the foundation and your HACCP plan as the structure built on top. Without a solid foundation, the structure can’t stand.

How to Write a HACCP Plan for Your Restaurant: Step by Step

Now that you understand the principles and have your prerequisite programs in place, here’s how to write a restaurant HACCP plan from scratch. Follow these steps in order.

Step 1: Assemble Your HACCP Team

You don’t need a huge team, but you shouldn’t write a HACCP plan alone. At minimum, include your kitchen manager (they know food prep inside out), a front-of-house lead (they handle final delivery to guests), and someone with a food safety certification like ServSafe. In a small restaurant, one or two people can cover multiple roles. The point is to get input from people who actually work each station.

Step 2: Describe Your Products and Menu

List every menu category and the types of food you handle. Group items by how they’re processed: raw items served raw (sushi, salads), raw items cooked and served hot (grilled chicken, fried fish), cooked items served cold (potato salad, deli meats), and items that go through multiple temperature changes (stocks that are cooked, cooled, stored, and reheated). This grouping helps you identify which items carry the most risk.

Step 3: Create a Process Flow Diagram

Draw a simple flowchart showing every step your food goes through, from the moment it arrives at your back door to the moment it reaches the customer’s table. A typical restaurant flow looks like this:

Receiving → Storage (dry/refrigerated/frozen) → Thawing → Preparation → Cooking → Hot Holding → Cooling → Cold Storage → Reheating → Plating → Serving

Not every menu item goes through every step. A salad skips cooking and hot holding. A grilled steak skips cooling and reheating. Create separate flow diagrams for your major process categories, or mark which steps apply to which items.

Step 4: Conduct Your Hazard Analysis

For each step in your flow diagram, ask: what could go wrong here? Identify biological, chemical, and physical hazards at each point. Then assess whether each hazard is significant enough to require a control measure.

Here’s an example hazard analysis for a common restaurant process:

Step 5: Identify Your Critical Control Points (CCPs)

From your hazard analysis, determine which steps are critical control points, where you can apply a control to prevent or eliminate a hazard. Use this simple test: if control is lost at this step, would it result in an unacceptable health risk? If yes, it’s a CCP.

The most common CCPs in restaurants are:

• Cooking:the step where heat kills harmful bacteria
• Cooling:where slow cooling allows bacterial growth
• Reheating:where insufficient heat fails to kill bacteria that grew during storage
• Hot holding:where food can drop into the danger zone
• Cold holding:where food can warm into the danger zone

Receiving can also be a CCP if you handle high-risk items like raw shellfish or you need to verify temperatures on delivery.

Step 6: Set Critical Limits for Each CCP

Each CCP needs a clear, measurable limit. Don’t use vague terms like “cook thoroughly.” Use specific numbers. Here are the standard critical limits based on the FDA Food Code:

Always check with your state or county health department, as some jurisdictions have stricter requirements than the FDA model code.

Step 7: Set Up Monitoring Procedures

For each CCP, document exactly how monitoring happens. Use this format:

• What:internal temperature of cooked chicken
• How:insert calibrated probe thermometer into thickest part
• When:every batch, before plating
• Who:the line cook assigned to the grill station

Record every check in a monitoring log. Write the actual temperature reading — not just a checkmark. If your thermometer reads 163°F on a chicken breast, write “163°F” so you can see the trend and catch problems before they become critical.

Step 8: Define Corrective Actions

Write corrective actions for every CCP before a problem ever happens. Your team shouldn’t have to think about what to do in the middle of a busy service. Here are examples:

• Cooking CCP not met: Continue cooking until the item reaches the required internal temperature. If the item can’t be brought to temperature, discard it.
• Hot holding CCP not met: If food drops below 135°F, reheat to 165°F within 2 hours. If food has been below 135°F for more than 4 hours, discard it.
• Cooling CCP not met: If food hasn’t reached 70°F within 2 hours, reheat to 165°F and restart the cooling process. Use ice baths, shallow pans, or blast chillers to speed cooling.
• Receiving CCP not met: Reject the delivery. Document the supplier, product, temperature, and reason for rejection.

Every corrective action should be documented, including the date, time, item, problem found, action taken, and who handled it.

Step 9: Establish Verification Procedures

Verification is how you prove your HACCP plan works. Build these into your routine:

• Daily: Review monitoring logs from the previous shift for completeness and accuracy
• Weekly: Calibrate all thermometers (boiling point method or ice point method)
• Monthly: Observe staff performing monitoring activities to confirm they’re following procedures
• Quarterly: Review corrective action logs for patterns or recurring issues
• Annually: Conduct a full HACCP plan review and update as needed, especially when you change your restaurant menu, equipment, or suppliers

Step 10: Organize Your Records

Your HACCP records should be organized, accessible, and up to date. Keep these documents together:

• Your written HACCP plan (hazard analysis, CCPs, critical limits, monitoring procedures, corrective actions)
• Process flow diagrams
• Daily monitoring logs (temperature logs, receiving logs)
• Corrective action reports
• Thermometer calibration records
• Staff training records
• Verification and audit reports

Keep all records for at least one year. Some jurisdictions require two years or more. Store them where a manager can access them quickly during a health inspection. A dedicated binder or digital folder works well.

Restaurant HACCP Plan Template

Here’s a HACCP plan template you can adapt for your restaurant. This template covers the most common CCPs in food service operations. Customize the monitoring details and responsible staff based on your kitchen setup.

Copy this template and customize it for your specific menu items and kitchen layout. Add additional CCPs if your restaurant handles specialized processes like sous vide, smoking, or fermentation.

HACCP Plan Example: Grilled Chicken Process

Here’s a worked HACCP plan example showing how the plan applies to a single menu item — grilled chicken breast — from receiving to serving.

Process flow: Receiving → Refrigerated Storage → Preparation (trimming, marinating) → Cooking (grilling) → Plating → Serving

This example shows the key difference between a CCP and a prerequisite program. Cold storage and preparation are managed through standard operating procedures (SOPs), while cooking and receiving are true critical control points with specific measurable limits.

Common HACCP Plan Mistakes to Avoid

Writing a HACCP plan isn’t difficult, but there are several mistakes that can make your plan ineffective or get it rejected by your health department.

Copying Someone Else’s Plan

This is the most common mistake. Every restaurant has a different menu, kitchen layout, equipment, and staff. A HACCP plan from another restaurant won’t account for your specific hazards and processes. Use templates as starting points, but always customize them for your operation.

Making It Too Complicated

A HACCP plan that your staff can’t follow is useless. Keep your monitoring procedures simple and practical. If checking temperatures requires a 10-step process during a busy dinner rush, your team won’t do it. Build your plan around what’s realistic in your kitchen.

Ignoring Prerequisite Programs

Jumping straight to HACCP without solid prerequisite programs is like building a house without a foundation. Make sure your cleaning schedules, operations management procedures, staff training, and supplier verification are all in place first.

Not Training Your Staff

Your HACCP plan is only as good as the people following it. Every team member who handles food needs to understand what CCPs are, why monitoring matters, and what to do when something goes wrong. Include HACCP training as part of your onboarding process and schedule refresher sessions at least once a year. High staff turnover makes this especially important in restaurants.

Recording Checkmarks Instead of Actual Values

Write down the actual temperature reading, not just a checkmark or “OK.” If your chicken reads 167°F, write “167°F.” If it reads 160°F, that tells you there’s a problem, and you have a record showing you caught it. Checkmarks don’t show trends, and they won’t hold up during an audit.

Treating the Plan as a One-Time Document

Your HACCP plan needs regular updates. Review it whenever you change your menu, switch suppliers, get new equipment, or remodel your kitchen. Plans that sit in a binder untouched for years stop reflecting what actually happens in your kitchen.

Who Needs to Be Involved in Your HACCP Plan?

People working on the HACCP plan are responsible for identifying hazards, setting controls, and making sure the system works day to day. At minimum, your HACCP team should include:

• HACCP team leader:usually the owner, general manager, or head chef. This person oversees the plan and ensures compliance.
• Kitchen manager or head chef:brings detailed knowledge of food preparation processes, cooking times, and temperatures.
• A person with food safety certification:someone who has completed ServSafe certification or an equivalent program. They understand food safety principles and can help identify hazards.
• Line staff representative:someone who works the line daily. They’ll spot practical issues with monitoring procedures that management might miss.

For small restaurants where one or two people wear multiple hats, you can still build a strong plan. The key is getting input from the people who actually handle food every day.

If you don’t have food safety expertise in-house, consider hiring a HACCP consultant. Consultants typically charge $1,500 to $5,000 for a full plan, depending on the size and complexity of your operation. That’s a one-time cost that’s far cheaper than a foodborne illness outbreak.

How to Keep Your HACCP Plan Up to Date

Your restaurant HACCP plan should be a living document. Here’s when to review and update it:

• Menu changes:new items, removed items, or recipe changes can introduce new hazards or eliminate existing ones. Use your menu analysis process to identify which changes affect your HACCP plan.
• Equipment changes:new ovens, coolers, or cooking methods may change your CCPs or critical limits
• Supplier changes:a new supplier might have different handling practices or product specs
• Regulatory updates:your state or county may revise food code requirements
• After a food safety incident:any illness complaint, positive pathogen test, or health inspection violation should trigger a plan review
• Staffing changes:when key HACCP team members leave, update roles and retrain replacements

At minimum, conduct a full HACCP plan review once a year, even if nothing has changed. Some jurisdictions, like Maryland, require updates and re-approval every five years for moderate and high-priority facilities.

Now that you understand the food safety side of running a restaurant, make sure you’re also covering the business essentials, from writing a solid restaurant business plan to understanding startup costs.

Restaurant HACCP Plan FAQ

What is the first step in developing a HACCP plan?

The first step in developing a HACCP plan is assembling your HACCP team. You need people with knowledge of your food preparation processes, equipment, and food safety principles. Once your team is in place, you’ll move on to describing your products, creating flow diagrams, and conducting your hazard analysis.

What are the 7 principles of HACCP?

The 7 principles of HACCP are: (1) conduct a hazard analysis, (2) identify critical control points, (3) establish critical limits, (4) set monitoring procedures, (5) define corrective actions, (6) establish verification procedures, and (7) maintain records and documentation. These principles form the framework for every HACCP plan.

Which special process requires a HACCP plan?

Specialized processes that typically require a written HACCP plan include sous vide cooking, smoking or curing meats for preservation, reduced oxygen packaging, using food additives for preservation (like acidifying sushi rice), sprouting seeds, and operating shellfish tanks. Requirements vary by state and county, so check with your local health department.

How much does a HACCP plan cost?

If you write the plan yourself, the main costs are staff time and any food safety training needed. Hiring a HACCP consultant typically costs $1,500 to $5,000, depending on the size and complexity of your restaurant. Online HACCP training courses range from $100 to $500 per person. Digital checklist tools and monitoring software cost $50 to $200 per month.

How long does it take to write a HACCP plan?

For a typical restaurant, expect to spend 2 to 4 weeks writing a HACCP plan from scratch. The hazard analysis and flow diagram usually take the longest. If you’re using a consultant, they can typically complete a plan in 1 to 2 weeks after an on-site assessment.

Is a HACCP plan the same as a food safety plan?

Not exactly. A HACCP plan focuses on identifying and controlling hazards at critical control points in your food handling process. A food safety plan is a broader term that can include HACCP plus prerequisite programs, allergen controls, supplier verification, and recall procedures. In the U.S., the FDA’s Food Safety Modernization Act (FSMA) requires food manufacturers to have a food safety plan, while restaurants are regulated primarily by state and local health codes.

Do I need a HACCP plan to pass a health inspection?

Most standard restaurant health inspections don’t require a formal HACCP plan. Inspectors check your general food safety practices: temperatures, cleanliness, handwashing, pest control, and proper storage. However, if your restaurant uses specialized processes like sous vide or smoking, your health department will likely require a written HACCP plan for those specific processes.

How often should I update my HACCP plan?

Review your HACCP plan at least once a year, and update it whenever you change your menu, equipment, suppliers, or kitchen layout. Also update it after any food safety incident, health inspection violation, or change in local food code requirements. Some jurisdictions require formal re-approval every few years.

Can I use a free HACCP plan template?

Free templates are a good starting point, but don’t use them as-is. Every restaurant has different menu items, equipment, and processes, so your HACCP plan must be customized. Use a template to structure your plan, then fill in your own hazard analysis, critical limits, and monitoring procedures based on your specific operation.

What happens if I don’t have a HACCP plan when one is required?

If your health department requires a HACCP plan for a specific process and you don’t have one, you can receive a health code violation, fines, or be ordered to stop the process until a plan is submitted and approved. In serious cases, your restaurant could face temporary closure. Beyond regulatory consequences, operating without a plan increases your risk of a foodborne illness outbreak and the lawsuits that follow.

A well-written HACCP plan protects your customers, your staff, and your business. It’s one of the most important documents a restaurant owner can create. Start with the prerequisite programs, follow the 7 principles, keep it simple enough for your team to follow, and review it regularly.

While you’re building your restaurant management systems, don’t forget the customer-facing side of your business. Displaying clear menu categories with accurate item descriptions helps customers make informed choices, especially those with food allergies.

Ready to set up your restaurant’s digital presence? Menubly helps you create a mobile-friendly online menu with detailed item descriptions and allergen info, take commission-free orders, and build a simple restaurant website, all for $9.99/month. Try Menubly free for 30 days, no credit card required.