ServSafe Manager guideFood-safety concepts
ServSafe HACCP: The 7 Principles and Active Managerial Control
Learn the seven HACCP principles in order with kitchen examples, the difference between monitoring and verification, when the FDA Food Code requires a HACCP plan, and how active managerial control and food safety management systems fit the ServSafe Manager exam.
Short answer
HACCP has seven principles, in this order: conduct a hazard analysis, determine the critical control points (CCPs), establish critical limits, establish monitoring procedures, establish corrective actions, establish verification procedures, and establish record keeping. A CCP is a point where losing control may cause an unacceptable health risk, such as cooking, cooling, or hot holding. A critical limit is the measurable value that must be met there, such as 165°F for chicken. The Food Code requires a HACCP plan only for certain processes, such as curing, smoking to preserve food, or reduced oxygen packaging without a variance. Otherwise, HACCP at retail is voluntary.
The seven principles, in order
The Food Code's Annex 4 lists the seven HACCP principles the National Advisory Committee on Microbiological Criteria for Foods defined. The order matters, because each step depends on the one before it.
| # | Principle | What it means | Kitchen example from the Food Code annex |
|---|---|---|---|
| 1 | Conduct a hazard analysis | Find the biological, chemical, and physical hazards reasonably likely to make the food unsafe | Spores of Clostridium perfringens survive cooking and can grow in cooked meat that cools too slowly |
| 2 | Determine critical control points | Find the steps where control is essential to prevent, eliminate, or reduce a hazard | Cooking, cooling, hot holding, and cold holding of ready-to-eat TCS food |
| 3 | Establish critical limits | Set the measurable minimum or maximum that separates safe from unsafe at each CCP | Cooking chicken to 165°F (instantaneous); acidifying sushi rice to a pH below 4.2 |
| 4 | Establish monitoring procedures | Decide how, how often, and by whom each limit is checked | Checking the internal temperature of chicken pieces right after cooking |
| 5 | Establish corrective actions | Decide what happens when a limit is missed | Keep cooking a hamburger that hasn't reached 155°F for 17 seconds; discard food that can't be made safe |
| 6 | Establish verification procedures | Confirm the plan works and is being followed | Watching the person who monitors, reviewing logs, checking that thermometers are calibrated |
| 7 | Establish record keeping | Keep the documents that prove the system ran | Monitoring, corrective-action, calibration, prerequisite-program, and verification records |
Terms the exam expects you to separate
- Critical control point. The Food Code defines it as a point or procedure where loss of control may result in an unacceptable health risk. The annex adds that CCPs address safety only. First-in, first-out rotation is a quality practice, not a CCP, unless it also controls a safety hazard.
- Critical limit. A measurable value, such as temperature, time, pH, or water activity, that must be met at a CCP.
- Monitoring vs verification. Monitoring is the routine check: the cook takes the temperature. Verification is the check on the system: the manager reviews the temperature log and confirms the thermometer is accurate. If a question asks who confirms the monitoring is being done right, the answer is verification.
- Corrective action. What you do when a limit is missed, decided ahead of time, with a named person responsible.
Practice HACCP and food safety management questions with explanations to check that you can keep these terms apart under time pressure.
When the Food Code requires a HACCP plan
For most restaurants, HACCP is voluntary. The annex says FDA endorses it as an effective way to control risk, but a full HACCP plan is required only in specific cases. Section 8-201.13 requires one, submitted to the regulatory authority for approval, when:
- a law requires it
- the operation needs a variance, which section 3-502.11 requires before smoking food to preserve it, curing food, adding vinegar or additives to preserve food or to make it non-TCS, operating a shellfish display tank, custom processing animals, or sprouting seeds or beans
- the regulatory authority decides a preparation method needs a variance
- the operation uses reduced oxygen packaging without a variance
The plan's contents are listed in 8-201.14, including a flow diagram, the CCPs, critical limits, monitoring, corrective actions, verification, and records: the seven principles on paper.
The three food preparation processes
The annex groups most menu items by how many times they pass through the temperature danger zone of 41°F to 135°F:
| Process | Example flow | Trips through the danger zone |
|---|---|---|
| 1. No cook step | Receive, store, prepare, hold, serve | None all the way through, and nothing kills pathogens |
| 2. Same-day service | Receive, store, prepare, cook, hold, serve | One |
| 3. Complex preparation | Receive, store, prepare, cook, cool, reheat, hot hold, serve | Two or more |
A Process 3 item, such as chili made today for tomorrow, has the most CCPs to manage: cooking, the two cooling stages, reheating, and hot holding. The cooling guide and the temperature guide give the numbers for those steps.
Active managerial control and food safety management systems
The Supplement to the 2022 Food Code, which ServSafe's current materials follow, added two defined terms:
- Active managerial control is management building specific actions or procedures into the operation to control foodborne illness risk factors: prevention through continuous monitoring and verification, not reaction after a problem. Section 2-103.11 now makes maintaining it the person in charge's duty.
- A food safety management system is the set of actions employees take to prevent risk factors, including written procedures, training plans, and monitoring records. Section 8-201.15 requires a written system within four years of the regulatory authority adopting the code, unless the operation is deemed minimal risk.
The Food Code's preface names five risk factors that outbreak data keep pointing to: improper holding temperatures, inadequate cooking, contaminated equipment, food from unsafe sources, and poor personal hygiene. A HACCP-based system is one way to control them.
ServSafe's 9th-edition book description lists an expanded focus on food safety management systems, active managerial control, and the seven HACCP principles. The National Restaurant Association's April 2026 article on the course describes a new chapter on management systems, active managerial control, and food safety culture. Expect manager-level questions on these, not only temperature recall.
Check yourself
- What comes right after determining the CCPs? Establishing critical limits.
- A manager reviews the cooling log every morning and checks the thermometer in ice water. That's verification, not monitoring.
- A cook finds chicken at 150°F at the end of the cook time and keeps cooking it to 165°F. That's a corrective action.
If principle order is your weak spot, review the HACCP questions you missed before moving to the next topic.
Trust the source
Official sources
Exam policies can change. Use these primary sources for the most current details.
- Food Code 2022 (sections 3-502.11, 8-201.13, 8-201.14; Annex 4)U.S. Food and Drug Administration↗
- Supplement to the 2022 Food CodeU.S. Food and Drug Administration↗
- Food Code 2026 (definitions; section 8-201.15; Annex 4)U.S. Food and Drug Administration↗
- ServSafe Manager Book, 9th EditionServSafe↗
- Inside the new ServSafe Manager (April 1, 2026)National Restaurant Association↗