ServSafe Manager guideFood-safety concepts

ServSafe HACCP: The 7 Principles and Active Managerial Control

Learn the seven HACCP principles in order with kitchen examples, the difference between monitoring and verification, when the FDA Food Code requires a HACCP plan, and how active managerial control and food safety management systems fit the ServSafe Manager exam.

Short answer

HACCP has seven principles, in this order: conduct a hazard analysis, determine the critical control points (CCPs), establish critical limits, establish monitoring procedures, establish corrective actions, establish verification procedures, and establish record keeping. A CCP is a point where losing control may cause an unacceptable health risk, such as cooking, cooling, or hot holding. A critical limit is the measurable value that must be met there, such as 165°F for chicken. The Food Code requires a HACCP plan only for certain processes, such as curing, smoking to preserve food, or reduced oxygen packaging without a variance. Otherwise, HACCP at retail is voluntary.

The seven principles, in order

The Food Code's Annex 4 lists the seven HACCP principles the National Advisory Committee on Microbiological Criteria for Foods defined. The order matters, because each step depends on the one before it.

#PrincipleWhat it meansKitchen example from the Food Code annex
1Conduct a hazard analysisFind the biological, chemical, and physical hazards reasonably likely to make the food unsafeSpores of Clostridium perfringens survive cooking and can grow in cooked meat that cools too slowly
2Determine critical control pointsFind the steps where control is essential to prevent, eliminate, or reduce a hazardCooking, cooling, hot holding, and cold holding of ready-to-eat TCS food
3Establish critical limitsSet the measurable minimum or maximum that separates safe from unsafe at each CCPCooking chicken to 165°F (instantaneous); acidifying sushi rice to a pH below 4.2
4Establish monitoring proceduresDecide how, how often, and by whom each limit is checkedChecking the internal temperature of chicken pieces right after cooking
5Establish corrective actionsDecide what happens when a limit is missedKeep cooking a hamburger that hasn't reached 155°F for 17 seconds; discard food that can't be made safe
6Establish verification proceduresConfirm the plan works and is being followedWatching the person who monitors, reviewing logs, checking that thermometers are calibrated
7Establish record keepingKeep the documents that prove the system ranMonitoring, corrective-action, calibration, prerequisite-program, and verification records

Terms the exam expects you to separate

  • Critical control point. The Food Code defines it as a point or procedure where loss of control may result in an unacceptable health risk. The annex adds that CCPs address safety only. First-in, first-out rotation is a quality practice, not a CCP, unless it also controls a safety hazard.
  • Critical limit. A measurable value, such as temperature, time, pH, or water activity, that must be met at a CCP.
  • Monitoring vs verification. Monitoring is the routine check: the cook takes the temperature. Verification is the check on the system: the manager reviews the temperature log and confirms the thermometer is accurate. If a question asks who confirms the monitoring is being done right, the answer is verification.
  • Corrective action. What you do when a limit is missed, decided ahead of time, with a named person responsible.

Practice HACCP and food safety management questions with explanations to check that you can keep these terms apart under time pressure.

When the Food Code requires a HACCP plan

For most restaurants, HACCP is voluntary. The annex says FDA endorses it as an effective way to control risk, but a full HACCP plan is required only in specific cases. Section 8-201.13 requires one, submitted to the regulatory authority for approval, when:

  • a law requires it
  • the operation needs a variance, which section 3-502.11 requires before smoking food to preserve it, curing food, adding vinegar or additives to preserve food or to make it non-TCS, operating a shellfish display tank, custom processing animals, or sprouting seeds or beans
  • the regulatory authority decides a preparation method needs a variance
  • the operation uses reduced oxygen packaging without a variance

The plan's contents are listed in 8-201.14, including a flow diagram, the CCPs, critical limits, monitoring, corrective actions, verification, and records: the seven principles on paper.

The three food preparation processes

The annex groups most menu items by how many times they pass through the temperature danger zone of 41°F to 135°F:

ProcessExample flowTrips through the danger zone
1. No cook stepReceive, store, prepare, hold, serveNone all the way through, and nothing kills pathogens
2. Same-day serviceReceive, store, prepare, cook, hold, serveOne
3. Complex preparationReceive, store, prepare, cook, cool, reheat, hot hold, serveTwo or more

A Process 3 item, such as chili made today for tomorrow, has the most CCPs to manage: cooking, the two cooling stages, reheating, and hot holding. The cooling guide and the temperature guide give the numbers for those steps.

Active managerial control and food safety management systems

The Supplement to the 2022 Food Code, which ServSafe's current materials follow, added two defined terms:

  • Active managerial control is management building specific actions or procedures into the operation to control foodborne illness risk factors: prevention through continuous monitoring and verification, not reaction after a problem. Section 2-103.11 now makes maintaining it the person in charge's duty.
  • A food safety management system is the set of actions employees take to prevent risk factors, including written procedures, training plans, and monitoring records. Section 8-201.15 requires a written system within four years of the regulatory authority adopting the code, unless the operation is deemed minimal risk.

The Food Code's preface names five risk factors that outbreak data keep pointing to: improper holding temperatures, inadequate cooking, contaminated equipment, food from unsafe sources, and poor personal hygiene. A HACCP-based system is one way to control them.

ServSafe's 9th-edition book description lists an expanded focus on food safety management systems, active managerial control, and the seven HACCP principles. The National Restaurant Association's April 2026 article on the course describes a new chapter on management systems, active managerial control, and food safety culture. Expect manager-level questions on these, not only temperature recall.

Check yourself

  1. What comes right after determining the CCPs? Establishing critical limits.
  2. A manager reviews the cooling log every morning and checks the thermometer in ice water. That's verification, not monitoring.
  3. A cook finds chicken at 150°F at the end of the cook time and keeps cooking it to 165°F. That's a corrective action.

If principle order is your weak spot, review the HACCP questions you missed before moving to the next topic.

Trust the source

Official sources

Exam policies can change. Use these primary sources for the most current details.