I thought I would dangle a worm to see if anything was swimming nearby
I am not especially a fan of ISO22000, to be honest I have not worked with it enough to form an opinion.
I have worked with
HACCP since the year dot and I am 100% behind a systematic method of analysing risk and controlling it. What is concerning me is that the language and methodology of
HACCP is increasingly taking priority over its implementation.
There are countless posts in these fora asking what the
CCPs in process X are. Then there are countless post saying that these are the
CCPs and these are your CPs, PRP etc.
If you identify a hazard with a reasonable risk of it occuring, then you need to control it, whatever you call it.
We all do our analyses and identify
CCPs. We then present them during an audit. (I know that food businesses are required to work with
HACCP principles regardless of whether they are audited, but this is the most common time that anybody outside the company looks at the system). We then wait whist the auditor (me included!) sagely strokes his/her chin and pronounces judgement about your choice of
CCP.
I get very annoyed with auditors who say that because you have not called point Y a
CCP when in his opinion it should be he is raising a Non Conformity, despite the fact that the risk is perfectly well managed.
Consider for instance the frozen storage temperature which started this thread. Some people will say this is a
CCP and some will say it is not. Even if it is not called a
CCP, you should still identify a limit, monitor it, calibrate the equipment, document it, validate it verify it, take action when the limit is exceded and review it. What extra would you do if you call it a
CCP?
We all have to go through the process but we are in danger of playing a game with auditors.