This brings up a rememberance of mine from years ago when I visited a cereal manufacturing company.
They had one CCP - cooking temperature of the oatmeal.
That sounds ok, but they did not cook the oatmeal.
The CCP applied to the consumer cooking the oatmeal.
I said - so, how do you exercise control on that - they said, well, we don't - we can't, we have no control on that.
So I said - so how can that be your CCP.
Could have heard a pin drop in the conference room where there were 15 people waiting for the new interim QA manager to answer.