Hi Dat Hoang,
Thks yr posting yr haccp plan.
I guess this is in draft status. I liked the basic hazard analysis layout
The methods used in haccp are subjective and many Procedural variations will be auditorially accepted. The iso22000 Standard IIRC requires a "logical" approach.
A few criticisms -
(a) Many of the Biological hazards are not safety-related, ie coliforms, (generic)E.coli, Enterobacteriaceae, Yeast. Similarly for "hair".
(b) Various "hazards" are "generalised", eg thermophilic,thermoresistant bacteria, micro/chemical/physical hazards coming from straw. IMO the haccp plan requires "specifics" or in the absence of such, some sort of cross-reference. => What should we mention to be more specific, for thermoresistant bacteria
(c) The decision matrix (cols N-T) as presented is IMO not compliant with the iso22000 Standard. => It is the decision tree of our corporate.
(d) The categories in Severity matrix are undefined and seem ambiguous, eg basic/moderate/average ?? I'll share with you the severity list our company is applying, pls see attachment.
(e) the statement that likelihood is always assessed prior to (any?) application of the control measure is, semantically, debatable, eg cooking, metal detector ? => It does have a requirement stating to apply prior to specific control measures (for e.g: UHT)/
Nonetheless, it is possible that some auditors will accept the, IMO, deficiences (b,c,e). But probably not that in (a,d).
Regarding queries in Post 13 -
(1)
(i) hazards which are controllable by verified PRPs (eg as listed in iso22002-1) are associated with low likelihoods / low risks,
(ii) "low" likelihood takes (some) priority over "high" severity, ( I agreed most of yr numerical matrix although maybe a bit over-quantitative + no need for "extremely rare" "row)
(iii) I have avoided using frequencies for likelihood categories since I found awkward to apply to zero-tolerant pathogens. But it's optional. => Why do you see it awkward to apply to zero tolerant pathogens?
(iv) I generally use methods similar to those in 2nd/3rd paragraphs yr excel box (4.2.2.3) as far as possible. Sometimes there will be subjectivity, IMEX auditors tend to be flexible unless the final result is significantly different to that commonly found in their experience of analogous processes.
(2) Sorry, I don't really understand this approach. afaik, the iso criterion is that any significant safety hazard must be controlled so as to comply with the relevant acceptable level. => It means that we are setting specs for semi product, including micro specs. Because we think with se-mi spec we can better control the processes. The semi specs are developed based on the end spec we expect in end product, and the combinations of control measures esp for micro risk. What do you think?
(3) This is textbook haccp, ie some microbial species are classified as pathogens, some are not. The reasons for species pathogenicity take you one stage deeper. 
(you are correct that TPC [and coliforms] are undefined "mixtures" but are conventionally regarded as quality parameters based on majority flora).