Dear sweetpotato,
The specific details will inevitably depend on yr own product/process. I can suggest some examples.
Link (1) has 2 (perhaps somewhat optimistic ?) generic haccp templates for a raw vegetable packing process. In the 1st attachment, the individual BCP hazards are not specified which some auditors don’t like. A fairly representative micro. list (a few omissions) is given in the 2nd attachment ("Listeria" shd prob.be L.mono...) although with a similar ultimate risk conclusion. Other permutations can be found, some consider that a realistic scenario is to assume that some zero-tolerant pathogens will be present (ie a possible CCP opportunity) but this can create some complicated philosophical continuations since no comprehensive killing step usually exists in the postharvesting procedure. The USFDA evade this micro. conundrum by avoiding a specific haccp CCP–type assessment for the possible micro. hazards and refer to "minimising".
(1) http://www.ifsqn.com...dpost__p__52698
If you are interested in the mechanics of the input risk assessment, can try this presentation –
(2) http://www.ifsqn.com...dpost__p__38494
the 1st haccp attachment in link (1) is clearly designed to promote the excel, top, right-hand side route in link (2). Of course, if you hv no input documentation, things will get a little problematic. 
There are some more background vegetable comments here –
(3) http://www.ifsqn.com...dpost__p__21323
Rgds / Charles.C
PS there is a detailed vegetable case study within the context of iso 22000 in another thread here but this is probably excessive to yr present interest.
PPS if you would like to play with a (professional) template with a built-in risk matrix can try the excel sheet here –
http://www.ifsqn.com...dpost__p__46754
( 3x3 matrix, designed for iso 22000, so for current interest you only need top MATERIAL section then watch for “use decision tree” to show in column J, then see the result after input YN or YY in cols L,M [sort of reverse Codex logic])
