Categorising ISO 22000 Control Measures: OPRPs versus CCPs

Background, Systemic Rationale, and Affected Roles

Under DS/EN ISO 22000:2018, food safety management systems require a rigorous, evidence-based methodology to manage significant hazards. Quality managers, compliance leads, and internal auditors must understand how Clause 8.5.2.4 structures the selection and categorisation of control measures. Moving away from subjective decision trees, the standard enforces a systematic evaluation of hazard severity, failure likelihood, and operational feasibility.

This systematic approach prevents two common operational errors: over-classifying routine hygiene measures as critical control points, and under-controlling significant process hazards. Proper categorisation ensures operational resourcing is concentrated where control failure directly threatens consumer safety. Internal auditors must verify that the rationale for every categorisation decision is maintained as documented information.

Systematic Evaluation for Control Measure Categorisation

Clause 8.5.2.4.1 mandates that the food safety team must categorise each selected control measure as an operational prerequisite programme (OPRP) or at a critical control point (CCP). The evaluation must assess the likelihood of failure of its functioning and the severity of consequences if it fails. In addition, the team must evaluate the specific effect on identified hazards, its location within the process flow, and whether it functions as a single measure or part of a combination.

Furthermore, Clause 8.5.2.4.2 requires an assessment of operational feasibility before confirming a category. The team must evaluate whether it is feasible to establish measurable critical limits or measurable/observable action criteria. The team must also assess the feasibility of monitoring to detect control failures and applying timely corrections. Organizations may utilize externally developed elements under Clause 7.1.5, but the food safety team must adapt these elements to site-specific operations.

Defining Critical Limits and Action Criteria

Under Clause 3.12, a critical limit is defined as a measurable value that separates acceptability from unacceptability. Clause 8.5.4.2 establishes that critical limits at CCPs must be strictly quantitative, such as specific processing temperatures, thermal retention times, or physical sieve mesh dimensions. Conformance with critical limits guarantees that the defined acceptable hazard level in the end product is not exceeded.

In contrast, Clause 3.2 defines an action criterion as a measurable or observable specification for the monitoring of an OPRP. Under Clause 8.5.4.2, action criteria may be quantitative or qualitative, such as visual inspection parameters, titration color shifts, or sanitation verification checks. Conformance with action criteria contributes to the assurance that acceptable hazard levels are maintained across the operational environment. Where monitoring relies on visual observations, Clause 8.5.4.3 dictates that the method must be supported by documented instructions or specifications.

Monitoring Requirements and Nonconformity Consequences

Under Clause 8.5.4.3, monitoring systems for both CCPs and OPRPs must detect any failure to remain within defined boundaries within an adequate time frame. For a CCP, the monitoring method and frequency must enable the timely isolation and evaluation of affected products before release. For an OPRP, monitoring frequency must be proportionate to the likelihood of failure and the severity of potential consequences.

The operational distinction between CCPs and OPRPs becomes critical when nonconformities occur under Clause 8.9. When a critical limit at a CCP is exceeded, Clause 8.9.2.2 dictates that affected products must be automatically quarantined and handled as potentially unsafe products under Clause 8.9.4. Conversely, when an OPRP action criterion is not met, Clause 8.9.2.3 requires an evaluation of the causes and food safety consequences. Affected products from an OPRP failure may be released if testing or verification demonstrates that combined control measures remained effective.

What to do now

• Review hazard analysis documentation to verify that all control measure categorisations comply with Clause 8.5.2.4 evaluation requirements.
• Ensure every CCP is governed by a strictly measurable critical limit documented in accordance with Clause 8.5.4.2.
• Provide written specifications and instructions for all OPRP action criteria that rely on visual or subjective observations per Clause 8.5.4.3.
• Update nonconformity procedures so that CCP failures trigger automatic product quarantine under Clause 8.9.2.2, while OPRP deviations initiate documented consequence assessments under Clause 8.9.2.3.
• Train internal audit teams to verify the technical justification and monitoring validity of action criteria versus critical limits during internal audits.

Reference documents

• DS/EN ISO 22000:2018 Food safety management systems – Requirements for any organization in the food chain
• DS/ISO 22003-1:2022 Food safety – Part 1: Requirements for bodies providing audit and certification of food safety management systems
• DS/ISO 22003-2:2022 Food safety – Part 2: Requirements for bodies providing evaluation and certification of products, processes and services, including an audit of the food safety system