Prerequisite programs (PRPs) are the foundation upon which every HACCP plan is built. Without adequate PRPs in place and functioning effectively, a HACCP plan cannot achieve its food safety objectives — no matter how well the CCPs are identified and monitored. PRPs address the basic environmental and operating conditions necessary for safe food production: facility design and maintenance, cleaning and sanitation, pest management, personal hygiene, supplier controls, training, water safety, waste management, and equipment maintenance. This comprehensive checklist helps food business operators assess whether their prerequisite programs are adequate before implementing or revising their HACCP plan.
Think of PRPs as the foundation of a building and the HACCP plan as the structure built on top. A perfectly designed structure built on a weak foundation will eventually fail. Similarly, a well-designed HACCP plan implemented in a facility with inadequate prerequisite programs will not achieve reliable food safety outcomes.
The most common reason HACCP plans fail to prevent food safety incidents is not a flaw in the HACCP plan itself — it is the failure of underlying prerequisite programs. When PRPs are inadequate, hazards multiply beyond what the HACCP system was designed to control. A HACCP plan that identifies cooking as a CCP for pathogen destruction cannot succeed if the prerequisite program for supplier approval allows contaminated raw materials into the facility. A CCP for allergen control during packaging cannot work if the prerequisite cleaning program fails to remove allergen residue from shared equipment between products.
The Codex Alimentarius explicitly states that prerequisite programs should be well-established, fully operational, and verified before the HACCP plan is developed. Yet many food businesses attempt to implement HACCP while their basic hygiene programs are incomplete, inconsistent, or undocumented. This approach creates a HACCP system that exists on paper but provides no real food safety protection.
Regulatory inspectors and auditors evaluate prerequisite programs as a separate and equal component of the food safety management system. A facility with an excellent HACCP plan but poor prerequisite programs will not receive a favorable audit outcome. Auditors understand that PRPs control the majority of food safety risks in a food business, while CCPs address the specific hazards that PRPs alone cannot adequately manage.
The scope of prerequisite programs is extensive, covering every aspect of the operation from the physical facility to staff behavior. This breadth makes it easy for gaps to develop — particularly in areas that do not receive daily management attention. A structured checklist approach ensures that all PRP categories are systematically assessed and maintained.
Without documented prerequisite programs, food businesses also lack the baseline documentation needed to demonstrate due diligence in the event of a food safety incident. When a regulatory authority or a plaintiff's legal team examines a business following a foodborne illness complaint, one of the first things they examine is the documented PRP system.
The Codex Alimentarius General Principles of Food Hygiene (CXC 1-1969, Rev. 2020) dedicate extensive sections to prerequisite programs, covering primary production, establishment design and facilities, control of operation, maintenance and sanitation, personal hygiene, transportation, product information, and training. These provisions establish the international standard for PRPs.
The FDA Food Code addresses prerequisite program elements throughout its provisions — facility requirements, equipment standards, food safety practices, and personnel requirements collectively form the PRP framework for retail food establishments. Under FSMA, 21 CFR Part 117 Subpart B establishes Current Good Manufacturing Practice requirements that serve as PRPs for food manufacturers.
EU Regulation 852/2004 Annex II specifies prerequisite program requirements in detailed chapters covering food premises, rooms where food is prepared, equipment, food waste, water supply, personal hygiene, foodstuffs, and training. These requirements apply to all food business operators.
The UK FSA Safer Food, Better Business framework incorporates prerequisite program elements as the foundation of the food safety management system, organized into practical sections that food businesses can implement and document. For comprehensive regulatory guidance: Food Safety Regulatory Framework
No matter how busy your kitchen gets,
one HACCP failure can result in failed inspections, foodborne illness outbreaks, or forced closure.
Most food businesses manage HACCP with paper checklists — or worse, memory.
The businesses that consistently pass inspections are the ones that make compliance systematic and verifiable.
Build your HACCP plan now (FREE):
Already managing food safety? Show your customers with a MmowW Safety Badge:
安全で、愛される。 Loved for Safety.
Use our free tool to check your food business compliance instantly.
Try it free →Step 1: Facility and Premises Assessment
Evaluate your physical facility against regulatory requirements. Check that floors, walls, and ceilings are in good repair, smooth, cleanable, and free from cracks or damage. Verify adequate lighting in all food handling areas. Confirm that ventilation systems are functioning properly and filters are clean. Assess that layout allows for proper workflow from receiving through preparation, cooking, and service without cross-contamination pathways. Verify that handwashing stations are conveniently located, properly supplied, and accessible. Check that restroom facilities are clean, well-maintained, and do not open directly into food handling areas.
Step 2: Equipment and Utensil Assessment
Verify that all food contact equipment is in good repair, free from cracks or damage, smooth, and easily cleanable. Confirm that equipment surfaces are made of approved, non-toxic materials. Check that cutting boards are in good condition without deep cuts or grooves. Verify that thermometers and other monitoring instruments are calibrated and functioning. Assess that equipment is installed to allow adequate cleaning of surrounding areas.
Step 3: Cleaning and Sanitation Program Assessment
Review your written cleaning schedule for completeness — does it cover all areas, equipment, and surfaces? Verify that cleaning frequencies match regulatory requirements and operational needs. Check that approved cleaning chemicals are available and used at correct concentrations. Confirm that sanitizer test strips are available and used regularly. Verify that cleaning staff are trained on proper procedures. Review cleaning records for completeness and accuracy.
Step 4: Pest Management Assessment
Verify that you have a documented pest management program — either in-house or through a licensed pest control operator. Check that all potential pest entry points are sealed. Verify that food storage prevents pest access. Check for evidence of pest activity (droppings, gnaw marks, nesting materials). Review pest management records including inspection reports, treatment records, and corrective actions.
Step 5: Personal Hygiene Assessment
Review your personal hygiene policies and verify staff compliance. Check that handwashing procedures are documented and followed. Verify that illness reporting policies are in place and understood by all staff. Confirm that appropriate protective clothing is worn. Check that food handling gloves are used correctly and changed appropriately. Review training records for personal hygiene training completion.
Step 6: Supplier Control Assessment
Evaluate your supplier approval process. Verify that you have documented criteria for approving suppliers. Check that incoming deliveries are inspected for temperature, condition, and specification compliance. Review records of delivery inspections and any rejected deliveries. Confirm that you maintain supplier contact information and can trace ingredients to their sources.
Step 7: Training Program Assessment
Review your food safety training program. Verify that all food handling staff have received food safety training appropriate to their roles. Check that training records are maintained. Confirm that refresher training is conducted at regular intervals. Assess whether training covers all PRP areas relevant to each staff member's responsibilities. Verify that new hire orientation includes food safety training before independent work begins.
Mistake 1: Treating PRPs as Secondary to the HACCP Plan
PRPs control the majority of food safety risks. The HACCP plan addresses the remaining critical hazards that PRPs alone cannot adequately manage. Neglecting PRPs to focus on the HACCP plan is like neglecting the foundation of a building to focus on the roof. Both are necessary, but the foundation comes first.
Mistake 2: Having PRPs on Paper Only
Written procedures that are not implemented provide no food safety benefit and create a misleading impression of compliance. Regularly verify that written PRPs reflect actual practices by observing operations, interviewing staff, and reviewing records. If actual practices differ from written procedures, either update the procedures to match what works or retrain staff to follow the written procedures.
Mistake 3: Not Verifying PRP Effectiveness
PRPs need verification just as HACCP CCPs do. Periodically assess whether your PRPs are actually controlling the risks they are designed to address. Verification methods include internal audits, environmental testing, record review, and management observation. Do not assume PRPs are working — verify.
Mistake 4: Failing to Update PRPs When Operations Change
Changes to your facility, equipment, menu, staff, suppliers, or regulations may require corresponding updates to your prerequisite programs. A PRP assessment should be triggered by any significant operational change, not just performed on a fixed schedule. Outdated PRPs create gaps that can compromise the entire food safety management system.
What is the difference between a PRP and a CCP?
PRPs are general conditions and activities that provide the basic environmental and operating conditions necessary for safe food production. They apply broadly across the operation. CCPs are specific steps in the process where a control measure can be applied to prevent, eliminate, or reduce a specific identified food safety hazard. PRPs form the foundation; CCPs address specific hazards that PRPs alone cannot adequately control.
How many prerequisite programs should my food business have?
The Codex Alimentarius identifies eight main PRP categories, but the specific number of documented programs depends on your operation. At minimum, you should have documented programs for premises maintenance, cleaning and sanitation, pest management, personal hygiene, supplier control, training, waste management, and water safety. Some operations may need additional programs for allergen management, chemical control, or equipment maintenance.
Can I start implementing HACCP before all PRPs are in place?
The Codex Alimentarius recommends that PRPs be well-established before developing the HACCP plan. Practically, you can begin developing your HACCP plan while strengthening your PRPs, but the HACCP plan should not be considered complete or fully implemented until the underlying PRPs are functioning effectively. Implement the most critical PRPs first, then build out the full program.
How often should PRPs be reviewed?
Conduct a comprehensive PRP review at least annually, and whenever there are significant changes to your operation. Individual PRP elements should be monitored on an ongoing basis as part of your daily operations. If a PRP failure is identified — through audits, inspections, incidents, or complaints — conduct an immediate review of that specific program.
Your food safety system should work as hard as you do. Manual tracking leads to gaps — and gaps lead to violations.
Start your FREE 14-day trial:
→ MmowW F👀D — No credit card required.
安全で、愛される。 Loved for Safety.
Try it free — no signup required
Open the free tool →MmowW Food integrates compliance tools, documentation, and team management in one place.
Start 14-Day Free Trial →No credit card required. From $29.99/month.
Loved for Safety.