Subscribe to Blog

Your email:

Current Articles | RSS Feed RSS Feed

Quantitative Risk Assessment in HACCP Plans - Decisions, Decisions...


Bad Fortune Cookie

Last week, I spoke about how to set up a Risk Matrix and the considerations on how to determine risk scales. I mentioned how Risk methods provide the objectivity needed for many organizations, but a team is need to ultimately make the decision.

I was reviewing some material in the Food Safety industry, and once again Risk came up, specifically to HACCP. HACCP (Hazard Analysis Critical Control Points) in itself is a Risk Management Tool, and is adopted by many of the GFSI Compliance standards. It is concerned with looking at the various potential hazards within the food safety plan and assessing what types of controls need to be put in place. Controls like these come in many flavors (no pun intended), most notably Prerequisite Programs or Critical Control Points (CCP). What I was interested in was, "How do you accurately determine whether a step in the process is a CCP or not?"

I learned there are two schools of thought to this. One is the Decision Tree and another is Quantitative Risk Assessment.

Decision Trees seemed to be more common in HACCP Plans, maybe because most HACCP Plans haven't automated to the point where Risk has become necessary. But as more Food Safety Management Systems become automated, new technologies are introduced that streamline the process. The trouble with decision trees, in my opinion, is that it lends itself to subjectivity. Depending on who is filling out the decision tree, the answer could change. That is not to say that there is a problem with decision trees OR the person filling them out - but the combination of the two can be problematic.

HACCP needs logical, systemic methods for determining the significance of a hazard in a repeatable way. Risk Assessment is the best method for this. It relies on a defined verbal scale, it uses a singular, common mathematic method for determining a hazard, and sets guidelines for actions based on the result. Furthermore, it is a repeatable mtehod - if done properly, the risk matrix will spit out the same result every time.

Let's take an example. Here's a hazard for a step that involves a potential CCP - Pathogens (lovely):

Food HazardsWe know the hazard and the severity/likelihood, but we still need to come up with a determination of whether a CCP is necessary. A decision tree would look something like this:

That's a crazy decision tree(My head hurts looking at this)

Or...we can try and put the hazard into a Risk Matrix, using the verbal scale and assigning a weight to each level on the scale:

verbal scale for riskriskmatrix food

Now, we have a repeatable and systemic matrix for looking at the risk. We can setup our risk thresholds (let's say for this example 1-10 is a CCP), and then apply the verbal scale to the matrix:

riskmatrix food2And then we have a quantitative result to draw from. We can then enter it into the hazard analysis, and record the results:

Hazard withrisk

It's not enough to just have a risk matrix, in food safety or any other compliance-related process. You need a team in place to analyze the risk and leverage the data to make the decisions. There is always "tweaking" based on other factors and human experience. HACCP is about common sense. Risk will help to automate it and give a consistent, auditable, and logical result. But experience is also important in determine hazards. So there is a marrying of the two methods that will ultimately make for a efficient Food safety system.

Risk Management and Risk Assessment are prevalent in all industries. Food Safety is no exception, and like all industries, Risk requires a certain degree of human element coupled with a quantitative tool to be effective.

Free Webinar OnDemand: GFSI Compliance
OnDemand GFSI Compliance WebinarGFSI Compliance & the Integrated Quality Management System

You will learn
• Various challenges behind creating a holistic solution through integration
• How Quality and GFSI processes can be combined into a single integrated system
• How to utilize Risk Management to ensure that events with the highest risk are the top priority for the organization

Watch the GFSI Compliance Webinar Now


Taking subjectivity out of the equation makes sense. 
CCP should be strictly quantitative.
Posted @ Wednesday, March 16, 2011 3:05 PM by Jeff Lelivelt
I just want to understand to know , in this decison tree model there is one ( first guestion) is missing that is Q1 - is there any significant hazard at this step process ? 
that means after analysing the hazard through hazard significance matrix ( quantitative assessement )then we will go for decision tree to decide whether it is a it ?
Posted @ Friday, February 24, 2012 12:11 AM by ali salih
I strongly agree with this line - "Risk Management and Risk Assessment are prevalent in all industries." Managing and assessing risk are important actions for employees and clients safety.
Posted @ Tuesday, May 22, 2012 10:03 PM by Sylvana
Nice blog, I appreciate.
Posted @ Monday, June 25, 2012 6:17 AM by Rehan
i want to have the following clarification 
after assessing severity & probability ,thhen arive at significant hazard,based on the matrix table  
next ,how do you link this & the decision tree to identify CCP 
can anyone comment?
Posted @ Wednesday, April 03, 2013 8:07 AM by SREENIVAS BAPU
How did you arrive the cell values in this Matrix?
Posted @ Monday, February 10, 2014 2:35 AM by Janani
Thank you for your post, write well, looking forward to your next post's arrival, to force... close.
Posted @ Tuesday, March 04, 2014 12:12 PM by same day essay
All in your article is precise and encourages me to own brave expectations just as as perfect writing is took in development.
Posted @ Tuesday, March 04, 2014 4:11 PM by getessay review
looking forward to your next post's arrival, to force..
Posted @ Tuesday, April 22, 2014 8:40 PM by uk essay writing
Looking forward for international standards reference who developed Risk Matrix to define significant hazard.Is it GFSI or other international standards?
Posted @ Friday, May 16, 2014 6:36 AM by smit
How you find the values of matrix?
Posted @ Friday, December 12, 2014 5:31 AM by gurusamy
Post Comment
Website (optional)

Allowed tags: <a> link, <b> bold, <i> italics