HACCP Plan for Restaurants in India: A Practical 12-Step Guide
How to build a HACCP plan for an Indian restaurant, cloud kitchen or hotel - the 12 Codex steps explained with a chicken curry example.
7 min read · Updated 8 November 2026
HACCP - Hazard Analysis and Critical Control Points - is a simple idea: find the steps where food can become unsafe, decide which of them you must control, set measurable limits, and prove every day that you stayed inside those limits. It is used by food businesses worldwide and is the method behind most food safety audits. This guide walks through the 12 steps using a dish almost every Indian kitchen makes: chicken curry.
Before you start: prerequisite programmes
HACCP sits on top of basic hygiene. If your kitchen has no cleaning schedule, no pest control contract and no handwashing discipline, a HACCP plan will not save it. Get your prerequisite programmes (PRPs) in place first - premises, water, pest control, cleaning, personal hygiene, supplier control, storage, allergen control and training.
The 12 steps (7 principles)
- Assemble the HACCP team - owner or manager, head chef and the person responsible for food safety.
- Describe the product - ingredients, allergens, how it is cooked, stored and served, and its in-house shelf life.
- Identify intended use - ready to eat, eaten hot, possibly served to children or elderly guests.
- Draw the process flow - receiving, storage, preparation, cooking, hot holding, cooling, reheating, service.
- Confirm the flow on site - walk the kitchen and correct the diagram to match what really happens.
- Hazard analysis (principle 1) - list biological, chemical, physical and allergen hazards at each step and score their risk.
- Determine critical control points (principle 2) - use a decision tree for each significant hazard.
- Set critical limits (principle 3) - for example, core temperature of at least 75 °C when cooking.
- Establish monitoring (principle 4) - what is checked, how, how often and by whom.
- Establish corrective actions (principle 5) - what to do with the food and the process when a limit is missed.
- Establish verification (principle 6) - record reviews, thermometer calibration, internal audits.
- Keep documentation and records (principle 7) - the plan itself plus every monitoring record.
Worked example: chicken curry
Raw chicken can carry Salmonella and Campylobacter. Receiving and chilled storage are important, but they are not designed to destroy these bacteria - cooking is. So cooking becomes a CCP with a critical limit such as a core temperature of at least 75 °C, checked with a calibrated probe for every batch. If curry is held on a bain-marie, hot holding at 63 °C or above controls the growth of spore-forming bacteria. If surplus curry is cooled and reheated, two-stage cooling (to 21 °C within 2 hours and 5 °C within 6 hours in total) and reheating to 75 °C become CCPs too.
Tip: Group similar dishes - all gravies, all rice dishes, all cold desserts - so your plan stays manageable. You do not need a separate plan for every menu item.
Common mistakes
- Copying a factory HACCP plan that does not match a restaurant kitchen.
- Making every step a CCP - the plan becomes impossible to monitor.
- Vague limits such as 'cook well' instead of a temperature and time.
- Records filled in at the end of the week instead of at the time of the check.
- Never reviewing the plan after menu changes.
How long does it take?
With a good template and worked examples, a small restaurant team can draft a first plan in two to three hours, then refine it over the following weeks as monitoring records reveal what really happens. Review it at least once a year and whenever the menu or process changes.
This guide is general information to help food businesses improve their practices. It is not legal advice. Always check the current FSSAI requirements that apply to your licence or registration.