HACCP Validation, Verification and Monitoring: What Is the Difference?
The difference between validation, verification and monitoring in HACCP, and why so many plants confuse them
Validation and verification are among the concepts that attract the most findings in food safety audits. Many plans state that “the plan is validated” without scientific evidence, or treat daily temperature records as “verification”. In fact there are three different activities answering three different questions.
The Codex General Principles of Food Hygiene, revised in 2020, and ISO 22000:2018 both stress the distinction between these concepts.
1. Three questions, three activities
| Activity | Question | When | Example |
|---|---|---|---|
| Validation | Will this control measure work if applied as designed? | Before implementation and when things change | A study showing that pasteurisation at 72°C for 15 seconds reduces the target pathogens to an acceptable level |
| Monitoring | Is the measure being applied within limits right now? | During operation | Recording temperature and time for each batch |
| Verification | Is the system working as planned? | Periodically | Reviewing monitoring records, calibrating scales, testing finished product, internal audit |
2. Validation: evidence before implementation
2.1 What needs validating?
- Critical control points and their critical limits.
- Operational prerequisite programmes (OPRPs) in ISO 22000.
- Measures linked to high risks, such as allergen cleaning.
- Shelf life.
2.2 Sources of evidence
| Source | Example |
|---|---|
| Scientific and regulatory references | Regulator guidance on cooking temperatures |
| Equipment manufacturer data | Ability of a metal detector to detect given sizes |
| In-house studies | Heat penetration study for the plant’s oven |
| Challenge studies | Inoculating the product with an indicator organism and measuring the reduction |
| Mathematical modelling | Microbial growth models to estimate shelf life |
| Documented historical experience | Long production records with conforming results, used with caution and not alone |
2.3 When to re-validate
- A change in recipe or ingredients.
- A change in equipment or process.
- A new hazard or new scientific information.
- Repeated verification failures.
3. Monitoring: control during operation
Monitoring must define what is measured, how, when, who is responsible and what happens when there is a deviation. Continuous monitoring is preferable to periodic monitoring for critical points. Every deviation from a critical limit needs a correction, a corrective action and handling of potentially unsafe product.
4. Verification: is the system really working?
Typical verification activities:
- Review of monitoring and deviation records by someone other than the person who made them.
- Calibration of measuring devices such as thermometers and metal detectors.
- Testing detectors with standard test pieces.
- Testing finished product and environmental samples, as part of the environmental monitoring programme.
- Internal audit of the food safety system.
- Review of complaints and withdrawals.
Verification results are analysed and reported to the food safety team and then to management review.
5. A complete example: the metal detector
| Activity | Application |
|---|---|
| Validation | Proving that the detector, at its current settings, detects ferrous, non-ferrous and stainless steel test pieces of set sizes in the actual product, and that the reject mechanism works |
| Monitoring | Testing the detector with test pieces at the start of every shift and every hour, and recording results |
| Verification | Daily review of records by a supervisor, periodic maintenance and calibration, and audits of compliance with the procedure |
6. Common mistakes
- Relying on “we’ve always done it this way” as the only validation evidence.
- Treating monitoring as verification.
- No re-validation after an equipment or recipe change.
- Records “reviewed” with a signature but no analysis.
- Verification results not used to update the HACCP plan.
Conclusion
Validation answers “will it work?”, monitoring answers “are we doing it now?” and verification answers “did it actually work?”. A mature food safety system needs all three, each backed by clear evidence.
Pick one critical control point in your plan and ask: where is the scientific evidence that the critical limit is enough?