Standards

HACCP Training Records: What Auditors Look For

HACCP training records need to show that the HACCP team is trained in the principles and that staff operating critical control points are trained for their specific tasks. Auditors look for a link between the person, the CCP, and a current, documented completion.

Updated July 23, 20267 min read

HACCP is only as strong as the people running it. A well-written plan that identifies every hazard and every critical control point still fails if the person monitoring a CCPdoesn't know what to check, when to check it, or what to do when a limit is breached. That's why auditors spend so much time on HACCP training records— they're the evidence that the plan on paper is actually being executed by trained, competent people on the floor. A plan is a claim about how your process is controlled; the training records are what turn that claim into something an auditor can verify. This guide covers what those records need to show, for the HACCP team and for the line staff who do the monitoring day to day.

Key takeaways
  • HACCP training splits into two groups: the HACCP team (trained in the seven principles) and CCP operators (trained for their specific monitoring tasks).
  • Auditors want each record to link a named person to a current, dated completion — not a generic sign-in sheet with no owner.
  • The most common gap is line-staff training: the plan is solid, but there's no proof the person at the CCP was trained for it.
  • Track HACCP training as recurring so refreshers fire automatically when the plan, process, or a role changes.

The two kinds of HACCP training

HACCP is built on seven principles — from hazard analysis through determining critical control points, setting critical limits, monitoring, corrective actions, verification, and record-keeping — and the framework is described in the Codex Alimentarius guidelines that most certification schemes reference. Understanding those principles is one training need. Executing them at a specific control point is a different one. Auditors treat them separately, and so should your records.

1. HACCP team training (principles)

The people who build and maintain the plan — the HACCP team or coordinator — need training in the HACCP principles themselves. They're the ones deciding what counts as a hazard, where the CCPs are, and what the critical limits should be. Auditors expect to see that the team has formal HACCP training, often from a recognized course, and that it's kept current as the team changes or the standard is revised.

2. CCP operator and line-staff training (tasks)

The person taking a cook temperature, checking a metal-detector reject, or verifying a wash concentration doesn't need to have written the plan — but they do need task-specific training for the control point they operate or monitor. That means they can perform the monitoring correctly, recognize when a critical limit is exceeded, and carry out the documented corrective action. This is usually tied to a standard operating procedure, and it's the training that proves your plan is actually being followed.

Specifics vary — check your applicable standard
The exact training expectations, refresher frequency, and documentation format differ by jurisdiction, product, and certification scheme (for example SQF, BRCGS, or a national food authority's requirements). Treat the themes here as general guidance and always confirm the current, applicable regulation or standard for your operation.

What auditors actually look for in the records

Whatever scheme you certify to, auditors converge on a similar set of questions when they open your HACCP training file. They're not looking for volume — they're looking for a clean chain from the plan to the person to a current completion.

  • Is the HACCP team trained in the principles?A named person, a course, and a date — not just an assertion that “the team is HACCP-certified.”
  • Is every CCP operator trained for their CCP?Auditors often pick a control point, ask who monitors it, and then ask to see that person's training record for that specific task.
  • Are the records current?A completion from four years ago on a plan that's been revised twice since raises a flag. Refreshers should track the plan.
  • Can you link the person to the completion? A generic sign-in sheet with no clear owner is weaker than a record that ties a named employee to a dated, specific course.

HACCP team vs. line-staff training records

CapabilityHACCP teamCCP / line staff
Trained in the seven HACCP principles
Task-specific training for a control pointsometimes
Tied to a specific SOP or work instruction
Auditor asks: can they maintain the plan?
Auditor asks: can they monitor & correct at the CCP?
Refresher when the plan or standard changes
Needs a named, dated, current completion

The gaps that cost audits

In practice, the plan itself is rarely the problem — teams put real effort into the hazard analysis and the CCP determination. The findings tend to cluster in the same few places:

Line staff can't be linked to CCP training

The plan names a CCP and the monitoring procedure, but when the auditor asks “show me the training for the operator on shift,” there's no record that ties that named person to that task. This is the single most common HACCP training gap. It usually isn't that the training never happened — it's that the proof lives in someone's memory or a shared session sheet rather than in a record you can pull up against that employee's name in seconds.

Records exist but aren't current

Someone was trained — three years ago, on a version of the plan that no longer matches the process. Without a refresher schedule, lapses sit invisible until an auditor cross-references the plan revision date against the training date.

New hires and role changes slip through

A person moves onto a CCP, or a new hire starts monitoring one, before their task training is recorded. If training isn't triggered by the role change, the record is always chasing reality.

Evidence is implied, not attached

“We do toolbox talks every week” is a claim, not evidence. Auditors want the signed attendance record attached to the session, tied to the people who were there. Building audit-ready training records means the evidence lives with the record, not in a binder someone has to reconstruct.

A checklist for audit-ready HACCP training

Use this as a pre-audit pass over your HACCP training records. Each step is about closing the gap between the plan and the proof.

  1. 1
    Confirm the HACCP team's principles training
    Every current team member has a named, dated record of formal HACCP training, kept current with the plan and standard.
  2. 2
    Map every CCP to the people who operate it
    For each critical control point, list who monitors it on every shift — then confirm each of those named people has task-specific training.
  3. 3
    Tie CCP training to the SOP
    Link each operator's training to the specific monitoring procedure and corrective action they're responsible for, not a generic course title.
  4. 4
    Set refreshers as recurring
    Configure HACCP training to repeat on an interval and to re-trigger when the plan, process, or a person's role changes, so nothing goes stale.
  5. 5
    Attach the evidence to the record
    Store signed sign-in sheets and completion proof with the training record itself, so any record can be produced on demand.

Where the standards line up

HACCP training expectations don't live in isolation — the major food-safety schemes build on the same idea that people at critical points must be competent for their tasks, with records to prove it. If you certify to a scheme, read its specifics alongside this: the SQF training requirements and the BRCGS training requirements both expect documented, task-relevant training tied to named people. The common thread across all of them — SQF, BRCGS, and HACCP alike — is the same one auditors keep testing: a defensible link from the plan to the person to a current, documented completion.

Bringing it together

Strong HACCP training records answer three questions without hesitation: is the team trained in the principles, is every CCP operator trained for their task, and can you prove both are current? Tools like TrainGrid help by keeping that link explicit — each person mapped to the courses and control points they're responsible for, with recurring refreshers and the signed evidence attached — so the file you hand an auditor already tells the story. For the broader picture of what a defensible file looks like, see audit-ready training records, and cross-check the scheme-specific detail in the SQF and BRCGS guides.

Frequently asked questions

Who needs HACCP training?

Two groups: the HACCP team, who need training in HACCP principles to build and maintain the plan, and the staff who operate or monitor critical control points, who need task-specific training. Records should exist for both.

What HACCP training records do auditors want to see?

Auditors look for evidence that HACCP team members are trained in the principles, that CCP operators are trained for their specific monitoring tasks, and that each record links a named person to a current, dated completion.

How often is HACCP refresher training needed?

Frequency depends on your certification scheme and risk, but HACCP training is typically refreshed periodically and whenever the plan, process, or a person's role changes. Track it as recurring training so refreshers aren't missed.

See it on your own training data

Import your roster in minutes and watch the compliance matrix light up. We'll walk your first file through with you.

Book a demo
Keep reading