Proving your controls actually work
Plain-language summary
Before relying on a control measure, validate it - show with evidence it's capable of achieving the level of hazard control you need.
What the clause is really asking
Choosing a control is not enough; you must demonstrate it can do the job. Validation is the up-front evidence - scientific data, challenge studies, published thermal-death models, supplier data - that a control measure or combination is genuinely capable of controlling the hazard to the required level. It answers 'how do you know this cook step actually kills the pathogen?'
What auditors look for
Auditors ask for the validation behind each CCP and OPRP critical limit: where did this cook time-temperature, this pH, this metal-detector sensitivity come from. They want scientific or technical justification, not a number someone copied. Validation must be revisited when things change.
Typical evidence
Validation studies and references; scientific/technical justification for critical limits; challenge test results; supplier or literature data supporting controls
How to comply — recommendations
For every critical limit, hold the evidence that it works - published data, a challenge study, recognised process authority guidance, or your own trials. Re-validate when you change recipe, equipment, packaging or process. Do not confuse validation (does it work in principle) with verification (is it working in practice).
Common nonconformities
Critical limits with no validation basis; controls not re-validated after a change; validation and verification confused
Related clauses
ISO 22000 8.5.2, 8.5.4, 8.8; Codex HACCP
Qlause provides interpretive guidance only and is not a substitute for the standard. Refer to your licensed copy of the relevant standard for the authoritative text.