Prerequisite Programs (PRPs) in Food Safety: List, Examples and How They Differ From CCPs

By
Alex Uspenskyi
October 21, 2026
Prerequisite Programs (PRPs) in Food Safety: List - featured image

Prerequisite programs (PRPs) are the basic, facility-wide conditions and practices that keep a food plant hygienic enough to make safe food, such as sanitation, pest control, personal hygiene, maintenance and supplier approval. They control general risk, while critical control points (CCPs) control specific hazards at specific process steps.

This guide lists common PRPs with examples, compares PRPs, operational PRPs (OPRPs) and CCPs, and shows how to document them. For the CCP side, see our guide to the critical control point (CCP).

What Prerequisite Programs Are

The term "prerequisite program" comes from HACCP and from schemes such as ISO 22000 and the GFSI-benchmarked standards. In United States regulation, the equivalent baseline is the current good manufacturing practice (CGMP) requirements in Subpart B of 21 CFR Part 117, which cover areas such as personnel, plant and grounds, sanitary operations, facilities, equipment and processes and controls. Under the preventive controls framework, 21 CFR 117.135 lists the types of preventive controls: process, food allergen, sanitation and supply-chain controls, plus a recall plan and other controls such as hygiene training.

In short, PRPs are the foundation. If they are weak, the specific controls built on top of them will not hold.

List of Common Prerequisite Programs With Examples

Prerequisite programWhat it coversExample records
Good manufacturing practices (GMPs)Personnel hygiene, clothing, hand washing, building and groundsGMP inspection log, hygiene audit
Sanitation and cleaning (SSOPs)Cleaning and sanitizing of food-contact surfaces and the environmentCleaning checklist, ATP or visual verification
Pest controlPrevention, monitoring and response to pestsPest contractor reports, trap maps
Allergen controlSegregation, labeling, changeover and cross-contact preventionAllergen changeover record, label checks
Supplier approvalApproving and monitoring ingredient and packaging suppliersApproved supplier list, certificates
Preventive maintenance and calibrationEquipment condition and measurement accuracyMaintenance log, calibration certificates
Water, air and utilitiesSafe water and compressed-air or steam qualityWater test results
TrainingCompetence of staff for their rolesTraining matrix, sign-in records
Traceability and recallIdentifying and withdrawing productMock recall report
Waste and chemical controlSafe storage and removal of waste and chemicalsChemical inventory, waste log
Classifying controls after hazard analysis: general hygiene conditions are handled by prerequisite programs, specific step controls with action criteria are operational PRPs, and essential steps with critical limits are CCPs

PRP vs OPRP vs CCP

Hazard analysis decides which control category a measure belongs to. The categories differ in scope, in how failure is judged and in the response.

PRPOPRPCCP
ScopeFacility-wide, general conditionsA specific significant hazard at a specific stepA specific hazard at an essential step
How it is judgedCompliance with the programAction criteria (measurable or observable)Critical limits
MonitoringRoutine checks and inspectionsScheduled monitoring and verificationDefined monitoring with immediate action
If it failsRisk builds up over time; investigate and correctRaises the likelihood of the hazard; assess the productProduct may be unsafe; hold and evaluate
ExamplePest control, hand washing, GMPsAllergen changeover verification, metal detector checks (where not a CCP)Cooking to a lethal temperature, pasteurization

The same control can be classified differently in different plants depending on process design and what controls follow it. OPRPs are a concept from ISO 22000 and related schemes; the FDA rule instead speaks of process, allergen, sanitation and supply-chain controls, with management components such as monitoring, corrective action and verification applied as appropriate to the control. Under 21 CFR Part 117, a critical control point is a point, step or procedure at which control can be applied and is essential to prevent, eliminate or reduce a hazard to an acceptable level.

How to Document a Prerequisite Program

  1. Name an owner and the scope of the program.
  2. Write the procedure in plain steps, including frequency and who does it.
  3. Train the people who perform and check it.
  4. Define what is monitored and what record proves it was done.
  5. Define what happens when something is out of order, and record the corrective action.
  6. Review each program at least annually and after any incident or change.
Documenting a prerequisite program: write the procedure and owner, train the people, monitor with records and checks, then review and improve

Related programs are covered in our guides to good manufacturing practices, sanitation SOPs and pest control programs.

Where IONI Fits

IONI is the production and traceability layer that runs on top of the QuickBooks you already have. In its hazard analysis, each step is assigned a risk level on the scale PRP, SOP, MOD, OPRP and CCP, so the classification is recorded alongside the step. Operational checks, logs with reviewer confirmation, deviations and corrective actions, and training records give the supporting records for the programs above.

FAQ

What are prerequisite programs in food safety?

They are the basic facility-wide conditions and practices, such as sanitation, pest control, hygiene, maintenance and supplier approval, that support the safe production of food.

What is the difference between a PRP and a CCP?

A PRP manages general conditions across the facility. A CCP controls a specific hazard at an essential step and has critical limits, such as a minimum cooking temperature.

What is an OPRP?

An operational prerequisite program is a control for a specific significant hazard at a specific step, judged by action criteria rather than critical limits. The concept comes from ISO 22000 and related schemes.

Does FDA use the term PRP?

The FDA rule is framed around CGMPs and preventive controls, which cover what PRPs cover in other schemes. Auditors for GFSI schemes will still expect to see PRPs.

How many PRPs should a food plant have?

There is no fixed number. Cover the areas your hazard analysis and certification scheme require, and document each one.

Last updated: October 21, 2026

Keep the production record where the work happens. Explore IONI's production and traceability software for food manufacturers.

Our Latest Blog Posts

Interested in Learning More?

Book a free consultation with our expert

Val Verbovetskyi, AI Expert at IONI

Val Verbovetskyi

AI Expert

Book a Call
Arrow icon

Download this article guide line!

Thank you! Download will start soon.
Oops! Something went wrong while submitting the form.
close mark