GIFSQ Tools · Module 13 — HACCP, Food Safety & Regulatory Compliance · Tool 242 of 500
Score a hazard on severity and likelihood (1–5 each), then apply the control effectiveness to get the residual risk — the Principle 1 hazard analysis step of HACCP.
Try sample values — fills the form with the worked example below.
–
Risk score (1–25)
–
Residual risk score
–
Risk level
Equation: Risk score = severity × likelihood (1–25). Residual risk = risk score × (1 − control effectiveness ÷ 100).
Method: Hazard analysis per Codex CAC/RCP 1-1969 (Rev. 2020), HACCP Principle 1: list hazards, then assess severity and likelihood to decide which are significant. The 5 × 5 matrix and the residual-risk reduction follow the risk assessment approach in ISO 22000:2018 clause 8.5.2.
Assumptions: severity and likelihood are the team’s judged scores for this product and process, not measured values; control effectiveness is the team’s estimate of how much the control reduces the risk.
Limitations: scores are judgement-based, so two teams can score the same hazard differently; the matrix ranks hazards, it does not measure them. Re-score whenever the process, supplier or product changes.
Rounding: risk scores to 2 decimal places; level from the score bands 1–4 Low, 5–9 Medium, 10–16 High, 17–25 Critical; intermediates unrounded.
This is a calculation aid, not a laboratory report — confirm against your accredited method before citing a value.
Method: Hazard analysis per Codex CAC/RCP 1-1969 (Rev. 2020), HACCP Principle 1: list hazards, then assess severity and likelihood to decide which are significant. The 5 × 5 matrix and the residual-risk reduction follow the risk assessment approach in ISO 22000:2018 clause 8.5.2.
Assumptions: severity and likelihood are the team’s judged scores for this product and process, not measured values; control effectiveness is the team’s estimate of how much the control reduces the risk.
Limitations: scores are judgement-based, so two teams can score the same hazard differently; the matrix ranks hazards, it does not measure them. Re-score whenever the process, supplier or product changes.
Rounding: risk scores to 2 decimal places; level from the score bands 1–4 Low, 5–9 Medium, 10–16 High, 17–25 Critical; intermediates unrounded.
This is a calculation aid, not a laboratory report — confirm against your accredited method before citing a value.
Worked example: Severity 4, likelihood 3, control 50% effective: risk = 4 × 3 = 12 (High); residual = 12 × (1 − 0.50) = 6.00.
Enter values above to see results.
Scores of 10 and above are normally treated as significant hazards and carried forward to the CCP decision tree (Tool 243). Tool 242 of 500 — GIFSQ
