https://www.ifsqn.com/forum/index.php/topic/17826-to-what-extent-is-risk-analysis-required-by-haccp/