The HACCP concept: specification of criteria using quantitative risk assessment