They have to be in place before certification, not before you start. The standard requires prerequisite programmes covering areas such as premises layout, utilities, waste handling, cleaning and sanitation, pest control and personal hygiene. Most implementations run the prerequisite work and the hazard analysis in parallel, because the hazard analysis is what reveals which prerequisite programmes need tightening and which are already adequate.