ISO 22000 combines HACCP-based hazard control with a full management system. It applies to any organization in the food chain, from farm and feed to processing, packaging, storage, transport and food service.
What Is ISO 22000?
ISO 22000:2018 is the international standard for food safety management systems (FSMS). It integrates the Codex HACCP principles with prerequisite programmes (PRPs) and a management system structure.
Key Requirements
| Clause | Topic | In practice |
|---|---|---|
| 4–5 | Context and leadership | FSMS scope, food safety policy, food safety team leader |
| 7 | Support | Resources, competence, communication, documented information |
| 8.2 | PRPs | Hygiene, cleaning, pest control, maintenance, referencing sector specifications |
| 8.3 | Traceability | One step back, one step forward |
| 8.4 | Emergency preparedness | Response to food safety emergencies |
| 8.5 | Hazard control | Hazard analysis, hazard control plan with CCPs and OPRPs |
| 8.7–8.9 | Monitoring and control | Verification, nonconforming product, withdrawal/recall |
| 9–10 | Evaluation and improvement | Internal audit, management review, update of the FSMS |
How ISO 22000 Relates to Other Food Safety Routes
| Route | What it is | When it fits |
|---|---|---|
| HACCP | A hazard-control method based on seven Codex principles | Small operations or a first step |
| ISO 22000 | HACCP plus PRPs plus a full management system | A recognized FSMS across the food chain |
| FSSC 22000 compliance certification | Audit against ISO 22000 + sector PRPs + FSSC additional requirements | Where buyers accept a compliance certificate |
| BRCGS compliance certification | Audit against published BRCGS requirements | Where buyers accept a compliance certificate |
This is a compliance certification issued by US Global Standards Registrars. It is not a certificate issued under the licence or approval of the scheme owner, is not GFSI-recognized, and is not accreditation. Please confirm your customer’s requirement before applying.
The Certification Process
- Application: share your scope, sites and headcount; we confirm the route and audit time.
- Proposal and agreement: written proposal and certification agreement.
- Stage 1 audit: documentation and readiness review.
- Stage 2 audit: on-site evaluation of implementation and effectiveness.
- Certification decision: made by a competent reviewer who was not on the audit.
- Surveillance and recertification: annual surveillance, recertification every three years.
Auditors observe production while it is running, so schedule Stage 2 on a normal production day.
What ISO 22000 Auditors Focus On
- Completeness of the hazard analysis (biological, chemical, physical, allergen).
- Justification of CCPs and OPRPs, critical limits and action criteria.
- Monitoring records and corrections.
- PRP implementation on the floor.
- Traceability tests and recall arrangements.
FAQs
What is the difference between ISO 22000 and HACCP?
HACCP is a hazard-control method. ISO 22000 includes HACCP and adds prerequisite programmes and a full management system.
Is ISO 22000 GFSI-recognized?
ISO 22000 on its own is not a GFSI-recognized scheme. FSSC 22000, which builds on it, is GFSI-recognized when certified by a licensed certification body.
Can packaging manufacturers get ISO 22000?
Yes. It applies to any organization in the food chain, including food-contact packaging.