hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
Contact Sterling Academy login
SterlingInternational Consulting Talk to a consultantTalk to us
← All videos

Implementation walkthrough

How to implement FSSC 22000: video walkthrough

A walkthrough of an FSSC 22000 implementation: the ISO 22000 system, the ISO 22002 prerequisite programmes and the FSSC additional requirements built as one working system.

  • Implementation walkthrough
  • 3 min 24 s

Key takeaways

  • FSSC 22000 combines ISO 22000, an ISO 22002 PRP standard and the FSSC additional requirements.
  • It carries GFSI recognition, which ISO 22000 alone does not.
  • Your food chain category decides which prerequisite standard applies.
  • Internal audits must cover the additional requirements as well as ISO 22000.
  • Expect at least one unannounced surveillance audit in each three-year cycle.

A scheme with three parts

FSSC 22000 is a certification scheme, not a standard. Foundation FSSC owns it and licensed certification bodies audit against it. The scheme names three normative parts: ISO 22000:2018, the food safety management system standard; the prerequisite programme standard of the ISO 22002 series that matches your food chain category, used with the common baseline ISO 22002-100; and the FSSC 22000 additional requirements, topics such as food defence, food fraud mitigation, allergens, environmental monitoring, food safety culture and food loss and waste.

The scheme exists because ISO 22000 on its own is not recognised by the Global Food Safety Initiative, and many retailers and brand owners write GFSI-recognised certification into their supplier programmes. This short film walks through how the three parts are implemented together.

Implementing FSSC 22000 as one system

Define the scope, the category and the prerequisite standard: products, processes, sites and headcount, the food chain category and sub-category, the ISO 22002 part that applies and the certification body your customer accepts. A gap analysis then reviews your existing HACCP or ISO 22000 system, the prerequisite programmes against the 2025 standards and each applicable additional requirement.

Implementation builds the prerequisite programmes and the hazard control plan, then the additional requirements that apply to your category, so that the three parts operate as one system rather than three binders. An internal audit that also covers the additional requirements and a management review follow. The scheme is delivered only by certification bodies licensed by Foundation FSSC and accredited for the scheme, which audit and decide; at least one surveillance audit in each three-year cycle is unannounced, and certificates are listed on the FSSC public register.

Sterling's expert and experienced consultants carry this with your food safety team under Sterling OS™. Version 7 of the scheme was published on 1 May 2026, and upgrade audits follow the timetable the Foundation has set.

FSSC 22000 at a glance

Purpose
GFSI-recognised certification of a food safety management system: ISO 22000, the ISO 22002 prerequisite programmes for your sector and the FSSC additional requirements, as one scheme
Relevant to
Food and feed manufacturers, packaging and (bio)chemical producers, caterers, retailers, brokers and traders, transport and storage providers
Edition
Version 7, published by Foundation FSSC on 1 May 2026. Version 6 audits are allowed until 30 April 2027; upgrade audits to Version 7 run from 1 May 2027 to 30 April 2028
Certification
Audited and decided by a certification body licensed by Foundation FSSC and accredited for the scheme; at least one surveillance audit per three-year cycle is unannounced; certificates are listed on the FSSC public register
Sterling's role
Gap analysis against all three components, PRPs and hazard control plan, the additional requirements built into daily routines, Effivity, training, internal audit and audit readiness, then Sustain™
Cost and timing
Total investment for an FSSC 22000 system depends on the current maturity of your processes, the scope, locations and number of employees. The process typically takes 6 to 12 months

FSSC 22000: the complete guide →

FSSC 22000: questions people ask

What is the difference between ISO 22000 and FSSC 22000?

ISO 22000 is a management system standard; FSSC 22000 is a certification scheme that uses it. An FSSC 22000 certificate means the organisation was audited against ISO 22000:2018, the ISO 22002 PRP standard for its category and the FSSC additional requirements, by a certification body licensed by Foundation FSSC, under the scheme's audit rules. ISO 22000 alone is not recognised by GFSI; FSSC 22000 is.

Is FSSC 22000 Version 7 recognised by GFSI?

FSSC 22000 has been benchmarked and recognised by GFSI since 2010, and Version 7 was written to align with the GFSI Benchmarking Requirements v2024. At the time of writing, GFSI's published list names FSSC 22000 Version 6 against its v2020 requirements; recognition of Version 7 is a matter for GFSI's benchmarking process, so check GFSI's list, or ask us, when a customer requirement turns on it.

Which food chain categories does the scheme cover?

Pre-process handling of plant products (BIII); animal primary conversion and the processing of perishable, mixed and ambient-stable products (C0 to CIV); feed and animal food (D); catering (E); retail, wholesale and e-commerce (FI); brokering and trading (FII); transport and storage (G); packaging material production (I); (bio)chemical production (K). GFSI's current recognition covers BIII, the C sub-categories, D, G, I and K; caterers, retailers and traders are certified under the scheme but sit outside that list at present.

What are the FSSC 22000 additional requirements?

Part 2 of the Version 7 scheme lists eighteen: management of services and purchased materials; product labelling and printed materials; food defence; food fraud mitigation; logo use; management of allergens; environmental monitoring; food safety and quality culture; quality control; transport, storage and warehousing; hazard control and measures for preventing cross-contamination; PRP verification; product design and development; traceability; equipment management; food loss and waste; communication requirements; and requirements for organisations with multi-site certification. Several apply only to particular categories.

What is the unannounced audit, and can we refuse a date?

After initial certification, at least one surveillance audit in each three-year period is unannounced. The site is not told the date, the plan is shared at the opening meeting and the auditor begins with an inspection of production within an hour of arriving. Blackout days are agreed with the certification body in advance; refusing the audit leads to suspension within three working days. The initial certification audit is always announced.

More FSSC 22000 questions and answers →

Keep exploring

Related to this video

Read next

Services

Next steps

The complete guide

Everything on FSSC 22000

Start with the FSSC 22000 page, or go straight to the guide you need.

On the FSSC 22000 page

Guides

Often combined with FSSC 22000

More videos: Food safety and agriculture

All videos

Talk to a consultant

Plan your FSSC 22000 certification with confidence.

Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.

hello@sterling-grc.com

+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

What would you like to achieve?

Choose a starting point. The enquiry form takes about a minute.

Your goal
Book my free discovery call

Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice