hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us
← All videos

Two-minute brief

ISO 22000 requirements explained: video brief

A two-minute brief on what ISO 22000:2018 requires of a food safety management system, with the food-safety-specific requirements of clause 8 in plain language.

  • Two-minute brief
  • 2 min

Key takeaways

  • ISO 22000 combines management system clauses with food-safety requirements in clause 8.
  • The food safety team and its leader are appointed by top management.
  • Hazards are controlled through operational PRPs or critical control points.
  • Control measures are validated before use, then monitored and verified.
  • The standard covers every link in the food chain, not only factories.

The management system around food safety

ISO 22000:2018 follows the harmonised structure of the ISO management system standards, clauses 4 to 10, with the food-safety-specific requirements in clause 8. This short film maps those requirements.

Context asks you to understand the issues, interested parties and food chain position that shape food safety and to define the scope: in practice a scope naming the products, processes and sites to be certified. Leadership means committing to food safety, setting the policy, assigning roles and appointing the food safety team and its leader, with clear responsibility for hold, release and recall decisions. Planning sets measurable objectives, such as targets for critical control point deviations and complaints, and plans changes to lines, products or suppliers before they happen. Support brings people, infrastructure, work environment, competence, communication with suppliers, customers and authorities, and controlled documented information.

Clause 8: the food safety operation

Clause 8 is the operational core. Prerequisite programmes provide the basic hygienic conditions. Traceability and emergency preparedness are set up. The hazard analysis identifies the hazards in each product and process and decides how each is controlled, through operational prerequisite programmes or critical control points, gathered into the hazard control plan. Control measures are validated, monitored and verified, and product that may be unsafe is handled up to withdrawal or recall.

Performance evaluation and improvement close the loop with internal audit, management review and corrective action. ISO 22000 was written for every link in the food chain, from feed and farming through manufacturing and packaging to storage, transport, catering and retail. Certification is assessed and decided by an independent, accredited certification body; FSSC 22000 builds on ISO 22000 and adds GFSI recognition.

The certificate is only worth having when the two levels work together: a management system that keeps the food safety operation current, and an operation whose records show the controls working on every line and shift.

ISO 22000 at a glance

Purpose
Food safety management: hazards identified and controlled from raw material to finished product, with PRPs, a validated hazard control plan, traceability and recall readiness
Relevant to
Any organisation in the food chain: manufacturers, ingredient and packaging producers, caterers, storage and transport, retail, feed
Edition
ISO 22000:2018 with Amendment 1:2024; a third edition is in preparation (ISO/DIS 22000); no publication date or transition timetable announced
Certification
Assessed and decided by an independent, accredited certification body; FSSC 22000 adds GFSI recognition
Sterling's role
PRPs, hazard analysis and hazard control plan built with your food safety team, Effivity, training, internal audit and certification readiness, then Sustain™
Cost and timing
Total investment for an ISO 22000 FSMS depends on the current maturity of your processes, the scope, locations and number of employees. The process typically takes 4 to 9 months

ISO 22000: the complete guide →

ISO 22000: questions people ask

What is the difference between HACCP and ISO 22000?

HACCP is the Codex method for analysing hazards and controlling them at critical control points; it produces a plan. ISO 22000 is a certifiable management system standard that contains the HACCP principles and adds what a plan alone lacks: prerequisite programmes, traceability, emergency preparedness, validation, verification, internal audit, management review and improvement. In some markets certification bodies certify a HACCP system on its own, against the Codex code; ISO 22000 is the international management system certificate.

ISO 22000 or FSSC 22000: which do we need?

Ask the customer. ISO 22000 is the right target where a certified FSMS is what is expected. FSSC 22000 is ISO 22000 plus the sector PRP standard from the ISO 22002 series plus the FSSC additional requirements, and it is GFSI-recognised, which many large retailers and international brand owners specify. Everything built for ISO 22000 carries over.

Is ISO 22000 recognised by GFSI?

No. GFSI recognises certification programmes, not standards, and ISO 22000 on its own is not on its list; FSSC 22000, BRCGS, SQF and IFS are. If a supplier questionnaire asks for GFSI certification, FSSC 22000 is the route that reuses an ISO 22000 system in full.

Which businesses can be certified to ISO 22000?

Any organisation in the food chain: feed and animal food, farming, ingredients, food and beverage manufacturing, packaging and food-contact materials, storage, transport and distribution, catering and food service, retail and wholesale, and suppliers of equipment, cleaning agents and services.

Do we have to use ISO 22002-1 for our prerequisite programmes?

Under ISO 22000 alone, no: clause 8.2 requires PRPs appropriate to your operation and asks you to consider the ISO 22002 series and legal requirements when selecting them. Under FSSC 22000 the applicable ISO 22002 part is mandatory. Most manufacturers use ISO 22002-1 either way, because auditors and customers know it.

More ISO 22000 questions and answers →

The complete guide

Everything on ISO 22000

Start with the ISO 22000 page, or go straight to the guide you need.

Talk to a consultant

Plan your ISO 22000 certification with confidence.

Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.

hello@sterling-grc.com

+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

What would you like to achieve?

Choose a starting point. The enquiry form takes about a minute.

Your goal
Book my free discovery call

Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice