hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us
← FSSC 22000 hub

FSSC 22000 guide

FSSC 22000 training: who needs what, and the evidence that proves competence

Awareness for every shift, role-based competence for the food safety team, assessors, monitors and support functions, internal auditor qualifications for multi-site groups, and the records that prove training works on the day of an unannounced audit.

  • Updated September 2026
  • 8-minute read
  • Part of the FSSC 22000 hub

Key points

  • FSSC 22000 training starts from ISO 22000:2018, whose Support clause requires you to define the competence each role needs, make sure people have it and keep evidence. The scheme then adds roles that the ISO text alone does not reach.
  • The Version 7 additional requirements expect food defence and food fraud work to be done by people with the right knowledge and competence, and make training one of the named elements of the food safety and quality culture plan.
  • Multi-site groups face explicit qualifications for internal auditors and lead auditors under the scheme's multi-site requirement.
  • Because at least one surveillance audit per cycle is unannounced, competence has to hold on every shift, not just on the day the audit was booked.

What FSSC 22000 asks of people: competence, awareness and records

FSSC 22000 prescribes no course list or minimum hours; it stacks three layers of expectation. The first comes from ISO 22000:2018: the Support clause covers the people you rely on, the competence each role needs, awareness and the documented information that proves both, while the Leadership clause requires a food safety team with a leader who holds real authority.

The second layer is the prerequisite programmes. ISO 22002-100:2025 and the sector part for your food chain category cover topics such as personnel hygiene, cleaning, pest control and rework, and each of them depends on people who know the rule and follow it without being watched.

The third layer is the FSSC 22000 additional requirements in Version 7. Several of them bring competence to the surface:

  • Food defence and food fraud mitigation assessments and plans are to be developed and maintained by personnel with the appropriate knowledge and competence.
  • Food safety and quality culture needs a documented plan with targets and timelines, and training is one of its named elements beside communication, employee feedback and engagement, and performance measurement.
  • Multi-site certification sets experience and course requirements for the group's internal auditors and lead auditors, covered below.

The full list of eighteen topics has its own guide. FSSC 22000 additional requirements explained, one by one

Who needs what training on an FSSC 22000 site

Senior management

Leaders own the culture plan, the resources and the management review. A short briefing on what the scheme adds to ISO 22000 and what an unannounced audit means usually suffices. Their evidence is the review record and the answers they give when an auditor asks about objectives and culture targets.

The food safety team leader and team

This group carries the hazard analysis, the validation of control measures and the hazard control plan with its OPRPs and CCPs. Between them they need HACCP method, product and process knowledge, the applicable ISO 22002 parts and the additional requirements.

Assessors for defence, fraud and allergens

The people who run threat, vulnerability and allergen cross-contact assessments need method training and knowledge of the site, its suppliers and its raw materials. An assessment signed by someone who has never walked the loading bay is exactly what auditors probe. Food defence and food fraud assessments

Monitors, verifiers and support functions

CCP and OPRP monitors need the limit, the check, the record and the action when a result falls outside it. PRP verification inspectors, sanitation crews, maintenance technicians working under hygienic design and change control, warehouse staff rotating stock on FEFO and FIFO principles, and quality control staff running change-over and quantity checks each need the skills of their own task.

Everyone else in scope

Operators, temporary and agency workers, contractors, drivers where they are within scope, and the night and weekend shifts all need hygiene rules, allergen awareness, how to report a food safety concern and what their own role contributes. Someone on every shift also needs to know that a serious event must reach the certification body within three working days.

An FSSC 22000 training matrix by role

A matrix ties each role to what it must know and to the evidence that shows it.

RoleLearning focusEvidence that stands up at audit
Senior managementScheme structure, culture plan, unannounced audit, management review decisionsBriefing record, review minutes with owners and dates, culture targets tracked
Food safety team leader and teamHACCP method, hazard control plan, validation, ISO 22002 parts, additional requirements, Version 7 changesQualification and course records, hazard analysis and validation files they produced
Defence, fraud and allergen assessorsThreat and vulnerability methods, allergen cross-contact risk, label decisionsAssessment records with names, dates and review triggers, method training record
CCP and OPRP monitorsLimits and action criteria, measuring, recording at the time, escalationSign-off after observed monitoring, completed monitoring records, correction records
PRP inspectors, sanitation, maintenance, warehouse, quality controlThe PRP rules for their area, cleaning verification, hygienic design, stock rotation, change-over checksTask authorisation, inspection records with actions, environmental monitoring follow-up
All staff, temporary workers and contractors in scopeHygiene, allergens, reporting concerns, food safety culture, their contributionInduction record with a check of understanding, answers in shift interviews

Revisit the matrix when products, lines or categories change, when an internal audit or a complaint points to a skills gap, and when the scheme moves to a new version.

Internal auditor training and the multi-site qualifications

An FSSC 22000 internal audit has to cover all three parts of the scheme: the ISO 22000 system, the prerequisite programmes and every applicable additional requirement. Auditors therefore need audit technique and enough food safety knowledge to test a hazard analysis, read environmental monitoring trends and question an allergen label decision.

Groups certified under the multi-site requirement face explicit conditions. Internal auditors need two years' full-time work experience in the food industry, including at least one year in the organisation, and lead auditors need a 40-hour lead auditor course for a food safety management system, a quality management system or FSSC 22000. The group also needs technical reviewers who are impartial. A single site sets its own criteria.

Do not confuse your internal auditors with the certification body's auditors. Version 7 aligns certification body auditor qualifications with the GFSI Benchmarking Requirements of 2024, and that is the licensed body's responsibility, not yours.

What proves competence on the day of the audit

Auditors sample people they meet on the floor, ask for the criteria for that role, compare the person's record with them and then watch the task or ask the person to explain it. Competence is proven when those four agree.

  • Role criteria covering education, training, experience and skills for every position that affects food safety.
  • Records traceable to the person: course and qualification records, induction, authorisations for CCP monitoring or critical tasks.
  • An effectiveness check: a test, an observed task or a supervisor's sign-off, recorded against the training it evaluates.
  • Work that shows it: records made at the time and clear answers in interviews.

The unannounced audit changes the test. The inspection of the production facilities starts within an hour of the auditor's arrival, so the people on shift, including new starters and agency staff, are the ones who answer. The unannounced audit: how to be ready on any day

Sterling Academy and internal auditor training

Sterling Academy provides e-learning with learning checks and a final exam, so the record shows what a learner understood rather than simply that they attended.

Internal auditor training, as applicable to your standard, is delivered within the consulting engagement rather than as e-learning: a Sterling consultant trains your audit team on your own site, products and records, across the three parts of the scheme.

Sterling consulting clients benefit from preferential Sterling Academy course access and special pricing through their Sterling consultant, including complimentary awareness training for their people as part of the engagement.

Contact us about Academy access

How Sterling builds FSSC 22000 competence

A matrix, trained people and tested evidence before Stage 1.

In a Sterling FSSC 22000 engagement, the gap analysis compares your job descriptions, induction, HACCP team records and training files with all three parts of the scheme. We agree role criteria with you, hold the matrix and records in Effivity, included with the engagement, at no additional cost, and test the evidence on more than one shift during the internal audit, before the certification body's Stage 1 readiness review. We ensure successful certification for our clients. Sterling does not certify: the audit and the decision belong to the licensed, accredited certification body you appoint.

Book a free discovery call

FSSC 22000 training: questions buyers ask

Does FSSC 22000 require certified training courses for the food safety team?

No, the scheme does not name a mandatory course for the food safety team. It expects competence that is defined, achieved through education, training or experience and recorded, so a recognised HACCP course is a common choice.

Do FSSC 22000 internal auditors need a lead auditor course?

Only lead auditors in a multi-site group need one under the scheme: a 40-hour lead auditor course for a food safety management system, a quality management system or FSSC 22000. Single sites define their own auditor criteria, which should still cover audit technique and food safety knowledge.

Is FSSC 22000 training different from ISO 22000 training?

Yes, it goes further. ISO 22000 training covers the management system and hazard control, while FSSC 22000 adds the prerequisite programme standards and the additional requirements, such as food defence, food fraud, allergens, environmental monitoring and culture.

How often should food handlers receive refresher training?

The scheme sets no fixed interval, so base refreshers on risk and change. New products, deviations, complaints and audit findings are better triggers than the calendar.

Will the certification body accept e-learning records as evidence of competence?

Yes, if the record includes a test, links to the role criteria and is supported by signs that the learning is applied at work. The licensed certification body, not Sterling, decides whether the evidence is enough.

Do we need to retrain staff for FSSC 22000 Version 7?

Most staff need a short update rather than full retraining. The food safety team, PRP inspectors and those who own the revised additional requirements need the most, because Version 7 moves the prerequisite programmes to the ISO 22002-x:2025 series and revises the additional requirements. FSSC 22000 Version 7: what changed

FSSC 22000 implementation

FSSC 22000 requirements

Get the document

We e-mail the document as a PDF link. Tell us who you are and where to send it.

A quick security check confirms the request comes from a person.

By requesting the document you agree to our privacy notice. Sterling uses these details to send it and to respond to your request. We never sell your data.

Talk to a consultant

Build FSSC 22000 competence that holds on every shift.

Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.

hello@sterling-grc.com

+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page

What would you like to achieve?

Choose a starting point. The enquiry form takes about a minute.

Your goal
Book my free discovery call

Continue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice