ISO 22000 for hotels, catering and food service: what auditors check in the kitchen

Why hotels and caterers are asked for ISO 22000

A restaurant rarely needs a certificate to open; the municipal food-safety inspection decides that. ISO 22000 enters food service when someone else carries the risk of your kitchen. An airline buying from a flight kitchen, a hospital or school outsourcing its catering, and a corporate or government canteen tender all ask how the caterer controls hazards; an accredited certificate is the answer procurement understands.

Hotel groups arrive from a different direction. The owning company or brand wants one food safety standard across properties, and proof that every kitchen runs it. Cloud kitchens and restaurant groups follow when franchise partners or institutional clients ask the same questions. A single kitchen with a short menu should start with ISO 22000 for small food businesses: a right-sized system.

What sits inside the scope for a hotel or catering business

The scope names the kitchens and outlets, not just the company. For a hotel that means the production kitchen, pastry and butchery, banqueting, room service, the outlets that plate food and the stores. For a flight or institutional caterer it adds the cold rooms, portioning and tray-setting, loading and the vehicles that carry meals to the aircraft, ward or site. A cloud kitchen group lists each site and where its responsibility ends at collection.

Three scope mistakes recur in this sector. Certifying the central kitchen while the satellite outlets that reheat and serve its food stay outside. Leaving outsourced activities undefined: pest control, cleaning contractors and third-party delivery need controls even when they are not yours. And writing the scope for a fixed menu when menus change seasonally or daily. The general rules are in ISO 22000 scope: sites, products and processes, and the mistakes that cost you.

Where the ISO 22000 requirements bite in food service

The clauses themselves are explained in the ISO 22000 requirements guide, and the plan in Hazard analysis, OPRPs and CCPs: the hazard control plan.

Working alongside inspections, HACCP and client audits

Most kitchens already run a HACCP plan because food hygiene law and the local authority expect one. ISO 22000 does not replace it; the Codex HACCP principles sit inside clause 8.5, so the existing plan becomes the core of the hazard control plan once reviewed against real practice. The differences are set out in HACCP vs ISO 22000 vs FSSC 22000: which one, and when.

Municipal food-safety inspections continue after certification and check much of what an auditor does, so one set of records serves both. Airline, hospital and corporate clients often send their own auditors too; a certified system gives them evidence already organised. Halal assurance or ISO 9001 can run in the same system; see Integrating ISO 22000 with ISO 9001 and ISO 14001: one system, one audit.

What a food service engagement looks like

Duration depends on the number of outlets in scope, how settled the menus are, the condition of kitchens and cold rooms, and whether cook-chill and hot-holding limits were ever validated. The executive chef, the hygiene or food safety manager, purchasing and stores, engineering and front-of-house management all need to be involved. With Design™, Sterling guides your food safety team to build and run the system; with Drive™, Sterling carries more of the documentation, verification and internal audit so the kitchens keep serving.

ISO 22000 for hotels and catering: questions buyers ask