ISO 22000 by industry
ISO 22000 for food manufacturing: what retailers, auditors and the production line expect of a certified plant
Clause by clause: ISO 22000:2018 requirements: every clause explained →
What changes when the organisation is a food or beverage plant or bottler: why retailers and brand owners ask, what belongs in the plant's scope, where auditors sample PRPs, allergens, validation and recall, and how the system meets retailer codes and the GFSI route through FSSC 22000.
Key points
- Retailers, brand owners and co-packing customers ask for ISO 22000 as proof that the hazard control plan is run and verified; where they specify GFSI recognition, the route is FSSC 22000, built on ISO 22000.
- The scope names each site, line and product category, including co-packed items shipped under your name, and must match the food chain category audited.
- Auditors concentrate on PRPs on the floor, allergen changeovers, the validation behind every CCP and OPRP, and whether a mock recall reconciles.
- A plant that already runs a Codex HACCP plan is not starting from zero: the study becomes the core of the hazard analysis, and the management system is built around it.
Why food and beverage manufacturers are asked for ISO 22000
The request usually comes through a customer's supplier approval process. A retailer's technical team, a brand owner commissioning private-label product or a food-service distributor sends a questionnaire, and the certificate sits beside the specification, the allergen declaration and a site audit request.
Many retailers and brand owners go further and write "GFSI-recognised certification" into their supplier programmes. ISO 22000 on its own does not carry that recognition; FSSC 22000 does, and it uses ISO 22000 as its management system. The choice between the routes is covered in HACCP vs ISO 22000 vs FSSC 22000: which one, and when.
Scope for a food or beverage plant
A workable scope names the site, the process lines and the product categories in the words a buyer uses: carbonated soft drinks and bottled water filled in PET and glass, or chilled ready meals, sauces and dressings. Everything that can affect the safety of those products sits inside: raw material intake, water treatment, steam and compressed air that touch product, the laboratory, and finished goods storage and dispatch.
Outsourcing does not take a hazard out of the system. If a co-packer fills part of your range, a contract laboratory releases your micro results or a third-party warehouse holds your chilled stock, the plant still defines and verifies its controls over that work.
Three scope mistakes recur: leaving a second line or satellite warehouse out while its product ships under the certificate; omitting co-packed items that carry your brand; and describing the range so loosely that the food chain category, and with it the auditor's competence and audit time, no longer matches what the plant makes. The general rules are in ISO 22000 scope: sites, products and processes, and the mistakes that cost you.
Where the requirements bite on a production line
| Requirement area | What it means in a food or beverage plant | Evidence the auditor samples |
|---|---|---|
| Prerequisite programmes | Zoning, cleaning and sanitation, pest control, water quality, glass control and personal hygiene, selected against ISO 22002-1:2025 | Zoning plan walked on the floor, sanitation schedules with verification swabs, pest trend reports, water results, glass register checks |
| Hazard analysis, including allergens | Biological, chemical, physical and allergen hazards assessed at each step of a flow diagram that matches the line today, including allergen changeovers | Verified flow diagrams, reasoned hazard analysis, allergen matrix by line, changeover cleaning verification, start-up label checks |
| Validation of control measures | Evidence, before the plan relies on them, that pasteurisation, retort, chilling or metal detection achieve the intended control | Validation studies, references behind each critical limit, detector sensitivity data, thermal process records |
| Hazard control plan: OPRPs and CCPs | Operators monitor CCPs against critical limits and OPRPs against action criteria, and act on deviations at the time | Monitoring sheets completed on the line, deviation and hold records, calibration of probes and detectors, supervisor verification |
| Traceability, withdrawal and recall | Linking every finished batch to its raw materials and packaging, and pulling product back quickly | A timed mock recall with mass balance, lot coding from intake to dispatch, withdrawal procedure |
The method behind the plan is in Hazard analysis, OPRPs and CCPs: the hazard control plan.
Retailer codes, national food law and other food safety schemes
Retailers and brand owners add their own layer through supplier manuals: specification sign-off, artwork approval, complaint response times, change notification and their own site audits. A system that treats these as customer requirements makes them normal work rather than a file assembled before each visit.
National food law sits beside the certificate. Registration, labelling rules and official inspections still apply; the system keeps their evidence without replacing them. The same records can serve a named scheme: FSSC 22000 adds requirements such as food defence, food fraud mitigation and environmental monitoring, while BRCGS Food Safety audits against its own prescriptive standard. Many plants run quality and food safety as one system; see Integrating ISO 22000 with ISO 9001 and ISO 14001: one system, one audit.
What a food manufacturing engagement looks like
Duration depends on whether the PRPs need works, the number of products and flows, outstanding validation work, and how long the plant must run under the plan to build its records. The food safety team leader, shift supervisors, QA and the laboratory, engineering, purchasing, warehouse and sanitation all take part. With Design™, Sterling guides your food safety team to build and own the system; with Drive™, Sterling carries more of the documentation, internal audit and readiness work so the lines keep running.
The group quality manager writes that the consultants standardised food safety practice across several sites while allowing for operational differences, and that the training material was clear and useful for managers and frontline staff alike.
How Sterling works with food and beverage manufacturers
A food safety system your line operators can defend.
Our expert and experienced consultants build the system around your flow diagrams, allergen changeovers and validated limits, then test it with a mock recall and internal audit before the certification body arrives. Records live in Effivity, included with the engagement, at no additional cost. Sterling does not certify; an independent, accredited certification body audits and decides. We ensure successful certification for our clients.
Book a free discovery callISO 22000 for food manufacturing: questions buyers ask
Our retail customer wants a GFSI-recognised certificate: is ISO 22000 certification for food manufacturing a waste of time?
No, because FSSC 22000 is built on ISO 22000. A plant that implements ISO 22000 with PRPs written to ISO 22002-1:2025 adds the FSSC 22000 additional requirements on top, rather than starting again.
Does our existing HACCP plan count towards ISO 22000?
Yes, it becomes the starting point for the hazard analysis. It still needs flow diagrams verified on the line, OPRPs identified alongside CCPs, and critical limits validated rather than copied.
How do we validate a CCP such as pasteurisation or metal detection?
By showing, before you rely on it, that the control measure achieves the intended level of control. That evidence can be a validation study, a regulatory value or a scientific reference, supported by trials on your own equipment and product.
How should a food plant handle allergens under ISO 22000?
As a hazard in the hazard analysis, controlled through PRPs and, where needed, the hazard control plan. Auditors expect an allergen matrix by line, validated cleaning at changeover, production sequencing and label verification at start-up.
ISO 22000 by industry
Every guide in the ISO 22000 series is written for one question and links back to the hub for the whole picture.
- ISO 22000 for catering, hotels and food service
- ISO 22000 documentation
- Effivity for ISO 22000
- ISO 22000 for feed and animal food production
- ISO 22000 for food and beverage manufacturing
- ISO 22000 for food packaging manufacturing
- ISO 22000 gap analysis
- HACCP vs ISO 22000 vs FSSC 22000
- ISO 22000 for ingredients, additives and supplements
- ISO 22000 for retail and wholesale
- ISO 22000 for transport, storage and distribution
Keep exploring
Explore more about ISO 22000
Watch a video on how to implement ISO 22000 here.
Watch a video on ISO 22000 requirements here.
ISO 22000 resources
Services for ISO 22000
Talk to a consultant
Plan an ISO 22000 system that runs on your production lines.
Tell us your goals, locations and target date. We’ll help you define the scope, timeline and next steps.
hello@sterling-grc.com+1 201 263 4443 (global headquarters) · your nearest office and its number are at the top of this page
What would you like to achieve?
Choose a starting point. The enquiry form takes about a minute.
Book my free discovery callContinue to the enquiry form to share your details. Please do not include passwords, sensitive personal information or confidential files. A Sterling consultant replies within one working day. Privacy notice