hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us
Clause 5.2.2ISO 22000:2018 · Connect food safety policy with everyday practice

ISO 22000 clause 5.2.2: help people understand and apply the food safety policy

ISO 22000 clause 5.2.2 requires the food safety policy to be available and maintained as documented information, communicated, understood and applied throughout the organisation, and available to relevant interested parties as appropriate. The question is not simply whether a message was sent. People need to understand what the policy means for the decisions they make.

What clause 5.2.2 requires in practice

Clause 5.2.2 sets three conditions for the food safety policy once it exists. First, it is kept available and maintained as documented information, which means identified, current and controlled. Second, it is communicated, understood and applied at every level of the organisation. Third, it is available to relevant interested parties as appropriate.

The second condition carries the weight. Communicating is an activity, understanding is a result in the listener and applying is a result in behaviour. The organisation therefore needs more than a distribution list. It must be able to show that people grasp what the policy asks of them and act on it.

The third condition is proportionate. Parties such as customers or authorities may need access, but the clause does not demand publication of internal detail. The outputs are a controlled policy, a communication approach fitted to the workforce and some evidence of understanding and use.

Choose a practical communication route

Consider the workforce's roles, languages, shifts, locations and access to information. A policy stored on an office intranet may not reach a temporary food handler or a driver who uses different systems. A supervisor briefing, supported by a clear current instruction, may be more useful for that person.

Keep the core direction consistent while adapting examples to the role. Purchasing needs to recognise when a proposed change requires food safety review. Maintenance needs to understand the relevant conditions for work and handback. Managers need to know how the policy affects priorities, resources and escalation.

A common induction module can provide a foundation, but it should not be assumed to establish all role-specific competence. Policy awareness and ability to perform a technical task are related but different. Connect additional development with competence requirements.

ISO 22000 consulting & certification support

Get clause 5.2.2 right the first time — with a global leader in ISO 22000 implementation

A Sterling consultant works the requirement through with your team, links it to the rest of the system and carries it to certification readiness. Expert and experienced consultants, 8,100+ client engagements in 60+ countries.

Check understanding and application

Ask people to explain what they would do in a realistic situation. Where would they find the current instruction? Who can resolve a conflict? What should happen if the approved arrangement is unavailable? These questions reveal whether the policy has a usable route into work.

Observe relevant practice or review a recent decision where appropriate. An acknowledgement confirms receipt or acceptance of a message; it does not necessarily show understanding. A quiz can be useful, but a correct answer does not prove that the person has the tools, time or authority to apply it.

When a check reveals a practical barrier, address the barrier. Repeating the briefing will not fix an inaccessible instruction or a reporting contact who is consistently unavailable. Communication should improve the system as well as the learner's knowledge.

Why policy communication matters to the business

A policy that only the quality manager can recite has no operational value. Food safety is decided at receiving docks, packing lines and service counters by people who may never read an intranet page. When they understand why a substitution needs review or why a concern should be raised immediately, small events are caught before they grow. Good communication also protects the business when a customer asks how commitments reach the shop floor, since the answer can be shown. For multi-site, multilingual or shift-based operations, the effort pays back in fewer inconsistent practices, faster induction of temporary staff and calmer relations with customers who audit.

How to help people understand and apply the policy

Plan communication around how your people work, then test the result rather than counting attendance. Success is measured by what people do after the message, so build a check into the plan and be ready to change the method if it does not work for some groups.

  1. List every group who needs to understand the policy: permanent and temporary staff, drivers, contractors, supervisors and managers.
  2. Pick channels that suit each group, such as short shift briefings, induction, notice points and translated material.
  3. Prepare role-specific examples that show how the commitments change what each group does.
  4. Ask a sample of people to explain, in their own words, what they would do in a realistic situation and where to find the current instruction.
  5. Fix any barrier the check reveals, such as an out-of-date contact name or an inaccessible instruction.
  6. Control the policy version and remove obsolete copies when it changes.
  7. Decide which outside parties receive it and how, keeping sensitive operating detail private.

Evidence an auditor expects for clause 5.2.2

Auditors compare what the policy says with what people say and do. They look for signs that communication produced understanding rather than receipt, and they often choose people from shifts or sites that management seldom visits.

  • Interviews with operators, drivers and supervisors on different shifts about what the policy means for them.
  • Induction or briefing material that includes role-relevant examples.
  • Observation that the displayed policy is the current version.
  • Records of how outside parties can obtain the policy.
  • Examples of an issue raised or a decision taken because staff understood the policy.

Common nonconformities with clause 5.2.2

These findings typically describe a gap between circulation and comprehension, and they are usually found by speaking with people on the floor and comparing their answers with what management believes has been communicated.

  • Policy known only to office staff, with night or agency teams unaware of it.
  • Evidence limited to signed acknowledgements, with no check that staff understand.
  • More than one version of the policy in use across sites.
  • Managers giving instructions that contradict the policy during busy periods.
  • No arrangement for relevant interested parties to obtain the policy when appropriate.

Illustrative food-production example

Illustrative example 1

A packing team includes agency workers who do not attend the permanent staff meeting. Supervisors provide a suitable induction and explain how to report a packaging-information concern. A practical check asks workers to show the escalation route using the actual line arrangement.

Illustrative example 2

The check reveals that a notice names a manager who no longer works on that shift. The organisation updates the contact and confirms the replacement's authority. The improvement concerns the ability to apply the policy, not merely the percentage of signatures collected.

Automate™ on Effivity · included in every Sterling engagement

Keep clause 5.2.2 alive in Effivity

Record what you decided under clause 5.2.2, link it to the records and controls it affects, and let the review date trigger the next look. Effivity is the ISO & GRC software used in 50+ countries — and part of every Sterling ISO 22000 programme.

Illustrative catering example

A catering supervisor receives a late ingredient substitution request. The policy briefing has explained that meeting a service deadline does not remove the need for the relevant food safety decision. The supervisor contacts the authorised person and follows the approved route.

Management later uses the example to examine whether its communication and resources supported the decision. It does not present the incident as a reason to blame someone for seeking clarification.

Control the policy and external availability

Maintain an identifiable current policy under suitable documented-information controls. When the policy changes, decide who needs the revised explanation and how obsolete information will be prevented from directing current work. Keep historical evidence distinguishable where it is needed.

Relevant external parties should receive appropriate access. This does not require unrestricted publication of detailed internal controls. A customer may need the approved policy, while a supplier may also need the specific requirements governing its provision.

Common weaknesses include counting attendance as the only success measure, missing remote or night teams and communicating a policy that conflicts with everyday management instructions. Check those inconsistencies rather than assuming more posters will solve them.

Frequently asked questions

Must the policy be publicly available online?

The requirement is appropriate availability to relevant interested parties. Select a suitable route and protect information that does not need public disclosure.

Are employee signatures enough?

They can support evidence of communication, but understanding and application need consideration too. Practical checks can reveal gaps that signatures miss.

Should every role receive identical examples?

No. Keep the policy direction consistent while explaining it through decisions and responsibilities relevant to each role.

Turn policy awareness into confident action

Ask Sterling to review how your policy reaches operating teams. Learning, evidence arrangements and agreed Effivity ISO & GRC automation software support can be scoped together. Explore ISO 22000 Food Safety Awareness and return to the policy guide or the requirements hub.

Source basis and reading note. This is original practical guidance for ISO 22000. Use an authorised copy for definitive requirements. Illustrative examples describe hypothetical situations, not client results. Implementation methods are distinguished from requirements; independent bodies decide management-system certification outcomes. Issuer standard record: iso.org.
Disclaimer. This guide is provided for general information only. It is not the text of the standard, not legal or professional advice, and not a representation of how any certification body will assess your organisation. Sterling International Consulting accepts no liability for any loss arising from reliance on it. Requirements are applied to each organisation's own context through an engagement; contact us to implement ISO 22000 in your organisation.