ISO 22000 clause 7.1: provide the resources behind a workable FSMS

What clause 7.1 requires in practice

Clause 7.1 brings together six resource topics. In 7.1.1 the organisation determines and provides what is needed to set up, run, maintain, refresh and improve the FSMS, considering the capability and limits of internal resources and the need for external ones. In 7.1.2 the people needed are competent, and where outside experts help, agreements defining their competence, responsibility and authority are retained. In 7.1.3 resources cover the infrastructure needed, which can include land and buildings, equipment, transport and information technology. In 7.1.4 they cover the work environment, which notes describe as social, psychological and physical factors.

In 7.1.5, externally developed elements, including PRPs and hazard analysis or control plans, must be developed to the standard, apply to the organisation's sites and products, be adapted by the food safety team, be implemented and kept up, and be retained. In 7.1.6, external providers are evaluated, selected, monitored and re-evaluated against criteria, requirements are communicated and records are kept.

Assess capability and constraints before choosing a solution

Under clause 7.1.1, consider existing internal capability, its limitations and the need for external resources. Identify what is unavailable, unreliable or overextended. A process can have a named owner while that person lacks the time or authority needed to complete it.

Different gaps call for different responses. A competence gap may need development or suitable expertise. An inaccessible cleaning point may need a physical change. A delayed decision may need authority clarified. Buying software will not automatically resolve any of those problems.

Connect the six resource subjects

People must be competent for the work necessary to operate and maintain an effective FSMS. When external experts assist, retain agreements defining their competence, responsibilities and authority. This complements the broader competence requirements under clause 7.2.

Infrastructure needs resources for its determination, establishment and maintenance. It can include premises, utilities, equipment, transport and information technology. The work environment needs suitable resources too, including relevant human and physical conditions.

Externally developed FSMS elements, such as a proposed PRP or hazard-control document, require assessment and adaptation to the organisation. External providers require evaluation, selection, communicated requirements, performance monitoring and re-evaluation. These are connected but different duties: suitability of a template is not the same question as performance of a transport contractor.

Why resourcing the FSMS matters to the business

Resourcing is where good intentions meet operating reality. Management may approve a system on paper and then leave verification tasks without time, or let a remote site run on documents written for another site. Clause 7.1 asks leaders to look at the actual constraints and respond to each appropriately: a competence gap, a physical limitation, an unclear authority. Doing so lowers the chance of repeated late checks, supplier surprises and unsupported claims. It also gives purchasing and finance a rational basis for budgets, since needs are tied to work. Businesses that treat external help as support for their own ownership, not a substitute for it, keep control of their system after the project ends.

How to provide the resources behind a workable FSMS

Match each resource topic to the work it supports and check the result in operation. Avoid treating the six topics as a shopping list. Each gap has a particular cause, and the right response may be a conversation or a schedule change rather than a purchase.

1. Describe the recurring and change-related work of the FSMS and identify where it is delayed, rushed or dependent on one person.
2. Decide for each gap whether it needs competence development, a process change, physical work, clearer authority or outside help.
3. Define agreements with external experts covering their responsibilities, authority and the information they need from you.
4. Review infrastructure and work conditions with the people who use them, focusing on tasks such as cleaning, checking and recording.
5. Assess any supplied template or plan for fit with your products and sites before adopting it.
6. Set provider criteria and review how external providers actually perform.
7. Escalate material gaps to management with the affected activity and the options.

Illustrative food-production example

Illustrative catering example

A caterer opens a remote service location using a standard set of central documents. Before operation, the team reviews the site's facilities, communications, personnel and supplier interfaces. It finds that the local arrangement cannot use one assumed support service.

Management provides an appropriate alternative and ensures the relevant FSMS elements are adapted. Simply issuing the central template would not establish that the new location has the resources it needs.

Use external support without losing internal responsibility

External expertise can bring knowledge the organisation does not hold internally. Define the deliverables, limits, authority and information the expert needs. Internal managers and the food safety team still need to understand and operate the resulting arrangements.

The same principle applies to technology. Assess the intended workflow, the users and required evidence before selecting a tool. Agreed automation support should fit the management process; specialist process controls and technical validation need their own suitable assessment.

Evidence and common mistakes

Explore each numbered part