ISO 22000 prerequisite programmes: make the food safety foundation dependable

What clause 8.2 requires in practice

Clause 8.2 asks the organisation to establish, implement, maintain and update prerequisite programmes, usually called PRPs, to help prevent or reduce contaminants, including food safety hazards, in products, in processing and in the work environment. The programmes must suit the organisation and its food safety context, suit the size and type of operation and the nature of its products, apply across the whole production system, and be approved by the food safety team.

When choosing or establishing them the organisation identifies applicable statutory, regulatory and agreed customer requirements, and considers relevant parts of the ISO/TS 22002 series together with other standards, codes of practice and guidelines.

The standard lists topics to consider: construction and layout, premises zoning and facilities, utilities, pest control and waste, equipment suitability and cleanability, supplier approval, receiving and storage and transport, cross-contamination, cleaning and disinfection, personal hygiene and product information. Documented information specifies how the programmes were selected and established and how they are monitored and verified.

8.2.1 and 8.2.2: establish programmes suited to the operation

Establish, implement, maintain and update PRPs. They should be appropriate to the organisation's food safety context, size, type of operation and products, and apply across the relevant production system. Some arrangements may be general; others may concern a particular product or process. The food safety team approves them.

Start with the real movement of people, materials, waste and products. Identify where the conditions needed for food safety can break down. A programme should connect responsibility, method, resources and checks. A cleaning schedule alone is not an effective programme if staff cannot access the equipment or the method is unsuitable.

8.2.3: identify requirements and relevant sector guidance

Identify applicable statutory, regulatory and mutually agreed customer requirements when selecting or establishing PRPs. Consider the relevant sector standards, codes and guidance. The 2018 text refers to the applicable ISO/TS 22002 series; current programme and certification decisions need the appropriate current documents and any applicable scheme arrangements.

Do not assume that a manufacturing-specific document fits a catering or transport operation unchanged. Likewise, an FSSC scheme requirement should not be presented as a universal additional clause of ISO 22000. Identify the actual certification target and applicable documents before deciding the detailed programme basis.

8.2.4: connect premises, people and supporting services

The standard identifies matters to consider when establishing PRPs, including buildings and layout, utilities, equipment suitability, pest and waste arrangements, purchasing assurance, receipt and transport, contamination prevention, cleaning, personal hygiene and product information. Their practical relationship matters more than assigning each topic to a separate folder.

For example, equipment layout can affect cleaning access, and waste movement can affect separation of activities. Review the interaction before assuming that several individually completed checklists demonstrate an adequate overall arrangement. Retain documented information about programme selection, establishment and applicable monitoring and verification.

Why prerequisite programmes matter to the business

PRPs are the foundation under every other control. If premises, hygiene or cleaning are unreliable, no critical limit or monitoring system can fully compensate, and the hazard analysis would have to assume unrealistic baseline conditions. A sound foundation lets the food safety team concentrate hazard control on the hazards that really need specific measures.

Customers recognise this too. Site visits and supplier audits usually start with what the premises and people look like, because it is quick evidence of the organisation's discipline. Dependable PRPs reduce pest, allergen and cross-contamination incidents, cut the cost of reactive cleaning and rework, and make expansion easier because new areas follow tested patterns instead of improvised ones.

How to implement clause 8.2

Design programmes around how people, materials and waste actually move through your site. Here is a practical order of work.

1. Map the movement of people, materials, packaging, waste and finished product to see where contamination could occur.
2. Identify the legal, customer and sector requirements that apply, and choose the guidance documents suited to your part of the food chain.
3. Draft each programme with a clear purpose, method, responsibility, resources and checks, covering the topics the standard lists where relevant.
4. Distinguish general programmes from those specific to a product, line or area, and apply each where it belongs, so that no part of the production system is left without a programme.
5. Have the food safety team review and approve the programmes before they are relied on.
6. Specify how each programme is monitored and verified, then keep the documented basis for selection and establishment, so a reviewer can see why the programme looks the way it does.
7. Review programmes when layout, equipment, products or findings change, and confirm the changes reach the shop floor and the people who carry out the checks.

Illustrative manufacturing example: an inaccessible cleaning point

Illustrative catering example: changing service locations

A hypothetical caterer moves between construction project locations. Its food safety team checks the relevant premises, utilities, storage, waste and hygiene arrangements before using each location. It distinguishes the core programme from local differences that affect implementation.

At one site, the proposed waste route crosses an area used for incoming materials. The team assesses and changes the arrangement before service begins. A common corporate PRP can support consistency, but it cannot replace assessment of the actual location.

PRPs, OPRPs and CCPs have different roles

General PRPs provide the foundational conditions and activities. OPRPs are selected through hazard analysis to control significant food safety hazards and are managed within the hazard control plan. Controls at CCPs have measurable critical limits. The distinctions come from reasoned analysis and the standard's approach, not from calling a task important.

A programme can interact with hazard-control measures, but labels should not be assigned casually. The food safety team needs to establish the actual role of a measure and its monitoring and response arrangements. Read the hazard-control guide before deciding that a particular activity is automatically an OPRP or CCP.

Evidence and common weaknesses