hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us
Clause 8.8.2ISO 22000:2018 · Check that PRPs and hazard controls work

ISO 22000 clause 8.8.2: turn verification results into a system judgment

ISO 22000 clause 8.8.2 requires the food safety team to analyse verification results and use the analysis as an input to FSMS performance evaluation. The task is to understand what the results say about the system. A list of completed checks or a percentage of satisfactory results can be useful, but it is not automatically an analysis.

What clause 8.8.2 requires in practice

Individual verification results become useful only when someone looks across them. Clause 8.8.2 gives the food safety team the job of analysing the results of verification activities, and it requires the outcome of that analysis to feed into the evaluation of how well the food safety management system performs, which is dealt with under clause 9.1.2. The clause does not say which technique to use. It asks for a real interpretation: what the results say about how well PRPs and the hazard control plan are working, where there are patterns, and what needs updating or improving. The output is the team's analysis, in a form that management can use to decide what to change. In short, the clause requires judgement about the whole programme, not a tally of individual checks.

Bring results together with their context

Identify the verification activities, periods, products and processes represented. Results from different methods may answer different questions. Keep those differences visible before combining them into a headline measure.

Consider coverage and opportunity. A reduction in findings can reflect genuine improvement, fewer checks or a narrower sample. The team needs to know which explanation is supported before presenting a favourable conclusion.

Include adverse findings and the relevant actions, while ensuring immediate product and process responses have already been addressed. Analysis is not a reason to delay action on an individual result that requires prompt attention.

ISO 22000 consulting & certification support

Get clause 8.8.2 right the first time — with a global leader in ISO 22000 implementation

A Sterling consultant works the requirement through with your team, links it to the rest of the system and carries it to certification readiness. Expert and experienced consultants, 8,100+ client engagements in 60+ countries.

Why clause 8.8.2 matters to the business

A list of passed checks can look reassuring while hiding a trend, a coverage gap or a recurring weakness at one site. Analysis lets the business spot these early and put effort where it counts, rather than discovering them through a complaint or an inspection. It also gives senior managers a sound basis for decisions about resources and priorities, because the results are explained instead of just reported. Without this step, verification risks becoming a data collection exercise that costs time and changes nothing.

How to implement clause 8.8.2

Treat the analysis as a regular, structured review with conclusions and actions, not as a chart for the next meeting. Keep the presentation simple, with a short narrative of what the team concluded and why, and only the data needed to support that conclusion for the reader.

  1. Gather results from all verification activities for the period, with the products, processes and sites each one covered.
  2. Check coverage and opportunity: whether fewer findings reflect improvement or simply fewer or narrower checks.
  3. Look for patterns by shift, location, product, supplier or type of finding, and for links to recent changes.
  4. Ask whether any pattern challenges the assumptions behind the hazard analysis, the PRPs or the control plan.
  5. Write down the conclusions, the evidence, the uncertainties and the actions with owners.
  6. Send the analysis to performance evaluation and use it to decide on updates under the system updating process.
  7. Check later whether the actions that followed made a measurable difference.

Look for patterns and connected weaknesses

Common weaknesses

Examine recurring issues, differences across shifts or locations and relationships with changes in materials, equipment or work. A series of individually minor findings may indicate a broader weakness in the PRP or hazard-control arrangement.

Ask whether results challenge the assumptions behind the plan. Repeated monitoring or verification difficulties may indicate that instructions, competence, resources or the control arrangement need review. Avoid interpreting every finding as an isolated personnel error.

Consider whether the verification programme itself remains suitable. If known problems are discovered only through complaints while verification remains consistently satisfactory, the methods or coverage may need examination.

Use the analysis in performance evaluation

Connect the team's conclusions with clause 9.1.2, which addresses broader analysis, its purposes, retained results and reporting to management. The verification analysis should help identify needs for updating or improvement and support evaluation of corrective-action effectiveness.

Make conclusions actionable. Identify what the team believes, the supporting evidence and any uncertainty or further work needed. A chart without interpretation can leave management unable to decide what should change.

Keep the connection with FSMS updating. Where the evidence suggests that hazard analysis, a control plan or PRPs need review, assign that work rather than simply adding the issue to the next report.

Illustrative food-manufacturing example

Illustrative example 1

A manufacturer sees repeated verification findings associated with one product-change sequence. Each event has been corrected, but the team combines the results and identifies a pattern linked to the same handover. It investigates the arrangement and checks whether the corrective action addresses the shared cause.

Illustrative example 2

The useful conclusion goes beyond the count of closed findings. It asks whether the system now controls that sequence more reliably.

Automate™ on Effivity · included in every Sterling engagement

Keep clause 8.8.2 alive in Effivity

Record what you decided under clause 8.8.2, link it to the records and controls it affects, and let the review date trigger the next look. Effivity is the ISO & GRC software used in 50+ countries — and part of every Sterling ISO 22000 programme.

Illustrative catering example

A catering business reports fewer PRP verification findings across its sites. The food safety team discovers that the number of observed evening services also fell. It separates the change in coverage from the performance conclusion and plans appropriate additional review.

This prevents a favourable percentage from being presented as proof of improvement when the evidence does not yet support that interpretation.

Evidence and common mistakes

What counts as evidence

Useful analysis records identify the data considered, methods, conclusions and resulting activities. The linked performance-evaluation requirements specify retention and reporting. A spreadsheet, report or meeting record can work if it preserves the reasoning.

Common mistakes include averaging unlike results, ignoring missing data, reporting only favourable measures and repeatedly presenting the same trend without deciding what it means. Another is treating action closure as evidence of effectiveness without examining later performance.

Read this guide with verification planning. Good analysis needs results from activities designed to answer useful questions.

Frequently asked questions

Does analysis require statistical software?

No. Use suitable methods for the information and decision. More complex tools are useful only when they improve understanding.

Who performs this analysis?

The food safety team has the specific responsibility, drawing on relevant process and technical input.

Is a pass-rate chart enough?

Only if it supports a meaningful evaluation with appropriate context. Coverage, repeated failures and consequences may need additional examination.

Turn verification data into a useful management decision

Bring Sterling a set of verification results for a scoped analysis review. Support can connect interpretation, improvement actions and suitable Effivity ISO & GRC automation software arrangements. Review ISO 22000 Food Safety Awareness, the verification guide and the hub.

Source basis and reading note. This is original practical guidance for ISO 22000. Use an authorised copy for definitive requirements. Illustrative examples describe hypothetical situations, not client results. Implementation methods are distinguished from requirements; independent bodies decide management-system certification outcomes. Issuer standard record: iso.org.
Disclaimer. This guide is provided for general information only. It is not the text of the standard, not legal or professional advice, and not a representation of how any certification body will assess your organisation. Sterling International Consulting accepts no liability for any loss arising from reliance on it. Requirements are applied to each organisation's own context through an engagement; contact us to implement ISO 22000 in your organisation.