hello@sterling-grc.com +1 201 263 4443 New York ISO & GRC consulting in 60+ countries
SterlingInternational Consulting Talk to a consultantTalk to us
Clause 9.1.2ISO 22000:2018 · Measure food safety performance and use the results

ISO 22000 clause 9.1.2: explain what the evidence says about the FSMS

ISO 22000 clause 9.1.2 requires analysis and evaluation of appropriate monitoring and measurement information, including PRP and hazard-control verification and internal and external audits. The analysis must support specific system judgments and decisions. Its value lies in explaining what the evidence means and what should happen next.

What clause 9.1.2 requires in practice

Clause 9.1.2 requires the organisation to analyse and evaluate suitable data and information from monitoring and measurement. That includes verification results for the PRPs and the hazard control plan, internal audit results and external audit results. The analysis serves five purposes: to confirm overall performance matches what was planned and what the organisation itself requires of its FSMS, to spot where updating or improvement is needed, to reveal trends pointing to more potentially unsafe product or process failures, to supply information for planning the internal audit programme, and to show whether corrections and corrective actions have worked.

Results and the resulting activities are retained as documented information. They are reported to top management and used as inputs to management review and to system updating under 10.3. A note in the standard mentions statistical techniques as one possible method. The clause is about drawing conclusions the organisation can act on, not about producing a particular type of report.

Use the required purposes to organise the analysis

Determine whether overall performance meets planned arrangements and the organisation's FSMS requirements. Identify where the system needs updating or improvement. Look for trends suggesting more potentially unsafe product or process failures.

The analysis also informs the internal audit programme by identifying the status and importance of areas to audit. It should provide evidence that corrections and corrective actions are effective. These purposes go beyond producing a general monthly score.

Use relevant information together. A favourable monitoring trend can be challenged by audit findings that reveal unreliable recording. Conversely, a temporary increase in reported issues may reflect improved detection rather than worsening control. Interpret the context.

ISO 22000 consulting & certification support

Get clause 9.1.2 right the first time — with a global leader in ISO 22000 implementation

A Sterling consultant works the requirement through with your team, links it to the rest of the system and carries it to certification readiness. Expert and experienced consultants, 8,100+ client engagements in 60+ countries.

Make comparisons meaningful

Check definitions, periods, coverage and the conditions represented. Where volume or product mix changes, consider whether a direct comparison remains valid. Preserve important differences between locations or processes instead of averaging them away.

Use suitable methods, including statistical techniques where they help. The standard does not require advanced analysis for every dataset. A well-explained pattern with clear supporting evidence can be more useful than an elaborate chart with uncertain inputs.

State limitations. Missing records, changed methods or restricted sampling may affect the conclusion. Reporting uncertainty accurately allows management to decide what further evidence or action is needed.

Report conclusions and retain resulting activities

Retain the analysis results and the activities that follow. Report the results to top management and use them in management review and FSMS updating.

A useful conclusion explains the issue, supporting evidence, implication and proposed decision. For example, repeated verification failures in one process may justify a focused audit or review of the control arrangement.

Check whether actions taken after previous analyses changed performance. Otherwise, the reporting process can repeatedly identify the same weakness without establishing improvement.

Why analysis turns data into management action

Most food businesses already collect large volumes of records. The gap is usually interpretation: nobody has time to ask what the records say together. Analysis closes that gap and delivers practical benefits. Hidden trends, such as a particular shift or product sequence producing repeated failures, become visible. Audit programmes can focus on areas that really need attention. Corrective actions can be judged on whether the problem stopped, not whether the form was signed. Management receives a short, reasoned message instead of a pile of sheets, which makes resource requests easier to approve. Where analysis is missing, leaders tend to learn about weaknesses from customers, so having it in place reduces surprises.

How to implement clause 9.1.2

Build a repeatable analysis routine that combines sources and ends with a conclusion someone owns. The routine should be light enough to repeat, because an analysis done only once cannot show a trend.

  1. List the inputs: verification results, internal and external audit findings, complaints, inspection comments and corrective-action outcomes.
  2. Set a fixed rhythm for the analysis and name the food safety team member who prepares it.
  3. Check comparability before concluding anything, looking at coverage, volumes, product mix and any change in recording method.
  4. Look for trends that suggest more failures or unsafe product, and for evidence that earlier corrective actions actually worked.
  5. State limitations openly, such as missing records or reduced sampling, and say what further evidence would help.
  6. Write each conclusion with its evidence, its implication and the decision proposed, and pass the audit-priority information to the audit planner.
  7. Report to top management, and keep the record of what was decided so the next analysis can test it.

Illustrative food-manufacturing example

Illustrative example 1

A manufacturer combines repeated verification findings, corrective-action records and audit observations about a changeover process. The analysis shows that actions were closed but the same weakness continued under a particular product sequence.

Illustrative example 2

Management commissions a focused review of the arrangement and adjusts audit priorities. The conclusion rests on several connected sources rather than on action-closure percentages alone.

Automate™ on Effivity · included in every Sterling engagement

Keep clause 9.1.2 alive in Effivity

Record what you decided under clause 9.1.2, link it to the records and controls it affects, and let the review date trigger the next look. Effivity is the ISO & GRC software used in 50+ countries — and part of every Sterling ISO 22000 programme.

Illustrative catering example

A caterer compares site verification results with changes in service volume and staffing. One location's apparently improved result coincides with reduced observation coverage. The team identifies that limitation and obtains further evidence before claiming improvement.

The analysis also identifies a reliable practice at another location that may merit consideration elsewhere. Transfer requires local evaluation rather than assuming every site operates identically.

Evidence and common mistakes

What counts as evidence

Retained evidence should allow a reviewer to follow the data, interpretation, conclusion and resulting activity. Link the analysis with relevant source records without burying the decision in an unfiltered archive.

Common weaknesses

Common mistakes include reporting only totals, omitting adverse findings, using action closure as proof of effectiveness and treating audit results as separate from operational evidence. Another is failing to report significant conclusions to top management.

The measurement plan and verification analysis provide important inputs. Their quality affects the reliability of the wider judgment.

Frequently asked questions

Must external audit results be included?

Yes, appropriate external audit information is part of the evidence identified by the clause, alongside internal audits and operational information.

Does every adverse trend prove the system is ineffective?

No. Investigate its meaning and context. It may indicate a weakness, a change in detection or another factor requiring evaluation.

What should management receive?

Analysis results that support decisions, including relevant trends, limitations, updating needs and evidence about effectiveness.

Turn scattered results into a coherent system review

Discuss an FSMS analysis review with Sterling, connecting operational evidence, audit priorities and improvement decisions. Suitable Effivity ISO & GRC automation software support can help organise the agreed information. Explore KPIs, Objectives & Management Review, the overview and the hub.

Source basis and reading note. This is original practical guidance for ISO 22000. Use an authorised copy for definitive requirements. Illustrative examples describe hypothetical situations, not client results. Implementation methods are distinguished from requirements; independent bodies decide management-system certification outcomes. Issuer standard record: iso.org.
Disclaimer. This guide is provided for general information only. It is not the text of the standard, not legal or professional advice, and not a representation of how any certification body will assess your organisation. Sterling International Consulting accepts no liability for any loss arising from reliance on it. Requirements are applied to each organisation's own context through an engagement; contact us to implement ISO 22000 in your organisation.